本隱私政策適用於由 Howard Chang 營運的 Glimmy 行動應用程式,以及任何相關服務(合稱「本應用程式」)。Howard Chang 於本政策中稱為「服務提供者」。

當你下載並使用本應用程式時,本應用程式會收集資料。這些資料可能包括:

• 你裝置的網際網路通訊協定(IP)位址
• 你在本應用程式中瀏覽的頁面、瀏覽的時間與日期、停留在這些頁面的時間
• 你使用本應用程式的時間
• 你使用的行動裝置作業系統

為提供核心功能,本應用程式也會收集並處理:

• 帳號資料:來自「使用 Apple 登入」(Apple 提供的識別碼,以及你選擇分享的姓名與電子郵件——你可使用 Apple 的私密轉發信箱)。
• 個人檔案:你的顯示名稱、你上傳的頭像相片,以及你選填的自我介紹(個人簡介)。
• 你建立的內容:你張貼的照片、貼紙文字與留言(「回聲」),以及這些內容所釘選的地理座標與到期設定。
• 社交關係:你的好友(Glimmors)與群組(Glim-Groups)。
• 推播 token:用於傳遞通知的裝置 token(透過 Firebase Cloud Messaging)。

本應用程式或其第三方 SDK 可能使用 cookie、SDK、像素標籤及類似技術,以支援功能、分析或服務提供。在適用法律要求時,服務提供者會在使用非必要之追蹤技術前取得你的同意。

本應用程式收集你裝置的位置,以提供以地點為基礎的功能、改善本應用程式並支援相關服務。

由於本應用程式以地點為核心,你所建立的 glimmy 其座標會與該內容一併儲存,並在你所選擇的可見範圍內,顯示給走到該位置附近的其他使用者。你可在裝置設定中關閉定位權限,但關閉後多數功能將無法運作。

背景位置(「永遠」允許):若你授予「永遠」定位權限,本應用程式會在背景(即使 App 未開啟或已關閉)監測你與附近 glimmy 的距離,以便在你走近時傳送本機提醒通知。此背景位置僅在你的裝置上處理以觸發通知,不會傳送至服務提供者的伺服器。你可隨時在裝置設定中將定位權限改為「使用 App 時」或關閉,以停用此背景功能。

• 定位服務:服務提供者可能使用位置資料以提供以地點為基礎的功能或內容。
• 分析與改善:彙整後的位置資料可協助服務提供者了解使用情形並改善效能。
• 第三方服務:位置資料可能與用於支援本應用程式功能之第三方服務分享,並受本隱私政策與適用法律之規範。

你可要求查閱、更正或刪除服務提供者所持有之你的個人資料。如欲行使這些權利,或在處理係基於同意時撤回同意,請透過 glimmyusercontact@gmail.com 聯絡服務提供者。你也可以直接在 App 內刪除你的帳號及所有相關內容(設定 → 刪除帳號);刪除帳號亦會撤銷「使用 Apple 登入」之授權。

若你為加州居民,你有權知悉所收集的個人資訊、有權刪除個人資訊、有權選擇退出個人資訊之出售或分享,並有權在行使這些權利時不受差別待遇。如欲行使你的 CCPA/CPRA 權利,請透過 glimmyusercontact@gmail.com 聯絡服務提供者。

服務提供者可能使用你所提供的資料,傳送重要資訊、法定通知,以及在法律允許範圍內的行銷訊息。

為了讓你在使用本應用程式時有更好的體驗,服務提供者可能要求你提供特定的個人識別資訊,包括但不限於 glimmyusercontact@gmail.com。服務提供者所要求的資訊將依本隱私政策所述方式保存與使用。

本應用程式仰賴下列第三方服務以運作,這些服務代表服務提供者處理你的資料:

• Apple — 使用 Apple 登入(身分驗證)。
• Amazon Web Services(AWS S3) — 儲存你上傳的相片(glimmy 照片與頭像)。
• Google Firebase Cloud Messaging — 傳遞推播通知,並處理你的裝置推播 token。

