隱私政策
飛星風水 Feng Shui Stars · 生效日期：2026 年 8 月 13 日
飛星風水（以下稱「本應用程式」或「本服務」）由開發者 freecelestial（以下稱「我們」）提供。本政策說明我們如何收集、使用、分享及保護您的個人資料。
重點摘要：飛星計算與羅盤功能可在不註冊、不登入的情況下使用，此時我們不會建立任何帳號或儲存您的資料。登入後我們才會儲存您的分析記錄。免費版本會顯示第三方廣告，廣告服務商可能使用裝置識別碼；您可隨時在應用程式中調整或撤回廣告同意。我們不會出售您的個人資料。
一、免登入使用（訪客模式）
飛星盤計算與羅盤測算皆為裝置端本機運算。您可在不登入的情況下直接使用這些功能，此時本應用程式不會為您建立帳號、不會產生使用者識別碼，也不會將您輸入的內容上傳至我們的伺服器。僅當您選擇登入並儲存記錄時，資料才會寫入雲端。
二、我們收集的資料
2.1 帳號資訊（僅限登入使用者）
當您透過第三方登入（Google、Apple、X、LINE）建立帳號時，我們會取得您的電子郵件地址、顯示名稱與該服務提供的使用者識別碼。若您使用 Apple 的「隱藏我的電子郵件」，我們只會收到 Apple 提供的轉址信箱。
2.2 分析記錄（僅限登入使用者）
您主動儲存的飛星分析資料，包含您自行輸入的名稱、備註、坐向與角度、元運、房間標記，以及建立時間。這些欄位由您自行填寫，請勿在其中填入您不希望儲存的敏感個人資訊。
2.3 問題反饋
當您使用應用程式內的「問題反饋」功能時，我們會儲存您送出的訊息內容、您的電子郵件地址、顯示名稱與使用者識別碼，以便回覆您。此類內容可由本服務的管理人員檢視。
2.4 訂閱與購買資訊
訂閱由 Apple App Store 或 Google Play 處理，並透過 RevenueCat, Inc. 管理權益狀態。我們會收到並儲存訂閱狀態、方案類型、到期時間與購買識別碼。我們不會收集、接觸或儲存您的信用卡號或其他付款工具資訊，這些資料完全由 Apple 或 Google 處理。
2.5 廣告與裝置識別碼
免費版本會透過 Google AdMob 顯示廣告。AdMob 可能收集您的廣告識別碼（Android 廣告 ID／iOS IDFA）、IP 位址、裝置與作業系統資訊、粗略地理位置及廣告互動記錄，用於投放與衡量廣告成效。是否投放個人化廣告，取決於您在同意流程中的選擇（見第四節）。付費訂閱期間不顯示廣告。
2.6 當機與診斷資料
我們使用 Firebase Crashlytics 蒐集當機報告，內容包含當機堆疊、裝置型號、作業系統版本、應用程式版本與匿名安裝識別碼，用於修復錯誤與提升穩定性。
2.7 裝置感測器
羅盤功能讀取裝置磁力計以判定方位。所有運算在裝置本機完成，感測器讀值不會上傳至我們的伺服器。本應用程式不使用 GPS，也不收集精確定位資料。
2.8 應用程式偏好
語言設定、介面展開狀態、公告已讀版號等偏好儲存於裝置本機（SharedPreferences），不會上傳。
三、資料用途與法律依據
| 用途 | 資料類別 | GDPR 法律依據 |
|---|
| 驗證身份、維護帳號 | 帳號資訊 | 履行契約 |
| 儲存並跨裝置同步分析記錄 | 分析記錄 | 履行契約 |
| 回覆您的問題反饋 | 反饋內容、帳號資訊 | 履行契約／正當利益 |
| 提供訂閱權益、防止重複領取 | 訂閱資訊 | 履行契約 |
| 投放與衡量廣告 | 廣告識別碼、裝置資訊 | 同意（個人化廣告）／正當利益（非個人化廣告） |
| 修復錯誤、提升穩定性 | 當機與診斷資料 | 正當利益 |
我們不會出售或出租您的個人資料，也不會將其提供給下列第三方服務商以外的對象，法律要求或保護本服務權利之必要情形除外。
四、廣告與追蹤同意
- 歐盟／英國／瑞士使用者：首次啟動時會顯示由 Google User Messaging Platform (UMP) 提供的同意表單，供您選擇是否接受個人化廣告。在您做出選擇之前，本應用程式不會發出任何廣告請求。
- iOS 使用者：系統會顯示「App 追蹤透明度」(ATT) 對話框，詢問是否允許跨其他公司的 App 與網站追蹤您。您可隨時於 iOS「設定 → 隱私權與安全性 → 追蹤」變更。
- 撤回或變更同意：前往應用程式的「帳號 → 廣告與隱私設定」，可隨時重新開啟同意表單並變更選擇（此項目僅於適用地區顯示）。
- 拒絕個人化廣告不影響您使用本應用程式的功能，您仍會看到非個人化廣告。
五、第三方服務
我們委託下列服務商處理資料，其處理行為受其各自隱私政策約束：
六、國際資料傳輸
上述服務商可能於您所在國家／地區以外（包含美國）處理及儲存資料。當資料自歐洲經濟區、英國或瑞士傳輸至境外時，係依據歐盟標準契約條款（SCCs）或其他適當保護措施進行。
七、資料保留與刪除
- 帳號與分析記錄：保留至您主動刪除帳號為止。
- 問題反饋內容：於您刪除帳號時一併刪除。
- 當機與診斷資料：由 Firebase Crashlytics 依其政策保留（通常最長 90 天）。
- 訂閱交易記錄：Apple、Google 與 RevenueCat 可能為稅務與帳務目的保留必要記錄，此部分不受我們控制。
您可於應用程式「帳號」頁面選擇「刪除帳號」，我們將立即永久刪除您的帳號、所有分析記錄與問題反饋內容。詳細步驟請見刪除帳號說明。
八、您的權利
依您所在地法律（包含歐盟 GDPR 與英國 UK GDPR），您可能享有下列權利：
- 存取我們所持有關於您的個人資料
- 更正不正確的資料
- 刪除您的資料（可直接於應用程式內自助完成）
- 限制或反對特定處理行為
- 取得您資料的可攜副本
- 撤回您先前給予的同意（撤回不影響撤回前依同意所為之處理）
行使權利請來信 node.7.claw@gmail.com，我們將於 30 日內回覆。若您認為我們的處理行為違法，您有權向所在地資料保護監管機關提出申訴。
九、加州居民（CCPA／CPRA）
我們在過去 12 個月內未曾、未來亦不會為金錢對價出售您的個人資料。基於個人化廣告涉及與廣告服務商共享識別碼，該行為在部分法域可能被歸類為「分享」；您可透過第四節所述方式選擇退出。您亦享有知悉、刪除、更正個人資料，以及不因行使權利而受差別待遇的權利。
