KeepNest存著先隱私權政策
- 你的收藏（截圖、網址、文字、分類）都存在你自己的手機裡，不需要註冊帳號。
- 只有在你開著「AI 自動整理」時，內容才會送去給 AI，用來整理卡片，或回答你主動提出的問題；標成「私人」的卡片永遠不會送出。
- 我們不放廣告、不做追蹤、不使用分析工具、不賣任何資料。
1. 這份政策適用於什麼
本政策說明 RoughZone（以下稱「我們」）開發的 KeepNest App（以下稱「本 App」，iOS 與 Android 版）如何處理你的資料。
2. 存在你手機上的資料
你收進本 App 的截圖、照片、網址、文字、筆記、分類，以及 AI 整理出來的標題、摘要、欄位與圖片中的文字，都儲存在本 App 於你手機上的私有空間。我們沒有伺服器保存這些內容，也看不到它們。
3. 會離開手機的資料
3.1 AI 自動整理（可以關閉）
為了自動產生標題、摘要、分類與資訊欄位，本 App 會透過 Google 的 Firebase AI Logic 把以下內容傳給 Google Gemini：
- 圖片卡片：縮小後的圖片（送出前會移除拍攝位置、機型等附帶資訊）。
- 網址卡片：網址、網頁標題與摘要、你一起分享的文字，以及網頁的部分內文。
- 文字卡片：你收進來的文字內容。
- 你的分類名稱（用來幫你選分類），不包含「私人」分類。
這些內容只用於幫你整理該張卡片。Google 會依照Gemini API 服務條款與Google 隱私權政策處理。
- 標成「私人」或放在「私人」分類的卡片不會送給 AI。
- 你可以在「設定 → AI 自動整理」隨時關閉，關閉後不會再送出任何內容。
- 從其他 App 分享或從相簿匯入的內容，預設會自動整理。你可以關閉「分享和匯入的也自動整理」，這些內容就會先停在收件匣，由你決定要讓 AI 整理，還是設為私人。
3.2 直接問你的收藏
你在搜尋頁直接提問時（例如「那家拉麵在哪？」），本 App 會先在手機上挑出可能相關的卡片（最多 40 張），再把你的問題和這些卡片的文字資料（標題、分類、收藏日期與來源、摘要、資訊欄位、標籤、你寫的備註、網址、文字內容與圖中文字的片段）透過同樣的 Firebase AI Logic 送給 Google Gemini 產生回答。不會送出圖片，私人卡片也不會被挑選。只有你按下提問時才會送出；關閉「AI 自動整理」後這個功能也會隱藏。
3.3 讀取網址的標題與封面
你存網址時，本 App 會從你的手機直接連到那個網站（YouTube 影片會連到 YouTube 的公開資訊服務），讀取標題與封面圖。就像用瀏覽器開網頁一樣，該網站會看到一般的連線資訊（例如 IP 位址）。私人卡片不會這樣做。
3.4 用地圖 App 打開地址
你在卡片上點地址時，本 App 會把這個地址交給你手機上的地圖 App（iPhone 是 Apple 地圖，Android 通常是 Google 地圖）打開，只會帶出地址本身。之後由該地圖 App 依它自己的隱私權政策處理。你沒有點的時候，地址不會離開手機。
3.5 加到行事曆
你在卡片上按「加到行事曆」時，本 App 會列出你手機上可以新增行程的日曆（只讀取日曆的名稱、帳號與顏色），讓你確認標題、日期時間、地點後選一個日曆存入；摘要會放在行程備註裡。存進去之後，由該日曆服務（例如 iCloud 或 Google 日曆）依它自己的隱私權政策處理。本 App 不會讀取、修改或刪除你行事曆裡的其他行程，日曆資料也不會離開你的手機送給我們。
3.6 讓 App 正常運作的服務
| 服務 | 用途 | 會傳送什麼 |
|---|---|---|
| Firebase 匿名登入（Google） | 讓 AI 功能只能由正版 App 使用 | 一組隨機產生的匿名編號，不含姓名、Email 或電話 |
| Firebase App Check（Google、Apple、Google Play） | 確認請求來自正版 App，防止被盜用 | 裝置完整性驗證資訊 |
| Firebase Crashlytics（Google） | App 當機時修正錯誤（僅正式版） | 當機時的程式狀態、裝置型號、系統版本；不含你的卡片內容 |
| RevenueCat | 確認你的購買與訂閱狀態 | 匿名的使用者編號與購買紀錄；付款資料由 Apple／Google 處理，我們拿不到 |
各服務的隱私說明：Firebase、RevenueCat。
3.7 備份檔
「備份與還原」產生的備份檔會包含你所有的卡片與圖片（包括私人卡片），而且沒有加密。備份檔要存到哪裡（例如 iCloud 雲碟、Google 雲端硬碟、寄給自己）由你決定，我們不會收到。請把備份檔存在只有你能存取的地方。
4. 我們要求的權限
- 照片：讀取你相簿裡的截圖，讓你匯入與整理。只有在你確認之後，才會透過系統的確認視窗刪除手機上的原始截圖。
- 相機：讓你直接拍照收進來。
