格日子 GridDay — 隱私權政策

最後更新：2026 年 8 月 3 日

你寫的東西——排的事情、日記文字、心情紀錄——只存在你自己的裝置上， 沒有伺服器、沒有帳號、沒有雲端同步，我們沒有任何管道可以看到。 離開裝置的只有兩種東西：匿名的使用統計，以及 App 當掉時的技術報告。 以下逐項說明。

一、留在你裝置上的（我們看不到）

App 產生的內容都寫在你 iPhone 本機的資料庫裡（透過 Apple 的 SwiftData，存放在本 App 的沙盒與 App 群組容器內，供桌面小工具讀取）。這些資料包含：

以上沒有任何一項會離開你的裝置。沒有雲端備份、沒有同步、沒有匯出到我們這裡的管道。你寫的每一個字都只有你看得到。

二、會離開裝置的：使用統計與當機報告

格日子使用 Google Firebase 的三項服務。我們列出它們的用途、蒐集了什麼、以及我們刻意不做什麼。

Firebase Crashlytics — 當機報告

App 當掉時，會送出當機的技術資訊：程式碼的呼叫堆疊、裝置機型、iOS 版本、App 版本，以及當掉前幾個動作的類型紀錄（例如「打開了購買頁」）。不含你寫的任何內容。

為什麼需要它：2026 年 8 月，格日子有一個版本在啟動時就會閃退，而那個版本在測試通道上待了好幾天沒被發現——因為沒有當機回報，我們只能等使用者主動來說。這一項是為了不讓那件事再發生。

Firebase Analytics — 匿名使用統計

蒐集「發生了什麼類型的操作」與發生次數，用來判斷哪些功能真的有人用。實際送出的事件例如：放了一件事進格子（含落在第幾圈）、點亮了一格（含是否逾時）、切換語氣（含語氣代號）、打開購買頁、完成購買。同時包含一組由系統產生的匿名 App 實例識別碼、裝置機型、iOS 版本與國家／地區。

絕對不會送出的：事件名稱、日記文字、心情備註，或任何你自己輸入的字。程式碼層面就做了限制——記錄函式的參數只收數字與我們自己定義的代號，不接受自由文字。

Firebase Remote Config — 遠端參數

單向下載幾個可調參數（晚間總結的推播時間、語氣試用時數、廣告開關），讓這些數字不必每次都靠送出新版本才能調整。這一項不上傳任何資料。

三、我們刻意不做的事

Google 如何處理 Firebase 資料，見 Firebase 隱私權與安全性說明。

四、麥克風與語音辨識

日記可以用說的。這件事只在你按住（或點擊）畫面上那顆說話鍵的期間發生——格日子不會在背景持續聆聽。

語音轉文字使用 Apple 內建的語音辨識框架（Speech framework）：

辨識出來的文字只會寫進你本機的日記。你隨時可以改用鍵盤輸入，不使用語音功能完全不影響 App 的其他部分。

五、廣告

免費版會顯示廣告，由 Google AdMob 提供。購買「完整版」之後不再顯示任何廣告。

「看一支廣告換一天語氣試用」使用同一套 AdMob 機制，除此之外不額外收集任何東西。

六、購買

所有付費項目都透過 Apple 的 App Store 內購（StoreKit）完成。付款方式、Apple ID 等資訊由 Apple 處理，我們看不到也不會儲存任何付款資料。App 只會從 Apple 取得「這個項目有沒有買過」的結果，並記在本機。

七、通知

所有提醒都是本機通知，由你的裝置自己排程與發出，不經過任何伺服器，我們無從得知你收到了什麼或有沒有打開。

八、你的資料與刪除

因為你寫的內容只在你的裝置上，你隨時可以自己處置：

如果你曾開啟 iCloud 的「App 備份」，裝置備份可能包含本 App 的資料。那份備份屬於你的 Apple 帳戶，受 Apple 的政策管轄。

九、兒童

格日子的 App Store 分級為 4+，但它不是專為兒童設計的產品，也未加入 Apple 的「兒童」類別。我們不會刻意向 13 歲以下兒童蒐集資料，也不會針對兒童投放個人化內容。

十、政策異動

本政策若有變更，會直接更新本頁面並修改頁首的「最後更新」日期。涉及重大變更時，會在 App 更新說明中一併告知。

十一、聯絡我們

對隱私權有任何疑問，請來信：gmgappgame@gmail.com

GridDay — Privacy Policy

Last updated: 3 August 2026

What you write — your tasks, diary entries and moods — stays on your own device. There is no server, no account and no cloud sync, and we have no mechanism by which we could see it. Only two kinds of thing leave the device: anonymous usage statistics, and a technical report when the app crashes. Details below.

