隱私權政策

1. 適用範圍

本政策適用於 Android 應用程式「到期」（Expiry；其他語系名稱為「期限」、「만료일」、「समाप्ति तिथि」），套件名稱為 app.daoqi.mobile。以下「本 App」指上述應用程式，「我們」指本頁聯絡資料所列的開發者。

本政策說明目前版本的資料處理方式，包括透過 Google Play 提供的一次性外觀購買；本 App 仍不提供帳號或雲端同步。

2. 在裝置上處理的資料與用途

• 到期項目：你輸入的名稱、所選圖示、到期日期、週期與日號、已處理狀態及建立／修改時間，用於顯示清單與管理紀錄。圖示內建於 App，名稱辨識在本機完成，不會向品牌網站傳送名稱或下載圖示。
• 提醒設定：提醒天數、時間、項目識別碼與通知識別碼，用於在手機上排程、更新或取消通知。
• 自訂與新手教學設定：常見項目名稱、是否完成首次使用教學及目前顯示狀態，用於保留你的操作偏好。教學狀態只在本機使用，不作為遠端使用分析。
• 系統狀態：App 讀取目前系統／個別 App 的語言、裝置日期時間與時區、通知權限及通知類別狀態，用於選擇介面語言、計算提醒及顯示通知設定狀態。
• 贊助購買與外觀權益：若你使用 Google Play 一次性贊助，App 會接收商品識別碼、購買狀態、購買 token、Google 簽署的購買資料與商店格式化價格，用於驗證、確認既有購買權益及解鎖三款桌面圖示。經簽署的購買資料與目前圖示選擇保存在 App 私有儲存空間，不會寫入到期項目資料。

這些資料在裝置內使用。Android 版以 App 的私有儲存空間保存資料；舊版資料可能在同一裝置內轉入新的本機儲存格式，不會因此上傳。

3. 到期內容不會傳給開發者或廣告商

目前版本不設開發者資料伺服器，不會將你的到期內容、裝置識別資訊或使用紀錄傳送給我們，也不會出售或提供本機到期資料給廣告商。App 未整合廣告、行為分析或遠端當機回報服務。

本 App 不要求開發者帳號或電話，也不存取聯絡人、照片、位置、相機、麥克風或系統行事曆。Google Play 在自己的付款介面處理付款帳號、付款方式與信用卡資料；這些完整付款資料不會提供給本 App 或 Musen Studio。使用贊助功能時，本 App、裝置上的 Google Play 商店與 Google Play Billing Library 會交換完成付款、自動確認既有購買權益、防止詐騙及維持服務所必要的商品、交易與技術請求資料；Google 依其條款與隱私權政策處理這些資料。這不包含你的到期項目名稱或提醒內容，也不作為 Musen Studio 的行為分析。你自行輸入在項目名稱中的資訊仍會保存在本機；請避免填入不必要的敏感資料。

4. 通知權限與鎖定畫面

App 使用 Android 本機通知顯示到期提醒；適用的 Android 版本會要求通知權限。系統的開機完成與喚醒功能用於恢復及執行本機提醒，不用於追蹤。提醒不需要網路或遠端推播服務。當你設定提醒時間後，若 Android 已允許精確鬧鐘特殊存取，App 會盡量在指定分鐘送出提醒；若未允許，仍會使用可能延遲的約略排程。

你可在 Android 設定中關閉通知，或取消單筆項目的全部提醒天數；關閉提醒不會刪除項目。

通知可能顯示你輸入的項目名稱與到期提示。依手機設定，內容可能出現在鎖定畫面或通知紀錄，並被獲你授權存取通知的服務看到。若內容敏感，請調整系統鎖定畫面與通知存取設定。通知時間可能受省電或系統限制影響。

5. 保存期間、刪除與還原

到期資料會留在裝置上，直到你自行刪除或清除 App 資料；已到期或標記「已處理」的項目仍會保留，不會因到期自動刪除。

1. 刪除單筆：在 App 內長按項目並選擇「刪除」；對應的待發提醒也會取消。
2. 重置全部：開啟 App 的「通知」畫面，選擇「重置資料」並確認，清除到期項目、自訂常見項目與新手教學紀錄，並取消待發提醒。
3. 清除裝置資料：使用 Android 設定中的「清除儲存空間／清除資料」，或解除安裝 App，移除其本機資料。

