量身手帳 隱私政策
你的資料只存在你的裝置上。量身手帳不需要帳號，開發者沒有伺服器保存你的個人檔案或測量紀錄，App 內也沒有廣告、追蹤或分析工具。
本政策說明量身手帳（Tapebook，以下稱「本 App」）如何處理你的資料。本 App 由 Jerry Lin 開發與維護。
本 App 在你的裝置上保存的資料
- 個人檔案：顯示名稱、出生日期與性別認同（含你自行填寫的描述）。年齡由出生日期即時計算，不另外保存。
- 測量紀錄：圍度、體重、身高與體脂率的數值、測量時間、部位與備註，以及你自訂的測量部位。
- 設定：顯示單位、App 鎖定設定、健康平台同步狀態，以及已讀公告等介面狀態。
這些資料保存在本 App 的本機資料庫中，不會上傳給開發者或任何第三方。設定 App 密碼後，資料庫會加密，資料金鑰存放於 iOS 鑰匙圈或 Android Keystore 保護的安全儲存區。
資料庫與金鑰刻意排除在 iCloud／電腦備份、Android 雲端備份與裝置轉移之外，因此換手機時資料不會自動移轉。
App 密碼與生物辨識
- App 密碼的原文不會被保存；本 App 只保存以密碼保護的加密金鑰。
- Face ID、Touch ID 或指紋解鎖由作業系統處理。本 App 只收到「驗證成功或失敗」的結果，不會讀取或保存你的臉部或指紋資料。
Apple 健康與 Health Connect
只有在你主動開啟同步並授權後，本 App 才會存取以下資料：
| 平台 | 讀取與寫入的資料類型 |
|---|---|
| Apple 健康（HealthKit，iOS） | 體重、身高、體脂率、腰圍 |
| Health Connect（Android） | 體重、身高、體脂率 |
- 寫入：把你在本 App 記下的測量寫到健康平台；你在本 App 刪除已同步的紀錄時，本 App 也會刪除它當初寫入平台的那一筆。
- 讀取：只讀取開啟同步之後新增到平台的上述資料類型，合併到本 App 的紀錄與趨勢；不會匯入開啟同步之前的歷史資料。
- 從健康平台取得的資料只用於在本 App 中顯示與管理你的測量紀錄，不會傳送給開發者或第三方，不會用於廣告、行銷或資料仲介，也不會出售。
- 本 App 使用 Health Connect 取得的資訊，遵守 Health Connect 權限政策，包括其中的「限制使用」（Limited Use）規定。
- 你可以隨時在 iOS「健康」App 或 Android 的 Health Connect 設定中撤銷授權。
網路連線
本 App 的核心功能不需要網路。會發出的連線只有以下幾種，且都不包含你的個人檔案、測量紀錄或裝置識別碼：
遠端設定
本 App 會不定期（解鎖或回到前景時，最多約每 6 小時一次）從 tapebook.jlab-app.cloud 下載一份公開的設定檔，用來顯示版本更新提醒、App 內公告，以及在必要時暫停有問題的功能。這個請求不帶任何個人資料或識別碼。
設定檔放在 Cloudflare 的服務上。和任何網站連線一樣，Cloudflare 會看到你的 IP 位址與一般的連線資訊（例如請求時間），並依 Cloudflare 隱私政策處理。開發者不會用這些資訊辨識你。
你主動開啟的連結
點選「前往更新」或本頁連結時，會在 App Store、Google Play 或瀏覽器中開啟，之後的資料處理依各平台的政策。
作業系統
Apple 或 Google 可能依你的系統設定收集當機報告或使用統計，這由各自的隱私政策規範，不在本 App 的控制範圍內。
權限說明
| 權限 | 用途 |
|---|---|
| Face ID／生物辨識 | 選用的快速解鎖，只在你設定 App 密碼並開啟後使用。 |
| Apple 健康讀取與寫入 | 同步體重、身高、體脂率與腰圍，見上方說明。 |
| Health Connect 讀取與寫入（體重、身高、體脂率） | 同步體重、身高與體脂率，見上方說明。 |
| 網路 | 下載遠端設定檔，見上方說明。 |
所有健康與生物辨識權限都是選用的；不授權時，本 App 仍可在本機記錄與查看資料。
刪除你的資料
- 刪除單筆紀錄：在本 App 中刪除即可；若該筆已同步到健康平台，本 App 會一併刪除它寫入的那一筆；從健康平台匯入的紀錄，在本 App 刪除不會影響平台上的原始資料。
- 清除所有資料：在「設定 → 資料 → 清除所有資料」經兩次確認後，會永久刪除這台裝置上的個人檔案、所有測量紀錄、App 密碼與設定。忘記密碼且無法使用生物辨識時，鎖定畫面也提供同樣的清除方式。
- 移除 App：解除安裝本 App 會一併刪除它在裝置上保存的所有資料。
- 已同步到 Apple 健康或 Health Connect 的資料，在「清除所有資料」或移除 App 後仍會保留在該平台；請到 iOS「健康」App 或 Health Connect 中管理與刪除。
因為開發者沒有保存你的任何資料，所以不需要、也無法向開發者申請刪除；刪除完全在你的裝置上完成。
兒童
本 App 不會把任何資料傳送給開發者，因此不會蒐集任何人（包括兒童）的個人資料。
政策變更
本政策若有變更，會更新本頁並修改上方的生效日期；重大變更會另外以 App 內公告通知。
聯絡方式
開發者：Jerry Lin
Email：service@crazyjerry.studio
Tapebook Privacy Policy
Your data stays on your device. Tapebook (量身手帳) requires no account. The developer runs no server that stores your profile or measurements, and the app contains no ads, tracking, or analytics.
