圖釘記事（TackMap） 隱私權政策

更新日期：2026 年 9 月 23 日。此章節適用於 Best-of-one 提供的 圖釘記事（TackMap） iOS App 及活動分享網頁，其他產品的條款不適用於 圖釘記事（TackMap）。

Read in English

本機資料與選擇權

私人地點、活動、備註、標籤、收藏與提醒設定儲存在裝置上，目前不提供私人內容的跨裝置同步或 App 內備份。不登入仍可管理私人內容、探索與收藏公開活動。移除 App 可能使本機內容遺失；裝置或系統備份依您的 Apple 設定處理。

登入與帳號驗證

選擇 Apple 或 Google 登入時，所選登入服務與 Firebase Authentication 會處理帳號識別碼、電子郵件、顯示名稱及驗證憑證，用於驗證身分與建立分享時的主揪身分。Apple 可提供私密轉送電子郵件地址；我們不取得 Apple 或 Google 密碼。登入不會自動上傳私人地點，電子郵件及帳號 UID 不會顯示於活動分享頁。

使用 Email／密碼登入既有帳號時，Firebase Authentication 會處理電子郵件、密碼及驗證憑證，以驗證身分並提供密碼重設。App 不會將密碼寫入圖釘資料或傳送至活動分享後端；分享後端使用 Firebase 核發的身分驗證權杖。密碼重設郵件由 Firebase 寄送至您輸入的電子郵件信箱。

定位、地圖與通知

經您授權後，裝置位置用於顯示目前位置、距離排序及抵達提醒；活動抵達提醒需要「永遠允許」定位及精確位置權限；iOS 在抵達區域時喚醒 App，App 先檢查活動未結束、提醒仍啟用才送出通知。其他類型圖釘沿用 iOS 區域通知。主畫面「記下這裡」小工具會開啟 App，取得當前位置並存成本機私人收藏。圖釘記事（TackMap） 不建立或上傳您的移動軌跡。Apple 地圖、地點搜尋與地址查詢會透過 Apple 服務處理必要的查詢資訊。您可在 iOS 設定撤回定位及通知權限，相關功能可能因此無法運作。

通知預設隱藏私人名稱及地址；若您開啟詳細預覽，活動資訊可能出現在鎖定畫面。時間或抵達提醒的實際送達受 iOS 與裝置設定影響。

公開活動資料與第三方連線

App 從交通部觀光署與文化部下載公開活動資料，並保存本機快取；探索篩選在裝置上執行，不會把私人收藏或目前位置傳給該資料來源。公開活動表示資訊可公開瀏覽，不代表政府主辦。網站、Apple、Google、Firebase 或資料來源在接收網路請求時，可能處理 IP 位址及服務運作所需的技術資訊。

點擊外部活動官網或 Google 地圖時，將由該服務處理請求；若分享頁載入內嵌 Google 地圖，Google 也會收到該網路請求及活動座標。第三方服務依各自政策處理資料。

分享活動與保存期限

只有您主動公開活動或建立分享連結時，我們才會將該活動的名稱、起訖時間、時區、地點名稱、地址及經緯度上傳至 Firebase 分享服務，並公開主揪顯示名稱。不會上傳私人備註、標籤或提醒設定。伺服器另外保存帳號 UID、分享期限及管理憑證雜湊，以管理分享與撤銷；防濫用限流使用已驗證帳號 UID 與時間區段衍生的雜湊。雲端服務亦可能保留安全及服務日誌。

任何取得分享連結的人皆可查看，並可能轉傳、截圖或保存。連結於 7 天後失效，亦可提前撤銷。失效不代表伺服器資料於同一瞬間刪除：分享服務以每日排程清理到期紀錄，實際完成時間取決於排程執行。撤銷會刪除對應分享紀錄，但無法回收他人已保存的副本或第三方快取。

刪除資料與聯絡我們

您可刪除個別本機項目，或使用 App 內「清除全部資料」；清除流程會先嘗試撤銷仍有效的分享，需要網路連線。登出不等於刪除帳號，也不會撤銷既有連結。清除本機資料或移除 App 不等於刪除 Firebase 登入帳號。

您可在 App「設定 → 刪除帳號」使用同一帳號重新驗證後，刪除 Firebase 登入帳號及該帳號的公開分享；Apple 登入帳號亦會撤銷 Apple 授權。本機私人圖釘與提醒保留，並解除原帳號關聯、轉為私人；可另外刪除本機資料。刪除無法回收他人已保存的分享副本。防止刪除期間新增分享的帳號標記及限流紀錄，會依期限由每日排程清理。若要申請查詢、更正或協助刪除，請寄信至 bucky0970@gmail.com；請勿提供密碼或驗證碼。

