印帳旅遊英文 Stamp Ledger Travel
隱私權政策
最後更新：2026 年 10 月 24 日
「印帳旅遊英文」（以下稱「本 App」，Android 套件名稱 com.phraseledger.travel）由紫芙數位（以下稱「我們」）提供。本政策說明我們收集哪些資料、怎麼使用，以及你有哪些選擇。
我們收集的資料
| 資料 | 何時收集 | 用途 |
|---|---|---|
| Google 帳號的名稱、電子郵件、帳號識別碼 | 你用 Google 登入時 | 辨識你的帳號、在多支手機之間同步學習紀錄 |
| 學習紀錄（作答結果、練習天數、單字複習進度、收藏的單字、日常任務的點數兌換紀錄、你設定的出發日） | 你使用本 App 時 | 計算進度、出題、跨裝置同步 |
| 你自己取的暱稱 | 你在「我的」頁修改暱稱時 | 顯示在你的畫面上，登入後跨裝置同步 |
| 會員資料（會員到期日、兌換過的代碼、你的分享碼） | 你兌換代碼或使用分享碼時 | 開通與計算高級會員 |
| 匿名使用數據與當機回報 | 你使用本 App 或 App 當機時（預設開啟，可在「我的 → 練習與提醒」關閉） | 了解哪些功能被使用、找出並修正當機。只包含練習類型、答對題數、裝置型號與系統版本、App 版本、匿名的安裝識別碼；不含你的帳號、單字內容或作答細節 |
| 廣告識別碼與廣告互動（僅在你選擇觀看獎勵式廣告時） | 你按「看廣告」換補簽券碎片時（可選，不看也能使用所有學習功能） | 由 Google AdMob 提供與統計廣告、避免作弊。包含廣告識別碼、裝置型號與系統版本、大致位置（由網路位址判斷）。歐盟等地區會先請你同意；你可以隨時在手機系統設定重設或刪除廣告識別碼 |
| 購買紀錄 | 你透過 Google Play 訂閱時 | 判斷訂閱是否有效（由 Google Play 處理付款，我們不會看到你的信用卡資料） |
你可以先不登入、直接試用（訪客）：這時學習紀錄只存在你的手機，不會上傳。登入 Google 帳號後，紀錄會同步到雲端（Google Firebase），換手機登入就能取回，原本在手機上的紀錄會一起併進帳號。
我們不會收集你的精確位置、通訊錄、照片或麥克風。App 本身不用廣告識別碼做分析（Firebase Analytics 已關閉廣告識別碼的蒐集）。App 內只有一種廣告：你主動按「看廣告」才會播放的獎勵式廣告，由 Google AdMob 提供，其資料處理依 Google 隱私權政策。匿名使用數據與當機回報由 Google Firebase（Analytics、Crashlytics）處理。
資料存放在哪裡
登入後的資料存放在 Google Firebase（Firestore、Authentication），傳輸過程加密。資料存放在 Google 設於台灣的伺服器。本 App 與我們的「印帳多益單字」「印帳日檢單字」是各自獨立的 App，帳號與資料分開存放、不互通。
我們不會做的事
- 不會出售你的個人資料。
- 不會把你的個人資料（帳號、學習紀錄）提供給廣告商；廣告只會在你主動觀看時由 Google AdMob 提供。
- 不會把你的資料用在與本 App 無關的用途。
你的選擇與權利
- 登出：可以選擇保留或清除這支手機上的學習紀錄。
- 刪除帳號：在 App 的「我的 → 帳號與資料 → 刪除帳號與所有資料」可以永久刪除雲端與手機上的學習紀錄、分享碼、會員資料與你送出過的問題回報，並刪除你的登入帳號。這個動作無法復原。手機上的資料會立即清除；雲端資料由系統在背景清除，通常在數分鐘內完成，暫時失敗時系統會自動重試。例外：如果你曾用「集滿全部印章」領過一年高級會員，我們會保留一筆防濫用紀錄（你的 Google 帳號識別碼經單向雜湊後的值與領取時間，不含 Email、姓名或學習紀錄），刪除帳號後也不會清除，用來避免刪除帳號、重新登入後再領一次。