This policy explains how Tapebook (“the app”) handles your data. The app is developed and maintained by Jerry Lin. If the two language versions differ, the Traditional Chinese version prevails.
Data the app stores on your device
- Profile: display name, date of birth, and gender identity (including any self-description you enter). Age is calculated from your date of birth and is not stored separately.
- Measurements: circumference, weight, height, and body fat percentage values, with their time, body part, and notes, plus any custom body parts you create.
- Settings: display units, app lock settings, health platform sync status, and interface state such as which notices you have read.
This data is kept in the app’s local database and is never uploaded to the developer or any third party. Once you set an app password, the database is encrypted, and its data key is kept in secure storage protected by the iOS Keychain or Android Keystore.
The database and keys are deliberately excluded from iCloud/computer backups, Android cloud backup, and device-to-device transfer, so your data does not move to a new phone automatically.
App password and biometrics
- Your app password itself is never stored; the app stores only an encryption key protected by it.
- Face ID, Touch ID, and fingerprint unlock are handled by the operating system. The app only learns whether authentication succeeded and never reads or stores your face or fingerprint data.
Apple Health and Health Connect
The app accesses the following data only after you turn on sync and grant permission:
| Platform | Data types read and written |
|---|---|
| Apple Health (HealthKit, iOS) | Weight, height, body fat percentage, waist circumference |
| Health Connect (Android) | Weight, height, body fat percentage |
- Writing: measurements you record in the app are written to the health platform. When you delete a synced record in the app, the app also deletes the entry it wrote to the platform.
- Reading: the app reads only entries of the types above that are added after you turn on sync, and merges them into your records and trends. History from before you turned on sync is not imported.
- Data obtained from health platforms is used only to show and manage your measurements in the app. It is never sent to the developer or third parties, never used for advertising, marketing, or data brokering, and never sold.
- The app’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
- You can revoke access at any time in the iOS Health app or in Health Connect settings on Android.
Network connections
The app’s core features work offline. The only connections it makes are listed below, and none of them include your profile, measurements, or device identifiers.
Remote configuration
From time to time (after unlocking or returning to the app, at most about once every 6 hours), the app downloads a public configuration file from tapebook.jlab-app.cloud. It is used to show update reminders and in-app notices, and to pause a problematic feature if necessary. The request carries no personal data or identifiers.
The file is hosted on Cloudflare. As with any website, Cloudflare sees your IP address and ordinary connection details such as the request time, and handles them under the Cloudflare Privacy Policy. The developer does not use this information to identify you.
Links you open
Tapping “Update” or a link to this page opens the App Store, Google Play, or your browser; their own policies apply from there.
Operating system
Apple or Google may collect crash reports or usage statistics according to your system settings. That is governed by their privacy policies and is outside the app’s control.
Permissions
| Permission | Purpose |
|---|---|
| Face ID / biometrics | Optional quick unlock, used only after you set an app password and turn it on. |
| Apple Health read and write | Sync weight, height, body fat percentage, and waist circumference, as described above. |
| Health Connect read and write (weight, height, body fat) | Sync weight, height, and body fat percentage, as described above. |
| Internet | Download the remote configuration file, as described above. |
All health and biometric permissions are optional. Without them, you can still record and view your data on the device.
Deleting your data
- Delete a record: delete it in the app. If it was synced to a health platform, the app also deletes the entry it wrote there. Deleting a record imported from a health platform does not affect the original entry on that platform.
- Erase all data: Settings → Data → Erase all data, after two confirmations, permanently deletes the profile, all measurements, the app password, and settings on this device. If you forget your password and biometrics are unavailable, the lock screen offers the same option.
- Uninstall: removing the app deletes all data it stored on the device.
- Data already synced to Apple Health or Health Connect stays there after erasing or uninstalling. Manage or delete it in the iOS Health app or in Health Connect.
Because the developer holds none of your data, there is nothing to request from the developer; deletion happens entirely on your device.
Children
The app sends no data to the developer, so it does not collect personal information from anyone, including children.
Changes to this policy
If this policy changes, this page and the effective date above will be updated. Significant changes will also be announced through an in-app notice.
Contact
Developer: Jerry Lin
Email: service@crazyjerry.studio