十、兒童隱私
本服務不以未滿 16 歲之兒童為對象，我們不會在知情的情況下收集兒童的個人資料。若您得知有兒童向我們提供了個人資料，請來信告知，我們將儘速刪除。
十一、資料安全
資料傳輸採用 TLS 加密，並於 Firebase 平台儲存。存取權限透過 Firebase 安全規則限制，僅您本人可讀寫自己的分析記錄。惟任何網路傳輸或儲存方式均無法保證絕對安全。
十二、本政策的變更
我們可能不時更新本政策。重大變更將透過應用程式內公告或更新本頁面生效日期的方式通知您。變更後繼續使用本服務即視為接受更新後的政策。
十三、聯絡我們
資料控管者：freecelestial（個人開發者）
電子郵件：node.7.claw@gmail.com
Privacy Policy
Feng Shui Stars · Effective Date: August 13, 2026
Feng Shui Stars (the "App" or the "Service") is provided by freecelestial ("we", "us"). This policy explains how we collect, use, share, and protect your personal data.
Summary: The flying-star calculation and compass features work without registration or sign-in; in that mode we create no account and store none of your data. Records are only saved to the cloud after you sign in. The free tier shows third-party ads, and ad providers may use device identifiers; you can change or withdraw your ad consent at any time in the App. We do not sell your personal data.
1. Using the App Without an Account (Guest Mode)
Flying-star chart calculation and compass readings run entirely on your device. You may use these features without signing in, in which case the App creates no account, generates no user identifier, and uploads nothing you enter to our servers. Data is written to the cloud only when you choose to sign in and save a record.
2. Data We Collect
2.1 Account Information (signed-in users only)
When you create an account through a third-party provider (Google, Apple, X, LINE), we receive your email address, display name, and the user identifier supplied by that provider. If you use Apple's "Hide My Email," we receive only the relay address Apple provides.
2.2 Analysis Records (signed-in users only)
The feng shui analysis data you choose to save, including the name and notes you type, sitting/facing direction and degrees, period, room labels, and timestamps. You control these fields — please do not enter sensitive personal information you would rather not have stored.
2.3 Feedback Submissions
When you use the in-app feedback feature, we store the message you send along with your email address, display name, and user identifier so we can respond. This content is visible to the Service's administrators.
2.4 Subscription and Purchase Data
Subscriptions are processed by the Apple App Store or Google Play and managed through RevenueCat, Inc. We receive and store subscription status, plan type, expiry date, and purchase identifiers. We never collect, see, or store your credit card number or other payment credentials — those are handled entirely by Apple or Google.
