餐盤手帳 隱私政策
你的資料只存在你的裝置上。餐盤手帳不需要帳號，開發者沒有伺服器保存你的餐點或飲水紀錄，App 內也沒有廣告、追蹤或分析工具。App 唯一的連線是下載一份公開的設定檔，不帶任何個人資料。
本政策說明餐盤手帳（Platebook，以下稱「本 App」）如何處理你的資料。本 App 由 Jerry Lin 開發與維護。
本 App 在你的裝置上保存的資料
- 個人檔案：顯示名稱。
- 餐點紀錄：用餐時間、餐別、六大類份數、由份數估算的熱量與三大營養素，以及你寫下的餐點內容（標籤）。
- 飲水紀錄：飲水時間與容量。
- 設定：自訂餐別、標籤建議、營養係數、以手為尺的校準份數、提醒時間、App 鎖定設定，以及健康平台的寫入狀態。
這些資料保存在本 App 的本機資料庫中，不會上傳給開發者或任何第三方。設定 App 密碼後，資料庫會加密，資料金鑰存放於 iOS 鑰匙圈或 Android Keystore 保護的安全儲存區。
資料庫與金鑰刻意排除在 iCloud／電腦備份、Android 雲端備份與裝置轉移之外，因此換手機時資料不會自動移轉。
App 密碼與生物辨識
- App 密碼的原文不會被保存；本 App 只保存以密碼保護的加密金鑰。
- Face ID、Touch ID 或指紋解鎖由作業系統處理。本 App 只收到「驗證成功或失敗」的結果，不會讀取或保存你的臉部或指紋資料。
Apple 健康與 Health Connect
只有在你開啟寫入並授權後，本 App 才會把資料寫入健康平台。本 App 不讀取健康平台上的任何資料。
| 平台 | 寫入的資料 |
|---|---|
| Apple 健康（HealthKit，iOS） | 每一餐的熱量、碳水化合物、蛋白質、總脂肪與餐點內容；每次飲水的容量 |
| Health Connect（Android） | 每一餐的營養紀錄（熱量、碳水化合物、蛋白質、總脂肪、餐別與餐點內容）；每次飲水的補水紀錄 |
- 你在本 App 編輯已寫入的紀錄時，本 App 會以新的內容取代它當初寫入平台的那一筆；刪除時也會一併刪除。
- 開啟寫入時，你可以選擇是否連同開啟前的紀錄一起寫入。
- 寫入健康平台的資料留在你裝置上的健康平台，不會傳送給開發者或第三方，不會用於廣告、行銷或資料仲介，也不會出售。
- 本 App 使用 Health Connect 的方式，遵守 Health Connect 權限政策，包括其中的「限制使用」（Limited Use）規定。
- 你可以隨時在 iOS「健康」App 或 Android 的 Health Connect 設定中撤銷授權。
提醒通知
用餐與喝水提醒由作業系統在你的裝置上排程，不經過任何伺服器。通知內容只有固定的提醒文字，不含你的餐點、飲水量或其他紀錄。
網路連線
本 App 的核心功能不需要網路。會發出的連線只有以下一種，且不包含你的個人檔案、餐點與飲水紀錄或裝置識別碼；沒有網路時會直接略過，不影響使用。
遠端設定
本 App 會不定期（解鎖或回到前景時，最多約每 6 小時一次）從 platebook.jlab-app.cloud 下載一份公開的設定檔，用來顯示版本更新提醒、App 內公告，以及在必要時暫停有問題的功能（例如寫入健康平台）。這個請求不帶任何個人資料或識別碼。
設定檔放在 Cloudflare 的服務上。和任何網站連線一樣，Cloudflare 會看到你的 IP 位址與一般的連線資訊（例如請求時間），並依 Cloudflare 隱私政策（cloudflare.com/privacypolicy）處理。開發者不會取得或用這些資訊辨識你。
你主動開啟的連結
點選資料來源或本頁連結時，會在瀏覽器中開啟，之後的資料處理依各網站的政策。
作業系統
Apple 或 Google 可能依你的系統設定收集當機報告或使用統計，這由各自的隱私政策規範，不在本 App 的控制範圍內。
權限說明
| 權限 | 用途 |
|---|---|
| Face ID／生物辨識 | 選用的快速解鎖，只在你設定 App 密碼並開啟後使用。 |
| Apple 健康寫入 | 寫入每一餐的熱量與三大營養素、每次飲水，見上方說明。 |
| Health Connect 寫入營養與補水 | 寫入每一餐的營養紀錄與每次飲水，見上方說明。 |
| 通知 | 用餐與喝水提醒，只在你開啟提醒時請求。 |
| 網路（Android） | 下載遠端設定檔，見上方說明。 |
所有健康、生物辨識與通知權限都是選用的；不授權時，本 App 仍可在本機記錄與查看資料。
刪除你的資料
- 刪除單筆紀錄：在本 App 中刪除即可；若該筆已寫入健康平台，本 App 會一併刪除它寫入的那一筆。
- 清除所有資料：在「設定 → 資料 → 清除所有資料」經兩次確認後，會永久刪除這台裝置上的個人檔案、所有紀錄、App 密碼與設定，並取消所有提醒。忘記密碼且無法使用生物辨識時，鎖定畫面也提供同樣的清除方式。
- 移除 App：解除安裝本 App 會一併刪除它在裝置上保存的所有資料。
- 已寫入 Apple 健康或 Health Connect 的資料，在「清除所有資料」或移除 App 後仍會保留在該平台；請到 iOS「健康」App 或 Health Connect 中管理與刪除。
因為開發者沒有保存你的任何資料，所以不需要、也無法向開發者申請刪除；刪除完全在你的裝置上完成。
兒童
本 App 不會把任何資料傳送給開發者，因此不會蒐集任何人（包括兒童）的個人資料。
政策變更
本政策若有變更，會更新本頁並修改上方的生效日期。
聯絡方式
開發者：Jerry Lin
Email：service@crazyjerry.studio
Platebook Privacy Policy
Your data stays on your device. Platebook (餐盤手帳) requires no account. The developer runs no server that stores your meals or water intake, the app contains no ads, tracking, or analytics. The app’s only connection downloads a public configuration file and carries no personal data.
