隱私權政策

1. Introduction

TPASS.calc (hereinafter referred to as "the Application") is developed by Cheng Ruei Hsu (hereinafter referred to as "we" or "us"). We are deeply committed to protecting your privacy and data security. This Privacy Policy explains how the Application handles your data and your privacy rights.

2. Core Data Storage and Collection Methods

The Application's core functionality uses a "Local-First" architecture, and your trips and settings stay on your device by default. The following are exceptions where necessary data does leave your device: "Route Planning / Map Queries" in Section 4 (sent to third-party services), voice parsing improvement in Section 5 (anonymous telemetry), and "Issue Reports and Pro Support" in Section 6 (submitted by you, and readable by us). Apart from these, we do not collect, store, or process your personally identifiable data on external servers:

• Local Storage: All trip records, favorite routes, TPASS cycle settings, and user preferences you create within the app are stored exclusively on your personal device (via SwiftData and UserDefaults).
• NFC and Web Import: All reading, parsing, and filtering operations for NFC card scanning and official website data import are performed locally on your device. We do not upload your card numbers, verification codes, or transaction details to any third-party servers.

3. Location Data and Automatic Trip Detection

"Automatic Trip Detection" is an optional feature that is off by default. It only works after you enable it and grant location permission:

• Detection Modes: Three levels are offered — "Off (default, no location activity)", "Only While Using the App (one-time foreground sampling)", and "Automatic Background Detection (requires 'Always' location permission; uses low-power Visit and Significant-Location-Change monitoring, not continuous precise tracking)".
• Processed Entirely On-Device: All waypoint matching and trip inference happen locally on your device. We do not upload your location or movement history to any server.
• Suggestions Only: Each detected trip is merely a suggestion pending your review, and is written into your records only after you confirm or edit it.
• Turn Off Anytime: You can disable it in the Automatic Detection settings within the app's "Advanced" tab, or adjust/revoke location permission in iOS Settings.

4. Route Planning and Map Queries (Third-Party Services)

"Route Planning" is an optional feature. When you use it, the Application sends the necessary queries to the following third-party services to obtain places and multi-modal routes:

• Apple Maps (MapKit): When you search for origin/destination places, your typed text and preferred region are sent to Apple for place search, subject to Apple's Privacy Policy.
• Taiwan's Transport Data eXchange (TDX): To plan multi-modal routes, the coordinates of your selected origin/destination are sent to the TDX API (tdx.transportdata.tw) to retrieve routes and schedules, subject to TDX's terms of service.

These queries contain only the place text or coordinates needed to complete the planning, and do not include your name, Apple ID, or other identifying information. We also do not retain your query history on our own external servers.

5. Voice Recognition and Anonymous Data Analytics

To provide the "Voice Quick Record" feature and continuously improve our semantic parsing engine, we operate with the highest privacy standards:

• Permission Requests: This feature requires your "Microphone" and "Speech Recognition" permissions to function. Your voice audio is processed by Apple's native speech recognition technology (SFSpeechRecognizer).
• Anonymous Model Learning: To help our voice assistant better understand Taiwan-specific transportation terminology, when the system's parsing is incorrect and you manually correct it, the Application uploads the "original transcription text" and "your corrected field results" in a completely anonymized manner to our analytics database.
• Zero Personally Identifiable Information (No PII): This collection process is automatically filtered to remove all sensitive information (such as Apple ID, device ID, name, or email). This telemetry data is only used to train and improve our natural language processing (NLP) model and can never be traced back to you personally.

6. Issue Reports and Pro Support

This is the only feature in this policy where content you provide is read by us (the developer), and it happens only when you actively submit it:

