活頁筆記
隱私權政策
最後更新：2026 年 11 月 7 日（加入封閉測試招募網頁說明）
「活頁筆記」（以下稱「本 App」）由紫芙數位（以下稱「我們」）提供。本政策說明我們收集哪些資料、怎麼使用，以及你有哪些選擇。
先說重點
- 不登入也能完整使用，筆記只存在你的手機上，我們看不到。
- 你可以用 Google 帳號登入（訂閱功能）：登入後筆記會同步到雲端，換手機也找得回來。
- 本 App 沒有廣告，不收集定位、聯絡人、相機或麥克風資料。
- 你可以隨時在 App 內「我的」→「刪除帳號」，雲端上屬於你的筆記與登入帳號會一併刪除。
我們收集的資料
| 資料 | 何時收集 | 用途 |
|---|---|---|
| 帳號資料：用 Google 登入時，Google 帳號的電子郵件、顯示名稱、大頭貼網址，以及系統產生的帳號識別碼 | 你按「使用 Google 登入」時 | 建立你的帳號、讓筆記跟著帳號走、回覆你的回報 |
| 雲端筆記：分頁名稱、分頁分區、筆記內容、編號設定與刪除紀錄 | 登入後，筆記有變動時自動同步 | 跨裝置同步與換手機還原。傳輸與儲存都經過加密，存取規則限定只有你的帳號讀得到；我們不會閱讀你的筆記內容，但這不是端對端加密，密碼、證件號碼等高度敏感資料建議不要寫在筆記裡。設成「這頁不同步」的分頁內容不會上傳，雲端只記這頁的識別碼與設定時間 |
| 訂閱狀態：Google Play 的購買結果（方案、是否有效） | 你訂閱、恢復購買，或打開 App 時 | 決定是否開通登入與雲端同步；付款由 Google Play 處理，我們看不到你的付款資訊 |
| 回報問題內容：你寫的說明、當下的畫面截圖（送出前可預覽或移除）、App 版本、機型、Android 版本、語言、是否訂閱、同步狀態、你的 Google 信箱 | 你按浮標並送出回報時 | 找出並修正問題、回覆你；問題處理完成後截圖會刪除 |
| 當機報告：當機時的程式錯誤紀錄、機型、Android 版本、App 版本、安裝識別碼（Firebase Crashlytics） | App 發生當機或嚴重錯誤時；可在「我的」→「傳送當機報告」關閉 | 找出並修正當機問題 |
| App 完整性憑證（Firebase App Check／Google Play Integrity） | App 連線到我們的雲端服務時 | 確認連線來自正版 App，防止濫用 |
我們使用 Google 的服務（Firebase 驗證、Cloud Firestore、Crashlytics、App Check、Google Play 帳務）處理上述資料，資料儲存在 Google 的伺服器上。我們不販賣你的資料，也不用於廣告。
只在你手機上的資料
未登入時，筆記、設定與分頁排序只存在你的手機上，不會上傳。登入後登出時，手機上仍會保留一份該帳號的筆記副本。
資料保存與刪除
- 在 App 內「我的」→「刪除帳號」：會刪除雲端上你的筆記文件與登入帳號，並清掉手機上這個帳號的筆記。刪除前 Google 要求你再登入一次確認。
- 已送出的問題回報，在標記處理完成後會刪除截圖；回報文字會保留以追蹤問題。要求刪除請寄信給我們。
- 你也可以寄信到下方信箱，請我們刪除與你有關的資料。
封閉測試招募與意願調查
我們在招募網頁（tabnote-app-tw.web.app/join）收集以下資料，與 App 內的帳號資料分開存放，存放在 Google Firebase（Firestore）：你填寫的 Email、你使用的手機系統（Android／iPhone）、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版，以及登記時間。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕：按下後會跳出 Google 帳號選單，我們只讀取你選的那個帳號的 Email 來填進欄位，讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄（只用來讀取 Email，不會用在 App），不保存你的 Google 名稱、頭像或其他資料；如果你本來就有活頁筆記的帳號，這個動作不會刪除或更動它。不想用的話，也可以直接輸入 Email。
招募網頁另提供官方 LINE 連結，加入好友或用 LINE 傳送你的帳號給我們都是選擇性的；這些訊息由 LINE 依其隱私權政策處理，我們只用來確認你的登記與聯絡測試事項。
為了防止有人用程式大量登記假資料占用名額，你送出登記時，我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間（不保存原始 IP 位址），只用來限制同一個網路在短時間內的登記次數，隔天自動刪除。
登記之後，招募網頁上「加入測試群組」「成為測試人員」「前往 Play 商店下載」三個按鈕，你第一次按下每一個時，我們會在你的登記資料裡記下按的時間（不記錄你在 Google 群組或 Play 商店裡做了什麼），只用來統計多少人完成加入流程；為了做到這件事，你的 Email 會存在你自己的瀏覽器（localStorage）裡。這些時間和登記資料一起保存、一起刪除。
用途只有：通知你測試相關的消息、測試完成後用你的 Email 找到你的 App 帳號（對照有沒有登入、測試期間打開 App 的天數）並直接加上高級會員（雲端同步）（不寄兌換碼），以及依你的回答，日後通知你新產品測試或 iOS 版的消息。我們不會用這些資料發送廣告，也不會出售或提供給第三方。加入 Google 群組由 Google 依其隱私權政策處理，我們只用群組寄測試通知。
保存多久：兩題都選「不願意／不需要」的人，Email 在測試結束、會員發放後刪除；其他人最久保存 2 年，期間可以隨時來信 zifubazaar@gmail.com 要求刪除。App 內的刪除帳號不包含招募登記，要刪除請來信。
兒童
本 App 不是針對 13 歲以下兒童設計，我們也不會刻意收集兒童的資料。
政策更新
我們可能更新本政策，重大變更會在 App 內或商店頁面公告。
聯絡我們
紫芙數位 · zifubazaar@gmail.com
TabNote
Privacy Policy
Last updated: November 7, 2026 (adds the closed-test sign-up page)
TabNote (the "App") is provided by Zifu Digital ("we"). This policy explains what data we collect, how we use it, and the choices you have.
