Maobao 隱私政策
Maobao 是給爸媽用的嬰兒紀錄 app。我們只在提供功能所需的範圍內處理你的資料，不做廣告、不做追蹤、不賣資料。
我們收集什麼
| 資料 | 用途 |
|---|---|
| 寶寶的名字、生日、性別、預產期 | 計算月齡、生長曲線與疫苗健檢時程 |
| 你記錄的餵奶、尿布、睡眠、體溫、用藥、成長、疫苗、就醫、備註等紀錄 | 顯示時間軸、統計、回診摘要與提醒 |
| 你加入的照片與語音備忘（含裝置端辨識出的文字） | 附在紀錄上、日記照片牆 |
| 你的稱呼（例如「媽媽」） | 共記時標示是誰記的 |
| Apple ID 提供的使用者識別碼與（若你同意分享）電子郵件 | 只在你開啟「共記」並用 Sign in with Apple 登入時，用來辨識帳號 |
資料存在哪裡
沒有開啟共記時，所有資料只存在你的手機裡（app 的私有儲存空間），不會上傳到任何伺服器，也不存 iCloud。
當你邀請另一位照顧者或用邀請碼加入，該寶寶的紀錄與附件會同步到我們在 Supabase（新加坡機房）代管的伺服器，只有同一位寶寶的照顧者能讀寫（以資料庫層級的存取控制強制）。傳輸全程加密（TLS）。若你開啟「通知另一位照顧者的紀錄」，紀錄摘要（例如「媽媽記了一筆用藥」）會經由 Apple 推播服務（APNs）送到對方的手機；關掉就不會送。
語音
語音記錄的辨識全部在你的裝置上完成（Apple 的裝置端語音辨識），錄音與文字不會傳給任何第三方。開啟共記後，語音備忘會與其他附件一樣同步給同一位寶寶的照顧者。
我們不做的事
- 不投放廣告、不使用廣告識別碼、不追蹤你在其他 app 或網站的活動。
- 不把資料賣給或分享給第三方，也不用於資料探勘或訓練模型。
- 不把你的紀錄或語音送給任何第三方 AI 服務。
兒童資料
Maobao 記錄的是嬰兒的日常照護資料，全部由家長或監護人代為輸入並同意處理。app 的使用者是家長，不是兒童；我們不向兒童收集資料。
保留與刪除
- 沒有帳號：資料只在你的手機上；到「設定 › 刪除所有本機資料」即可清除，或直接移除 app。
- 有帳號：到「設定 › 刪除帳號與所有資料」，會同時刪除伺服器上你擁有的寶寶、全部紀錄、附件與帳號，無法復原。
- 你隨時可以用「匯出與備份」把資料以備份檔或 CSV 拿走。
你的權利
你可以隨時查看、匯出、更正或刪除你的資料。若有任何問題，請寫信到 [email protected]。
變更
政策若有變更會更新這一頁與最後更新日期；重大變更會在 app 內提示。
Maobao Privacy Policy
Maobao is a baby-care log for parents. We process your data only to provide the app's features. No ads, no tracking, no selling of data.
What we collect
| Data | Purpose |
|---|---|
| Your baby's name, birthday, sex and due date | Age, growth curves, vaccine and check-up schedule |
| The entries you log (feeding, diapers, sleep, temperature, medication, growth, vaccines, visits, notes) | Timeline, statistics, visit summary and reminders |
| Photos and voice memos you attach (including on-device transcripts) | Attachments and the diary photo wall |
| How you want to be called (e.g. "Mom") | Shows who logged an entry when sharing |
| The user identifier from your Apple ID and, if you choose to share it, your email | Only when you enable sharing and sign in with Apple, to identify your account |
Where data is stored
Until you enable sharing, everything stays on your iPhone in the app's private storage. Nothing is uploaded to any server, and nothing is stored in iCloud.
When you invite another caregiver or join with an invite code, that baby's entries and attachments sync through our backend hosted on Supabase (Singapore region). Only caregivers of the same baby can read or write them, enforced by database-level access rules. All transfers are encrypted (TLS). If you turn on "Notify the other caregiver", a short summary of the entry (e.g. "Mom logged a medication") is delivered through the Apple Push Notification service to their phone; turn it off and nothing is sent.
Voice
Speech recognition runs entirely on your device (Apple's on-device recognizer). Recordings and transcripts are never sent to third parties. With sharing enabled, voice memos sync to the same baby's caregivers like other attachments.
What we do not do
- No advertising, no advertising identifiers, no tracking across apps or websites.
- No selling or sharing of data with third parties, no data mining, no model training.
- Your entries and recordings are never sent to third-party AI services.
Children's data
Maobao stores infant-care records entered by a parent or guardian, who provides and consents to that processing. The app's users are parents, not children; we do not collect data from children.
Retention and deletion
- Without an account, data lives only on your phone. Use Settings › Delete all local data, or remove the app.
- With an account, use Settings › Delete account and all data. This permanently removes the babies you own, all entries, attachments and the account from our servers.
- You can take your data with you at any time via Export & Backup (backup file or CSV).
Your rights
You can access, export, correct or delete your data at any time. Questions: [email protected].
Changes
Changes are posted on this page with a new date; significant changes are announced in the app.