1. 關於我們

TonesFly 由 Thang Pham（「TonesFly」、「我們」或「我方」）營運。本隱私權政策說明了您使用 TonesFly 行動應用程式（「本應用程式」）時，我們如何收集、使用和保護您的資訊。

就 GDPR 而言，Thang Pham 是資料控管者。聯絡方式：[email protected]

2. 我們收集的資訊

We collect the following types of information:

Account information — your email address, display name, authentication provider, and account/user ID when you create or link an account via Apple Sign-In, Google Sign-In, or email
Audio files — audio files you import into the App for listening practice (processed and stored on-device only; never sent to any server)
Transcripts and lesson data — generated entirely on your device from your imported audio; stored on-device and in iCloud (if enabled) only
Learning data — practice progress, accuracy scores, challenge completion, and streaks stored locally on your device
Device-linked identifiers — a persistent device_id stored in Keychain and sent to our server for account binding and free-tier limit enforcement
Preferences — your native language, stored locally on your device
Device information — device model, operating system version, and app version for diagnostics
Usage analytics — product interaction data used to improve the App; optional analytics are collected only with your consent
Campaign attribution — when you open the App from a marketing link, we may collect anonymous UTM parameters (source, medium, campaign name) to measure marketing effectiveness. These parameters do not contain personally identifiable information and are processed through PostHog subject to your analytics consent

3. 處理的法律依據 (GDPR)

我們基於以下法律依據處理您的個人資料：

合約履行 (Art. 6(1)(b))——帳戶資料、音訊處理和學習資料是提供您所請求的服務所必需的
合法利益 (Art. 6(1)(f))——裝置資訊和匿名分析幫助我們維護和改進本應用程式、防止詐欺並確保安全
同意 (Art. 6(1)(a))——非必要分析（PostHog）僅在您同意的情況下處理，您可以隨時透過隱私權設定撤回同意

您可以隨時撤回對分析的同意，且不影響撤回前處理的合法性。

4. 我們如何使用您的資訊

We use the information we collect to:

Provide, maintain, and improve TonesFly
Process imported audio entirely on your device to generate listening practice challenges
Authenticate your account and manage subscriptions
Enforce the free tier fairly and prevent abuse across multiple accounts on the same device
Process subscriptions and in-app purchases
Send important service updates via email
Respond to support requests
Measure marketing effectiveness using anonymous campaign attribution data from UTM parameters

5. 音訊檔案處理

Audio is processed entirely on your device and never leaves it.

When you import an audio file:

Speech recognition runs on your device using on-device models
All transcription, lesson generation, and practice content creation happen on your device
No audio, transcripts, or lesson content are sent to any server
Audio files are stored on-device and in iCloud (if enabled) only
Processed challenge data is stored locally on your device and in your iCloud account for offline practice

Automated processing: Speech recognition and challenge generation are fully automated and run entirely on your device. No human reviews your audio or transcripts.

5a. On-Device Processing

TonesFly uses on-device speech recognition to convert your imported audio into text for listening practice. All speech recognition and lesson generation run entirely on your device — no audio or transcript data is sent to any external service.

All lesson content is generated and stored on your device.

5b. Automated Processing (GDPR Art. 22)

TonesFly uses on-device automated processing to generate listening practice challenges from your audio. This includes speech recognition, challenge generation, and adaptive pacing. All of this processing runs entirely on your device.

These automated processes help create your learning content but do not produce legal effects. Under GDPR Article 22, you have the right to request human review of any automated processing decision that significantly affects you by contacting [email protected].

For users under the applicable age threshold (13–18 depending on region), optional data collection is disabled entirely.

6. 第三方服務

We use the following third-party services to operate and improve the App:

RevenueCat — subscription and purchase management
PostHog — product analytics (consent-based)
Firebase — authentication and crash reporting
Cloudflare — cloud hosting and edge network services (Workers, D1, KV)
Resend — transactional email delivery

These providers process data under data processing agreements with appropriate safeguards. Our Data Processing Agreement is available at https://tonesfly.com/dpa. Apple handles all subscription billing directly.

7. 資料分享

We do not sell, rent, or trade your personal data to third parties. This applies to all users, including California residents.

We may share data with:

Cloud hosting and infrastructure providers (for authentication and account management only)
Analytics services (product interaction data, with your consent where required)
Payment processors (Apple handles all subscription billing)
Legal authorities when required by law or to protect our legal rights

Audio, transcripts, and lesson content are processed entirely on your device and are not shared with any third party.

For California residents (CCPA/CPRA): We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not collect or process sensitive personal information as defined by the CPRA, including precise geolocation, racial or ethnic origin, religious beliefs, genetic data, biometric information, or health information. You have the right to know what personal information we collect, request deletion, and opt out of any future sale. Contact [email protected] to exercise these rights.

8. 資料安全

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS). Our server infrastructure is hosted on Cloudflare's global network (Workers, D1, KV) and handles only authentication and subscription management. Audio, transcripts, and lesson content are processed and stored entirely on your device and in your iCloud account — they are never sent to our servers.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay, as required by GDPR Article 33-34.

