Privacy Policy隱私權政策

1. Scope and operator1. 適用範圍與營運者

Ravenclaude is operated by independent developer Chin-Wei Lee (“Ravenclaude”, “we”, “us”). This policy applies to the Ravenclaude iOS app and widget, the alpha signup and token-claim pages at ravenclaude.com, and the hosted alpha API at castle-black.ravenclaude.com. Ravenclaude 由獨立開發者 Chin-Wei Lee 營運（以下稱「Ravenclaude」、「我們」）。本政策適用於 Ravenclaude iOS app 與 widget、ravenclaude.com 的 alpha 申請及 token 領取頁面，以及 castle-black.ravenclaude.com 的代管 alpha API。

The app can connect to a server URL that you choose. If you use a self-hosted server or a server operated by someone else, that operator—not Ravenclaude—controls the information sent to it, and its privacy policy also applies. app 可連線到你自行選擇的伺服器 URL。若你使用自架伺服器或他人營運的伺服器，傳送至該伺服器的資料由該營運者（而非 Ravenclaude）控制，並同時適用其隱私政策。

2. Information we handle2. 我們處理的資料

TestFlight informationTestFlight 資訊

When you use a TestFlight build, Apple may provide us with beta-testing information such as app version, device and OS type, sessions, crashes, and feedback or screenshots you voluntarily submit through TestFlight. Apple processes this information under its own privacy policy. 當你使用 TestFlight build 時，Apple 可能向我們提供 app 版本、裝置與 OS 類型、使用 sessions、crash，以及你自願透過 TestFlight 提交的回饋或截圖等測試資訊。Apple 會依其自身隱私權政策處理這些資料。

3. How we use information3. 資料用途

We use the information described above to:我們使用上述資料來：

• authenticate requests and show the usage data associated with your token;驗證請求，並顯示與你的 token 關聯的用量資料；
• operate the app, widget, usage history, notifications, and alpha-access flow;提供 app、widget、用量歷史、通知及 alpha 資格流程；
• measure service reliability and approximate active-device/request volume, prevent abuse, and troubleshoot errors;衡量服務可靠性及概略的活躍裝置／請求量、防止濫用並排查錯誤；
• respond to feedback and improve the beta; and回應回饋並改善測試版本；以及
• send access links and essential test-related notices to people who requested them.向提出申請的人寄送存取連結及必要的測試相關通知。

Where applicable, we rely on providing the service you requested, your consent for optional feedback and communications, our legitimate interests in securing and improving the service, and compliance with legal obligations. 在適用情況下，我們處理資料的依據包括提供你所要求的服務、你對選填回饋與通訊的同意、我們維護服務安全與改善服務的正當利益，以及遵守法律義務。

4. Sharing and service providers4. 分享與服務供應商

We do not sell or rent personal information. We do not share it for third-party advertising, data brokerage, or cross-app tracking. We disclose information only as needed to operate the service, comply with law, protect rights and security, or complete a business transfer with appropriate notice. 我們不販售或出租個人資料，也不會為第三方廣告、資料仲介或跨 app 追蹤而分享資料。我們只會在提供服務、遵守法律、保護權利與安全，或在適當通知下完成業務移轉所必要的範圍內揭露資料。

• Cloudflare provides website/API delivery, security, serverless processing, and database hosting.Cloudflare 提供網站／API 傳遞、安全防護、serverless 運算及資料庫代管。
• Resend delivers alpha access and token-claim email.Resend 寄送 alpha 資格及 token 領取信件。
• Apple distributes the TestFlight beta and processes beta metrics, crashes, and TestFlight feedback.Apple 發佈 TestFlight 測試版，並處理 beta 指標、crash 及 TestFlight 回饋。

These providers receive only information necessary for their services. We require service providers acting for us to use that information only for the agreed purpose and protect it under safeguards at least equivalent to this policy and applicable law. Their own notices are available from Cloudflare, Resend, and Apple. 這些供應商只會收到提供其服務所必要的資料。我們要求代表我們處理資料的服務供應商僅依約定目的使用資料，並提供至少與本政策及適用法律相當的保護。你可查閱 Cloudflare、Resend 及 Apple 的隱私聲明。