2.5 Advertising and Device Identifiers
The free tier displays ads through Google AdMob. AdMob may collect your advertising identifier (Android Advertising ID / iOS IDFA), IP address, device and operating system information, coarse location, and ad interaction data in order to serve and measure ads. Whether personalized ads are served depends on your choice in the consent flow (see Section 4). No ads are shown during an active paid subscription.
2.6 Crash and Diagnostic Data
We use Firebase Crashlytics to collect crash reports containing stack traces, device model, OS version, app version, and an anonymous installation identifier, in order to fix bugs and improve stability.
2.7 Device Sensors
The compass reads your device's magnetometer to determine orientation. All calculations happen locally and sensor readings are never uploaded to our servers. The App does not use GPS and does not collect precise location data.
2.8 App Preferences
Language settings, UI expansion states, and the last-read announcement version are stored locally on your device (SharedPreferences) and are not transmitted.
3. How We Use Your Data, and Our Legal Bases
| Purpose | Data Category | GDPR Legal Basis |
|---|
| Authenticate you and maintain your account | Account information | Performance of a contract |
| Store and sync analysis records across devices | Analysis records | Performance of a contract |
| Respond to your feedback | Feedback content, account information | Contract / legitimate interests |
| Deliver subscription entitlements | Subscription data | Performance of a contract |
| Serve and measure advertising | Ad identifiers, device information | Consent (personalized ads) / legitimate interests (non-personalized ads) |
| Fix bugs and improve stability | Crash and diagnostic data | Legitimate interests |
We do not sell or rent your personal data, and we do not share it with anyone other than the service providers listed below, except where required by law or necessary to protect the rights of the Service.
4. Advertising and Tracking Consent
- EEA / UK / Switzerland: On first launch, a consent form provided by Google's User Messaging Platform (UMP) lets you choose whether to accept personalized advertising. No ad request is made before you make that choice.
- iOS: The system App Tracking Transparency (ATT) prompt asks whether the App may track you across other companies' apps and websites. You can change this anytime under iOS Settings → Privacy & Security → Tracking.
- Withdrawing or changing consent: Go to Account → Ad & Privacy Settings in the App to reopen the consent form and change your choice (shown only in applicable regions).
- Declining personalized ads does not restrict any App functionality; you will still see non-personalized ads.
5. Third-Party Services
We rely on the following processors, whose handling of data is governed by their own privacy policies:
| Provider | Purpose | Privacy Policy |
|---|
| Google Firebase (Authentication, Firestore, Cloud Functions, Remote Config, Crashlytics, Hosting) | Authentication, data storage, backend processing, crash reporting | firebase.google.com/support/privacy |
| Google AdMob | Ad serving and measurement | policies.google.com |
| RevenueCat, Inc. | Subscription entitlement management | revenuecat.com/privacy |
| Apple App Store / Google Play | Payment processing and billing | Their respective policies |
| Google, Apple, X, LINE sign-in | Authentication | Their respective policies |
6. International Transfers
These providers may process and store data outside your country or region, including in the United States. Transfers from the EEA, UK, or Switzerland are made under the EU Standard Contractual Clauses or other appropriate safeguards.
7. Data Retention and Deletion
- Account and analysis records: retained until you delete your account.
- Feedback submissions: deleted together with your account.
- Crash and diagnostic data: retained by Firebase Crashlytics under its own policy (typically up to 90 days).
- Subscription transaction records: Apple, Google, and RevenueCat may retain records as required for tax and accounting purposes; this is outside our control.
You can choose Delete Account on the Account page at any time; we will immediately and permanently delete your account, all analysis records, and your feedback submissions. See the account deletion instructions for details.
8. Your Rights
Depending on where you live (including under the EU GDPR and UK GDPR), you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (available self-service inside the App)
- Restrict or object to certain processing
- Receive a portable copy of your data
- Withdraw consent you previously gave (withdrawal does not affect processing carried out before withdrawal)
To exercise these rights, email node.7.claw@gmail.com; we will respond within 30 days. If you believe our processing is unlawful, you have the right to lodge a complaint with your local data protection authority.
9. California Residents (CCPA / CPRA)
We have not sold, and will not sell, your personal information for monetary consideration. Because personalized advertising involves sharing identifiers with ad providers, that activity may be classified as "sharing" in some jurisdictions; you may opt out using the controls described in Section 4. You also have the rights to know, delete, and correct your personal information, and not to be discriminated against for exercising those rights.
10. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you become aware that a child has provided us personal data, please contact us and we will delete it promptly.
11. Data Security
Data is transmitted over TLS and stored on the Firebase platform. Access is restricted by Firebase Security Rules so that only you can read and write your own analysis records. However, no method of transmission or storage is completely secure.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through an in-app announcement or by updating the effective date on this page. Continued use of the Service after a change constitutes acceptance of the updated policy.
13. Contact Us
Data controller: freecelestial (independent developer)
Email: node.7.claw@gmail.com