一句話版本

你的日記只存在你的裝置上；同步到雲端之前會先加密，只有你能解開。我們看不到日記內容，也不販售、不分享你的資料，沒有廣告，也沒有追蹤。

In one sentence

Your diary stays on your device. Before it is synced to the cloud it is encrypted so that only you can open it. We cannot read it, we do not sell or share your data, and there are no ads or tracking.

留在你裝置上、不會上傳的資料

• 日記原文、語音錄音
• App 在你的裝置上從日記整理出的資料，例如心情判斷、標籤、搜尋用的索引
• 你設定的 App 密碼

What stays on your device and is never uploaded

• Your diary text and voice recordings
• What the app works out from your diary on the device, such as mood, tags and a search index
• Your app passcode

會傳到雲端的資料

資料	用途	我們能不能讀到內容
加密後的日記，以及從日記整理出的資料（心情、標籤、MurMur 的對話）	跨裝置同步	不能，只有你的裝置能解開
空間與偏好設定（例如精靈、語言、主題、提醒時間），以及 App 內的互動次數	跨裝置同步	能（不含日記內容）
Email 地址	寄送驗證碼、確認信箱屬於你	加密保存，只用來寄送驗證信；沒有完成驗證的紀錄會自動刪除。其他地方都只使用無法還原成 Email 的識別碼
使用 AI 回顧時：統計摘要（期間、篇數、心情概況、常見主題）、你在對話中輸入的問題、先前的 AI 回覆	產生 AI 回顧	轉送給 AI 服務供應商，我們不保存。不包含日記原文，但你輸入的問題會原樣送出，請不要在問題裡寫進不想分享的內容
訂閱與購買紀錄	提供 Pro 功能、還原購買	能（不含付款資訊）
當機報告（裝置型號、系統版本、錯誤資訊）	修正錯誤	能（不含日記內容）

What is sent to the cloud

Data	Purpose	Can we read it?
Your encrypted diary, and what the app works out from it (mood, tags, MurMur dialogue)	Cross-device sync	No. Only your device can open it
Space and preference settings (such as genie, language, theme and reminder time) and in-app interaction counts	Cross-device sync	Yes (no diary content)
Your email address	Sending verification codes; confirming the address is yours	Stored encrypted and used only to send verification email; records that are never verified are deleted automatically. Everywhere else we use only an identifier that cannot be turned back into your email
When you use AI reflections: a statistical summary (period, entry count, mood overview, frequent topics), the questions you type, and earlier AI replies	Writing the AI reflection	Forwarded to our AI provider and not kept by us. No diary text is included, but the questions you type are sent as written, so avoid putting anything there you do not want to share
Subscription and purchase records	Providing Pro, restoring purchases	Yes (no payment details)
Crash reports (device model, OS version, error details)	Fixing bugs	Yes (no diary content)

服務供應商

我們只在提供服務必要的範圍內，把資料交給以下類型的供應商處理：

• 雲端主機與資料庫：執行伺服器、存放加密資料
• 當機回報服務：收集當機報告
• 電子郵件寄送服務：寄送驗證碼
• AI 服務供應商：產生 AI 回顧，不會用你的資料訓練模型
• Apple App Store、Google Play 與訂閱管理服務：處理訂閱與付款。付款資訊由 Apple 或 Google 處理，我們拿不到

我們只選擇承諾保護資料的供應商，它們只能為了提供本服務處理你的資料。伺服器與資料庫位於台灣；部分供應商位於日本與美國，所以你的資料可能會被傳送到台灣以外的地區處理。

我們不使用廣告或行銷分析工具，不追蹤你在其他 App 或網站的行為，也不販售或出租任何資料。

Service providers

We share data only as far as needed to run the service, with these kinds of providers:

• Cloud hosting and database: running the server and storing encrypted data
• Crash reporting: collecting crash reports
• Email delivery: sending verification codes
• AI provider: writing AI reflections; it does not train models on your data
• Apple App Store, Google Play and a subscription management service: subscriptions and payment. Apple and Google process payment; we never see payment details

We only use providers that commit to protecting data, and they may process it only to provide this service. Our servers and database are in Taiwan; some providers are in Japan and the United States, so your data may be processed outside Taiwan.

We use no advertising or marketing analytics, do not track you across other apps or websites, and never sell or rent any data.

保存期間與刪除

• 刪除空間：在 App「設定 → 永久刪除這個空間」。雲端資料會先保留 30 天，這段期間用同一組 Recalls 鑰匙登入就能復原；30 天後，這個空間在雲端的所有資料都會被永久刪除。如果這是該 Email 下的最後一個空間，你的 Email 也會一併刪除。
• 會保留的紀錄：訂閱與購買紀錄，以及 AI 免費試用的使用次數，用於履行訂閱和防止濫用。這些紀錄以無法還原成 Email 的識別碼保存；安全與營運紀錄也不含 Email 或日記內容。
• 裝置上的資料：刪除 App 或空間時一併清除。
• 無法使用 App 時，請見刪除帳號頁面。

刪除帳號與資料 →

Retention and deletion

• Deleting a space: Settings → Permanently delete this space. Cloud data is kept for 30 days, during which signing in with the same Recalls Key restores it; after that, all of the space's data in the cloud is permanently erased. If it was the last space under that email, your email address is erased too.
• What we keep: subscription and purchase records and the number of free AI trials used, to honour subscriptions and prevent abuse. They are stored under an identifier that cannot be turned back into your email; security and operational logs never contain an email address or diary content.
• On your device: removed when you delete the app or the space.
• If you can no longer use the app, see the account deletion page.

Delete your account and data →

你的權利

• 刪除：如上。
• 查詢、更正或其他請求：寫信到 support@murmurecho.com，我們會在 30 天內回覆。依《個人資料保護法》及你所在地的法律（例如 GDPR）享有的權利，我們都會配合。

Your rights

• Deletion: as above.
• Access, correction and other requests: email support@murmurecho.com; we reply within 30 days and honour the rights you have under Taiwan's Personal Data Protection Act and the law where you live (for example the GDPR).

兒童

本 App 不以 13 歲以下的兒童為對象，也不會刻意收集兒童的資料。

Children

The app is not directed at children under 13 and we do not knowingly collect their data.

安全

資料傳輸全程加密。日記在離開你的裝置之前就已經加密，解開它的鑰匙只在你的裝置上。這也代表遺失 Recalls 鑰匙的三個值，日記就無法復原，我們也救不回來。

Security

All traffic is encrypted in transit. Your diary is encrypted before it leaves your device, and the key that opens it exists only on your device. This also means that if you lose the three values of your Recalls Key, your diary cannot be recovered, by you or by us.

政策變更

政策更新時會修改本頁的「最後更新」日期；重大變更會在 App 內通知。

Changes

When this policy changes, the "last updated" date above changes; significant changes are announced in the app.

聯絡我們

Phoebe Huang，台灣 · support@murmurecho.com

Contact

Phoebe Huang, Taiwan · support@murmurecho.com