你張貼的內容(你的 glimmy、頭像、顯示名稱與回聲)會依你選擇的可見範圍顯示給其他使用者。服務提供者不會販售你的個人資料。除此之外,服務提供者可能依本隱私聲明所述方式與第三方分享你的資訊。

服務提供者或其第三方服務商可能將個人資料傳輸至你居住地以外的國家,包括歐洲經濟區(EEA)以外。當適用法律就國際傳輸要求採取保障措施時,服務提供者將採用適當機制,例如:

• 歐盟執委會核准的標準契約條款(SCCs)
• 適足性決定或其他法律承認的傳輸機制
• 在法律要求且允許時,取得你的同意

其他國家的資料保護法律可能與你所在地不同。在法律要求時,服務提供者將採取適當保障措施,並取得傳輸所需之任何同意。

服務提供者可能在下列情況揭露由使用者提供及自動收集的資訊:

• 依法律要求,例如為遵循傳票或類似法律程序;
• 當其善意認為揭露係保護其權利、保護你或他人之安全、調查詐欺或回應政府要求所必要時;
• 與代表其運作、對所揭露資訊無獨立用途、並已同意遵守本隱私聲明所載規則之受信任服務商分享。

你可透過解除安裝本應用程式,停止從你行動裝置進一步收集資料。解除安裝會停止本應用程式從你裝置收集資料,但不會自動刪除先前已傳送至服務提供者或第三方的資訊。

如欲要求刪除你的個人資料、撤回同意,或行使你的任何權利,請透過 glimmyusercontact@gmail.com 聯絡服務提供者。

服務提供者依下列目的之必要性保存個人資料:

• Glimmy 內容:每則 glimmy 會在張貼後一段固定時間(目前為 72 小時,約 3 天)到期;到期或被你撕下後,將移入你的私人封存(抽屜)。
• 使用者提供之資料:在你使用本應用程式期間,加上其後 12 個月內保存,法律要求更長保存者除外。
• 自動收集之資料:自收集起最多保存 24 個月,法律遵循要求更長保存者除外。
• 彙整與匿名化資料:因已無法識別你,故無限期保存。
• 法律遵循所需之資料:依適用法律要求之期間保存。

你可要求刪除你的個人資料,但受任何法定保存義務之限制。若你希望服務提供者刪除透過本應用程式提交之「使用者提供資料」,請透過 glimmyusercontact@gmail.com 與其聯絡。請注意,部分「使用者提供資料」可能為本應用程式正常運作所必需。

本應用程式不面向未滿 16 歲之兒童,或適用法律所要求之更高年齡。服務提供者不會在知情下向兒童徵求資料,亦不會向其行銷本應用程式。

服務提供者不會在知情下收集兒童之個人識別資訊。服務提供者鼓勵所有兒童切勿透過本應用程式及／或服務提交任何個人識別資訊。服務提供者鼓勵家長與法定監護人監督其子女的網路使用,並協助執行本政策,指導其子女在未經許可下切勿透過本應用程式及／或服務提供個人識別資訊。若你有理由相信有兒童在未經同意下向服務提供者提供了個人識別資訊,請聯絡服務提供者(glimmyusercontact@gmail.com),以便其採取必要措施。若你未滿 16 歲,在法律允許時,你的家長或監護人須代你提供同意。

