手搖飲 Taiwan Handshake — 隱私政策

最後更新：2026 年 8 月 20 日

本政策的權威版本為繁體中文；English version follows below.

「手搖飲 Taiwan Handshake」（以下稱「本 App」）是一款台灣手搖飲料店定位與菜單推薦工具，本網站（taiwan-handshake.com）則提供公開的品牌與菜單資訊。本政策說明我們蒐集哪些資料、用途、保留多久，以及你如何刪除你的資料。本 App 採「匿名優先」設計：不登入也能使用，登入為選用，只有在你想跨裝置同步個人口味資料時才需要。

本網站為純靜態頁面，不需登入、不設帳號、不蒐集任何個人資料，也不使用追蹤性 cookie。以下各節皆針對本 App。

1. 我們蒐集的資料

1.1 帳號身份（選用 — 僅在你登入時） 當你選擇以 Sign in with Apple 或 Google 登入，我們會取得一組使用者識別碼與你的電子郵件地址。若你使用 Apple 的「隱藏我的電子郵件」，我們只會收到 Apple 提供的轉址信箱；本 App 不會主動寄送任何電子郵件。不登入則完全不蒐集帳號身份。

1.2 你的飲料紀錄與偏好 你對飲料的評分、最愛標記、慣用甜度／冰度、個人備註、飲用次數，以及初次設定時選擇的口味偏好。這些用來驅動個人化推薦。

1.3 口味輪廓（由上述資料推導） 系統會由你的評分與偏好計算出一份可讀的「口味輪廓」，用來產生與解釋推薦結果。這是衍生資料，可隨時刪除並重新計算。

1.4 位置資訊（即時使用，不儲存） 當你開啟地圖或請求推薦時，本 App 會在取得你同意後讀取裝置的 GPS 座標，用來顯示你附近的手搖店、繪製搜尋範圍、依距離排序。你的座標僅在當次查詢中即時使用，不會被保存。

1.5 裝置本機設定（僅存在你的裝置上） 是否完成初次設定、評分提醒開關、隱藏／顯示的品牌、搜尋半徑等 UI 偏好，只保存在你的裝置本機，不會上傳。

1.6 社群內容（選用 — 僅在你發表時） 當你在社群留言區發表內容，我們會儲存你的留言文字、公開暱稱、按讚與檢舉紀錄。留言與暱稱屬公開內容，所有使用者皆可見；你可隨時在 App 內編輯或刪除自己的留言。此外，你對飲料的評分會以匿名彙總方式（平均分、評分人數）用於社群統計顯示，彙總結果不含任何可識別你個人的資訊。

1.7 使用行為分析 為改善產品，我們記錄 App 內的使用事件（如開啟頁面、請求推薦、發表留言等操作類型與發生時間）與基本裝置資訊（裝置型號、App 版本、作業系統）。未登入時這些事件僅以隨機匿名識別碼記錄；登入後會與你的使用者識別碼關聯，以便我們理解功能使用情形。分析資料不含你的 GPS 座標、留言內容或評分明細，也不會用於廣告投放。

2. 資料存放

雲端資料存放於我們委託的第三方雲端基礎設施，機房可能位於台灣境外；這些服務商以資料處理者身分依其自身條款處理資料，不得將資料用於其他目的。

3. 會接觸到你資料的第三方

• Apple／Google — 登入身份驗證。
• 雲端資料庫與驗證服務商 — 儲存第 2 節所列的雲端資料。
• 自動內容審核服務 — 為維護社群品質，你發表的留言文字會傳送至第三方自動審核服務判別攻擊性言論、廣告與濫用。僅傳送留言文字本身，不附帶你的帳號身份或其他個人資料；審核結果僅用於決定是否隱藏該則留言。
• 使用行為分析服務 — 見 1.7；資料僅供我們內部改善產品使用。
• Google AdMob — App 內廣告（部分版本）。我們僅請求非個人化廣告，不啟用 iOS 追蹤授權（App Tracking Transparency），不進行跨 App 追蹤。AdMob 投放廣告時會依其自身隱私政策處理裝置層級資訊（如 IP 位址、裝置型號）；詳見 Google 廣告政策：https://policies.google.com/technologies/ads

我們不會販售你的個人資料，也不會將其用於跨站廣告追蹤。

4. 你的權利：刪除帳號與資料

你可以在 App 內隨時永久刪除帳號：前往設定 → 帳號 → 移除帳號 → 確認。此操作會硬刪除你的登入身份與雲端上所有與你相關的資料（飲料紀錄、初次設定、口味輪廓、社群留言）。

若你透過 iOS「設定 → Apple ID → 使用 Apple ID 的 App」撤銷本 App 的 Sign in with Apple 授權，Apple 會通知我們的伺服器，我們會據此移除你的 Apple 連結；若 Apple 是你唯一的登入方式，則一併刪除你的帳號與資料。

