係咪你 IsThatYou

私隱政策 · Privacy Policy

生效日期 Effective: 2026-09-28 · 版本 Version 1.0

繁體中文

「係咪你」（下稱「本應用程式」）由 L&C Development CO., Limited（下稱「我們」）營運。本應用程式協助家人在懷疑有人冒充家庭成員時，一按向真正的家人確認身份。本政策說明我們收集哪些個人資料、用途、與誰分享，以及您的權利。我們只收集提供服務所需的最少資料。

本應用程式或會以與本公司相關的個人開發者帳戶在 App Store 或 Google Play 上架。無論商店顯示的開發者名稱為何，本服務均由 L&C Development CO., Limited 營運，並由本公司作為您個人資料的資料使用者。

1. 我們收集的資料

類別內容來源 / 備註
家庭建立者帳戶電郵地址用作一次性驗證碼登入及帳戶恢復。不設密碼。
家庭成員帳戶隨機匿名帳戶編號獲邀成員毋須提供電郵或電話。
家庭資料家庭名稱、顯示名稱（例如「阿媽」）、模式（長者／標準）、建立者身份由您或您的家人輸入。
電話號碼（選填）您自願填寫的電話號碼只供同一家庭成員在驗證失敗時一按回撥。
驗證紀錄誰發出驗證、被聲稱的家人、聯絡方式類別（電話／WhatsApp／短訊／視像／其他）、是否演習、結果、時間用作運作服務及讓家人查看最近紀錄。
裝置資料推送通知代碼、作業系統（iOS／Android）、應用程式語言用作向正確的手機發出通知。
暗號密鑰每個家庭一條隨機密鑰存於我們的伺服器及家人手機的安全儲存區，用作離線產生暗號；移除成員時會更換。
訂閱資料訂閱狀態、方案、到期日付款由 Apple / Google 處理，我們經 RevenueCat 取得狀態。我們從不接觸您的信用卡資料。
使用分析匿名使用事件（例如「已發出驗證」、回覆所需秒數）、裝置型號、應用程式版本經 PostHog 處理，可能包括由 IP 推斷的大約地區。我們不會傳送姓名、電話或任何訊息內容。

我們不會：錄音或收聽通話、閱讀您的短訊或 WhatsApp、讀取通訊錄、追蹤您的位置、出售您的資料，或用作廣告。相機只用於在手機上掃描家庭邀請 QR code，影像不會被儲存或上載。

2. 使用目的

3. 誰可以看到您的資料

同一家庭的成員可以看到彼此的顯示名稱、模式、選填電話號碼及家庭的驗證紀錄。其他家庭無法看到。我們透過資料庫「列級安全」規則強制執行此限制。

4. 服務供應商（資料處理者）

以上供應商只可按我們的指示處理資料。部分供應商可能在香港以外（例如新加坡、美國）處理資料。除法律要求外，我們不會向其他人披露您的個人資料。

5. 保留及刪除

您可隨時在「設定 → 刪除帳戶」刪除帳戶。成員刪除帳戶時，其資料會被刪除，並更換家庭暗號密鑰。家庭建立者刪除帳戶時，整個家庭（包括所有成員帳戶及驗證紀錄）會被刪除。已刪除的資料可能在備份中保留最多 30 日後被永久清除。請注意：刪除帳戶不會自動取消訂閱，請在 App Store / Google Play 取消。

6. 保安

所有傳輸均經加密（TLS）。家庭資料受資料庫列級安全規則保護；邀請碼只以雜湊形式儲存；暗號密鑰於手機上儲存在系統安全儲存區。沒有任何系統能保證百分百安全，如發生影響您的資料外洩事故，我們會按法律要求通知您。

7. 您的權利

根據香港《個人資料（私隱）條例》，您有權查閱及改正您的個人資料；您可在應用程式內直接修改名稱及電話。如您身處歐盟或英國，您亦享有《通用數據保障條例》下的權利（包括刪除、限制處理、資料可攜及向監管機構投訴）。請電郵 info@lcdev.hk 提出要求，我們會在 30 日內回覆。