- 每日提醒通知：預設開啟，每天早上 8 點（可改時間），只有當天還沒完成練習時才會通知；Android 13 以上要你允許通知權限才會出現，可以隨時在「我的 → 練習與提醒」關閉，也可以在系統設定中關閉通知權限。
- 你也可以來信 zifubazaar@gmail.com 要求查詢、更正或刪除你的資料。
回報問題
畫面上的「回報問題」浮標按鈕由你主動點選，需要先登入。你按下「送出」後，App 會把下列資料傳到開發者的 Firebase（Firestore）：你填寫的說明、壓縮後的當下畫面截圖、App 版本、裝置型號、Android 版本、所在畫面、語言、字體縮放、深色模式、會員與同步狀態，以及你的帳號 ID 與登入帳號的電子郵件（2026 年 10 月 17 日起由 App 自動附上，讓我們知道是哪個帳號回報的；不會另外要求填寫聯絡信箱，回覆一律顯示在 App 內）。截圖是當下的 App 畫面，可能包含畫面上顯示的暱稱或帳號信箱；送出前可以預覽、重新截圖或移除。這些資料只用來重現與修正問題；處理進度、回覆與回贈的兌換碼會顯示在 App 內「我的回報」，不另外寄信。為避免濫用，每人每天最多回報 3 次。
回報的保存期限：標記為已處理後 60 天自動刪除（若有回贈兌換碼，會保留到發送後 120 天、兌換碼過期之後才刪除，讓你在 App 內仍找得到兌換碼）；你刪除帳號時，所有回報與相關通知會一併刪除。如需提前刪除回報，請寄信到 zifubazaar@gmail.com。
團購（揪團半價）
你可以在「我的 → 會員與訂閱 → 團購半價」開團或加入朋友的團購。這時我們會記錄：團購碼、你在哪一團（是團長還是成員）、加入時間、團的人數與狀態，以及成團後的半價資格與是否已使用。這些資料存放在 Google Firebase（Firestore），只用來判斷團購是否成團、你有沒有半價資格。
- 團購網頁（travel-stamp-ledger.web.app/group）只會顯示團的人數、狀態與期限，不會顯示任何成員的名稱、Email 或帳號；同一團的成員彼此看不到對方是誰。
- 為了讓每個 Google 帳號只能參加一次團購、只能領一次安慰獎，我們會保存你 Google 帳號識別碼的單向雜湊（無法還原成你的帳號，也不含 Email）。刪除 App 帳號後這筆雜湊仍會保留，否則刪帳號重新註冊就能重複參加。
- 還沒成團時，你可以隨時退出（團長退出就是解散整團）。刪除帳號時，我們會讓你退出還沒成團的團，並刪除你的團購紀錄與半價資格。團購紀錄在團結束 90 天後自動刪除。
- 沒有在期限內湊滿人數的團會解散，人數夠多時我們會送你高級會員天數；這份「已領過」的紀錄就是上面說的單向雜湊。
許願（功能心願）
年訂閱與終身會員可以在「我的 → 許願」寫下想要的功能。你按下「送出」後，我們會收到：你寫的內容（500 字內）、你的帳號 ID、會員方案（年訂閱或終身）、App 版本與送出時間，存放在 Google Firebase（Firestore）。這些資料只用來評估與規劃功能，我們可能在「我的 → 許願」回覆一句話或標示處理狀態；不會用在廣告、不會出售或提供給第三方。請不要在心願裡寫個人資料（例如電話、地址）。你刪除帳號時，你的心願會一併刪除；也可以來信 zifubazaar@gmail.com 要求提前刪除。
封閉測試招募與意願調查
我們在招募網頁（travel-stamp-ledger.web.app/join）收集以下資料，與 App 內的帳號資料分開存放，存放在 Google Firebase（Firestore）：你填寫的 Email、你使用的手機系統（Android／iPhone）、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版，以及登記時間。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕：按下後會跳出 Google 帳號選單，我們只讀取你選的那個帳號的 Email 來填進欄位，讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄（只用來讀取 Email，不會用在 App），不保存你的 Google 名稱、頭像或其他資料；如果你本來就有印帳旅遊英文的帳號，這個動作不會刪除或更動它。不想用的話，也可以直接輸入 Email。
