Optional usage analytics and diagnostics

Usage analytics and crash/performance diagnostics are separate, optional device choices, off until you choose. Change them in Settings → Privacy & diagnostics. Google Analytics for Firebase uses an app-instance identifier to measure feature usage and approximate timing, and may infer approximate region from your connection. We do not add your location history, notes, photos, email, handle or account UID to product events. Crashlytics and Performance use installation/device information, stack frames and bounded technical measurements; network diagnostics may include service domains. We do not collect advertising identifiers or use this data for cross-app advertising. Turning a choice off stops future collection and clears locally pending crash reports or resets local analytics data; it does not retroactively delete reports already received. Contact us for a data request. Service/security logs necessary to operate the product remain independent of these optional choices.

Optional website analytics

Website analytics are off by default. If you allow them, Google Analytics measures visits, feature-section views, waitlist request results and page performance with first-party analytics cookies. We do not send your email, form contents, account identifiers, URL query strings or unsubscribe tokens. Google may infer approximate region from your connection. Advertising personalization and Google signals are disabled. Change your choice using Website analytics in the landing page footer; turning it off stops future collection and clears this site's analytics cookies, but does not delete reports already received. Joining the waitlist does not require analytics consent. Global Privacy Control and Do Not Track keep website analytics off.

Beta waitlist

When you join the Beta waitlist, we store your email, preferred language, signup time, consent version and invitation/email status in Firebase. We use them only to confirm your signup and send Beta invitations, not general marketing. Resend processes the confirmation email. This does not create an app account or verify ownership of your email. You can leave using the link in the confirmation email; this deletes your waitlist record. Uninvited entries expire after at most one year. Short-lived security counters help prevent abuse without storing your raw IP in the waitlist. You can also contact us to request access or deletion.

1. Who we are

Map of Days is operated by the Map of Days team. Questions and privacy requests can be sent to vincentno1@gmail.com.

2. Information we handle

• Account data, such as your email address, display name, avatar, sign-in provider, and account identifiers.
• Location and activity data you record or import, including precise and background location, timestamps, routes, places, fog tiles, timeline summaries, and import files.
• Content you create, such as journeys, memories, photos, captions, landmarks, treasure progress, postcards, and sharing choices.
• Social data, such as your handle, friend relationships, invitations, blocks, reports, and content you intentionally share.
• Device and service data, such as push tokens, app version, device/platform class, crash and performance diagnostics, security signals, and bounded product analytics.
• Purchase records and entitlement status supplied by Apple or Google when paid features are available.

Background location is used only when you enable recording features that need it. You can stop recording or change operating-system permissions at any time, though related features may stop working.

If you grant HealthKit, Health Connect, Motion & Fitness, or Activity Recognition access, Map of Days reads step counts to show a daily total. Current builds keep raw step samples and health-store totals on your device and do not synchronize them to our servers.

3. Why we use it

• Provide your private map, fog, timeline, imports, collections, social features, sync, export, and account deletion.
• Authenticate accounts, prevent abuse and fraud, protect account boundaries, and recover from failed sync or deletion work.
• Send service messages you request or need, such as sign-in, invitation, push, export, deletion, and security notices.
• Measure reliability and improve the product using minimized diagnostics and aggregate product events.
• Comply with law, enforce our terms, and respond to valid safety or rights requests.

4. Storage and service providers

Map of Days is local-first. Some data is processed and cached on your device. When you sign in, account data is synchronized to Google Firebase infrastructure so it is available across your devices.

We use service providers only to operate the product: Google Firebase (authentication, database, storage, functions, app integrity, messaging, analytics, crash and performance diagnostics), Apple and Google (sign-in and stores), Resend (transactional email), and map/geocoding providers such as Google Maps, Esri, OpenFreeMap/OpenStreetMap and Nominatim when a feature needs map tiles, routes, or place names. Those providers process requests under their own terms and privacy policies.

We do not sell personal information or use precise location for third-party advertising.

5. Sharing and visibility

Your map and location history are private by default. Other people can see only the profile or content you deliberately expose through a friend, recipient, unlisted-link, or public sharing control. Avoid sharing content that reveals a home, school, workplace, or another person's location without permission.

6. Retention, export, and deletion

Account content is generally kept while your account is active or until you delete it. Temporary imports, device caches, proofs, logs, notifications, and recovery artifacts use bounded retention appropriate to their purpose. Account exports expire after seven days; notification inbox records are scheduled to expire after 180 days.

You can export your account data and request permanent account deletion from Settings. A deletion request is handed to a durable server job, which disables new account writes, removes account-owned data and media, audits completion, and then deletes the authentication account. We may retain a minimal non-reversible deletion receipt, suppression record, security record, or legally required transaction record; it cannot be used to restore your deleted map.

Deletion normally finishes in about 15–30 minutes after acceptance. Unusual retry or provider failures can take longer; closing the app or browser does not cancel an accepted request.

7. Your choices and contact

You can change location, notification, sharing, and email permissions; correct profile or content data; export your account; or delete your account. For access, correction, deletion, objection, restriction, or portability requests that cannot be completed in the product, contact us from the email address associated with your account.

Contact: vincentno1@gmail.com. We may update this policy as the beta changes. Material changes will be identified by a new effective date and, when appropriate, an in-product notice.