5. Retention and deletion5. 保存與刪除

• On-device settings remain until you remove a profile, clear app data, or uninstall the app, subject to any device backup you control.裝置上的設定會保留至你移除 profile、清除 app 資料或解除安裝 app；你自行控制的裝置備份可能仍保留副本。
• Alpha signup email and associated access records are kept while the test is active and the email is deleted when the test ends, unless a shorter deletion request applies or limited retention is required for security or law.Alpha 申請 email 及相關存取紀錄會在測試期間保存，並於測試結束時刪除 email；若你較早要求刪除，或基於安全／法律需要有限保存，則依該情況處理。
• Hosted usage data and device activity are kept while your alpha token is active so history and service operations work. Because this is an alpha, records may also be reset or deleted earlier without notice. We delete or de-identify them when the test ends or when we complete a valid deletion request, except for limited security records or backups that must temporarily remain.代管的用量資料及裝置活動會在 alpha token 有效期間保存，以提供歷史與服務功能。由於這是 alpha 測試，紀錄也可能在未通知的情況下提早重置或刪除。測試結束或我們完成有效刪除請求時，會刪除或去識別化這些資料；因安全需要或備份而必須暫時保留的有限紀錄除外。
• Feedback is kept for as long as reasonably needed to investigate, respond, and improve the product, then deleted or de-identified.回饋會在調查、回應及改善產品合理所需期間保存，之後刪除或去識別化。

6. Your choices and rights6. 你的選擇與權利

You can stop app requests by removing its profiles or uninstalling it, stop new usage publication by disabling/uninstalling the companion publisher, and stop non-essential email by contacting us. You may request access, correction, deletion, or a copy of information associated with your email or token, and may object to or restrict processing where local law provides those rights. 你可以移除 app 內的 profiles 或解除安裝 app 以停止 app 請求；停用／解除安裝 companion publisher 以停止新的用量上傳；亦可聯絡我們停止非必要 email。你可以要求存取、更正、刪除或取得與你的 email 或 token 關聯的資料副本，並可在當地法律賦予相關權利時反對或限制資料處理。

Email hello@ravenclaude.com with “Privacy Request” in the subject. Tell us the email address used for alpha access; do not send your full access token by email. We may ask for reasonable verification before acting. We aim to complete verified deletion requests within 30 days, or will explain if applicable law permits more time. 請寄信至 hello@ravenclaude.com，主旨註明「Privacy Request」，並告訴我們申請 alpha 時使用的 email；請勿透過 email 傳送完整存取 token。我們可能在處理前要求合理的身分驗證。我們會盡力在驗證後 30 天內完成刪除請求；若適用法律允許延長，會向你說明。

7. Security and international transfers7. 安全與跨境傳輸

We use reasonable technical and organizational safeguards, including HTTPS for the official hosted service, bearer-token access control, per-token data separation, and rejection of sensitive content fields in the current usage-reporting format. No system is completely secure, so keep your token confidential and use HTTPS when configuring another server. 我們採取合理的技術及組織性保護措施，包括官方代管服務使用 HTTPS、bearer token 存取控制、依 token 隔離資料，以及在目前用量回報格式中拒絕敏感內容欄位。沒有任何系統能保證絕對安全，因此請妥善保管 token，並在設定其他伺服器時使用 HTTPS。

Our providers may process information in countries other than yours. Where required, we and our providers use recognized safeguards for these transfers. You may contact us for more information. 我們的服務供應商可能在你所在國家以外處理資料。在法律要求時，我們及供應商會採用受認可的跨境傳輸保障措施。你可聯絡我們取得更多資訊。

8. Children8. 兒童隱私

Ravenclaude is a developer tool and is not directed to children under 13, or the higher minimum age required where they live. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information so we can delete it. Ravenclaude 是開發者工具，並非為 13 歲以下兒童（或其所在地法律規定的較高最低年齡）設計。我們不會明知而蒐集兒童的個人資料。若你認為有兒童向我們提供資料，請聯絡我們以便刪除。

9. Changes and contact9. 政策變更與聯絡方式

We may update this policy as the beta changes. We will post the revised policy here, update the date above, and provide additional notice when a material change requires it. Use of a later build is governed by the policy shown at that time. 我們可能隨測試版本調整而更新本政策。我們會在此公布修訂內容、更新上方日期，並在重大變更需要時提供額外通知。後續 build 的使用適用當時公布的政策。