台灣優品 App 隱私權聲明Authentic Taiwan App Privacy Notice
一句話版本：我們用你的手機號碼辨識會員身分、記點數、處理你的訂單；不賣資料、不做廣告追蹤，相機掃碼只在你的手機上進行。In one line: we use your mobile number to identify your membership, keep your points and handle your orders. We do not sell data or track you for advertising, and barcode scanning happens on your phone only.
1. 我們收集的資料What we collect
| 資料 Data | 用途 Purpose |
|---|---|
| 手機號碼 Mobile number | 登入（一次性驗證碼）與會員身分；同一號碼在門市、網店與 App 是同一個會員 Sign-in (one-time code) and membership; the same number is the same member in store, online and in the app |
| 姓名（選填）Name (optional) | 店取時核對 Checking pickup orders |
| 訂單、付款狀態、點數紀錄 Orders, payment status, points history | 處理訂單、累積與折抵點數、客服 Handling orders, earning and redeeming points, support |
| 推播權杖 Notification token | 取貨、訂單與點數通知 Pickup, order and points notifications |
| 行銷同意（另外勾選）Marketing consent (separate opt-in) | 只有你另外同意時才發送優惠訊息，可隨時在 App 設定關閉 Offers are sent only if you opt in; you can turn this off in app settings at any time |
- 相機只在你的手機上辨識條碼，影像不儲存、不上傳。The camera reads barcodes on your phone only; images are never stored or uploaded.
- 付款資料由你在 HitPay 付款頁輸入，我們收不到卡號。Card details are entered on HitPay's payment page; we never receive card numbers.
- 送貨地址在網店結帳頁輸入，依網店隱私權政策處理。Delivery addresses are entered on our web store checkout and handled under the web store privacy policy.
2. 委託處理的服務商Service providers
- Supabase：資料庫與登入，主機位於新加坡。Supabase: database and sign-in, hosted in Singapore.
- Twilio：寄送登入驗證碼簡訊。Twilio: sends sign-in code text messages.
- HitPay：線上付款。HitPay: online payments.
- Shopify：網店結帳與送貨訂單；Ninja Van：配送。Shopify: web checkout and delivery orders; Ninja Van: delivery.
- Google Firebase、Apple：推播通知。Google Firebase and Apple: push notifications.
我們不出售個資，也不用於廣告追蹤；App 內沒有廣告。We do not sell personal data or use it for advertising tracking; there are no ads in the app.
3. 保存與刪除Retention and deletion
- 帳戶存續期間保存。Kept while your account exists.
- 刪除 App 帳號時，登入帳號、推播權杖與行銷同意立即刪除；透過 App 加入的會員，姓名同時刪除、會員資格停用、未使用點數歸零。When you delete your app account, your sign-in account, notification tokens and marketing consent are deleted at once. If you joined through the app, your name is also deleted, the membership is closed and unused points are cancelled.
- 交易與點數紀錄依新加坡稅務規定保存 5 年，期間不用於行銷或聯絡。Transaction and points records are kept for 5 years as required for Singapore tax purposes and are not used for marketing or contact.
- 在門市或網店登記的會員資格不受 App 刪除影響；如也要刪除，請來信。A membership registered in store or on the web store is not affected by deleting the app account; email us if you want that removed too.
4. 你的權利Your rights
依新加坡個人資料保護法（PDPA），你可以要求查閱、更正個資或撤回同意。App 內「我的 → 設定 → 刪除帳號」可直接刪除，或依刪除帳號頁說明申請。Under Singapore's PDPA you may ask to access or correct your personal data or withdraw consent. Delete your account in the app (Me → Settings → Delete account) or follow the account deletion page.
5. 安全Security
傳輸全程加密（HTTPS）；App 不直接連資料庫，所有資料經伺服器驗證身分後才存取；付款金鑰只放在伺服器端。All traffic is encrypted (HTTPS). The app never connects to the database directly; every request is identity-checked on our server, and payment keys live only on the server.
6. 兒童Children
本 App 不以兒童為對象。The app is not directed to children.
7. 變更Changes
本聲明更新時會在此頁公告並更新生效日。Changes are posted on this page with a new effective date.