隱私政策

最後更新:2026 年 8 月 3 日

本隱私政策說明 Tentory 露營記(以下稱「本 App」)如何蒐集、使用、儲存與保護你的個人資料。使用本 App 即表示你已閱讀並同意本政策。

1. 我們蒐集的資料

• 帳號資料:電子郵件(以 Email 註冊時);或 Apple、Google 登入所提供的帳號識別碼;暱稱與頭像。
• 露營紀錄:營地名稱與地區、入營日期、七項星等評比、優點標籤、心得文字、天氣與脈絡、以及你上傳的照片。這些內容依你為該筆紀錄選擇的可見性(私人/限露友/公開)分享,詳見第 4 節。
• 裝備資料:你建立的裝備清單、告示牌求售/求購貼文。
• 社群資料:追蹤關係、封鎖與檢舉紀錄;你發表的留言,以及市集一對一詢問訊息。
• 技術資料:為維運與安全所必要的一般性紀錄(如錯誤與存取記錄),由 Google Firebase 產生;以及本 App 發生當機時的診斷資料(當機堆疊、App 版本、裝置機型與作業系統版本)。當機診斷資料不包含你的心得、照片或帳號識別資訊。

2. 我們如何使用資料

• 提供並維護本 App 功能(紀錄、統計、徽章、社群動態、告示牌)。
• 依你設定的可見性(公開 / 限露友 / 私人)顯示內容。
• 維護社群安全:對公開分享的照片進行自動內容審核,處理檢舉與封鎖。
• 與你就服務相關事項聯繫。

3. 資料儲存與第三方服務

本 App 的後端建置於 Google Firebase(Authentication、Cloud Firestore、Cloud Storage),資料儲存於 asia-east1 區域。我們使用下列第三方服務:

• Google Firebase / Google Cloud:帳號驗證、資料庫與檔案儲存。
• Sign in with Apple、Google 登入:第三方登入(僅取得完成登入所需的識別資訊)。
• Google Cloud Vision(SafeSearch):對公開或分享給露友的照片進行自動審核,以偵測並過濾冒犯性內容。私人照片不送審。
• Firebase Crashlytics:蒐集本 App 當機時的診斷資料以修復問題;僅於正式版本蒐集,不含你的個人內容。
• Google Cloud Vertex AI(Gemini):當你主動使用「AI 幫我起草/潤飾」時,該筆紀錄的結構化欄位(營地名稱、日期與泊數、天氣、營位型態、露營風格、評分、優點、亮點)與你已寫的心得文字會傳送至 Vertex AI 以產生心得草稿。僅傳送產生草稿所必要的欄位,不含帳號識別資訊(如 email、使用者 ID);依 Google Cloud 服務條款,該資料不會被用於訓練模型。不使用此功能就不會傳送任何資料。另為控管每月使用額度,我們會在自有資料庫保存與你的帳號連結的每月使用次數;該計數僅為次數,不保存心得或草稿內容。

這些服務各自的資料處理受其隱私政策規範。

4. 公開與私密

• 紀錄預設為私人;是否公開由你逐筆主動選擇。
• 公開層只顯示正向的絕對數(例如「幾人願意再訪」),不顯示比例、分母或排名。
• 當你把一筆紀錄設為「限露友」或「公開」時,該筆紀錄的內容——包括七項星等評比、優點標籤、心得文字與照片——會依你選擇的可見層整筆分享;沒有逐欄位的私密設定。
• 照片、入營日期、營地名稱與心得文字可能間接揭露你的行程與位置,屬敏感資訊,請於分享前自行斟酌。

5. 你的權利與選擇

• 檢視與修改:你可隨時編輯或刪除自己的紀錄、裝備與個人資料。
• 刪除帳號:你可於「設定 → 刪除帳號」自助刪除帳號;若已無法使用 App,可依刪除帳號說明頁以電子郵件提出申請。刪除後,你的帳號、露營紀錄、裝備、照片、追蹤關係、市集貼文、留言與詢問訊息將被永久移除,且無法復原。基於社群安全與稽核需要,他人針對相關內容的檢舉處理紀錄(不含你的帳號識別)可能保留。
• 封鎖與檢舉:你可封鎖濫用者、檢舉冒犯內容。