However, no method of transmission over the internet is 100% secure.

9. 資料保留

We retain your data for as long as your account is active or as needed to provide services.

Audio, transcripts, and lesson content: stored on-device and iCloud only. Never sent to our servers.
Account data (email, display name, device_id, subscription status): retained on our servers until account deletion.
Practice data: stored locally on your device; deleted when you remove the app, delete individual lessons, or choose to remove local data.
Analytics data: retained for up to 12 months, subject to your consent settings.

You may request account deletion at any time from Settings > Delete Account. When you request deletion, your account enters a 7-day grace period during which you may cancel by signing in. After the grace period expires, all your data is permanently deleted from our servers. We send email confirmation when deletion is scheduled, a reminder 24 hours before, and confirmation after deletion.

TonesFly cannot delete data stored in your iCloud account. To manage iCloud data, visit Settings > [Your Name] > iCloud on your device.

10. 國際資料傳輸

Our server infrastructure is hosted on Cloudflare's global edge network, handling only authentication and subscription management. Audio, transcripts, and lesson content are processed and stored entirely on your device and never leave it. Third-party services including Firebase, RevenueCat, and PostHog process account and analytics data in the United States.

Your information may also be accessed from Viet Nam (where the data controller is located) for administrative and development purposes.

For transfers outside the EU/EEA, we rely on:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data processing agreements with all third-party service providers
Where applicable, adequacy decisions by the European Commission

You may request a copy of the safeguards in place by contacting [email protected]

Japanese residents (APPI): Your account data is transferred to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller) for the purposes described in this policy. Audio and lesson content remain on your device. We ensure appropriate data protection through contractual obligations with all service providers.

Chinese mainland residents (PIPL): Your account information may be transferred outside the People's Republic of China to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). Audio, transcripts, and lesson content remain on your device and are not transferred. By using TonesFly, you consent to this cross-border transfer for the purposes described in Section 4. You may withdraw consent at any time by contacting [email protected], which may affect our ability to provide the service. We conduct personal information protection impact assessments for cross-border transfers as required by PIPL.

South Korean residents (K-PIPA): Your account data is transferred to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We provide notice of the recipient, purpose, and items of personal information transferred. These transfers are protected by data processing agreements with all service providers.

Brazilian residents (LGPD): Your account data is transferred internationally to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller) for the purposes described in this policy. These transfers are protected by contractual clauses that ensure an adequate level of data protection as required by the LGPD.

Vietnamese residents (PDPD): As the data controller is located in Viet Nam, your personal data is subject to Decree 13/2023/NĐ-CP on personal data protection. Account data may be transferred to the United States for processing by third-party services (Firebase, RevenueCat, PostHog). We conduct data processing impact assessments for cross-border transfers as required by Vietnamese law.

United Kingdom residents (UK GDPR): Your account data is transferred to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). For transfers from the UK, we rely on the International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses, as approved by the UK Information Commissioner's Office (ICO).

Indian residents (DPDP Act 2023): Your account data may be transferred outside India to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). Audio and lesson content remain on your device. We ensure appropriate data protection through contractual obligations with all service providers. Note: Under the DPDP Act, children are defined as individuals under 18 years of age, and verifiable parental consent is required before processing their data.

Indonesian residents (PDP Law 27/2022): Your account data may be transferred outside Indonesia to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller) for the purposes described in this policy. These transfers are protected by data processing agreements ensuring an equivalent level of data protection.

Thai residents (PDPA 2019): Your account data may be transferred outside Thailand to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We ensure that adequate safeguards are in place as required by the Personal Data Protection Act, including contractual obligations with all service providers.

Turkish residents (KVKK): Your account data may be transferred outside Turkey to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We rely on your explicit consent or contractual necessity as the legal basis for these cross-border transfers, in accordance with the Law on the Protection of Personal Data (Law No. 6698).

Filipino residents (Data Privacy Act 2012): Your account data may be transferred outside the Philippines to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). These transfers are protected by contractual safeguards ensuring compliance with the Data Privacy Act of 2012 and regulations of the National Privacy Commission (NPC).

Saudi Arabian residents (PDPL 2023): Your account data may be transferred outside the Kingdom of Saudi Arabia to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We ensure an adequate level of data protection for cross-border transfers as required by the Personal Data Protection Law.

