《對自己說 | My Quiet Words》（以下稱「本服務」）重視你的私密文字。本政策說明本服務處理哪些資料、何時傳送資料，以及你可以如何管理資料。

1. 日常呢喃

你確認保存的呢喃文字、建立時間與編輯內容，預設只儲存在目前使用的裝置，用於時間軸、月份回顧、分類與行事曆。除非你主動使用匯出或呢喃圖功能，本服務不會將完整日記上傳到帳號或雲端日記資料庫。刪除 App、清除 App 資料或遺失裝置，可能使尚未匯出的內容無法復原。

2. 語音辨識

當你主動使用語音功能時，App 會先顯示辨識服務接收者與資料用途；只有你同意並允許所需權限後，才會將麥克風音訊交由裝置的系統語音辨識服務轉成文字。iOS 使用 Apple；Android 使用裝置設定的辨識服務，可能為 Google 或其他供應商。依裝置、作業系統與設定，音訊可能傳送至該供應商的伺服器。本服務不保存原始錄音，也不使用 OpenAI 進行語音辨識。

辨識供應商的音訊保留與刪除方式依其隱私政策及你的設定而定；本服務不承諾音訊只在記憶體中瞬時處理，也不能代替供應商刪除其紀錄。請參閱 Apple 隱私政策、Google 隱私政策，或畫面所列其他辨識供應商的政策。你可以取消語音確認或拒絕權限，改用鍵盤；停止語音或在裝置設定撤回麥克風權限可停止未來傳送，但不會自動刪除已傳送給供應商的資料。

3. 呢喃圖與第三方 AI

只有當你主動選擇某一天或已結束的月份、選擇筆觸並確認後，本服務才會將生成圖片所需的該範圍呢喃文字傳送至本服務的 Cloudflare Worker，再交由 OpenAI 處理圖像生成。平常記錄、搜尋、日曆、分類與月份回顧不使用 OpenAI。

手機 App 不保存 OpenAI API 金鑰，也不能作為一般聊天或任意提示詞工具。Worker 不將呢喃原文或生成圖片寫入日記資料庫；處理服務仍可能依安全、濫用防護與法令義務處理有限的技術紀錄。

4. 圖片額度與購買權益

為提供購買、恢復購買、退款或撤銷與圖片額度，本服務會處理商店交易識別資訊、隨機安裝或權益識別碼、額度餘額、請求識別碼、請求內容雜湊、成功或失敗狀態與必要時間戳記。這些權益紀錄不保存呢喃原文或生成圖片。付款由 Apple App Store 或 Google Play 處理，本服務不取得你的完整信用卡或付款卡資料。

5. 生物辨識

本服務只接收 Face ID、Touch ID 或裝置生物辨識是否成功的系統結果，不取得或保存臉部、指紋或生物特徵資料。

6. 相簿、分享與備份

當你點擊「保存」時，本服務只要求將生成圖新增至相簿，不讀取相簿內容。當你點擊「分享」或匯出備份時，接收目的地由你在系統介面中選擇，後續保存與使用方式由該目的地的條款與隱私政策決定。匯入與匯出只在你主動操作時發生。

7. 問題回報

只有你在設定頁主動送出問題回報時，本服務才會接收你輸入的最多 30 字文字、隨機安裝識別碼與回報日期。問題回報不會附帶截圖、相簿內容或呢喃文字。識別碼與日期用於執行每個安裝每天最多 3 則的限制與處理回報。

8. 資料分享與保留

本服務不販售你的呢喃文字或個人資料。只有為提供你主動要求的功能、履行商店交易、維護安全、遵守法律或保護合法權利所必要時，才會由服務提供者與受託處理者處理相關資料。後端權益與問題回報紀錄保留至提供服務、處理爭議及履行法令義務不再需要為止。

9. 你的選擇與刪除

你可以不使用語音辨識、呢喃圖、相簿保存或手動匯出。你可以在 App 內刪除單則呢喃，或透過裝置系統移除 App 與本機資料。若要查詢或申請刪除後端權益識別資料或問題回報，請使用下方聯絡信箱；依法或為防止詐欺而必須保存的紀錄可能不會立即刪除。

10. 兒童、醫療與危機支援

本服務不是專為兒童設計，也不是心理治療、醫療診斷、健康建議或危機支援服務。若你正面臨立即危險或需要緊急協助，請聯絡所在地的緊急服務或合格專業人員。

11. 政策變更與聯絡方式

若功能、資料處理方式或合作服務變更，本政策會更新日期與內容，重大變更會以適當方式通知。

資料控制者：極彩科技股份有限公司（統一編號 62167530）
地址：新北市新店區啟文路 98 號 23 樓
隱私與客服信箱：aaron@vividcryst.com

My Quiet Words (the “Service”) respects the privacy of your personal writing. This policy explains what the Service processes, when data leaves your device, and the choices available to you.