為了防止有人用程式大量登記假資料占用名額，你送出登記時，我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間（不保存原始 IP 位址），只用來限制同一個網路在短時間內的登記次數，隔天自動刪除。
登記之後，招募網頁上「加入測試群組」「成為測試人員」「前往 Play 商店下載」三個按鈕，你第一次按下每一個時，我們會在你的登記資料裡記下按的時間（不記錄你在 Google 群組或 Play 商店裡做了什麼），只用來統計多少人完成加入流程；為了做到這件事，你的 Email 會存在你自己的瀏覽器（localStorage）裡。這些時間和登記資料一起保存、一起刪除。
用途只有：把你加入 Google Play 封閉測試名單（僅限 Android 使用者）、通知你、測試完成後用你的 Email 找到你的 App 帳號並直接加上高級會員（不寄兌換碼），以及依你的回答，日後通知你新產品測試或 iOS 版的消息。我們不會用這些資料發送廣告，也不會出售或提供給第三方；你的 Email 會提供給 Google Play 作為測試名單，依 Google 的隱私權政策處理。招募網頁另提供官方 LINE 連結，加入好友或用 LINE 傳送你的帳號給我們都是選擇性的；這些訊息由 LINE 依其隱私權政策處理，我們只用來確認你的登記與聯絡測試事項。
保存期限：兩題意願都回答「不願意／不需要」的人，Email 在測試結束、會員發放後刪除；回答「願意／看情況」或「想要／不確定」的人，我們會保留 Email 作為日後通知，最久保存 2 年。你可以隨時來信 zifubazaar@gmail.com 要求查詢或刪除。刪除招募登記只會刪除招募網頁上的資料，不會影響你的 App 帳號；App 內的「刪除帳號與所有資料」也不包含招募登記，要刪除請來信 zifubazaar@gmail.com。
封閉測試期間的使用紀錄（2026 年 10 月 19 日起）：封閉測試期間，如果你在 App 內用 Google 登入，App 每天第一次打開時會告訴我們的伺服器「這個帳號今天打開過」。我們記下你的 Google 帳號 Email、名稱、帳號識別碼、App 版本，以及有打開的日期（台灣日期），用來確認誰參加了測試、測了幾天，好發放測試獎勵（高級會員）。不記錄你在 App 裡做了什麼；沒登入的不會記。在 App 內「刪除帳號與所有資料」會一併刪除這份紀錄。
兒童
本 App 不是專為 13 歲以下兒童設計，我們不會刻意收集兒童的個人資料。
政策更新
我們可能會更新本政策，重大變更會在 App 內或上架頁面通知。
聯絡我們
紫芙數位 zifubazaar@gmail.com
Stamp Ledger TravelAbout the app →
Stamp Ledger Travel
Privacy Policy
Last updated: October 24, 2026. This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.
Stamp Ledger Travel (“the App”, Android package com.phraseledger.travel) is provided by Zifu Digital (“we”). This policy explains what data we collect, how we use it, and the choices you have.