This policy explains how Platebook (“the app”) handles your data. The app is developed and maintained by Jerry Lin. If the two language versions differ, the Traditional Chinese version prevails.
Data the app stores on your device
- Profile: display name.
- Meals: time, meal slot, servings of the six food groups, the energy and macronutrients estimated from those servings, and the meal contents (tags) you write down.
- Water intake: time and volume.
- Settings: custom meal slots, tag suggestions, nutrition coefficients, hand-portion calibration, reminder times, app lock settings, and health platform write status.
This data is kept in the app’s local database and is never uploaded to the developer or any third party. Once you set an app password, the database is encrypted, and its data key is kept in secure storage protected by the iOS Keychain or Android Keystore.
The database and keys are deliberately excluded from iCloud/computer backups, Android cloud backup, and device-to-device transfer, so your data does not move to a new phone automatically.
App password and biometrics
- Your app password itself is never stored; the app stores only an encryption key protected by it.
- Face ID, Touch ID, and fingerprint unlock are handled by the operating system. The app only learns whether authentication succeeded and never reads or stores your face or fingerprint data.
Apple Health and Health Connect
The app writes data to a health platform only after you turn on writing and grant permission. The app never reads any data from the health platform.
| Platform | Data written |
|---|---|
| Apple Health (HealthKit, iOS) | Energy, carbohydrates, protein, total fat, and contents of each meal; volume of each drink of water |
| Health Connect (Android) | A nutrition record for each meal (energy, carbohydrates, protein, total fat, meal type, and contents); a hydration record for each drink of water |
- When you edit a record that was already written, the app replaces the entry it wrote with the new contents; when you delete it, the app deletes that entry too.
- When you turn on writing, you choose whether records from before that point are written as well.
- Data written to a health platform stays in the health platform on your device. It is never sent to the developer or third parties, never used for advertising, marketing, or data brokering, and never sold.
- The app’s use of Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
- You can revoke access at any time in the iOS Health app or in Health Connect settings on Android.
Reminders
Meal and water reminders are scheduled by the operating system on your device and never pass through a server. A notification contains only fixed reminder text, never your meals, water intake, or other records.
Network connections
The app’s core features do not need a network. It makes only the connection below, which never includes your profile, meal or water records, or device identifiers. Without a network the app simply skips it and keeps working.
Remote configuration
From time to time (after unlocking or returning to the app, at most about once every 6 hours), the app downloads a public configuration file from platebook.jlab-app.cloud. It is used to show update reminders and in-app notices, and to pause a problematic feature (such as writing to a health platform) if necessary. The request carries no personal data or identifiers.
The file is hosted on Cloudflare. As with any website, Cloudflare sees your IP address and ordinary connection details such as the request time, and handles them under the Cloudflare Privacy Policy (cloudflare.com/privacypolicy). The developer does not receive this information or use it to identify you.
Links you open
Tapping a data source link or a link to this page opens your browser; the website’s own policy applies from there.
Operating system
Apple or Google may collect crash reports or usage statistics according to your system settings. That is governed by their privacy policies and is outside the app’s control.
Permissions
| Permission | Purpose |
|---|---|
| Face ID / biometrics | Optional quick unlock, used only after you set an app password and turn it on. |
| Apple Health write | Write energy and macronutrients of each meal and each drink of water, as described above. |
| Health Connect write (nutrition, hydration) | Write a nutrition record for each meal and each drink of water, as described above. |
| Notifications | Meal and water reminders, requested only when you turn reminders on. |
| Internet (Android) | Download the remote configuration file, as described above. |
All health, biometric, and notification permissions are optional. Without them, you can still record and view your data on the device.
Deleting your data
- Delete a record: delete it in the app. If it was written to a health platform, the app also deletes the entry it wrote there.
- Erase all data: Settings → Data → Erase all data, after two confirmations, permanently deletes the profile, all records, the app password, and settings on this device, and cancels all reminders. If you forget your password and biometrics are unavailable, the lock screen offers the same option.
- Uninstall: removing the app deletes all data it stored on the device.
- Data already written to Apple Health or Health Connect stays there after erasing or uninstalling. Manage or delete it in the iOS Health app or in Health Connect.
Because the developer holds none of your data, there is nothing to request from the developer; deletion happens entirely on your device.
Children
The app sends no data to the developer, so it does not collect personal information from anyone, including children.
Changes to this policy
If this policy changes, this page and the effective date above will be updated.
Contact
Developer: Jerry Lin
Email: service@crazyjerry.studio