Ato 隱私政策

最後更新:2026-07-16 · App:Ato(アト)

1. 我們蒐集的資料

• 位置資訊(精確 GPS) — 僅在你開啟 App 並允許定位時蒐集。當你開始記錄散步或主動分享會合位置時,即使螢幕關閉、App 進入背景,定位仍會持續(需授予「永遠允許」定位權限),以便持續描繪路線或讓同群朋友看到你在哪;你結束散步或停止分享後即停止。沒有在記錄散步、也沒有在分享會合時,我們不會追蹤你的位置。
• 暱稱(選填) — 你自行輸入的顯示名稱,可留空。不要求真實姓名。
• 匿名裝置識別碼 — 由 Firebase 匿名登入自動產生的隨機 ID,不含你的姓名、Email、電話或任何可直接識別你本人的資訊。
• Sign in with Apple(選填) — 你可選擇用 Apple ID 登入,以便把散步紀錄備份到雲端、換手機也保留。登入時我們會取得一組與你 Apple ID 綁定的帳號識別碼;若你在首次登入時同意提供姓名,僅用作顯示名稱。不登入也能使用 App 全部功能。

我們不蒐集:電話號碼、通訊錄、相片、生物特徵。除非你主動選擇用 Apple 登入,否則不要求註冊帳號。

2. 我們如何使用

• 在地圖上顯示你的位置,讓你知道自己在哪。
• 記錄你的步行軌跡與距離 — 儲存在你自己的裝置本機;若你用 Apple 登入,會額外同步到你帳號專屬的雲端空間,讓你換裝置也看得到。這個空間只有你本人(以登入身分)能存取。
• 會合功能 — 當你主動加入一個會合群組時,你的即時位置會分享給同群組的成員。你不加入就不會分享。
• 匿名人潮熱區 — 你的位置會先在裝置上被轉換成約 76 公尺的網格代碼(geohash)再上傳,不含身分與精確座標。他人只看得到聚合密度,無法還原你的精確位置或得知是你。

3. 我們與誰分享

• 你加入的群組成員 — 僅在你主動加入群組時。
• Google Firebase — 提供後端資料儲存、即時同步與登入驗證。
• Apple — 當你使用 Sign in with Apple 時,登入驗證由 Apple 處理。
• 地圖圖磚供應商(MapLibre、CARTO、OpenStreetMap) — 顯示地圖時會請求圖磚。

我們不販售你的個人資料,不用於廣告,不做跨 App 追蹤。

4. 資料保存與刪除

• 即時位置:離開群組或裝置斷線時自動移除。
• 匿名網格在場:斷線時自動移除。
• 步行軌跡:儲存在你的裝置;若已用 Apple 登入,也存於你帳號專屬的雲端空間。可在 App 內逐筆刪除。
• 暱稱:儲存在你的裝置本機。
• 帳號刪除:若你用 Apple 登入,可隨時在 App 內永久刪除帳號 —— 這會刪除你的雲端散步紀錄與帳號資料、清除本機紀錄,並撤銷本 App 的 Sign in with Apple 授權。

5. 你的選擇與權利

• 隨時可在 iOS 設定 → 隱私權與安全性 → 定位服務 關閉本 App 的定位權限。
• 離開群組即停止分享位置。
• 隨時可登出,或在 App 內永久刪除帳號(見上)。
• 刪除本 App 即移除裝置上的本機資料。

6. 兒童

本 App 非針對 13 歲以下兒童設計,我們不會刻意蒐集兒童的個人資料。

7. 聯絡我們

如對隱私有任何疑問,請聯絡:surviv.io1001@gmail.com

Ato Privacy Policy

Last updated: 2026-07-16

1. Data we collect

• Precise location (GPS) — collected only while the app is open and you granted permission. When you start recording a walk or actively share your location in a meet-up, tracking continues even with the screen off and the app in the background (requires "Always Allow" location permission) so your route keeps recording and friends in your group can see where you are; it stops when you end the walk or stop sharing. We do not track your location when you are neither recording a walk nor sharing in a meet-up.
• Nickname (optional) — a display name you type; may be blank. No real name required.
• Anonymous device identifier — a random Firebase Anonymous Auth ID with no name, email, phone, or directly identifying information.
• Sign in with Apple (optional) — you may sign in with your Apple ID so your walk history can be backed up to the cloud and kept across devices. We receive an account identifier tied to your Apple ID; if you share your name on first sign-in, it is used solely as your display name. You can use all features without signing in.

We do not collect phone number, contacts, photos, or biometrics. Unless you choose to sign in with Apple, we do not require account registration.

2. How we use it

• Show your location on the map.
• Record your walking route and distance, stored locally on your device; if you sign in with Apple, also synced to your private, account-scoped cloud space so you can see it on other devices. Only you can access this space.
• Meet-up: when you actively join a group, your live location is shared only with members of that group.
• Anonymous heatmap: your location is converted on-device into a coarse ~76 m grid (geohash) before upload — no identity, no precise coordinates. Others only see aggregate density.

3. Sharing

• Members of groups you join (only when you join).
• Google Firebase (backend storage, sync & authentication).
• Apple — when you use Sign in with Apple, authentication is handled by Apple.
• Map tile providers (MapLibre, CARTO, OpenStreetMap).

We do not sell your data, use it for ads, or track you across apps.

4. Retention & deletion

• Live location: removed when you leave a group or disconnect.
• Anonymous grid presence: removed on disconnect.
• Walking route: stored on device; if signed in with Apple, also in your private cloud space. You can delete individual walks in-app.
• Nickname: stored locally on your device.
• Account deletion: if you signed in with Apple, you can permanently delete your account in-app at any time. This deletes your cloud walk history and account data, clears local records, and revokes this app's Sign in with Apple authorization.

5. Your choices

• Turn off location anytime in iOS Settings → Privacy & Security → Location Services.
• Leave a group to stop sharing.
• Sign out anytime, or permanently delete your account in-app (see above).
• Delete the app to remove local data.

6. Children

The app is not directed to children under 13, and we do not knowingly collect their data.

7. Contact

surviv.io1001@gmail.com