清BUS校巴時刻表 隱私權政策

開發者:花枝丸 Cuttlefish Ball。更新日期:2026-09-30。套件:com.cuttlefishball.tsingbus。

清BUS 是獨立開發的校巴時刻表與虛擬角色互動工具,並非國立清華大學、校巴營運單位或政府的官方 App。本政策說明清BUS 的資料處理,不適用於開發者的其他 App。

登入與資料

校巴查詢可不登入使用。Google 登入為選用功能;登入後 Firebase Authentication 會處理 Google 帳號電子郵件、顯示名稱、使用者識別碼(UID)及登入相關資訊,以驗證身分及提供雲端功能。我們不會取得您的 Google 密碼或信用卡號。

本機資料包括站點選擇、快取、偏好、個人介面設定與遊戲紀錄。登入後,雲端存檔可能包含暱稱、您選填的生日、遊戲分數與成就、角色互動及對話紀錄、房間與家具配置、虛擬資產及相關統計。學號、您選取的頭像照片及 GPS 座標不會納入清BUS 雲端存檔。

購買、VIP 與虛擬資產

Google Play Billing 處理 VIP、家具及扭蛋券等應用程式內購買。後端會處理與 UID 相關的商品代碼、購買憑證/交易識別資訊、驗證與消耗狀態、虛擬資產數量及帳本,以驗證、恢復權益、防止重複發放及處理退款。阿巴幣、扭蛋券與家具是 App 內虛擬內容,沒有現金兌換功能。扭蛋券可用於隨機虛擬獎勵。

排行榜與回報

當您主動提交排行榜,暱稱、分數、模式與提交時間會用於排行榜顯示;後端會處理 UID 及防作弊相關紀錄。請勿在公開暱稱中填入敏感資料。排行榜檢舉會將您提供的內容、相關帳號識別及時間交由開發者審查,相關通知可能透過電子郵件傳送給開發者。

到站回報包含班次、狀態與時間,用於彙整候車資訊;App 的定位座標不會隨到站回報上傳。

定位、通知及音樂

概略/精確位置權限是選用的,用於在裝置上比對最近站點;清BUS 不會上傳定位座標、在背景持續追蹤或記錄移動軌跡。拒絕定位仍可手動選站。通知權限用於您啟用的班車與角色提醒;背景音樂透過媒體播放前景服務及通知控制。不使用這些功能時可關閉或撤回權限。

廣告、分析與安全

Google AdMob 提供廣告,包括橫幅與獎勵式廣告。AdMob 可能處理 IP 位址及其推估概略位置、裝置/廣告識別資訊、廣告及產品互動、診斷資料,用於廣告、分析及防詐騙。這與前述僅在裝置上處理的 GPS 座標不同。VIP 去廣告權益由後端驗證。

Firebase Analytics 用於使用情形與功能事件分析;Firebase Firestore、Cloud Functions 及 Authentication 用於雲端資料、登入及權益;Firebase App Check/Play Integrity 用於驗證 App 與裝置、防止濫用。這些服務可能處理 IP、App 執行個體/安裝識別資訊及技術資料。資料以加密連線傳輸。我們不出售您的個人資料。

第三方說明:Google 隱私權政策、AdMob 資料揭露、Firebase 隱私與安全。

保存、刪除與聯絡

雲端帳號及相關功能資料在提供帳號、存檔和權益服務期間保存。您可在 App 設定使用「刪除帳號與雲端資料」,或不安裝 App 直接依帳號與資料刪除頁寄送請求。本機資料可透過 Android 的清除 App 資料或解除安裝移除。登出或解除安裝本身不等於刪除雲端帳號。

帳號刪除會清理 Firebase Auth、使用者雲端存檔與備份、虛擬資產與權益、使用者帳本、排行榜與可識別的檢舉者紀錄。全域購買驗證/防重複發放紀錄可能仍保留 UID、商品及購買憑證雜湊,用於購買防詐騙與重複領取防護;目前沒有自動到期清除機制。Google Play 及其他第三方各自管理的資料依其政策處理,刪除清BUS 帳號不會刪除 Google 帳號,也不會自動退款。

本 App 主要服務校園交通使用者,並非專為兒童設計。關於個人資料存取、更正或刪除,請聯絡 cuttlefishball.dev@gmail.com。政策更新會在本頁標示日期。

TsingBUS Privacy Policy

Developer: Cuttlefish Ball. Updated: 2026-09-30. Package: com.cuttlefishball.tsingbus. TsingBUS is an independent campus shuttle and virtual-character app, not an official university, transport operator or government app.

Account and cloud features

Shuttle lookup does not require sign-in. Optional Google sign-in uses Firebase Authentication to process your email, display name, UID and authentication information. Cloud features may store your nickname, optional birthday, game scores and achievements, character interactions and dialogue, room layout, furniture, virtual assets and statistics. Student IDs, selected avatar photos and GPS coordinates are excluded from TsingBUS cloud saves. We do not receive your Google password or card number.

Purchases and public features

Google Play Billing handles VIP, furniture and ticket purchases. Our backend processes account-linked product IDs, purchase verification identifiers/tokens or hashes, fulfillment/refund status and virtual-asset ledgers for verification, restoration and fraud prevention. Gacha tickets can yield random virtual rewards. Virtual assets cannot be cashed out. Optional leaderboard submissions display nickname, score, mode and submission time; the backend processes UID and anti-cheat records. Reports and related account/time information are reviewed by the developer; report notifications may be sent to the developer by email.

Permissions and third-party services

Optional GPS is processed on the device to select a nearby stop, not uploaded or continuously tracked in the background. Notifications support enabled shuttle/character reminders. Background music uses a media-playback foreground service. AdMob may process IP-derived approximate location, device/advertising identifiers, interactions and diagnostics for advertising, analytics and fraud prevention. Firebase Analytics processes feature/usage events. Firebase Authentication, Firestore and Functions support accounts, cloud saves and entitlements; App Check/Play Integrity support app/device verification. These services may process IP addresses, instance/install identifiers and technical data. Transfers use encrypted connections. We do not sell personal data.

Retention and deletion

Account/cloud data is retained while supporting your account and features. Use the in-app account deletion control or our external deletion-request page. Account deletion removes Firebase Auth, user cloud saves/backups, virtual assets and entitlements, user ledgers, leaderboard records and identifiable reporter records. Global purchase verification/deduplication records may retain UID, product and purchase-token hashes for purchase fraud prevention; no automatic expiry is currently implemented. Third-party records follow their own policies. Sign-out/uninstall alone does not delete the cloud account; deleting TsingBUS does not delete your Google account or automatically refund purchases. Contact: cuttlefishball.dev@gmail.com.