目前沒有帳號、雲端同步或 App 內備份匯入／匯出功能。我們沒有到期資料的伺服器副本，無法代你存取或還原已刪除的資料。系統已顯示的通知與通知紀錄，請另依 Android 提供的方式清除。

App 內的「重置資料」只清除到期項目與相關偏好，不會取消、退款或刪除 Google 帳戶中的購買紀錄。清除 Android App 資料或解除安裝會移除本機權益副本與圖示選擇；重新安裝後可由 Google Play 查詢符合資格的非消耗型購買並還原。退款或撤銷後，下一次成功核對時會收回付費圖示並切回原版。退款及 Google 購買紀錄依 Google Play 提供的方式處理。

6. 資料安全與付款

本機資料使用 Android 提供的 App 私有儲存與系統存取隔離機制；App 未另外提供資料加密密碼或加密備份功能。請妥善保護手機並啟用螢幕鎖定；任何儲存方式都無法保證絕對安全。

「贊助」使用 Google Play Billing 的一次性、非消耗型商品，不是訂閱或自動續訂。連線時，App 會與 Google Play 查詢商品、顯示在地價格、完成付款、驗證與還原權益；不會把到期項目名稱或提醒內容交給 Google Play。Musen Studio 沒有付款後端，也不會從 App 收到購買 token、簽署收據或信用卡資料。客戶端簽章驗證可降低竄改風險，但無法提供伺服器驗證同等的防護，也可能要等到下次成功連線才反映退款或撤銷。

7. 聯絡我們

若你主動來信，我們會收到你的電子郵件地址、訊息及自行附上的資料，用於處理問題與回覆。郵件會經由電子郵件服務商傳送與保存，並非 App 自動上傳的資料。聯絡紀錄僅保留處理查詢及必要後續追蹤所需期間，不再需要時刪除，依法須保留者除外。你可透過上述信箱提出查詢、更正或刪除聯絡紀錄的要求；請勿寄送密碼或不必要的敏感資料。

8. 本網頁與政策更新

你在 App 內點選「隱私權政策」時，會直接顯示內建的完整政策，可離線閱讀，不會開啟瀏覽器或連線取得內容。App 會依目前支援的介面語言顯示對應的內建政策。

供 Google Play 與一般訪客閱讀的網站版本位於 https://tw7108.com/apps/daoqi/privacy/。自行瀏覽網站時需要網路；網址不夾帶到期內容或裝置識別碼，不影響 App 的本機提醒功能。

本頁不加入分析追蹤程式，不設定 Cookie 或瀏覽器本機儲存，也不會讀取 App 內的到期資料。提供此頁的網站主機或 CDN 可能處理 IP 位址、瀏覽器資訊與存取紀錄；主機端處理方式取決於網站實際設定，不屬於 App 自動傳送的資料。

我們會在此頁公布政策更新並修改上方日期。涉及資料處理的重要變更，將在適當位置說明；需要同意的功能會另行取得同意。

1. Scope

This policy covers the Android app Expiry, also named 到期, 期限, 만료일 or समाप्ति तिथि depending on language, with package name app.daoqi.mobile. “We” means the developer identified below. It covers the current version, including the optional one-time cosmetic purchase through Google Play; the app still has no account or cloud sync.

2. Data processed on your device

• Expiry items: names you enter, selected icons, expiry dates, recurrence settings and day of month, handled status, and creation or modification times, used to display and manage your items. Icons are bundled with the app and matched to names on your device; no names are sent to brand websites and no icons are downloaded.
• Reminders: reminder days and times, item IDs and notification IDs, used to schedule, update and cancel local notifications.
• Preferences and first-use guidance: custom shortcut names, whether first-use guidance has been completed, and its current display state, used locally to remember preferences and show guidance, not for remote analytics.
• System settings: the current system or app language, device date, time and time zone, notification permission and channel status, used to display the interface, calculate reminders and report notification settings.
• Support purchase and cosmetic entitlement: if you use the optional one-time Google Play purchase, the app receives the product ID, purchase state, purchase token, Google-signed purchase data and store-formatted price to verify and acknowledge existing purchase entitlement and unlock three launcher icons. The signed purchase data and selected icon are stored in app-private storage, separately from expiry items.

Android stores app data in app-private storage. Older data may be migrated to a newer local format on the same device without uploading it.