你儲存的個人資料大多可直接在 App 內檢視與修改；若需查詢、更正或匯出，亦可來信（見下方聯絡方式）。

5. 資料保留

登入使用者的雲端資料會保留至你刪除帳號為止。位置資訊不保留。本機設定隨你移除 App 一併消失。

6. 兒童隱私

本 App 不以未滿 13 歲（或所在地區法律規定之最低年齡）兒童為對象，亦不會在知情下蒐集其個人資料。

7. 政策變更

本政策若有重大變更，我們會更新本頁頂部的「最後更新」日期。

8. 聯絡方式

對本政策或你的資料有任何疑問，請來信：[email protected]

Taiwan Handshake — Privacy Policy

Last updated: August 20, 2026

The Traditional Chinese version above is authoritative; this English version is provided for convenience.

“Taiwan Handshake” (the “App”) helps you find bubble-tea shops in Taiwan and get personalized drink recommendations; this website (taiwan-handshake.com) publishes brand and menu information. This policy explains what we collect, why, how long we keep it, and how you can delete it. The App is anonymous-first: you can use it without signing in. Signing in is optional and only needed to sync your taste data across devices.

The website is a static site: no login, no accounts, no personal data collected, no tracking cookies. The sections below concern the App.

1. Data we collect

1.1 Account identity (optional — only if you sign in) If you sign in with Apple or Google, we receive a user ID and your email address. If you use Apple’s Hide My Email, we only receive Apple’s relay address; the App never sends any email. If you don’t sign in, no account identity is collected.

1.2 Your drink records & preferences Your drink ratings, favorites, preferred sweetness/ice levels, private notes, drink counts, and the taste preferences you choose during onboarding — used to power personalized recommendations.

1.3 Taste profile (derived) A readable taste profile computed from your ratings and preferences, used to generate and explain recommendations. It is derived data and can be deleted and recomputed.

1.4 Location (used in real time, not stored) When you open the map or request recommendations, the App reads your device GPS coordinates (with your permission) to show nearby shops, draw the search radius, and sort by distance. Your coordinates are used only for that request and are never retained.

1.5 On-device settings (stored only on your device) Onboarding-completed flag, rating-reminder toggle, hidden/shown brands, and search radius are stored only on your device and never uploaded.

1.6 Community content (optional — only when you post) When you post in the community section, we store your comment text, public display name, likes, and reports. Comments and display names are public and visible to all users; you can edit or delete your own comments at any time in the app. In addition, your drink ratings are used in anonymized, aggregated form (average score, rating count) for community statistics. Aggregated results contain nothing that identifies you.

1.7 Usage analytics We record in-app usage events (such as opening a screen, requesting a recommendation, or posting a comment — the action type and when it happened) and basic device information (device model, app version, OS). When you are not signed in, events are recorded under a random anonymous identifier; after sign-in they are associated with your user ID so we can understand feature usage. Analytics data does not include your GPS coordinates, comment text, or individual ratings, and is never used for advertising.

2. Where data is stored

Cloud data is stored on third-party cloud infrastructure we engage, whose servers may be located outside Taiwan; these providers process data as processors under their own terms and may not use it for other purposes.

3. Third parties that may access your data

• Apple / Google — sign-in authentication.
• Cloud database & authentication provider — stores the cloud data listed in section 2.
• Automated content moderation service — To keep the community healthy, the text of comments you post is sent to a third-party automated moderation service to detect abusive content, ads, and spam. Only the comment text itself is sent — never your account identity or other personal data. The result is used solely to decide whether the comment is hidden.
• Usage analytics service — see 1.7; data is used only internally to improve the product.
• Google AdMob — in-app ads (in some versions). We request non-personalized ads only, do not enable iOS App Tracking Transparency, and do not track you across apps. When serving ads, AdMob processes device-level information (such as IP address and device model) under its own privacy policy: https://policies.google.com/technologies/ads

We do not sell your personal data and do not use it for cross-site advertising tracking.

4. Your rights: delete your account & data

You can permanently delete your account in-app at any time: Settings → Account → Remove Account → Confirm. This hard-deletes your sign-in identity and all related cloud data (drink records, onboarding, taste profile, community comments).

If you revoke the App’s Sign in with Apple authorization via iOS Settings → Apple ID → Apps Using Apple ID, Apple notifies our server and we remove your Apple link; if Apple is your only sign-in method, we delete your account and data as well.

Most of your stored personal data is viewable and editable in-app; to access, correct, or export it, you may also email us (see Contact).

5. Data retention

Cloud data for signed-in users is retained until you delete your account. Location data is not retained. On-device settings are removed when you uninstall the App.

6. Children’s privacy

The App is not directed to children under 13 (or the minimum age required in their jurisdiction) and does not knowingly collect their personal data.

7. Changes to this policy

If we make material changes, we will update the “Last updated” date at the top of this page.

8. Contact

Questions about this policy or your data: [email protected]