8. 兒童

家庭建立者必須年滿 18 歲。本應用程式並非為 13 歲以下兒童而設。若家庭建立者邀請未成年家人加入，建立者須確保已取得其監護人的同意。

9. 政策更新

如本政策有重大修改，我們會在應用程式內通知，並更新本頁的生效日期。

10. 聯絡我們

L&C Development CO., Limited · 電郵：info@lcdev.hk

English

IsThatYou ("係咪你", the "App") is operated by L&C Development CO., Limited ("we", "us"). The App helps a family confirm, with one tap, that a call or message really comes from a family member. This policy explains what personal data we collect, why, who we share it with, and your rights. We collect only what the service needs.

The App may be listed on the App Store or Google Play under an individual developer account associated with our company. Whatever developer name the store shows, the service is operated by L&C Development CO., Limited, which is the data user (controller) of your personal data.

1. Data we collect

CategoryWhatSource / notes
Family owner accountEmail addressUsed for one-time-code sign-in and account recovery. No password.
Member accountsA random anonymous account IDInvited members never provide an email or phone number.
Family detailsFamily name, display names (e.g. "Mum"), mode (senior/standard), owner flagEntered by you or your family.
Phone number (optional)A number you choose to addVisible only to your family, for one-tap call-back when a check fails.
Verification recordsWho asked, who was claimed, contact type (call/WhatsApp/text/video/other), practice flag, result, timestampsTo run the service and show your family recent activity.
Device dataPush notification token, platform (iOS/Android), app languageTo deliver alerts to the right phone.
Codeword secretOne random key per familyStored on our servers and in each family phone's secure storage to generate offline codewords; rotated when a member is removed.
SubscriptionSubscription status, plan, expiryPayments are handled by Apple/Google; we receive status via RevenueCat. We never see your card details.
AnalyticsAnonymous usage events (e.g. "check sent", seconds to answer), device model, app versionProcessed by PostHog and may include approximate region derived from IP. We never send names, phone numbers or message content.

We do not: record or listen to calls, read your SMS or WhatsApp, read your contacts, track your location, sell your data, or use it for advertising. The camera is used only on your phone to scan a family invite QR code; images are not stored or uploaded.

2. How we use data

3. Who can see your data

Members of the same family can see each other's display names, modes, optional phone numbers and the family's verification history. Other families cannot. This is enforced by database row-level security.

4. Service providers (processors)

These providers may process data only on our instructions, and some process data outside Hong Kong (e.g. Singapore, the United States). We do not disclose your personal data to anyone else unless required by law.

5. Retention and deletion

You can delete your account at any time in Settings → Delete account. When a member deletes their account, their data is deleted and the family codeword secret is rotated. When the family owner deletes their account, the whole family — all member accounts and verification records — is deleted. Deleted data may remain in backups for up to 30 days before it is permanently erased. Deleting your account does not cancel your subscription; cancel it in the App Store or Google Play.

6. Security

All traffic is encrypted in transit (TLS). Family data is protected by row-level security; invite codes are stored only as hashes; the codeword secret is kept in the phone's secure storage. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

7. Your rights

Under Hong Kong's Personal Data (Privacy) Ordinance you may access and correct your personal data; you can edit your name and phone number directly in the App. If you are in the EU or UK you also have rights under the GDPR (including erasure, restriction, portability and complaining to a supervisory authority). Email info@lcdev.hk and we will respond within 30 days.

8. Children

The family owner must be at least 18. The App is not directed at children under 13. If an owner invites a minor, the owner must have the consent of the minor's parent or guardian.

9. Changes

If we make material changes we will tell you in the App and update the effective date above.

10. Contact

L&C Development CO., Limited · Email: info@lcdev.hk