6. 資料保存期間

我們在你的帳號存續期間保存你的資料。當你刪除帳號,系統會清除你的個人資料與上傳檔案(部分維運日誌可能依服務供應商政策短暫保留)。

7. 兒童

本 App 不以未滿 13 歲之兒童為對象,亦不會在知情下向其蒐集個人資料。露營內容可能包含家庭與兒童影像;上傳者須確保已取得必要同意,並對其上傳內容負責。

8. 政策變更

我們可能不時更新本政策,並於本頁公告更新日期。重大變更時會於 App 內另行提示。

9. 聯絡我們

如對本政策或你的資料有任何疑問,請聯絡:support@tentory.app。

Privacy Policy

Last updated: August 3, 2026

This Privacy Policy explains how Tentory (the "App") collects, uses, stores, and protects your personal data. By using the App you acknowledge that you have read and agree to this policy.

1. Data we collect

• Account: email (for email sign-up), or the account identifier provided by Apple or Google sign-in; display name and avatar.
• Camping records: campground name and region, dates, seven-dimension star ratings, advantage tags, journal text, weather/context, and photos you upload. This content is shared according to the visibility you choose for each record (private / friends / public) — see Section 4.
• Gear: your gear list and marketplace (sale/wanted) posts.
• Social: follow relationships, blocks, and reports; comments you post and one-to-one marketplace inquiry messages.
• Technical: standard operational and security logs generated by Google Firebase, plus diagnostic data when the App crashes (crash stack, App version, device model and OS version). Crash diagnostics contain none of your notes, photos, or account identifiers.

2. How we use data

• To provide and maintain App features (records, stats, badges, social feed, marketplace).
• To display content according to your chosen visibility (public / friends / private).
• To keep the community safe: automated moderation of shared photos, handling reports and blocks.
• To contact you about the service.

3. Storage & third-party services

The App's backend runs on Google Firebase (Authentication, Cloud Firestore, Cloud Storage), stored in the asia-east1 region. We use:

• Google Firebase / Google Cloud — authentication, database, and file storage.
• Sign in with Apple, Google Sign-In — third-party login (only the identifiers needed to complete sign-in).
• Google Cloud Vision (SafeSearch) — automated moderation of photos that are public or shared with friends to detect and filter objectionable content. Private photos are not scanned.
• Firebase Crashlytics — collects diagnostic data when the App crashes so we can fix it; collected in release builds only and contains none of your personal content.
• Google Cloud Vertex AI (Gemini) — when you actively use the "AI draft / polish" feature, that record's structured fields (campground name, dates and nights, weather, site type, camping style, ratings, advantages, highlights) and any note you have written are sent to Vertex AI to generate a draft. Only the fields needed for drafting are sent, with no account identifiers (such as email or user ID); under Google Cloud's terms, this data is not used to train models. Nothing is sent unless you use the feature. To enforce the monthly usage quota, we keep a monthly usage count linked to your account in our own database; this count is a number only and stores no journal or draft content.

4. Public vs. private

• Records are private by default; you choose per record whether to make them public.
• The public layer shows only positive absolute counts — never ratios, denominators, or rankings.
• When you set a record to "friends" or "public", that record's content — including all seven star ratings, advantage tags, journal text, and photos — is shared as a whole at that visibility level; there are no per-field privacy settings.
• Photos, dates, campground names, and journal text may indirectly reveal your itinerary and location — please consider carefully before sharing.

5. Your rights & choices

• Access & edit: you can edit or delete your own records, gear, and profile at any time.
• Delete account: you can delete your account under Settings → Delete account; if you can no longer use the App, you can request deletion by email as described on the account deletion page. This permanently removes your account, camping records, gear, photos, follow relationships, marketplace posts, comments, and inquiry messages. It cannot be undone. For community-safety and audit purposes, moderation records of reports concerning related content (without your account identifiers) may be retained.
• Block & report: you can block abusive users and report objectionable content.

6. Retention

We retain your data while your account exists. When you delete your account, your personal data and uploaded files are erased (some operational logs may be briefly retained per our providers' policies).

7. Children

The App is not directed to children under 13 and we do not knowingly collect their personal data. Camping content may include images of families and children; uploaders must ensure they have any necessary consent and are responsible for their uploads.

8. Changes

We may update this policy from time to time and will post the updated date on this page. We will notify you in-app of material changes.

9. Contact

Questions about this policy or your data: support@tentory.app.