隱私權政策
最後更新：2026 年 8 月 31 日
Hither 是群組旅行與集合點工具。本政策說明 Hither App 目前如何處理資料。
我們處理的資料
- 帳號資料：電子信箱、暱稱、頭像、登入提供者，以及由 Google、Apple 或 Email 登入建立的識別資料。
- 訪客資料：訪客暱稱與訪客帳號識別碼。訪客模式不保留歷史紀錄，也無法跨裝置同步；登出、刪除 App 或更換裝置後，資料可能無法復原。
- 群組資料：群組名稱、邀請碼、成員與角色、集合點、行程狀態、抵達時間、通知設定及使用者主動輸入的團隊資料。
- 位置資料：當你開啟位置權限並使用群組功能時，App 會處理裝置位置、位置更新時間、移動與集合點距離，用來在地圖顯示成員及更新導航狀態。背景定位只在你啟用導航所需功能時使用。
- 診斷資料：只有在設定中開啟診斷與效能記錄後，才會記錄並批次上傳經去識別化的錯誤、效能、裝置與 App 版本資料。上傳前會移除座標、Token、Email 等敏感欄位。
- 購買資料：Premium 方案、StoreKit 交易驗證所需的產品與交易識別資料，以及伺服器回傳的權益狀態。付款資料由 Apple 處理，Hither 不讀取完整付款卡號。
用途
我們使用上述資料提供登入、帳號驗證、群組同步、地圖與位置功能、通知、Premium 權益、客服、錯誤診斷及防止濫用。除非法律要求或為提供這些功能所必要，不會把資料出售給資料仲介。
服務供應商
Hither 使用 Supabase 儲存帳號、群組與驗證資料；Google Sign-In、Google Maps、AdMob 或其他廣告服務只在你使用相應功能時處理必要資料；Apple Authentication 與 StoreKit 處理 Apple 登入及 App 內購買；Brevo 以 SMTP 寄送驗證與重設密碼信；Cloudflare Pages 提供本政策網站。各供應商依其政策處理資料。
保存與刪除
註冊帳號資料會在帳號有效期間保存。你可以從 App 的帳號設定刪除帳號；刪除後，Hither 會刪除或去識別化可由 App 控制的帳號、群組與位置資料，但依法或為處理爭議所需的紀錄可能在必要期間保留。訪客帳號及其資料在加入群組後最多保存 14 天，實際保存也可能因登出、刪除 App 或更換裝置而中斷。
權限與控制
你可以在系統設定撤回位置、通知或追蹤相關權限；撤回後對應功能可能無法使用。診斷與效能上傳預設關閉，並可在 App 設定中關閉。
聯絡方式
如要詢問資料或刪除帳號，請寄信至 hither.support@gmail.com。
Privacy policy
Last updated: August 31, 2026
Hither is a group travel and gathering-point tool. This policy describes how the current Hither app handles data.
Data we process
- Account data: email address, nickname, avatar, sign-in provider, and identifiers created through Google, Apple, or email sign-in.
- Guest data: guest nickname and guest account identifier. Guest mode does not keep history or sync across devices. Data may not be recoverable after sign-out, deleting the app, or changing devices.
- Group data: group name, invite code, members and roles, gathering points, trip status, arrival times, notification settings, and team data you enter.
- Location data: when you grant location permission and use group features, the app processes device location, update time, movement, and distance to gathering points to show members on the map and update navigation status. Background location is used only when you enable the navigation feature that needs it.
- Diagnostics: only when diagnostic and performance logging is enabled in Settings, redacted error, performance, device, and app-version data is recorded and uploaded in batches. Coordinates, tokens, and email addresses are removed before upload.
- Purchase data: Premium plan, product and transaction identifiers needed to validate StoreKit purchases, and the entitlement state returned by the server. Apple processes payment data; Hither does not receive your full card number.
How we use data
We use this data for sign-in, account verification, group sync, maps and location features, notifications, Premium entitlements, support, diagnostics, and abuse prevention. We do not sell data to data brokers unless required by law or necessary to provide these functions.
Service providers
Hither uses Supabase for account, group, and verification data; Google Sign-In, Google Maps, AdMob, and other advertising services process necessary data only when you use the relevant features; Apple Authentication and StoreKit handle Apple sign-in and in-app purchases; Brevo sends verification and password-reset email through SMTP; Cloudflare Pages hosts this policy website. Each provider handles data under its own policy.
Retention and deletion
Registered account data is retained while the account is active. You can delete your account from the app's account settings. Hither then deletes or de-identifies account, group, and location data under its control, although records may be retained when required by law or needed to resolve a dispute. Guest accounts and data are retained for at most 14 days after joining a group, and may be lost sooner after sign-out, deleting the app, or changing devices.
Your controls
You can revoke location, notification, or tracking permissions in system settings; the related feature may stop working. Diagnostic and performance upload is off by default and can be disabled in the app settings.
Contact
For data questions or account deletion, email hither.support@gmail.com.