Data we collect
| Data | When | Purpose |
|---|---|---|
| Your Google account name, email address and account ID | When you sign in with Google | To identify your account and sync your progress across phones |
| Study records (answers, practice days, review progress, saved words, daily-task point redemptions, the departure date you set) | When you use the App | To track progress, choose questions and sync across devices |
| A nickname you choose | When you change your nickname on the “Me” tab | Shown on your screen and synced across devices after sign-in |
| Membership data (expiry date, redeemed codes, your referral code) | When you redeem a code or use a referral code | To activate and calculate Premium membership |
| Anonymous usage data and crash reports | When you use the App or it crashes (on by default; turn off in Me → Practice and reminders) | To understand which features are used and fix crashes. Includes only practice type, number of correct answers, device model and OS version, app version and an anonymous installation ID. It does not include your account, word content or answer details |
| Advertising ID and ad interactions (only if you choose to watch a rewarded ad) | When you tap “Watch ad” to earn make-up stamp fragments (optional; all study features work without ads) | Used by Google AdMob to serve and measure ads and prevent fraud. Includes advertising ID, device model and OS version, and approximate location (from IP address). Users in the EU and similar regions are asked for consent first. You can reset or delete your advertising ID in your phone’s settings at any time |
| Purchase records | When you subscribe through Google Play | To check whether your subscription is active. Payment is handled by Google Play; we never see your card details |
You can try the App as a guest without signing in. Your records then stay only on your phone and are not uploaded. After you sign in with Google, your records sync to the cloud (Google Firebase), so you can restore them on a new phone. Records already on the phone are merged into your account.
We do not collect your precise location, contacts, photos or microphone. The App does not use the advertising ID for analytics (advertising ID collection is disabled in Firebase Analytics). The only ads in the App are rewarded ads that play when you tap “Watch ad”. They are provided by Google AdMob, which handles data under the Google Privacy Policy. Anonymous usage data and crash reports are processed by Google Firebase (Analytics, Crashlytics).
Where data is stored
Data for signed-in users is stored in Google Firebase (Firestore, Authentication) and encrypted in transit. It is stored on Google servers located in Taiwan. The App and our TOEIC and JLPT apps (“Stamp Ledger” and “Stamp Ledger JLPT”) are separate apps; their accounts and data are stored separately and are not shared.
What we never do
- We never sell your personal data.
- We never share your personal data (account, study records) with advertisers. Ads are provided by Google AdMob only when you choose to watch one.
- We never use your data for purposes unrelated to the App.
Your choices and rights
- Sign out: choose whether to keep or clear the study records on this phone.
- Delete account: Me → Account and data → Delete account and all data permanently deletes your study records, referral code, membership data and bug reports from the cloud and your phone, and deletes your sign-in account. This cannot be undone. Data on the phone is cleared immediately. Cloud data is removed in the background, usually within a few minutes, and is retried automatically if it fails. Exception: if you claimed the one-year Premium reward for collecting all stamps, we keep one anti-abuse record (a one-way hash of your Google account identifier and the time of the claim, with no email, name or study records). It is not removed when you delete your account, so the reward cannot be claimed again by deleting the account and signing in again.
- Daily reminders: on by default, at 8:00 a.m. each day (you can change the time), and sent only if you have not practiced that day. On Android 13 and later they appear only if you allow notifications. Turn them off any time in Me → Practice and reminders, or turn off notification permission in your system settings.
- You can also email zifubazaar@gmail.com to access, correct or delete your data.
Bug reports
The floating “Report a problem” button is used only when you tap it and requires sign-in. When you tap “Send”, the App uploads the following to the developer’s Firebase (Firestore): your description, a compressed screenshot of the current screen, app version, device model, Android version, current screen, language, font scale, dark mode, membership and sync status, your account ID and the email of the account you signed in with (attached automatically since October 17, 2026 so we know which account sent the report; we do not ask for a separate contact email, and replies are shown in the App). The screenshot shows the current App screen and may include your nickname or account email; you can preview, retake or remove it before sending. This data is used only to reproduce and fix problems. Progress, replies and any reward codes appear in the App under “My reports”; we do not send separate emails. To prevent abuse, each person can send up to 3 reports per day.
Retention: reports are deleted automatically 60 days after they are marked resolved. If a reward code was issued, the report is kept until 120 days after issue, after the code expires, so you can still find the code in the App. When you delete your account, all reports and related notices are deleted. To have a report deleted earlier, email zifubazaar@gmail.com.
Group buy (half price)
You can start a group buy or join a friend’s in Me → Membership → Group buy. When you do, we record: the group code, which group you are in (leader or member), when you joined, the group’s size and status, and, once the group is complete, your half-price eligibility and whether you have used it. This is stored in Google Firebase (Firestore) and is used only to decide whether a group is complete and whether you are eligible for the half price.