服務供應商、跨境處理與政策更新

圖釘記事（TackMap） 不含廣告或分析 SDK，不出售個人資料，也不以私人地點進行跨 App 廣告追蹤。為提供登入、分享、地圖及公開活動功能，相關資料由上述服務供應商處理，可能在您所在國家或地區以外處理或儲存。未成年人請在法定代理人協助下使用，並避免分享可識別本人或他人的敏感位置。

參考 Apple 隱私政策、Google 隱私政策及 Firebase 隱私說明。若資料處理方式變更，我們會更新此頁與日期；需要另行取得同意的變更會依適用要求處理。

TackMap Privacy Policy

Updated September 23, 2026. This section covers the TackMap iOS app and event-sharing pages provided by Best-of-one. Policies for other products on this page do not apply to TackMap.

繁體中文

Local data and optional sign-in

Private places, events, notes, tags, saved events and reminder settings are stored on your device. Private content is not synced across devices and there is no in-app backup. You can manage private content and browse or save public events without signing in. Removing the app may lose local content; system backups depend on your Apple settings.

If you choose Apple or Google sign-in, your selected sign-in provider and Firebase Authentication process your account identifier, email, display name and authentication credentials to verify your identity and identify you as the host when sharing. Apple may provide a private relay email address. We do not receive your Apple or Google password. Signing in does not upload private places. Your email and account UID are not displayed on event-sharing pages.

When you sign in to an existing account with email and password, Firebase Authentication processes your email, password and authentication credentials to verify your identity and provide password resets. The app does not write passwords to pin records or send them to the event-sharing backend; that backend uses identity tokens issued by Firebase. Firebase sends password-reset emails to the email address you enter.

Location, maps and notifications

With your permission, device location supports current-location display, distance sorting and arrival reminders. Event arrival reminders require Always authorization and Precise Location. iOS wakes the app on region entry; the app checks that the event is active and the reminder enabled before submitting a notification. Other pin types use iOS location notifications. The Save this spot Home Screen widget opens the app and saves your current location as a private local favorite. TackMap does not build or upload a movement history. Apple services process information needed for maps, place searches and address lookups. You can revoke location and notification permissions in iOS settings, which may disable these features.

Notifications hide private names and addresses by default. Enabling detailed previews may expose event information on your lock screen. Delivery depends on iOS and device settings.

Public event data and external services

The app downloads public event information from the Taiwan Tourism Administration and Ministry of Culture and caches it locally. Filtering occurs on your device; your private saved events and current location are not sent to this source. Public availability does not imply government sponsorship. Our website, Apple, Google, Firebase and data providers may process IP addresses and technical information needed to handle network requests.

Opening an event website or Google Maps sends a request to that service. If a sharing page loads an embedded Google map, Google also receives the request and the event coordinates. These services have their own privacy policies.

Sharing and retention

Only when you choose to publish an event or create a sharing link do we upload its title, start and end times, time zone, place name, address and coordinates to our Firebase sharing service, and display your host name. Private notes, tags and reminder settings are excluded. The server also stores your account UID, expiry time and a management-credential hash to manage and revoke the share. Abuse prevention uses hashes derived from verified account UIDs and time windows; cloud providers may retain security and operational logs.

Anyone with the link can view, forward, capture or save it. Links expire after seven days and can be revoked earlier. Expiry does not mean instantaneous server deletion: daily cleanup removes expired records, with completion depending on execution of the scheduled job. Revocation deletes the corresponding sharing record, but cannot recall copies saved by others or third-party caches.

Deletion and privacy requests

You can delete local items or use Clear all data in the app. Clearing first attempts to revoke active shares and requires a network connection. Signing out does not delete your account or revoke links. Clearing local content or uninstalling does not delete your Firebase sign-in account.

In Settings → Delete account, reauthenticate with the same account to delete your Firebase sign-in account and its public shares. Apple authorization is also revoked for Apple sign-in accounts. Private pins and reminders remain on this device, are detached from the account and made private; you may delete local data separately. Copies saved by others cannot be recalled. Account-deletion markers that prevent concurrent sharing and rate-limit records are cleaned by the daily job after their retention periods. For access, correction or deletion assistance, contact bucky0970@gmail.com. Do not send passwords or verification codes.

Providers, international processing and changes

TackMap includes no advertising or analytics SDK, does not sell personal data and does not use private places for cross-app advertising tracking. The providers described above process data to deliver sign-in, sharing, maps and event information, potentially outside your country or region. Minors should use the service with a legal guardian and avoid sharing sensitive locations identifying themselves or others.

See the Apple Privacy Policy, Google Privacy Policy and Firebase privacy information. We update this page and its date when our practices change, and obtain additional consent where required.