1. Everyday whispers

Whisper text, creation times, and edits you save are stored on your current device by default and used for the timeline, monthly review, categories, and calendar. Unless you actively use export or whisper-image generation, the Service does not upload your complete diary to an account or cloud diary database. Deleting the app, erasing app data, or losing the device may make unexported content unrecoverable.

2. Speech recognition

When you actively choose voice input, the app first identifies the recognition provider and explains the data use. Only after your consent and the required permissions does it pass microphone audio to the device's system speech-recognition service for transcription. iOS uses Apple; Android uses the configured recognition service, which may be Google or another provider. Depending on your device, operating system, and settings, audio may be sent to that provider's servers. The Service does not store original recordings and does not use OpenAI for speech recognition.

The recognition provider's retention and deletion practices depend on its privacy policy and your settings. The Service does not promise that audio is processed only temporarily in memory and cannot delete the provider's records on its behalf. Please consult the Apple privacy policy, Google privacy policy, or the policy of another recognition provider identified on screen. You can cancel the voice confirmation or deny permission and type instead. Stopping voice input or revoking microphone permission in device settings stops future transmission, but does not automatically delete data already sent to the provider.

3. Whisper images and third-party AI

Only after you choose a day or completed month, select a visual stroke, and confirm will the necessary text be sent through the Service’s Cloudflare Worker to OpenAI for image generation. Everyday writing, search, calendars, categories, and monthly review do not use OpenAI.

The mobile app does not contain an OpenAI API key and cannot be used as a general chat or arbitrary-prompt tool. The Worker does not write original whisper text or generated images to a diary database. Processing providers may handle limited technical records for security, abuse prevention, and legal compliance.

4. Image allowance and purchase entitlement

To provide purchases, restoration, refunds or revocations, and image allowances, the Service processes store transaction identifiers, random installation or entitlement identifiers, allowance balances, request identifiers, a request-content hash, delivery status, and necessary timestamps. These records do not contain original whisper text or generated images. Payments are processed by Apple App Store or Google Play; the Service does not receive full payment-card details.

5. Biometrics

The Service receives only the system result indicating whether Face ID, Touch ID, or device biometric authentication succeeded. It does not receive or store face, fingerprint, or biometric templates.

6. Photos, sharing, and backups

When you tap Save, the Service requests add-only access to place the generated image in your photo library and does not read the library. When you share or export a backup, you choose the destination in the system interface; further use is governed by that destination’s terms and privacy policy. Import and export occur only when you initiate them.

7. Problem reports

A report is sent only when you actively submit it from Settings. It contains the text you enter, limited to 30 characters, a random installation identifier, and the report date. It does not attach screenshots, photo-library content, or whisper text. The identifier and date enforce the limit of three reports per installation per day and support report handling.

8. Data sharing and retention

The Service does not sell your whisper text or personal data. Data is processed only as needed to provide a feature you request, fulfill store transactions, maintain security, comply with law, or protect legal rights. Backend entitlement and problem-report records are retained only as long as needed for those purposes, dispute handling, and legal obligations.

9. Your choices and deletion

You may choose not to use speech recognition, whisper images, photo saving, or manual export. You may delete individual whispers in the app or remove the app and its local data through the device system. To request access to or deletion of backend entitlement identifiers or problem reports, contact us below. Records required by law or fraud-prevention needs may not be deleted immediately.

10. Children, medical use, and crisis support

The Service is not directed specifically to children and is not therapy, medical diagnosis, health advice, or crisis support. If you face immediate danger or need urgent help, contact local emergency services or a qualified professional.

11. Changes and contact

If features, processing practices, or service providers change, this policy will be updated with a new date. Material changes will be communicated appropriately.

Data controller: VividCryst Technology Co., Ltd. (Uniform Business Number 62167530)
Address: 23F., No. 98, Qiwen Rd., Xindian Dist., New Taipei City, Taiwan
Privacy and support: aaron@vividcryst.com