🦌 小鹿日誌 Deerly — 隱私權政策

最後更新:2026-10-18

我們收集什麼

・帳號資訊:使用 Google 或 Apple 登入時,我們取得你的姓名與電子郵件,用於建立帳號與家庭共享。

・寶寶記錄:你輸入的餵奶、睡眠、尿布、成長等記錄會儲存在我們的伺服器,用於在你的家庭成員裝置之間同步。

・推播憑證:用於家人記錄後即時通知你的裝置。

・使用情形資料:我們使用 Firebase Analytics 記錄頁面、分頁與功能按鈕的使用情形, 用來判斷哪些功能需要改善。這些事件不包含寶寶姓名、記錄備註、語音文字、照片影片、記錄 ID、 邀請碼、電子郵件或家庭代碼。

家人間分享的照片與影片:不做持久性儲存,最多 14 天

我們認為寶寶的照片不該永遠留在別人的伺服器上。照片與影片只在家人裝置之間 透過安全連線短暫中繼:最長保留 14 天,作為家人的下載期間,期限一到一律自動刪除; 只要家人都下載完成,我們會立即刪除,不會等到 14 天。真正的保存位置是你們自己的裝置。 我們不瀏覽、不分析、不將你的照片影片用於任何其他用途。

專屬寶寶造型(Pro 選用功能)

只有在你主動使用「專屬造型」並上傳寶寶照片時才會發生:照片會送到 OpenAI 的影像生成服務,畫成你家寶寶的卡通角色與動作圖。

・原始照片:生成完成(或失敗)後,我們伺服器與生成主機上的照片立即刪除; 上傳後沒有完成的照片,最遲 1 小時內刪除。

・生成的角色圖:會保存在我們的伺服器上,讓家庭成員的裝置都看得到,保存到該家庭解散為止(刪除帳號而家庭因此解散時一併刪除)。

・角色圖只用來顯示在你們家的 App 裡,不公開、不用於其他用途。

語音輸入:音訊不會離開你的手機

語音辨識完全在你的裝置上完成(iOS 使用系統內建的語音辨識、Android 使用系統的 SpeechRecognizer)——我們的伺服器從來收不到音訊檔。離開裝置的只有辨識後的文字, 送到 AI 服務(Google Gemini)拆解成記錄欄位,處理完即丟棄,不用於訓練模型。 拆解出的記錄若被你存下來,會與其他記錄一樣同步保存。

廣告

免費版包含 Google AdMob 提供的廣告(例如觀看獎勵廣告換取語音次數)。 AdMob 可能收集裝置識別碼與廣告互動資料以提供與計量廣告,詳見 Google 隱私權政策。訂閱後無廣告。

我們不做的事

不出售你的資料;不用你的資料訓練模型;除上述服務(Google/Apple 登入、Gemini、OpenAI(僅專屬造型)、 AdMob、Firebase 推播與 Firebase Analytics)外,不與第三方分享你的資料。

資料刪除

你可以在 App 內刪除任何記錄(會同步刪除伺服器副本)。要刪除整個帳號與所有資料, 來信 [email protected],我們會在 30 天內完成。


Privacy Policy (English)

What we collect

Account info (name, email) from Google/Apple sign-in; baby-care records you enter, stored on our servers to sync across your family's devices; push tokens for real-time notifications; and product interaction analytics, such as screens, tabs, and feature buttons used. Analytics events do not include baby names, record notes, voice text, media, record IDs, invite codes, email addresses, or family codes.

Photos & videos shared with family: no persistent storage, 14 days maximum

Photos and videos are only relayed briefly over a secure connection between your family's devices. We keep them for at most 14 days — a download window for your family — and delete them automatically when that window closes. Once everyone has downloaded, we delete them immediately rather than waiting out the 14 days. The real copies live on your own devices. We never browse, analyze, or reuse your media.

Custom baby character (optional Pro feature)

Only when you choose to use Custom Character and upload a photo of your baby: the photo is sent to OpenAI's image generation service to draw a cartoon character and poses of your baby. The original photo is deleted from our server and the generating machine as soon as generation finishes (or fails); an upload that never completes is deleted within an hour. The generated character images are stored on our server so your family's devices can show them, until the family is dissolved (including when deleting your account dissolves it). They are shown only inside your family's app — never published or used for anything else.

Voice input: audio never leaves your phone

Speech recognition runs entirely on your device (iOS Speech framework, Android SpeechRecognizer) — our servers never receive an audio file. Only the recognized text leaves your device, sent to an AI service (Google Gemini) to be parsed into record fields, then discarded. It is not used to train models.

Ads

The free tier shows ads via Google AdMob, which may collect device identifiers and ad interaction data. See Google's Privacy Policy. Subscribers see no ads.

Analytics

We use Firebase Analytics to understand app usage and improve the product. We do not log baby names, notes, voice transcripts, media, record IDs, invite codes, email addresses, or family codes in analytics events.

Third parties

We do not sell your data or use it to train models. We share data only with the services named above: Google/Apple sign-in, Google Gemini, OpenAI (Custom Character only), AdMob, and Firebase messaging and analytics.

Deletion

Delete records in-app anytime. For full account deletion, email [email protected] — completed within 30 days.