隱私權政策

最後更新日期:2026 年 9 月 29 日

歡迎使用「你猜」(以下稱「本服務」)。我們重視你的隱私。本政策說明我們蒐集哪些資料、如何使用,以及你享有的權利。使用本服務即表示你同意本政策。

一、我們蒐集的資料
1. 帳號資料:電子郵件地址、顯示名稱、密碼(以加密雜湊形式儲存,我們無法得知你的明文密碼)。
2. 使用資料:遊玩紀錄(案件進度、提問次數、作答內容與結果、作答時間、連勝天數)、玩家提問與 AI 回覆的對話內容、好友關係、提示與道具使用紀錄。
3. 購買資料:會員訂閱與應用程式內購買的交易識別碼與授權狀態(我們不儲存你的信用卡號)。
4. 裝置與技術資料:裝置語系、時區,以及維運與防止濫用所需的紀錄,例如請求時間、請求與對局識別碼、錯誤原因、AI 供應商與模型、用量與費用估算。聊天輸入遭拒的錯誤紀錄不包含該次輸入本文;遊戲對話內容另依前項保存。

二、我們如何使用資料
1. 提供與維護本服務的核心功能(登入、遊玩、統計、好友、會員權益)。
2. 寄送帳號驗證碼、密碼重設碼等交易性電子郵件。
3. 改善遊戲體驗、分析整體使用趨勢(以彙總、去識別化方式)。
4. 偵測與防止詐欺、濫用與違反服務條款的行為。
5. 透過後端將玩家提問、作答及相關遊戲資料與必要的對話歷史／上下文交由第三方 AI 服務商處理,以產生遊戲回覆、提示、翻譯及作答判定。

三、第三方服務
本服務使用下列第三方,資料處理受其各自隱私政策約束:
1. Google 登入:用於第三方帳號登入,我們僅取得你授權的電子郵件與基本個人資料。
2. Resend:用於寄送驗證信與系統通知郵件。
3. 廣告與應用程式內購買平台(如 Google Play、App Store):用於金流與廣告投放。
4. AI 服務商:用於上述 AI 功能。資料由本服務後端傳送至 AI 服務商的 API,不是只在你的裝置上處理。我們不會將帳號電子郵件、登入密碼或購買／付款資料作為 AI 請求欄位傳送;但若你自行將自己或他人的個人資料輸入提問或作答,這些文字可能隨請求與後續對話上下文傳送。因此請勿輸入密碼、付款資訊或其他敏感個人資料。
本服務對玩家資料的處理由本政策說明,AI 服務商的處理則依其適用服務條款與政策。
新版 App 的登入與註冊頁顯示使用條款及隱私權政策的連結;你可以點開閱讀兩份文件,點選電子郵件登入／註冊或 Google／Apple 登入即表示同意。AI 資料分享的內容與用途列於本政策,沒有另一個 AI 專用勾選或遊戲中的許可彈窗。已登入但尚無目前政策同意紀錄的用戶,更新後會回到登入頁;重新登入後才可繼續使用 App。此確認依帳號及政策版本保存在目前裝置／瀏覽器,不會自動同步到其他裝置。若不同意,請勿繼續使用;你仍可聯絡客服行使資料權利。先前已傳送給 AI 服務商的資料不會因停止使用而自動刪除。
AI 服務商或資料分享範圍有重大變更時,我們會更新政策並再次要求確認;通用服務商稱呼不代表預先同意未來的變更。
我們不會將你的個人資料出售給第三方。

四、資料保存與安全
我們採取合理的技術與管理措施保護你的資料,密碼一律以雜湊儲存。服務會保存遊玩、對話及上述維運紀錄,用於續玩、歷史回看、功能運作與維運。你可在 App 設定頁刪除帳號;刪除流程會移除服務資料庫中的帳號、相關對局、對話、作答與進度等資料。為財務對帳與防詐所需的購買／收入紀錄會保留並解除帳號關聯。備份與獨立維運日誌不會隨帳號刪除立即清除。刪除本服務帳號不會自動向 AI 服務商發出刪除請求,也不代表供應商端已接收的資料已刪除;如需協助,請聯絡客服。

五、你的權利
你可以請求查詢、更正或刪除你的個人資料,或撤回同意。如需行使權利,請透過設定頁的「聯絡客服」與我們聯繫。

六、兒童隱私
本服務不針對未滿規定年齡之兒童設計。若你未達所在地區之數位同意年齡,請在法定代理人同意下使用。

七、政策變更
我們可能不時更新本政策,重大變更將於本服務內公告。

八、聯絡我們
如對本政策有任何疑問,請透過設定頁的「聯絡客服」與我們聯繫。

English version below

Privacy Policy

Last updated: September 29, 2026

Welcome to "Guessit" (the "Service"). We respect your privacy. This policy explains what data we collect, how we use it, and the rights you have. By using the Service, you agree to this policy.

