chikara · LEGAL · PRIVACY

隱私權政策 · Privacy Policy

生效日期 / Effective: 2026-04-30 · 最後更新 / Last updated: 2026-04-30

繁體中文

1. 我們是誰

chikara（力，以下簡稱「本服務」）由 chiparashi 開發與維運。Bundle ID tw.chiparashi.chikara。本政策說明我們如何蒐集、使用、儲存與刪除你的個人資料。

2. 我們蒐集哪些資料

僅蒐集以下資料以提供服務功能：

類別	內容	用途
帳號資訊	Email、顯示名稱、由系統產生的 UUID	登入、識別、教練配對
訓練紀錄	你輸入的動作、組數、次數、重量、休息時間、難度評分、訓練筆記	提供訓練追蹤與歷史檢視
體態資料	InBody 量測值（體脂率、肌肉量、InBody 分數等）	體態趨勢圖表
Apple Sign In identifier	Apple 提供的 user identifier (sub) 與你授權的 email（可能為 Private Relay 轉發位址）	登入驗證
推薦碼 / 邀請碼使用紀錄	你註冊時輸入的推薦碼 ID	教練配對、註冊資格驗證

我們不蒐集：定位、聯絡人、相機、麥克風、廣告 ID（IDFA）、跨 app 追蹤資料、健康 App 資料（Apple Health 整合在路線圖上但目前未啟用）。

3. 我們不做的事

• 不販售你的資料給任何第三方
• 不做廣告追蹤或行為分析
• 不分享資料給除基礎建設供應商以外的第三方
• 不要求 Apple Privacy Relay 以外的 email 位址

4. AI 功能

本服務在以下功能使用 Anthropic Claude API：訓練回顧自動生成、動作指導、個人化建議。送出 Claude API 的內容包含你的訓練紀錄摘要與動作名稱，不包含 email、UUID 以外的個人識別資訊。Claude API 由 Anthropic, PBC 提供，遵循 Anthropic 隱私政策。你可選擇在設定中提供你自己的 Claude API Key — 在這種情況下請求直接以你的金鑰送出，本服務不留存。

5. 資料儲存位置

• 資料庫：Google Cloud SQL，位於 GCP asia-east1（彰化縣，台灣）
• 應用伺服器：Google Cloud Run，同區域
• 本地裝置快取：iOS SwiftData（你裝置內），iPhone↔Apple Watch 同步透過 Apple WatchConnectivity 框架

6. 你的權利

• 隨時刪除帳號：在 app「設定 → 危險區 → 刪除帳號」執行。確認後立刻永久刪除所有資料，無法復原。
• 存取你的資料：請聯絡 support@chiparashi.tw。
• 更正資料：在 app 內直接編輯個人資料、訓練紀錄、體態紀錄。
• 資料可攜：請寄信至上述信箱請求 JSON / CSV 匯出（人工處理，14 個工作天內回覆）。
• 撤回同意：刪除帳號即視同撤回所有資料處理同意。

7. 資料保留

• 使用中帳號：保留至你刪除帳號為止。
• 已刪除帳號：立刻自登入流程移除，30 天內後台清除原始資料。30 天 grace window 為內部營運使用，不對外提供恢復服務。

8. 安全措施

• 全部 API 流量強制 HTTPS（TLS 1.2+，Cloud Run 預設 TLS 1.3）
• 密碼以 argon2 雜湊儲存
• Refresh token 採 SHA-256 雜湊存放、30 天有效、輪替機制（reuse 偵測自動撤銷全部 sessions）
• Sign in with Apple identity token 以 Apple 公鑰即時驗證

9. 兒童

本服務適用 4 歲以上一般使用者，未針對 13 歲以下兒童設計，亦不主動蒐集兒童資料。如你發現 13 歲以下兒童使用本服務並提供個人資料，請聯絡我們以便刪除。

10. 政策變更

我們可能不定期更新本政策。重大變更會在 app 內以彈窗通知，並更新本頁「最後更新」日期。

11. 聯絡方式

support@chiparashi.tw

English

1. Who we are

chikara is developed and operated by chiparashi. Bundle ID tw.chiparashi.chikara. This policy describes how we collect, use, store, and delete your personal data.

2. What we collect

We collect only the data needed to provide the service:

Category	Contents	Purpose
Account info	Email, display name, server-issued UUID	Login, identification, coach pairing
Workout records	Exercises, sets, reps, weight, rest time, difficulty rating, notes you enter	Training history & analytics
Body composition	InBody scan values (body fat %, muscle mass, InBody score)	Trend charts
Sign in with Apple identifier	Apple-issued user identifier (sub) and the email you authorise (may be a Private Relay address)	Authentication
Promo / invite code usage	Promo code id consumed at registration	Coach pairing, registration eligibility

We do not collect: location, contacts, camera, microphone, ad identifier (IDFA), cross-app tracking data, or Apple Health data (HealthKit integration is on the roadmap but not currently active).

3. What we don't do

• No data sale to any third party
• No ad tracking or behavioural analytics
• No data sharing with third parties other than infrastructure providers
• No request for emails beyond Apple Privacy Relay

4. AI features

We use the Anthropic Claude API for: automated workout reviews, exercise guidance, personalised suggestions. Content sent to Claude includes summaries of your workout records and exercise names; it does not include personal identifiers beyond your email and UUID. Claude API is operated by Anthropic, PBC under their privacy policy. You may supply your own Claude API key in Settings — in that case requests are sent with your key and we do not retain it.

5. Where your data lives

• Database: Google Cloud SQL, GCP asia-east1 (Changhua County, Taiwan).
• Application servers: Google Cloud Run, same region.
• On-device cache: iOS SwiftData (your device); iPhone↔Apple Watch sync uses Apple's WatchConnectivity framework.

6. Your rights

• Delete your account at any time: Settings → Danger Zone → Delete Account in the app. Once confirmed, all data is permanently removed and cannot be recovered.
• Access your data: contact support@chiparashi.tw.
• Correct your data: edit your profile, workout records, and body composition entries directly in the app.
• Data portability: email the address above for a JSON / CSV export (handled manually within 14 business days).
• Withdraw consent: deleting your account constitutes withdrawal of all processing consent.

7. Retention

• Active accounts: data is retained until you delete your account.
• Deleted accounts: immediately removed from authentication flows; raw data is purged within 30 days. The 30-day window is for internal operations only — we do not offer restoration to users.

8. Security

• All API traffic uses HTTPS (TLS 1.2+; Cloud Run defaults to TLS 1.3).
• Passwords are hashed with argon2.
• Refresh tokens are stored as SHA-256 hashes, valid 30 days, with rotation (reuse detection auto-revokes all sessions).
• Sign in with Apple identity tokens are verified against Apple's public keys on every auth.

9. Children

The service is suitable for general audiences ages 4 and up. It is not designed for children under 13, and we do not knowingly collect data from them. If you become aware that a child under 13 has provided personal data, please contact us so we can remove it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app, and the "Last updated" date at the top of this page will be revised.

11. Contact

support@chiparashi.tw