• Report an Issue (all users): the description you submit, an optional contact email, and your app and iOS versions attached automatically.
• Pro Support (subscribers): the case subject, the full conversation, an optional contact email, optional screenshot attachments, and your app and iOS versions attached automatically.
• Screenshot attachments (optional): in a Pro Support conversation you may attach screenshots, and we may reply with screenshots to explain a step. Images are always re-encoded on your device before upload, which strips capture location (GPS), device model and other metadata. Note that the screenshot itself may still show your trip history, stops and times, so please review it before sending. We receive an image only when you attach it yourself; the app uses the system photo picker and does not need or request access to your photo library.
• Where it is stored: in our Apple CloudKit public database. We do not transfer it to any other third-party server, and never use it for advertising or cross-app tracking.
• Link to your identity: so that you see only your own cases and we can reply to the right person, each case carries a hash derived from your iCloud user identifier; CloudKit itself also records a creator identifier. Support content is therefore data linked to your identity, and we do not claim it is anonymous.
• Who can access it: other users cannot read your cases. Only developers holding support-admin permission can read and reply.
• Your control: open any case under "Settings → Pro Support" in the app and choose Delete this case from the top-right menu. The entire conversation, including any screenshots in it, is deleted permanently and becomes unreadable to us as well.
• Retention: case content is kept until you delete it, or until we have confirmed the case is resolved and no longer needs to be retained.
• Please do not share sensitive information: support conversations are free text and may include screenshots. Please do not include passwords, credit card numbers, or national ID numbers in either. We will never ask you for such information.

7. Subscriptions and In-App Purchases (TPASS Pro)

Certain advanced features (such as Route Planning and Automatic Trip Detection) require a "TPASS Pro" subscription:

• Payment Handled by Apple: Subscriptions are purchased and charged through the Apple App Store (StoreKit). We do not access or store your credit card or other payment information.
• Subscription Status: We determine whether your subscription is active solely from the purchase receipt provided by Apple, on your device. We do not create accounts or store your subscription identity on any server.
• Manage and Cancel: You can manage or cancel anytime via iOS "Settings → Apple ID → Subscriptions". See the Terms of Use for details.

8. Cloud Backup (Apple iCloud)

The Application does not use any third-party authentication services that require account registration (no login mechanism). We only provide backup services supported by Apple's native platform:

• Apple iCloud (CloudKit): If you choose to enable cloud backup, your data will be encrypted and synchronized to your personal iCloud Private Database. We (the developer) have absolutely no ability to access, read, or modify any data stored in your personal iCloud space.
• Service Configuration Read: The Application reads necessary service configuration (such as the service key required for Route Planning) from our CloudKit public database. This particular operation is read-only and does not involve or upload any of your personal data.
• Writes to the public database: When you choose to use "Report an Issue" or "Pro Support", the content you submit is written to our CloudKit public database, and we are able to read it. See Section 6.

9. Purposes of Data Use

All your trip and operation records are used exclusively for functionality within the Application, including:

• Calculating the actual payment and discount amounts for TPASS plans.
• Generating personal commute data dashboards (monthly pass ROI, route rankings, etc.).
• Providing daily reminders and periodic push notifications (all triggered and sent locally on your device).

We will never sell, rent, or share your data with any third party for commercial or marketing purposes.

10. Data Security

To protect your privacy, we implement the following security measures:

• Local Encryption: All data stored locally on your device is protected by iOS's built-in encryption mechanisms.
• Transmission Encryption: When data is synchronized to iCloud, it is protected using TLS/SSL encryption protocols to ensure transmission security.
• Anonymization Processing: All data uploaded to our analytics database undergoes multiple layers of anonymization to ensure it cannot be linked to individuals.

11. Data Deletion and User Control

You have complete control over your data. Since all your data is stored on your personal device or private iCloud account, you can manage it anytime within the Application:

• Clear Local Data: You can delete all trip records and settings stored locally by using the one-click clear option in the app's Settings page.
• Delete Cloud Backup: You can directly delete your CloudKit backup data stored in your iCloud space through the app's Settings page.
• Export Data: You can export your data as a CSV file anytime for offline backup or cross-device migration purposes.
• Access Your Data: You can view all personal data stored in the application at any time.

12. Cookies and Tracking

The Application does not use cookies or any similar tracking mechanisms. We do not use third-party tracking tools, advertising technologies, or analytics platforms (such as Google Analytics) to monitor your behavior.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal changes or updates to our practices. Any significant changes will be notified through the Application or announced on our official website. Your continued use of the Application signifies your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions or suggestions regarding this Privacy Policy, please feel free to contact us:

Email: tpass.calc@gmail.com