服務提供者重視你資訊之機密性保護。服務提供者提供實體、電子與程序上的保障措施,以保護其處理與維護之資訊,包括透過 HTTPS/TLS 加密傳輸中的資料。

若發生影響你個人資料之資料外洩,服務提供者將依適用法律要求通知你,包括在必要時提供關於外洩性質及所採取因應措施之資訊。

服務提供者可能不時更新本隱私政策。服務提供者將透過張貼附有生效日期之更新版隱私政策,通知你重大變更。在法律要求時,服務提供者將於重大變更生效前徵求你的同意。

本隱私政策之先前版本將保留,並可透過 glimmyusercontact@gmail.com 聯絡服務提供者後提供。

本隱私政策自 2026-06-14 起生效。

當處理係基於同意時,你透過主動選擇加入相關功能或行為以提供該同意。你可隨時撤回同意,且不影響撤回前已進行之處理。基於其他合法依據所進行之處理,依上述方式進行。

若你對使用本應用程式時的隱私有任何疑問,或對相關做法有任何問題,請透過電子郵件 glimmyusercontact@gmail.com 聯絡服務提供者。

English version above — tap “English”. 上方可切換英文版。

This privacy policy applies to the Glimmy app for mobile devices, together with any related services operated by Howard Chang (collectively, the "Application"). Howard Chang is hereby referred to as the "Service Provider".

The Application collects information when you download and use it. This information may include information such as

• Your device's Internet Protocol address
• The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• your mobile operating system you use

To provide its core features, the Application also collects and processes:

• Account information from Sign in with Apple (an Apple-provided identifier and, if you share them, your name and email — you may use Apple's private email relay).
• Profile: your display name, the avatar photo you upload, and an optional self-introduction (bio).
• Content you create: photos, sticker text, and comments ("echoes"), together with the geographic coordinates they are pinned to and their expiry settings.
• Social connections: your friends ("Glimmors") and groups ("Glim-Groups").
• Push token: a device token used to deliver notifications (via Firebase Cloud Messaging).

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

The Application collects your device's location to provide location-based features, improve the Application, and support related services.

Because the Application is location-based, the coordinates of a glimmy you create are stored with it and shown to other users who come near that location, within the visibility you choose. You can disable location access in your device settings, but most features will not work without it.

Background location ("Always" access): If you grant "Always" location access, the Application monitors your proximity to nearby glimmies in the background — even when the app is not open or has been closed — so it can send you local reminder notifications as you approach one. This background location is processed only on your device to trigger notifications and is not transmitted to the Service Provider's servers. You can disable this background feature at any time by changing location access to "While Using the App" or Off in your device settings.

• Geolocation Services: The Service Provider may use location data to provide location-based features or content.
• Analytics and Improvements: Aggregated location data may help the Service Provider understand usage patterns and improve performance.
• Third-Party Services: Location data may be shared with third-party services used to support Application functionality, subject to this privacy policy and applicable law.

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at glimmyusercontact@gmail.com. You can also delete your account and all associated content directly in the app (Settings → Delete Account); deleting your account also revokes the Sign in with Apple authorization.

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at glimmyusercontact@gmail.com.

The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to glimmyusercontact@gmail.com. The information the Service Provider requests will be retained and used as described in this privacy policy.

The Application relies on the following third-party services, which process your data on the Service Provider's behalf:

• Apple — Sign in with Apple (authentication).
• Amazon Web Services (AWS S3) — stores the photos you upload (glimmy photos and avatars).
• Google Firebase Cloud Messaging — delivers push notifications and processes your device push token.

Content you post (your glimmies, avatar, display name and echoes) is shown to other users according to the visibility you choose. The Service Provider does not sell your personal data. The Service Provider may otherwise share your information with third parties in the ways that are described in this privacy statement.

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at glimmyusercontact@gmail.com.

The Service Provider retains personal data based on its necessity for the stated purposes:

• Glimmy content: each glimmy expires a fixed period after it is posted (currently 72 hours, about 3 days); after it expires or you tear it down it moves to your private archive.
• User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
• Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
• Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
• Data required for legal compliance: Retained as long as required by applicable law

You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at glimmyusercontact@gmail.com. Please note that some User Provided Data may be required for the Application to function properly.

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourages parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider (glimmyusercontact@gmail.com) so that they will be able to take the necessary actions. If you are under 16 years of age, your parent or guardian must provide consent on your behalf where permitted by law.

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains, including encryption of data in transit using HTTPS/TLS.

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at glimmyusercontact@gmail.com.

This privacy policy is effective as of 2026-06-14

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at glimmyusercontact@gmail.com.

Generated with the App Privacy Policy Generator and supplemented by the Service Provider to reflect the Application's actual practices.