FogMap

FogMap 隱私權政策

生效日期：2026 年 10 月 18 日

FogMap 是一款記錄你一生探索足跡的地圖 App。我們的原則很簡單：你的足跡只屬於你。本政策說明 FogMap 會處理哪些資料、存放在哪裡，以及如何刪除。

• 你的位置與探索紀錄只存在你的裝置與你自己的 iCloud，開發者無法存取。
• FogMap 不追蹤你、不顯示廣告，也沒有任何分析、廣告或追蹤 SDK。
• 只有在你同意使用 AI 功能後，才會把「你查看的地點」的資訊送到 FogMap 的伺服器，再交給 Google Gemini 產生內容；不包含你的位置或探索紀錄。
• 為了記錄 AI 點數，伺服器會保存一個帳戶識別碼、點數餘額與購買紀錄。

1. 位置與探索紀錄

• 用途：FogMap 使用定位服務（包含你允許的背景定位）判斷你去過的區域，揭開地圖上的迷霧。定位以省電為優先，只取大致位置。
• 存放：足跡存在裝置上的資料庫。若裝置登入 iCloud，會透過 Apple 的 CloudKit 同步到你自己的 iCloud 私人資料庫，只有你的 Apple 帳號能存取，開發者看不到；這部分依 Apple 的 iCloud 條款與隱私權政策處理。
• 國家判斷：足跡屬於哪個國家，由 App 內建的國界資料在裝置上離線判斷，不會把位置傳出裝置。
• 地圖：地圖由 Apple 地圖提供，載入地圖與地點資訊時由 Apple 依其隱私權政策處理。若你選擇用 Google 地圖開啟某個地點，該地點的座標會交給 Google 地圖 App。
• 匯入、備份與匯出：你匯入的檔案（例如 Google 時間軸）只在裝置上處理；備份與匯出的檔案只有在你自己選擇分享時才會離開裝置。

2. AI 地點介紹、追問與翻譯（經你同意才會使用）

第一次使用前，App 會說明將送出的內容並請你同意；你可以隨時在「設定 → 隱私」關閉，關閉後不會再傳送任何資料。

會送出的資料

• 地點介紹：你點選的地點名稱、類別、地址與座標（是地點的位置，不是你的位置）。
• 追問：上述地點資訊、介紹內容，以及你輸入的問題與這次的問答內容。
• 建議問句：地點資訊，用來產生追問輸入框上方的建議問題。
• 世界遺產簡述翻譯：UNESCO 公開的簡述原文。
• 以上請求都會附上 App 的語言（讓內容以你的語言產生），以及你的帳戶識別碼（見第 3 節，用來扣點）。

處理方式

• 資料先送到 FogMap 的伺服器，再由 Google Gemini API 產生內容後回傳給你。
• 伺服器不儲存產生的介紹、問答內容或譯文。唯一的共用快取是「建議問句」，以地點資訊的雜湊值為索引，不與任何使用者關聯。
• Google 依 Gemini API 附加服務條款中付費服務的規定處理這些資料：不會用來改進其產品，但可能為偵測濫用而在有限期間內保留。
• 產生的介紹與譯文保存在你的裝置，並同步到你自己的 iCloud，重看不需再次傳送。追問的對話不會保存，關閉地點頁後就會消失。

AI 生成的內容可能有誤，請自行判斷。

3. AI 點數與購買

• 帳戶識別碼：為了記錄點數，App 會把 App Store 為這次下載簽發的憑證（AppTransaction）送到伺服器驗證，並以其中的 App 交易識別碼建立帳戶識別碼。它不包含你的姓名、Email、Apple 帳號或付款資訊；它跟著你的 Apple 帳號，所以重新安裝或換手機後點數仍在。
• 伺服器保存：點數餘額、每日使用次數、每次加點或扣點的紀錄（時間與用途；AI 功能的紀錄只含地點的雜湊值，不含地點名稱或座標）、購買紀錄（交易識別碼、商品與點數）。
• 購買：付款由 Apple 處理，我們不會取得你的付款資訊。伺服器會向 Apple 驗證交易，並接收 Apple 的退款通知以扣回對應的點數。
• 防濫用：App 使用 Apple 的 App Attest 證明請求來自正版 FogMap，這只是裝置與 App 的完整性證明，不含個人資料。
• 伺服器運作紀錄：為了維運與防止濫用，伺服器日誌會記錄帳戶識別碼、時間與用量（例如字數、耗時），不含地點或問答內容，約 30 天後自動刪除。
• 用途：以上資料只用於提供 AI 點數功能與防止濫用，不用於追蹤或廣告，也不會出售或分享給其他人。

4. 我們不收集的資料

• FogMap 沒有使用任何分析、廣告、追蹤或崩潰回報 SDK。
• 診斷紀錄只存在你的裝置上，只有你在「設定 → 進階 → 診斷紀錄」手動分享時才會送出。
• 若你在 iOS 設定中選擇與 App 開發者分享分析資料，Apple 會依其政策提供彙整的當機報告。

5. 資料保存與刪除

• 探索紀錄、AI 介紹與譯文：在 App 內「設定 → 進階 → 刪除所有資料」，會刪除 iCloud 上的 FogMap 資料與裝置上的資料庫。只刪除 App 不會刪除 iCloud 上的資料；你也可以在 iOS 的 iCloud 儲存空間管理中刪除 FogMap 的資料。
• 伺服器上的點數資料：在你要求刪除前保留，以維持點數餘額與處理退款。若要刪除，請寫信到 023672@gmail.com，我們會在 30 天內處理；為確認是你的資料，可能會請你提供購買收據上的資訊。刪除後剩餘點數無法恢復。

6. 兒童

FogMap 不是為兒童設計的，也不會刻意收集兒童的個人資料。

7. 資料安全

所有傳輸都經過加密（HTTPS）。伺服器上的資料只有 FogMap 的伺服器程式能存取，App 無法直接讀寫其他人的資料。

8. 政策變更

本政策有變更時，我們會更新此頁面與上方的生效日期。

9. 聯絡我們

有任何隱私問題或資料請求，請寫信到 023672@gmail.com。

FogMap Privacy Policy

Effective date: October 18, 2026

FogMap is a map app that records where you have explored over a lifetime. Our principle is simple: your footprints belong to you. This policy explains what data FogMap handles, where it is stored, and how to delete it.