11. 兒童隱私

TonesFly 使用年齡驗證流程來幫助遵守兒童隱私權法律，包括 COPPA（美國）和 GDPR（歐盟/歐洲經濟區）。如果您尚未完成該流程，應用程式會在啟用選用資料收集之前詢問您的生日。您的確切生日在裝置上本機處理以確定正確的年齡門檻；我們僅在裝置上本機儲存年齡範圍（13歲以下、13-15歲、16-17歲或18歲以上），不儲存在我們的伺服器上。

如果您表明自己低於適用的年齡門檻（美國和大多數國家為13歲，歐盟/歐洲經濟區根據國家為13-16歲，中國和韓國為14歲，印度為18歲），選用資料收集——包括分析、當機回報和診斷——將自動停用，且無法在設定中重新啟用。

如果您認為兒童的資料被錯誤收集，請聯絡 [email protected]，我們會及時刪除。

12. 您的權利

根據您所在的司法管轄區，您享有以下權利：

所有使用者：

存取我們持有的您的個人資料
請求更正不準確的資料
請求刪除您的資料
以可攜式格式匯出您的資料
選擇退出分析資料收集

歐盟/歐洲經濟區居民 (GDPR)：

限制資料處理的權利
基於合法利益反對處理的權利
隨時撤回同意的權利
不受僅基於自動化決策約束的權利
向當地資料保護機構（監管機構）提出投訴的權利

加利福尼亞州居民 (CCPA/CPRA)：

了解收集了哪些個人資訊的權利
刪除個人資訊的權利
選擇退出個人資訊出售的權利（我們不出售您的資料）
行使權利不受歧視的權利

日本居民（APPI）：

請求揭露保留的個人資料的權利
請求更正、補充或刪除的權利
請求停止使用或刪除的權利
請求停止向第三方提供的權利

中國大陸居民 (PIPL)：

了解和決定個人資訊處理的權利
存取和複製個人資訊的權利
更正或補充不準確或不完整資訊的權利
請求刪除個人資訊的權利
隨時撤回同意的權利
請求說明處理規則的權利
資料可攜性權利

韓國居民 (K-PIPA)：

存取個人資訊的權利
請求更正或刪除的權利
請求暫停處理的權利
隨時撤回同意的權利

巴西居民 (LGPD)：

確認資料處理的權利
存取個人資料的權利
更正不完整、不準確或過期資料的權利
匿名化、封鎖或刪除不必要資料的權利
資料可攜性權利
了解資料共用實體資訊的權利
隨時撤回同意的權利

越南居民 (PDPD)：

了解個人資料處理活動的權利
同意和撤回同意的權利
存取個人資料的權利
請求更正個人資料的權利
請求刪除個人資料的權利
限制資料處理的權利
資料可攜性權利

英國居民 (UK GDPR)：

存取個人資料的權利
更正不準確資料的權利
刪除資料的權利
限制處理的權利
資料可攜性權利
反對處理的權利
隨時撤回同意的權利
不受僅基於自動化決策約束的權利
向資訊專員辦公室 (ICO) 提出投訴的權利

印度居民（DPDP 法案 2023）：

存取個人資料相關資訊的權利
更正和刪除個人資料的權利
申訴救濟的權利
指定代理人代為行使權利的權利

印尼居民（PDP 法 27/2022）：

獲知資料處理資訊的權利
存取個人資料的權利
更正不準確資料的權利
請求刪除個人資料的權利
隨時撤回同意的權利
資料可攜性權利

泰國居民（PDPA 2019）：

存取個人資料的權利
更正不準確資料的權利
請求刪除或匿名化的權利
限制處理的權利
資料可攜性權利
反對處理的權利
隨時撤回同意的權利
向個人資料保護委員會 (PDPC) 提出投訴的權利

土耳其居民（KVKK）：

了解個人資料是否被處理的權利
請求有關處理的資訊的權利
了解處理目的的權利
更正不完整或不準確資料的權利
請求刪除或銷毀個人資料的權利
反對處理的權利
資料可攜性權利
向個人資料保護機構（KVKK 委員會）提出投訴的權利

菲律賓居民（資料隱私法 2012）：

獲知資料處理資訊的權利
存取個人資料的權利
更正不準確資料的權利
請求刪除或封鎖資料的權利
反對處理的權利
資料可攜性權利
向國家隱私委員會 (NPC) 提出投訴的權利

沙烏地阿拉伯居民（PDPL 2023）：

獲知資料處理資訊的權利
存取個人資料的權利
更正不準確資料的權利
請求刪除個人資料的權利
限制處理的權利
資料可攜性權利

如需行使上述任何權利，請聯絡 [email protected]，使用應用程式中的隱私權設定，或直接在「設定」>「刪除帳戶」中刪除您的帳戶。我們將在以下期限內回覆：GDPR 請求30天內，CCPA 請求45天內，APPI 請求兩週內，PIPL 請求15個工作天內，K-PIPA 請求10天內，LGPD 和 PDPD 請求15天內，UK GDPR 請求30天內，DPDP 請求30天內，印尼 PDP 請求14天內，PDPA 請求30天內，KVKK 請求30天內，菲律賓 DPA 請求15天內，PDPL 請求30天內（如法律要求，可能更短）。

13. 政策變更

我們可能會不時更新本隱私權政策。我們將透過本應用程式或電子郵件通知您重大變更。變更後繼續使用本應用程式即表示接受更新後的政策。

14. 聯絡我們

如果您對本隱私權政策有疑問或希望行使您的資料權利，請聯絡我們：

Thang Pham (TonesFly)
電子郵件：[email protected]

對於歐盟/歐洲經濟區使用者：如果您對我們的回覆不滿意，您有權向當地資料保護監管機構提出投訴。