- 通知：每日整理提醒，完全在手機上排程，不經過任何伺服器。
- 行事曆：你第一次按「加到行事曆」時才會詢問。用來列出你的日曆讓你選擇、新增你確認過的行程；不會讀取其他行程。iPhone 上系統會把它顯示為「完整取用」，因為要讓你選日曆必須用這個權限。
這些權限都可以在手機的系統設定裡隨時關閉。
5. 我們不做的事
- 不放廣告，不使用廣告識別碼。
- 不跨 App 或網站追蹤你，不使用分析工具。
- 不出售、出租或交換你的任何資料。
6. 保存與刪除
- 你可以在 App 裡刪除任何卡片。刪除的卡片會先放進「最近刪除」保留 30 天，方便你復原；30 天後（或你在「最近刪除」裡選擇永久刪除時），卡片的圖片與內容會從手機上永久清除。
- 解除安裝本 App 會刪除手機上所有的本 App 資料（你另外匯出的備份檔不受影響）。
- 送給 AI 的內容，由 Google 依其條款保存與處理。
- 如果你想刪除與你的匿名編號相關的資料，請來信告訴我們。
7. 兒童
本 App 不是為 13 歲以下兒童設計，我們也不會刻意收集兒童的資料。
8. 政策變更
政策有變更時，我們會更新本頁與上方的生效日期；重大變更會在 App 內告知。
9. 聯絡我們
對隱私有任何疑問，或想行使查詢、更正、刪除等權利，請寫信到 roughzonestudio@gmail.com。
Privacy Policy
- Your saved items (screenshots, links, text, folders) are stored on your own device. No account is required.
- Content is sent to AI only while "AI auto-organize" is on, to organize your cards or to answer questions you ask. Cards marked "Private" are never sent.
- We show no ads, do no tracking, use no analytics, and sell no data.
1. Scope
This policy explains how RoughZone ("we") handles your data in the KeepNest app for iOS and Android ("the App").
2. Data stored on your device
Screenshots, photos, links, text, notes and folders you save, as well as the titles, summaries, fields and recognized text produced by AI, are stored in the App's private storage on your device. We do not keep this content on any server and cannot see it.
3. Data that leaves your device
3.1 AI auto-organize (can be turned off)
To generate titles, summaries, categories and fields, the App sends the following to Google Gemini through Google's Firebase AI Logic:
- Image cards: a downscaled copy of the image (location, camera model and other embedded metadata are removed first).
- Link cards: the URL, the page title and description, any text you shared with it, and part of the page text.
- Text cards: the text you saved.
- Your folder names (to suggest a folder), excluding the "Private" folder.
This content is used only to organize that card. Google processes it under the Gemini API Terms of Service and the Google Privacy Policy.
- Cards marked "Private" or saved in the "Private" folder are never sent to AI.