• Your location and exploration history stay on your device and in your own iCloud. The developer cannot access them.
• FogMap does not track you, does not show ads, and contains no analytics, advertising or tracking SDKs.
• Only after you agree to use the AI features does FogMap send information about the place you are viewing to FogMap's server, which asks Google Gemini to generate content. Your own location and exploration history are never included.
• To keep track of AI credits, the server stores an account identifier, your credit balance and your purchase records.

1. Location and exploration history

• Purpose: FogMap uses Location Services (including background location, if you allow it) to determine the areas you have visited and clear the fog on the map. It favours battery life and only needs your approximate location.
• Storage: Your footprints are stored in a database on your device. If your device is signed in to iCloud, they are synced through Apple's CloudKit to your own private iCloud database, which only your Apple Account can access and the developer cannot see. This is governed by Apple's iCloud terms and privacy policy.
• Countries: The country each footprint belongs to is determined offline on your device using built-in boundary data. Your location never leaves the device for this.
• Maps: Maps are provided by Apple Maps; Apple handles map and place requests under its own privacy policy. If you choose to open a place in Google Maps, that place's coordinates are handed to the Google Maps app.
• Import, backup and export: Files you import (such as Google Timeline) are processed only on your device. Backup and export files leave the device only when you choose to share them.

2. AI place introductions, follow-up questions and translations (only with your consent)

Before first use, the app explains what will be sent and asks for your consent. You can turn this off at any time in Settings → Privacy; once it is off, nothing more is sent.

What is sent

• Place introductions: the name, category, address and coordinates of the place you tapped (the place's location, not yours).
• Follow-up questions: the place information above, the introduction, and the questions you type together with the answers in the current conversation.
• Suggested questions: the place information, used to suggest questions above the input field.
• World Heritage description translations: the original text of the public UNESCO description.
• Every request also includes the app's language (so content is written in your language) and your account identifier (see section 3, used to deduct credits).

How it is handled

• The data goes to FogMap's server, which uses the Google Gemini API to generate the content and returns it to you.
• The server does not store generated introductions, conversations or translations. The only shared cache is for suggested questions; it is keyed by a hash of the place information and is not linked to any user.
• Google processes this data under the paid-services terms of the Gemini API Additional Terms of Service: it is not used to improve Google's products, but may be retained for a limited period to detect abuse.
• Generated introductions and translations are saved on your device and synced to your own iCloud, so viewing them again sends nothing. Follow-up conversations are not saved and disappear when you close the place page.

AI-generated content may contain mistakes; please use your own judgement.

3. AI credits and purchases

• Account identifier: To keep track of credits, the app sends the App Store's signed record of your download (AppTransaction) to the server for verification and derives an account identifier from its app transaction ID. It does not contain your name, email, Apple Account or payment information. It follows your Apple Account, so your credits remain after reinstalling or switching phones.
• Stored on the server: your credit balance, daily usage count, a record of each credit added or used (time and purpose; records for AI features contain only a hash of the place, not its name or coordinates), and purchase records (transaction ID, product and credits).
• Purchases: Payments are handled by Apple; we never receive your payment information. The server verifies transactions with Apple and receives Apple's refund notifications to remove the corresponding credits.
• Abuse prevention: The app uses Apple's App Attest to prove that requests come from the genuine FogMap app. This is an integrity check of the device and app and contains no personal data.
• Server logs: For operations and abuse prevention, server logs record the account identifier, time and usage figures (such as text length and duration), but not places or conversation content. They are deleted automatically after about 30 days.
• Use: This data is used only to provide AI credits and prevent abuse. It is not used for tracking or advertising, and it is never sold or shared with anyone else.

4. What we do not collect

• FogMap uses no analytics, advertising, tracking or crash-reporting SDKs.
• Diagnostic logs stay on your device and are sent only if you share them yourself from Settings → Advanced → Diagnostic Logs.
• If you choose in iOS Settings to share analytics with app developers, Apple provides aggregated crash reports under its own policy.

5. Retention and deletion

• Exploration history, AI introductions and translations: Settings → Advanced → Delete All Data in the app deletes FogMap's data in iCloud and the database on your device. Deleting the app alone does not delete the data in iCloud; you can also delete FogMap's data from iCloud storage management in iOS Settings.
• Credit data on the server: kept until you ask us to delete it, so that your balance is preserved and refunds can be processed. To delete it, email 023672@gmail.com; we will act within 30 days and may ask for details from a purchase receipt to confirm the data is yours. Remaining credits cannot be restored after deletion.

6. Children

FogMap is not directed at children and does not knowingly collect personal information from children.

7. Security

All data in transit is encrypted (HTTPS). Data on the server can be accessed only by FogMap's server code; the app cannot read or write other people's data.

8. Changes to this policy

If this policy changes, we will update this page and the effective date above.

9. Contact

For any privacy question or data request, email 023672@gmail.com.