1. Data We Collect
1. Account data: email address, display name, and password (stored only as a cryptographic hash; we never see your plaintext password).
2. Usage data: gameplay records (case progress, number of questions asked, submitted answers and results, solve time, streak days), conversation content including player questions and AI replies, friend relationships, and hint/item usage.
3. Purchase data: transaction identifiers and entitlement status for memberships and in-app purchases (we do not store your card number).
4. Device and technical data: device language, time zone, and records needed for maintenance and abuse prevention, such as request times, request and game session identifiers, error reasons, AI provider and model, usage and estimated costs. Logs of rejected chat input do not include the rejected input text; gameplay conversations are stored separately as described above.

2. How We Use Data
1. To provide and maintain the core features of the Service (login, gameplay, stats, friends, membership benefits).
2. To send transactional emails such as account verification codes and password reset codes.
3. To improve the experience and analyze overall usage trends (in aggregated, de-identified form).
4. To detect and prevent fraud, abuse, and violations of our terms.
5. To send player questions, submitted answers, relevant game data and necessary conversation history/context through our backend to a third-party AI service provider for game replies, hints, translations and answer evaluation.

3. Third-Party Services
The Service uses the following third parties, whose processing is governed by their own privacy policies:
1. Google Sign-In: for third-party login; we only receive the email and basic profile you authorize.
2. Resend: for sending verification and system notification emails.
3. Advertising and in-app purchase platforms (e.g., Google Play, App Store): for payments and ad delivery.
4. AI service provider: provides the AI features above. Our backend sends data to the AI service provider's API; processing does not take place solely on your device. We do not include account email addresses, login passwords or purchase/payment data as AI request fields. However, if you type personal data about yourself or others into questions or submitted answers, that text may be sent with the request and later conversation context. Please do not enter passwords, payment information or other sensitive personal data.
This policy describes the Service's processing of player data; the AI service provider's processing is subject to its applicable service terms and policies.
New App versions show links to the Terms of Use and Privacy Policy on login and registration. You can open both documents; tapping email login or registration, Google login, or Apple login indicates acceptance. This policy explains AI data sharing and its purposes. There is no separate AI-only checkbox or gameplay permission dialog. Previously signed-in users without a record of acceptance for the current policy return to the login screen after updating and must sign in again before continuing to use the App. Acceptance is saved for the account and policy version on this device/browser and does not automatically sync to other devices. If you do not agree, do not continue using the Service; you may contact support to exercise your data rights. Stopping use does not automatically delete data already sent to the AI service provider.
If the AI service provider or scope of data sharing changes materially, we will update the policy and request acceptance again; generic provider wording does not grant advance acceptance of future changes.
We do not sell your personal data to third parties.

4. Retention and Security
We apply reasonable technical and organizational measures to protect your data, and passwords are always stored hashed. The Service stores gameplay, conversations and the operational records described above for resuming games, viewing history, operating features and maintenance. You can delete your account in App Settings; this removes the account and associated game sessions, conversations, submitted answers and progress from the Service database. Purchase/revenue records needed for financial reconciliation and fraud prevention are retained with their account association removed. Backups and separate operational logs are not immediately cleared by account deletion. Deleting your Service account does not automatically send a deletion request to the AI service provider or mean that data already received by the provider has been deleted; contact support for assistance.

5. Your Rights
You may request to access, correct, or delete your personal data, or withdraw consent. To exercise these rights, contact us via "Contact Support" in Settings.

6. Children's Privacy
The Service is not designed for children below the applicable age. If you are below the age of digital consent in your region, please use it only with the consent of a legal guardian.

7. Changes
We may update this policy from time to time; material changes will be announced within the Service.

8. Contact Us
If you have any questions about this policy, contact us via "Contact Support" in Settings.