ALPHALITH · 日本 / Japan · 한국 / Korea · 台灣 / Taiwan · 香港 / Hong Kong

隱私權政策（台灣使用者適用）

施行日期：2026年10月27日

ALPHALITH（以下稱「本經營者」）依《個人資料保護法》蒐集、處理及利用台灣使用者之個人資料，並依同法第8條告知下列事項。本政策適用於在台灣使用「MuslimLife Asia」之使用者。

1. 蒐集者名稱

ALPHALITH　地址：[地址]　聯絡方式：[聯絡電子郵件]

2. 蒐集目的與個人資料類別

個人資料	蒐集目的
匿名帳號 ID（無需姓名、電子郵件、電話）	提供本應用程式、防止不當使用
家庭資料：顯示名稱、關係、出生年、備註	成分確認、醫療卡顯示（僅儲存於本裝置，不會傳送至伺服器）
過敏資訊（健康相關）、宗教飲食限制	僅用於成分及過敏原警示。儲存前於應用程式內另行取得您的同意，不用於統計、廣告或提供第三人。
位置資訊（經裝置授權）	禮拜時間、朝拜方向、附近清真地點搜尋。不在伺服器保存精確位置。
照片、相機（您選擇時）	裝置內條碼及文字辨識；僅在資料庫中查無商品時使用 AI 判定
AI 使用次數、隨機安裝 ID	管理 5 次免費試用及費用上限
購買資訊	提供進階版。本經營者不取得信用卡號碼。
使用統計（僅於您同意時）	改善服務、製作統計

3. 利用期間、地區、對象及方式

期間：帳號至刪除為止（家庭資料僅存於裝置，刪除應用程式即清除）；AI 使用次數 90 日；每日搜尋地區 120 日；地區統計 25 個月；營運紀錄 90 日；購買事件 400 日。地區：台灣、日本及下列受託者所在之美國。對象：本經營者及下列受託者。方式：以電子方式自動處理。

Recipient	Country	Data	Purpose
Supabase Inc.	USA (data stored in the project region)	Account ID, purchase status, opt-in statistics	Database and servers
Google LLC	USA	Images / text sent to AI, advertising ID, map search position, purchase data	Gemini API, AdMob, Maps, Google Play
OpenAI, L.L.C. (only if enabled)	USA	Images / text sent to AI	Backup AI
RevenueCat, Inc.	USA	Account ID, purchase data	Subscription management
OneSignal, Inc.	USA	Push ID, language	Notifications
Apple Inc.	USA	Purchase data	App Store

4. 您的權利（個人資料保護法第3條）

您得就您的個人資料行使：(1) 查詢或請求閱覽；(2) 請求製給複製本；(3) 請求補充或更正；(4) 請求停止蒐集、處理或利用；(5) 請求刪除。請透過上述聯絡方式提出，本經營者於確認身分後依法處理。家庭資料可於應用程式內自行刪除，使用統計之同意可於「設定」中隨時撤回。

5. 不提供個人資料之影響

所有資料均為任意提供。若不提供，相關功能（例如家庭過敏警示、附近地點搜尋）將無法使用，但其他功能仍可使用。

6. 安全維護

傳輸加密（HTTPS）、資料庫列級存取控制、金鑰加密保管（Vault）、統計資料分離及假名化、最小權限。如發生個人資料外洩，將依法查明後以適當方式通知您。

7. 未成年人

未滿 16 歲者請在法定代理人同意下使用。兒童之家庭資料由家長輸入及管理。

8. 業務移轉與修訂

如因合併或營業讓與而移轉業務，將事先於應用程式內通知。本政策修訂時，將於本頁及應用程式內公告。

Privacy Policy — Taiwan (English)

Effective 27 October 2026. Notice under Article 8 of Taiwan's Personal Data Protection Act; the Chinese text prevails.

What we collect and why

Anonymous account ID (no name, e-mail or phone number required) — to provide the app and prevent abuse.
Family profiles you enter (display name, relation, birth year, allergies, religious dietary rules, notes) — kept only on your device and never sent to our servers; used only to check ingredients and show the medical card. Allergies (health) and religious dietary rules (belief) are sensitive information: we ask for your separate consent in the app before they are saved, and never use them for statistics, advertising or third-party provision.
Location (with permission) — prayer times, Qibla and nearby halal spots. Exact location is not stored.
Photos / camera you choose — on-device text and barcode recognition and, only when the product is not in the database, AI checks. Ingredient verdicts are stored as shared product data not linked to you.
AI usage counts and a random install ID — to manage the 5 free AI trials and cost limits.
Purchase status (App Store / Google Play via RevenueCat) — to provide Premium. We never receive card details.
Advertising and push IDs (AdMob, OneSignal) — ads for free users and notifications. You can reset or disable them in your device settings.
Usage statistics — only if you opt in: monthly feature-usage counts, active days, language, coarse area and nationality if you set it. Never names, photos, scanned text, medical card content, allergies or exact locations. Stored under a keyed pseudonymous ID and shown to others only as aggregates of at least 5 users. Withdraw at any time in Settings (this deletes the statistics).

Providing any of this is optional. If you do not, the related feature (for example, family allergy alerts) will not work, but the rest of the app remains available.

Retention and deletion

Account: until you delete it. Family profiles are kept on your device only and are erased when you delete them or the app. AI usage counts: 90 days. Daily search areas: 120 days. Area statistics: 25 months. Operations logs: 90 days. Purchase events: 400 days. When the period ends or the purpose is achieved, electronic data is deleted irreversibly; we keep no paper records.

Security

HTTPS encryption, row-level access control, encrypted key storage (Vault), separation and pseudonymisation of statistics, and least-privilege access.

Business transfer

If the business is transferred (merger, business transfer, etc.) we will notify you in advance in the app, including the recipient, and you may withdraw consent and delete your data before the transfer.

Processors and transfer to the USA

Recipient	Country	Data	Purpose
Supabase Inc.	USA (data stored in the project region)	Account ID, purchase status, opt-in statistics	Database and servers
Google LLC	USA	Images / text sent to AI, advertising ID, map search position, purchase data	Gemini API, AdMob, Maps, Google Play
OpenAI, L.L.C. (only if enabled)	USA	Images / text sent to AI	Backup AI
RevenueCat, Inc.	USA	Account ID, purchase data	Subscription management
OneSignal, Inc.	USA	Push ID, language	Notifications
Apple Inc.	USA	Purchase data	App Store

Your rights (PDPA Art. 3)

Inquiry and review, copies, supplementation or correction, discontinuance of collection / processing / use, and deletion.

Operator: ALPHALITH · Address: [Address] · Contact: contact@alphalith.net