The short version
- The App works fully without signing in. Your notes stay on your phone and we cannot see them.
- You can sign in with Google (a subscription feature): your notes then sync to the cloud so you can restore them on a new phone.
- The App has no ads and does not collect location, contacts, camera or microphone data.
- You can delete your account at any time in the App under Me → Delete account; your cloud notes and sign-in account are deleted with it.
Data we collect
| Data | When | Purpose |
|---|---|---|
| Account data: when you sign in with Google, your Google account email, display name, profile picture URL, and a system-generated account ID | When you tap Sign in with Google | Create your account, make your notes follow it, reply to your reports |
| Cloud notes: tab names, sections, note content, numbering settings and deletion records | After signing in, automatically when notes change | Sync across devices and restore on a new phone. Notes are encrypted in transit and at rest, and access rules limit reading to your account; we do not read your notes, but this is not end-to-end encryption, so we suggest not storing highly sensitive data such as passwords or ID numbers in notes. Tabs set to skip cloud sync are never uploaded; only the tab ID and the time of the setting are synced |
| Subscription status: the Google Play purchase result (plan, whether active) | When you subscribe, restore, or open the App | Decide whether sign-in and cloud sync are unlocked; Google Play handles payment and we cannot see your payment details |
| Problem reports: your description, a screenshot of the screen (previewable and removable before sending), App version, device model, Android version, language, subscription and sync status, your Google email | When you tap the floating button and send a report | Find and fix problems and reply to you; screenshots are deleted once the report is handled |
| Crash reports: error logs at the time of a crash, device model, Android version, App version, installation ID (Firebase Crashlytics) | When the App crashes or hits a serious error; can be turned off under Me → Send crash reports | Find and fix crashes |
| App integrity token (Firebase App Check / Google Play Integrity) | When the App connects to our cloud services | Confirm the request comes from the genuine App and prevent abuse |
We use Google services (Firebase Authentication, Cloud Firestore, Crashlytics, App Check, Google Play Billing) to process this data, which is stored on Google's servers. We do not sell your data or use it for advertising.
Data that stays on your phone
When you are not signed in, notes, settings and tab order stay on your phone and are never uploaded. After you sign out, a copy of that account's notes remains on the phone.
Retention and deletion
- In the App under Me → Delete account: your cloud notes document and sign-in account are deleted and this account's notes on the phone are erased. Google requires you to sign in once more to confirm.
- For submitted problem reports, the screenshot is deleted once the report is handled; the text is kept to track issues. Email us to request deletion.
- You can also email the address below to ask us to delete data related to you.
Closed-test sign-up and survey
Our sign-up page (tabnote-app-tw.web.app/join) collects the following, stored separately from your App account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to test for 14 days in a row, whether you would test future products, whether you want an iOS version, and when you signed up.
The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a TabNote account, this never deletes or changes it. If you prefer, you can simply type your email instead.
The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.
To stop scripts from filling the spots with fake sign-ups, when you submit we briefly store a one-way hash of your network IP address and the time (never the raw IP address), only to limit how many sign-ups one network can make in a short time. It is deleted automatically the next day.
After you sign up, the first time you tap each of the three buttons “Join the test group”, “Become a tester” and “Download from Google Play”, we record when you tapped it in your sign-up record (not what you do in Google Groups or the Play Store), only to count how many people finish joining. To do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.
We use this only to send you test-related notices; after the test, to find your App account with your email (checking whether you signed in and how many days you opened the App during the test) and add Premium (cloud sync) to it directly (no redemption codes); and, depending on your answers, to tell you about future product tests or an iOS version. We never use it for advertising and never sell or give it to third parties. Joining the Google group is handled by Google under its privacy policy; we only use the group to send test notices.
How long we keep it: if you answered “No” to both questions, your email is deleted after the test ends and rewards are granted; otherwise we keep it for up to 2 years, and you can ask us to delete it at any time at zifubazaar@gmail.com. Deleting your account in the App does not remove your sign-up; email us to delete it.
Children
The App is not designed for children under 13 and we do not knowingly collect their data.
Changes
We may update this policy. Significant changes will be announced in the App or on the store listing.
Contact
Zifu Digital · zifubazaar@gmail.com