- You can turn this off at any time in Settings → AI auto-organize. Once off, nothing is sent.
- Items shared from other apps or imported from your photo library are organized automatically by default. Turn off "Also auto-organize shared and imported items" and they will wait in the Inbox until you choose to let AI organize them or mark them Private.
3.2 Asking about your collection
When you ask a question in Search (for example "Where was that ramen place?"), the App first picks possibly relevant cards on your device (up to 40), then sends your question and the text of those cards (title, folder, date saved and source, summary, fields, tags, your notes, link, and excerpts of the text content and recognized text) to Google Gemini through the same Firebase AI Logic to produce an answer. No images are sent and Private cards are never picked. Nothing is sent until you ask; the feature is hidden when "AI auto-organize" is off.
3.3 Fetching link titles and covers
When you save a link, the App connects from your device directly to that website (or to YouTube's public oEmbed service for YouTube videos) to read its title and cover image. As with opening a page in a browser, that website receives standard connection information such as your IP address. This is not done for Private cards.
3.4 Opening an address in a maps app
When you tap an address on a card, the App hands that address to the maps app on your phone (Apple Maps on iPhone, usually Google Maps on Android). Only the address itself is passed along, and that maps app then handles it under its own privacy policy. Addresses never leave your phone unless you tap them.
3.5 Adding to your calendar
When you tap "Add to calendar" on a card, the App lists the calendars on your phone that can accept new events (reading only each calendar's name, account and color), lets you confirm the title, date and time and location, and saves the event to the calendar you pick; the summary goes into the event notes. Once saved, that calendar service (for example iCloud or Google Calendar) handles it under its own privacy policy. The App never reads, changes or deletes your other events, and no calendar data is sent to us.
3.6 Services that keep the App working
| Service | Purpose | What is sent |
|---|---|---|
| Firebase Anonymous Auth (Google) | Restrict AI features to the genuine App | A randomly generated anonymous ID, with no name, email or phone number |
| Firebase App Check (Google, Apple, Google Play) | Verify requests come from the genuine App | Device integrity attestation |
| Firebase Crashlytics (Google) | Fix crashes (release builds only) | App state at the time of a crash, device model and OS version; never your card content |
| RevenueCat | Confirm your purchases and subscription status | An anonymous user ID and purchase history; payment details are handled by Apple/Google and never reach us |
Privacy information: Firebase, RevenueCat.
3.7 Backup files
Backup files created with "Backup & Restore" contain all your cards and images, including Private cards, and are not encrypted. You choose where to save them (for example iCloud Drive, Google Drive, or email to yourself); we never receive them. Keep backup files somewhere only you can access.
4. Permissions
- Photos: read screenshots in your library so you can import and organize them. Original screenshots on your device are deleted only after you confirm in the system's own dialog.
- Camera: take a photo and save it directly.
- Notifications: a daily reminder scheduled entirely on your device, without any server.
- Calendar: asked only the first time you tap "Add to calendar". Used to list your calendars so you can choose one and to add the event you confirm; other events are never read. On iPhone the system labels this "Full Access" because choosing a calendar requires it.
You can revoke any of these at any time in your device settings.
5. What we don't do
- No ads and no advertising identifiers.
- No tracking across apps or websites, and no analytics tools.
- We never sell, rent or trade your data.
6. Retention and deletion
- You can delete any card in the App. Deleted cards stay in "Recently Deleted" for 30 days so you can restore them; after 30 days (or when you choose to delete them permanently there), the card's images and content are permanently removed from your device.
- Uninstalling the App removes all of its data from your device (backup files you exported are not affected).
- Content sent to AI is retained and processed by Google under its terms.
- To request deletion of data associated with your anonymous ID, email us.
7. Children
The App is not directed to children under 13, and we do not knowingly collect data from children.
8. Changes
If this policy changes, we will update this page and the effective date above, and notify you in the App of significant changes.
9. Contact
For privacy questions or to exercise your rights to access, correct or delete your data, email roughzonestudio@gmail.com.