瞬記櫃

隱私權政策

最後更新：2026 年 11 月

BlipShelf 瞬記櫃是個人事件記錄工具。這份政策一句話說完：我們沒有伺服器，看不到你的任何資料。以下是細節。

我們收集什麼

不收集任何資料。BlipShelf 瞬記櫃沒有帳號、沒有登入系統，開發者沒有可以接收資料的伺服器。App 本身不含任何第三方分析、當機回報或廣告 SDK。

資料存在哪裡

所有紀錄（文字、標籤、圖片、錄音附件）預設只存在你的裝置本機。若你在設定裡主動打開「在我的裝置間同步」，資料會透過 Apple CloudKit 存進你自己的 iCloud 私人資料庫（獨立容器 iCloud.com.blipshelf.app，不與其他 App 共用）。這段同步完全由 Apple 的基礎設施處理，開發者沒有存取權限，永遠看不到內容。

Android 版沒有雲端同步，資料只存在手機本機；「自動備份」只會寫到你自己選的資料夾。

網路連線

除了上述 iCloud 同步，以及透過 App Store（StoreKit）處理的內購，App 不會對外發出任何網路請求。Android 版連網路權限都沒有申請；購買由手機上的 Google Play 商店處理（Google Play Billing）。紀錄裡若貼上網址，只會存純文字，不會抓取預覽圖或連到該網址。

付款

訂閱與買斷的付款由 Apple App Store 或 Google Play 處理，我們拿不到你的付款資料。App 只會向系統查詢「這個帳號是否已購買」，用來決定要不要開啟 Pro 功能。

權限

以下權限都只在你用到該功能時才會詢問，也都可以在系統設定裡隨時關閉：

  • 麥克風、語音辨識：錄音附件與「轉成文字」使用。語音辨識只在裝置上進行，錄音與逐字稿不會上傳。
  • 行事曆（只讀）：「日曆顯示行程」（iOS）／「顯示手機行事曆行程」（Android）開啟時，讀取你的行程顯示在日曆畫面；不寫入、不保存、不上傳，預設關閉。
  • 提醒事項（iOS）：「加到提醒事項」僅用於新增你自己按下的那一則提醒；BlipShelf 瞬記櫃本身不保存、不顯示任何提醒或待辦清單。Android 版改為開啟行事曆 App 的新增活動畫面，不需要權限。
  • Face ID、指紋或螢幕鎖（App 鎖）：由系統驗證，App 拿不到任何生物特徵資料。

圖片裡的文字辨識（iOS 使用 Apple Vision，Android 使用 Google ML Kit 離線模型）與 Apple Intelligence 整理功能，都在裝置上執行，不會上傳。

圖片與定位資訊

照片附件存入前會自動移除 EXIF metadata（包含 GPS 定位），不會保留拍攝地點等資訊。

資料可攜與刪除

你可以隨時在 App 內把所有資料匯出成公開、穩定、可讀的格式（JSON＋圖片資料夾）。刪除 App 或關閉 iCloud 同步即會停止同步；已同步的資料留在你自己的 iCloud 帳號中，由你透過 iCloud 設定管理。

兒童隱私

BlipShelf 瞬記櫃不鎖定兒童使用者，也不會刻意向兒童蒐集任何資訊（因為本來就不蒐集任何人的資訊）。

政策變更

若政策內容有實質變更，會更新本頁的「最後更新」日期。

聯絡我們

有任何問題，歡迎寫信到 [email protected]。BlipShelf 瞬記櫃由「微小的事有限公司」開發與營運。

Privacy Policy

Last updated: November 2026

BlipShelf is a personal event-logging tool. In one sentence: we have no server, and we cannot see any of your data. Here are the details.

What we collect

Nothing. BlipShelf has no account, no sign-in, and the developer has no server capable of receiving data. The app contains no third-party analytics, crash-reporting, or advertising SDKs.

Where your data lives

All entries (text, tags, photos, voice attachments) stay on your device by default. If you turn on "Sync across my devices" in Settings, your data is stored via Apple CloudKit in your own private iCloud database (a dedicated container, iCloud.com.blipshelf.app, not shared with any other app). This sync is handled entirely by Apple's infrastructure — the developer has no access to it and can never see the contents.

The Android app has no cloud sync; your data stays on the phone. Automatic backup only writes to a folder you choose.

Network access

Aside from the iCloud sync above and in-app purchases processed through the App Store (StoreKit), the app makes no network requests. The Android app doesn't even request the internet permission; purchases are handled by the Google Play Store app on your phone (Google Play Billing). If you paste a URL into an entry, only the plain text is stored — no preview is fetched and the link is never visited.

Payments

Subscriptions and lifetime purchases are processed by the Apple App Store or Google Play; we never receive your payment details. The app only asks the system whether your account has purchased, to decide whether to unlock Pro features.

Permissions

Each permission is requested only when you use the related feature, and can be turned off in system settings at any time:

  • Microphone and speech recognition: for voice attachments and "Transcribe". Recognition runs on the device; recordings and transcripts are never uploaded.
  • Calendar (read-only): when "Show calendar events" is on, your events are read to display in the Calendar view. Nothing is written, stored, or uploaded. Off by default.
  • Reminders (iOS): "Add to Reminders" is used only to create the single reminder you explicitly tap to add. BlipShelf itself never stores, displays, or counts any reminders or to-dos. On Android, this opens your calendar app's new-event screen instead and needs no permission.
  • Face ID, fingerprint, or screen lock (App Lock): verified by the system; the app never receives any biometric data.

Text recognition in images (Apple Vision on iOS, Google ML Kit's offline model on Android) and Apple Intelligence features run on the device and are never uploaded.

Photos and location data

EXIF metadata (including GPS location) is stripped from photo attachments before they are saved. No location information is retained.

Data portability and deletion

You can export all your data at any time in an open, stable, human-readable format (JSON plus a photos folder). Deleting the app or turning off iCloud sync stops syncing; any already-synced data remains in your own iCloud account, managed through your iCloud settings.

Children's privacy

BlipShelf is not directed at children and does not knowingly collect information from anyone — because it does not collect information from anyone.

Changes to this policy

If this policy changes materially, the "Last updated" date above will be updated.

Contact

Questions? Email [email protected]. BlipShelf is developed and operated by The Tiny Things Co., Ltd.