1. What stays on your device (we cannot see it)

Everything the app produces is written to a local database on your iPhone (via Apple's SwiftData, in the app's sandbox and App Group container so the home-screen widget can read it). That includes task names, icons and deadlines; completion, lateness and skip records with the reasons you pick; diary text and daily moods; and your settings and purchase state. None of it leaves your device. There is no cloud backup, no sync, and no path by which it could reach us.

1b. What does leave the device: usage statistics and crash reports

GridDay uses three Google Firebase services.

Firebase Crashlytics sends a technical report when the app crashes: the code stack trace, device model, iOS version, app version, and the types of actions taken just beforehand (for example "opened the purchase page"). It contains none of your written content.

Firebase Analytics records what type of action happened and how often — for example: an item was placed on the board (and which ring), a cell was completed (and whether it was late), the tone was changed (and which tone code), the purchase page was opened, a purchase completed. It also includes a system-generated anonymous app-instance identifier, device model, iOS version and country/region. It never sends your task names, diary text, mood notes, or anything else you typed; the logging functions accept only numbers and our own defined codes, not free text.

Firebase Remote Config downloads a handful of tunable parameters (evening summary time, tone trial length, ad switch) so those numbers can be adjusted without shipping a new version. It uploads nothing.

See Firebase's privacy and security page for how Google handles this data.

2. Microphone and speech recognition

You can dictate diary entries. This happens only while you hold or have toggled on the microphone button — GridDay never listens in the background.

Transcription uses Apple's Speech framework. Where the device supports it, GridDay explicitly requires on-device recognition, so audio never leaves your iPhone. Where the device or chosen language does not support offline recognition, Apple processes the audio on its servers under Apple's privacy policy. That is Apple's service; it does not pass through us and we never receive the content. The resulting text is written only to your local diary, and typing is always available instead.

3. Advertising

The free version shows ads served by Google AdMob. Purchasing the Full Version removes all ads.

GridDay does not present the App Tracking Transparency prompt, so ads are always served as non-personalised. We deliberately accept lower ad revenue for this. Google still processes some device-level information when serving ads (such as IP address, device and advertising identifiers, and ad impression or click activity) for delivery, frequency capping and click-fraud prevention. Google collects and processes that data; we cannot access it. See how Google uses information from sites or apps that use its services. You can further limit ad tracking in iOS Settings under Privacy & Security. The "watch an ad to try a tone for a day" feature uses the same AdMob mechanism and collects nothing additional.

4. Purchases

All paid items go through Apple's In-App Purchase (StoreKit). Payment details and your Apple ID are handled by Apple; we never see or store any payment data. The app only receives whether an item has been purchased, and records that locally.

5. Notifications

All reminders are local notifications scheduled and delivered by your own device. No server is involved, and we cannot know what you received or whether you opened it.

6. What we do not do

We do not track you across apps. GridDay never presents the "allow tracking" prompt (no App Tracking Transparency), and Firebase Analytics is configured with ad-personalisation signals and IDFV collection disabled; the system log confirms the app does not link the component that would grant access to the IDFA.

We also do not sell, rent or trade your data; do not build cross-app or cross-site profiles; do not embed the Facebook SDK or similar attribution tools; and do not require registration or collect email addresses, contacts or location.

7. Your data and deletion

Because what you write lives only on your device, you control it entirely. Delete individual tasks or diary entries in the app, or delete GridDay from your iPhone to remove the local database along with it. We have no backup of your content to delete, because we never received one. Usage statistics and crash reports are not linked to your identity, so an individual person's records cannot be singled out for deletion; deleting the app stops any new ones being produced. If you use iCloud device backup, that backup may include this app's data; it belongs to your Apple account and is governed by Apple's policies.

8. Children

GridDay is rated 4+ on the App Store but is not designed for children and is not part of Apple's Kids Category. We do not knowingly collect data from children under 13, and we do not target personalised content at children.

9. Changes to this policy

Any changes will be published on this page with an updated date above. Material changes will also be noted in the app's release notes.

10. Contact

Questions about privacy: gmgappgame@gmail.com