華安 Wah-On
私隱政策
1. 引言
「華安」（Wah-On，下稱「本應用程式」）由 [營運者名] 營運。我們深明子女的私隱對家長至關重要 — 本政策以平實語言說明我們收集甚麼、原因、儲存在哪裏，以及你隨時擁有的權利。
2. 我們收集的資料
- 家長帳號：電郵地址（電郵註冊、Google 或 Apple 登入）。經 Google 或 Apple 登入時，我們會收到並儲存你在該服務所設定的顯示名稱；我們不會要求你提供真實姓名。帳號應由家長開設及管理。
- 兒童資料：暱稱（建議不要使用全名）、年級（小一至小六）、學校類別（可選）、預設頭像編號。我們不會收集兒童的出生日期、相片、地址或任何身份證明資料。
- 學習記錄：答題結果、默書記錄、練習進度 — 全部儲存在你的裝置內，只用於在裝置上進行學習診斷，不會上傳至伺服器。雲端只儲存帳號資料、兒童檔案及每日用量計數（不含任何學習內容）。
- 推送通知：如你開啟通知，我們會儲存你裝置的推送令牌以發送提醒；你關閉通知時會即時清除。
3. 只儲存在你的裝置、永不上傳的資料（我們的承諾）
所有情緒陪伴功能的數據 — 包括心情記錄、「唞一唞」暫停記錄、家庭故事帳、放手訊號 — 全部只儲存在你的裝置內，永遠不會上傳至任何伺服器。這些是你與子女之間的事，不是我們的數據。刪除應用程式，這些記錄便會徹底消失。
4. 相片的處理方式
拍照出題功能中，你拍攝的試卷／工作紙相片（或 PDF）只會即時傳送給 AI 服務以產生題目，不會儲存在我們的伺服器，亦不會用於訓練任何 AI 模型。處理完成後即予刪除。為改善出題質素，我們會收集試卷的結構統計（題型、題數等類別數據）— 這些統計永不包含試卷的任何文字或內容。
5. AI 功能
題目講解及題目生成由 Google Vertex AI（Gemini）提供。所有 AI 輸出均經過安全過濾（暴力／成人內容等級採用最嚴格設定）。AI 生成內容可能有誤 — 我們提供錯題回報渠道（見支援頁）。
6. 第三方服務
- Firebase（Google）：帳號認證、雲端資料庫、當機報告。
- RevenueCat：訂閱管理（處理 Apple 收據，不會接觸你的付款卡資料 — 付款由 Apple 處理）。
- Google AdMob（只限免費版廣告）：我們只以非個人化及兒童導向模式請求廣告；在此模式下 AdMob 的數據處理受 Google 私隱政策約束。
- 分析：我們使用不含廣告識別碼的匿名使用統計（例如「今日有多少次出題」）。統計事件永遠不會包含任何學習內容、題目、答案或兒童的任何資料 — 只有類別與數字。
7. 廣告（免費版）與追蹤
免費版會在畫面底部顯示橫幅廣告（Google AdMob），並設有最嚴格的兒童保護：①所有廣告一律非個人化（不會按你或子女的行為投放）②以兒童導向模式處理 ③內容分級上限為 G（全年齡）。Pro 訂閱版完全沒有廣告。
除此之外：我們不會出售任何資料；除第 6 節列明的服務供應商外，不會與任何人分享任何資料。沒有跨應用程式追蹤，我們亦不會使用廣告識別碼作追蹤。
8. 你的權利
- 隨時查閱：所有記錄均可在應用程式內查看。
- 刪除個別兒童資料：設定 → 刪除小朋友資料。
- 刪除整個帳號：設定 → 刪除帳戶 — 雲端及裝置上的所有資料會一併刪除。
9. 資料保留與政策更新
帳號存續期間，我們保留學習記錄以提供服務；刪除帳號即全部刪除。政策有實質更新時，會在應用程式內通知。查詢：imagine0creation@gmail.com。
Privacy Policy
1. Introduction
Wah-On ("the App") is operated by [Operator name]. We understand that your child's privacy matters deeply to you as a parent. This policy explains in plain language what we collect, why, where it is stored, and the rights you hold at all times.
2. Information We Collect
- Parent account: your email address (email sign-up, Google or Apple sign-in). When you sign in with Google or Apple, we receive and store the display name you have set on that service; we never ask for your real name. Accounts should be created and managed by a parent.
- Child profile: a nickname (we recommend not using a full name), primary level (P1–P6), school category (optional), and a preset avatar number. We do not collect your child's date of birth, photos, address, or any identifying information.
- Learning records: answer results, dictation records and practice progress — all stored on your device, used only for on-device learning diagnostics, and never uploaded to a server. The cloud stores only account details, child profiles and daily usage counts (never any learning content).
- Push notifications: if you enable notifications, we store your device push token to deliver reminders; it is cleared immediately when you turn notifications off.
3. Data That Never Leaves Your Device (Our Promise)
All data from the emotional-companionship features — mood records, "take-a-break" pause records, the family story ledger, and letting-go signals — is stored only on your device and is never uploaded to any server. These moments belong to you and your child, not to us. Delete the App and these records are gone for good.
4. How Photos Are Handled
When you photograph a paper or worksheet (or upload a PDF) to generate questions, the file is sent to the AI service solely to generate questions in that moment. It is not stored on our servers and is never used to train any AI model. Once processed, it is discarded. To improve question quality we collect structural statistics about papers (question types and counts — categorical data only) which never include any text or content from the paper.
5. AI Features
Question generation and explanations are powered by Google Vertex AI (Gemini). All AI output passes safety filtering at the strictest setting for violence and adult content. AI-generated content can contain mistakes — we provide a channel to report incorrect questions (see the Support page).
6. Third-Party Services
- Firebase (Google): account authentication, cloud database, crash reporting.
- RevenueCat: subscription management (processes Apple receipts; never touches your payment card details — payment is handled by Apple).
- Google AdMob (free-version ads only): we request ads exclusively in non-personalized, child-directed mode; AdMob's data handling in this mode is governed by Google's privacy policy.
- Analytics: we use anonymous usage statistics without any advertising identifier (for example, "number of papers generated today"). Analytics events never contain any learning content, questions, answers, or any information about your child — only categories and counts.
7. Advertising (Free Version) and Tracking
The free version shows a banner advertisement (Google AdMob) at the bottom of the screen, with the strictest child-protection settings: all ads are non-personalized (never targeted by your or your child's behaviour), requested under child-directed treatment, and capped at content rating G (all ages). The Pro subscription contains no advertising at all.
Beyond this: we never sell any data; other than the service providers listed in Section 6, we never share any data with anyone. No cross-app tracking, and we never use advertising identifiers for tracking.
8. Your Rights
- Review at any time: all records are visible inside the App.
- Delete an individual child profile: Settings → Delete child data.
- Delete your entire account: Settings → Delete account — all data in the cloud and on the device is deleted together.
9. Data Retention and Policy Updates
We retain learning records for as long as your account exists, in order to provide the service; deleting your account deletes them all. If this policy changes materially, we will notify you inside the App. Contact: imagine0creation@gmail.com.
中英文版本如有歧義，以中文版為準。In case of any discrepancy between the Chinese and English versions, the Chinese version prevails.