3. Expiry content is not sent to the developer or advertisers

The current app has no developer data server. It does not transmit your expiry content, device identifiers or usage records to us, or sell or provide your local expiry data to advertisers. It has no advertising, behavioral analytics or remote crash-reporting services.

The app does not request a developer account or phone number and does not access contacts, photos, location, the camera, microphone or system calendar. Google Play handles the payment account, payment method and card details in its own payment interface; full payment details are not provided to this app or Musen Studio. When you use Support, this app, the Google Play Store on your device and the Google Play Billing Library exchange the product, transaction and technical request data needed to complete purchases, automatically confirm existing purchase entitlement, prevent fraud and maintain the service. Google processes that data under its terms and privacy policy. This does not include your expiry item names or reminder content and is not used for Musen Studio behavioral analytics. Information you type into an item name stays in local storage; avoid entering unnecessary sensitive information.

4. Notifications and lock-screen visibility

The app uses Android local notifications and requests notification permission on applicable Android versions. Boot-completed and alarm wake-up scheduling help restore and deliver local reminders, not track you. Reminders do not need an internet connection or remote push service. After you set a reminder time, the app uses exact-alarm scheduling when Android has granted that special access; otherwise it uses approximate scheduling that may be delayed.

You can disable notifications in Android settings or deselect all reminder days for an item without deleting it.

Notifications may display an item name you entered and its expiry reminder. Depending on device settings, this can appear on the lock screen or in notification history and be accessible to services you have authorized to read notifications. Adjust those system settings for sensitive content. Battery-saving and system restrictions may delay delivery.

5. Retention, deletion and recovery

Items remain on your device until you delete them or clear app data. Expired and handled items are retained rather than automatically deleted.

1. Delete an item: long-press it and choose Delete; its pending reminders are also canceled.
2. Reset all data: open Notifications in the app, choose Reset all data and confirm. This clears expiry items, custom shortcuts and first-use guidance records, and cancels pending reminders.
3. Remove local app data: use Clear storage / Clear data in Android settings, or uninstall the app.

There are no accounts, cloud sync or in-app backup import/export features. We do not have a server copy of your expiry data and cannot access or recover deleted data for you. Already displayed notifications and system notification history can be cleared separately using Android's controls.

Reset all data inside the app clears expiry items and related preferences, but does not cancel, refund or delete purchase history in your Google account. Clearing Android app data or uninstalling removes the local entitlement copy and icon choice; after reinstalling, the app automatically queries Google Play and re-enables an eligible non-consumable purchase. A later successful check will remove paid icons and return to the original icon after a refund or revocation. Refunds and Google purchase records are managed through Google Play.

6. Security and payments

The app relies on Android app-private storage and system access isolation. It does not provide a separate data-encryption password or encrypted backup feature. Protect your device and use a screen lock; no storage method can guarantee absolute security.

Support uses a one-time, non-consumable Google Play Billing product, not a subscription or automatic renewal. When connected, the app asks Google Play for product details and local pricing, completes payment, verifies the signed purchase and automatically synchronizes entitlement. Expiry item names and reminder content are not sent to Google Play. Musen Studio has no payment backend and does not receive purchase tokens, signed receipts or card details from the app. Client-side signature verification reduces tampering but is weaker than server verification, and refunds or revocations may not be reflected until a later successful connection.

7. Contact

If you email us, we receive your email address, message and any information you choose to attach to handle and respond to your inquiry. Email providers transmit and store that correspondence; it is not data automatically uploaded by the app. Correspondence is retained only as needed to handle the inquiry and necessary follow-up, then deleted unless retention is legally required. You can use the address above to ask about, correct or request deletion of correspondence. Do not send passwords or unnecessary sensitive information.

8. This page and policy updates

Tapping Privacy policy in the app displays the complete bundled policy, available offline without opening a browser or fetching content. The app displays the corresponding bundled policy for each currently supported interface language.

A website version for Google Play and other visitors is available at https://tw7108.com/apps/daoqi/privacy/. Visiting the website separately requires an internet connection. Its URL does not include expiry content or device identifiers; local reminders do not require a connection.

This page includes no analytics scripts, sets no cookies or browser local storage, and cannot read expiry data inside the app. The web host or CDN serving this page may process IP addresses, browser details and access logs according to its actual configuration. This is separate from data automatically transmitted by the app.

We will publish policy updates here and revise the date above. Material changes to data handling will be explained where appropriate, and consent will be requested for features that require it.