自願分享的使用分析與診斷

使用分析與當機／效能診斷為兩項獨立、自願的裝置選擇，選擇前預設關閉。可在設定 → 隱私與診斷修改。Google Analytics for Firebase 使用 App 執行個體識別碼衡量功能使用與大致耗時，並可能從連線推估大致地區。產品事件不加入位置紀錄、文字、照片、email、handle 或帳號 UID。Crashlytics 與 Performance 使用安裝／裝置資訊、堆疊位置與固定格式的技術數據；網路診斷可能包含服務網域。我們不收集廣告識別碼，也不將這些資料用於跨 App 廣告。關閉選項會停止未來蒐集，並清除本機待傳的當機報告或重設本機分析資料，不會溯及刪除已收到的報告；資料權利請求可聯絡我們。維持產品運作必要的服務／安全日誌與自願選項分開處理。

自願分享的網站使用分析

網站使用分析預設關閉。若你同意，Google Analytics 會透過第一方分析 Cookie 衡量造訪、功能區塊閱讀、候補申請結果與頁面效能。我們不傳送 Email、表單內容、帳號識別碼、網址查詢參數或退出候補憑證。Google 可能從連線推估大致地區；廣告個人化與 Google signals 已關閉。你可以在首頁頁尾的「網站使用分析」修改選擇；關閉會停止未來蒐集並清除此網站的分析 Cookie，不會刪除已收到的報告。加入候補不必同意分析。Global Privacy Control 與 Do Not Track 會讓網站分析維持關閉。

Beta 候補名單

加入 Beta 候補名單時，我們會將你的 Email、偏好語言、加入時間、同意版本與邀請／寄信狀態保存於 Firebase，只用來確認加入與寄送 Beta 邀請，不用於一般行銷。確認信由 Resend 處理。這不會建立 App 帳號，也不代表已驗證信箱所有權。你可以透過確認信中的連結退出，候補資料會被刪除；未受邀資料最多保存一年。短期安全計數用於防止濫用，候補資料不保存原始 IP。你也可以聯絡我們要求查閱或刪除。

一、我們是誰

Map of Days 由 Map of Days 團隊營運。隱私問題或權利請求可寄至 vincentno1@gmail.com。

二、我們處理的資料

• 帳號資料，例如 email、顯示名稱、頭像、登入服務與帳號識別碼。
• 你記錄或匯入的位置與活動資料，包括精確及背景位置、時間、路線、地點、霧圖磚、時間軸摘要與匯入檔案。
• 你建立的內容，例如旅程、回憶、照片、文字、地標、寶藏進度、明信片及分享設定。
• 社交資料，例如 handle、好友關係、邀請、封鎖、檢舉與你主動分享的內容。
• 裝置與服務資料，例如推播 token、App 版本、裝置／平台類型、當機與效能診斷、安全訊號及有界的產品分析事件。
• 付費功能開放時，由 Apple 或 Google 提供的交易紀錄與權益狀態。

只有在你啟用需要背景定位的記錄功能時，App 才會使用背景位置。你可隨時停止記錄或變更作業系統權限，但相關功能可能因此停止運作。

若你授權 HealthKit、Health Connect、動作與健身或活動辨識，Map of Days 會讀取步數以顯示每日總計。目前版本將原始步數樣本與健康資料庫總計留在裝置上，不會同步至我們的伺服器。

三、使用目的

• 提供私人地圖、開霧、時間軸、匯入、收藏、社交、同步、匯出與刪除帳號功能。
• 驗證帳號、防止濫用與詐欺、保護帳號邊界，並從同步或刪除失敗中復原。
• 寄送你要求或服務必要的訊息，例如登入、邀請、推播、匯出、刪除與安全通知。
• 以最小化的診斷資料與彙總產品事件衡量可靠性並改善產品。
• 遵守法律、執行條款，以及處理有效的安全或權利請求。

四、儲存位置與服務供應商

Map of Days 採本機優先設計，部分資料會在裝置上處理與快取。登入後，帳號資料會同步至 Google Firebase 基礎設施，供你的不同裝置使用。

我們只為營運產品使用服務供應商：Google Firebase（驗證、資料庫、儲存、函式、App 完整性、訊息、分析、當機與效能診斷）、Apple 與 Google（登入及商店）、Resend（交易型 email），以及功能需要地圖圖磚、路線或地名時使用的 Google Maps、Esri、OpenFreeMap／OpenStreetMap、Nominatim 等地圖與地理編碼服務。這些供應商依各自條款與隱私政策處理請求。

我們不販售個人資料，也不將精確位置用於第三方廣告。

五、分享與可見範圍

你的地圖與位置紀錄預設為私人。其他人只能看到你透過好友、收件人、限連結或公開設定主動揭露的個人檔案或內容。請避免分享會揭露住家、學校、工作地點，或未經同意揭露他人位置的內容。

六、保存、匯出與刪除

帳號內容通常會保存至帳號停用或你刪除為止。暫存匯入、裝置快取、證明、日誌、通知與復原產物會依用途採有限保存。帳號匯出檔七天後失效；通知收件匣紀錄預定於 180 天後到期。

你可在「設定」匯出帳號資料並要求永久刪除帳號。刪除請求會交給可復原的伺服器工作：先停止帳號新增寫入，再刪除帳號擁有的資料與媒體、稽核完成狀態，最後刪除登入帳號。我們可能保留最小且不可逆的刪除收據、拒收紀錄、安全紀錄或依法必須保存的交易紀錄；這些資料無法還原你已刪除的地圖。

刪除通常會在請求被接受後約 15–30 分鐘完成；遇到重試或服務供應商異常時可能更久。關閉 App 或瀏覽器不會取消已接受的請求。

七、你的選擇與聯絡方式

你可變更定位、通知、分享與 email 權限；修正個人檔案或內容；匯出帳號；或刪除帳號。若存取、更正、刪除、反對、限制或可攜權請求無法在產品內完成，請以帳號綁定的 email 聯絡我們。

聯絡信箱：vincentno1@gmail.com。Beta 期間產品調整時，我們可能更新本政策；重大變更會標示新的生效日期，並在適當時於產品內通知。