- The group page (travel-stamp-ledger.web.app/group) shows only the group’s size, status and deadline — never any member’s name, email or account. Members of the same group cannot see who the others are.
- So that each Google account can join only one group buy and receive the consolation reward only once, we keep a one-way hash of your Google account ID (it cannot be turned back into your account and contains no email). This hash is kept after you delete your App account; otherwise deleting the account and signing up again would allow repeated use.
- Before a group is complete you can leave at any time (if the leader leaves, the group is dissolved). When you delete your account, we remove you from any incomplete group and delete your group-buy records and half-price eligibility. Group-buy records are deleted automatically 90 days after a group ends.
- A group that does not fill up before the deadline is dissolved; if it had enough members, we give you some days of Premium. The record that you have received this is the one-way hash described above.
Wishes (feature requests)
Yearly subscribers and lifetime members can write the features they would like in Me → Wishes. When you tap “Send”, we receive: what you wrote (up to 500 characters), your account ID, your membership plan (yearly or lifetime), the app version and the time you sent it, stored in Google Firebase (Firestore). This data is used only to evaluate and plan features, and we may reply with a short note or mark a status in Me → Wishes. It is never used for advertising and is never sold or given to third parties. Please do not write personal information (such as a phone number or address) in a wish. When you delete your account, your wishes are deleted too; you can also email zifubazaar@gmail.com to have them deleted earlier.
Closed-test sign-up and interest survey
On the sign-up page (travel-stamp-ledger.web.app/join) we collect the following, stored separately from in-app account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to the 14-day testing conditions, whether you would be willing to test new products later, whether you would like an iOS version, and the time you signed up.
The sign-up page has an optional “用 Google 帳號帶入 Email” (fill in my email with a Google account) button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a Stamp Ledger Travel account, this never deletes or changes it. If you prefer, you can simply type your email instead.
To stop automated fake sign-ups from using up the spots, when you submit we temporarily store a one-way hash of your network IP address and the time of submission (we never store the IP address itself). It is used only to limit how many sign-ups can come from the same network in a short time, and it is deleted automatically the next day.
After you register, the first time you tap each of the three buttons on the sign-up page (“Join the test group”, “Become a tester” and “Download on Google Play”), we record the time in your sign-up record (we do not record anything you do in Google Groups or on Google Play). It is used only to count how many people completed the joining steps; to do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.
We use it only to: add you to the Google Play closed-test list (Android users only), notify you, use your email to find your App account and add Premium to it directly when the test is completed (no code is sent), and, depending on your answers, tell you about future new-product tests or an iOS version. We do not use this data for advertising and we never sell it or give it to third parties. Your email is provided to Google Play as the tester list and handled under Google's privacy policy. The sign-up page also links to our official LINE account; adding us as a friend or sending us your account via LINE is optional. Those messages are handled by LINE under its privacy policy, and we use them only to confirm your sign-up and contact you about the test.
Retention: if you answered “not willing” and “don't need” to both interest questions, your email is deleted after the test ends and your Premium has been granted. If you answered “willing / depends” or “want / not sure”, we keep your email for future notices for up to 2 years. You can email zifubazaar@gmail.com at any time to ask us to look up or delete it. Deleting your sign-up record only deletes the data on the sign-up page and does not affect your app account. The in-app “Delete account and all data” does not include the sign-up record either; to delete it, please email zifubazaar@gmail.com.
Usage record during the closed test (from October 19, 2026): during the closed test, if you are signed in with Google in the App, the first time you open the App each day it tells our server “this account opened the App today”. We record your Google account email, name, account ID, App version and the dates you opened the App (Taiwan time), only to confirm who took part in the test and for how many days so we can give out the test reward (premium membership). We do not record what you do in the App, and nothing is recorded if you are not signed in. “Delete account and all data” in the App also deletes this record.
Children
The App is not designed for children under 13, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this policy. Significant changes will be announced in the App or on the store listing.
Contact
Zifu Digital · zifubazaar@gmail.com