私隱政策
OtterBoard 鍵盤在你的 iPhone 上處理所有輸入。我們不會收集你的輸入作分析。你可以選擇將設定及學習紀錄手動備份到自己的 iCloud。
本政策說明 OtterBoard（包括 OtterBoard App 及 OtterBoard 鍵盤擴充功能，下稱「OtterBoard」）處理哪些資料、原因，以及你可以如何控制。OtterBoard 由 One Eternal LTD（下稱「我們」）提供。
1. 鍵盤輸入
倉頡、速成、粵拼及英文輸入全部在裝置上處理。鍵盤擴充功能不會上載輸入文字、候選字或手勢軌跡作產品分析。主 App 不會備份完整輸入文字或手勢軌跡。主 App 的自選 iCloud 備份見第 3 節。
2. 「完全取用」
iOS 會詢問你是否為 OtterBoard 開啟「完全取用」。開啟後，鍵盤可以使用按鍵聲及觸覺回應，並可與 OtterBoard App 共用設定、學習紀錄及購買狀態。鍵盤會傳送不包含輸入內容的技術診斷，以調查穩定性及效能問題。不開啟「完全取用」時，鍵盤仍可正常輸入。
3. 儲存在裝置上的資料
以下資料預設儲存在你的裝置上，包括 App 與鍵盤共用的 App Group 儲存空間：
- 鍵盤設定，例如輸入法、主題及手勢選項；
- 學習紀錄，即你曾經選擇的候選字及跟隨字，用於改善候選排序；
- 最近使用的表情符號。
你可以在 OtterBoard App 內選擇「清除學習紀錄」，或刪除 App 以移除上述本機資料。
自選 iCloud 備份
只有你在 App 內確認「備份到 iCloud」後，主 App 才會將設定、學習紀錄（包括選過的候選字、選擇頻率及接續字）及常用表情符號與膚色，上載到你的 Apple iCloud 私人資料庫。只保留最新一份備份，不會自動同步；不會備份完整輸入文字、手勢軌跡、購買資格或分析識別碼。還原會覆蓋相應本機資料。
清除本機學習紀錄或刪除 App 不會刪除 iCloud 備份。你可以在 App 的「iCloud 備份」頁刪除雲端備份。未開啟「完全取用」時，鍵盤獨立儲存的資料無法由主 App 備份。
4. OtterBoard App 收集的資料
OtterBoard App（用於設定鍵盤的主程式，並非鍵盤本身）會收集以下資料，用於了解使用情況、修正錯誤、處理購買及發送通知：
產品分析（PostHog）
- App 開啟、關閉等使用事件，以及你開啟的 App 頁面名稱；
- 你在 App 內作出的設定變更及操作事件；
- 錯誤及當機報告；
- 功能開關狀態及推送通知的開啟事件；
- 裝置型號、iOS 版本、App 版本及語言等技術資料。
以上資料連同一個隨機產生的匿名識別碼傳送至 PostHog 的歐盟伺服器（eu.i.posthog.com）。我們不會把這些資料與你的姓名、電郵或電話號碼連結。
購買（Apple 及 RevenueCat）
OtterBoard Pro 的付款由 Apple 的 App Store 處理。我們使用 RevenueCat 驗證購買及權益狀態，RevenueCat 會處理匿名的購買識別碼、交易紀錄及訂閱狀態。我們不會取得你的付款卡資料。
推送通知（Apple、Supabase 及 PostHog）
如你允許通知，App 會取得 Apple 提供的裝置推送代碼，並連同 App 語言、推送環境及一個隨機產生的裝置識別碼，儲存於 Supabase，與一個匿名帳戶識別碼連結。推送代碼亦會提供予 PostHog 以發送通知。OtterBoard 沒有用戶帳戶，你無須提供任何個人資料。你可隨時在 iOS「設定」中關閉通知。
廣告及追蹤許可（Google AdMob）
如你使用顯示廣告的版本，OtterBoard 會使用 Google AdMob 提供廣告。AdMob 可能處理 IP 位址推算的大概位置、裝置及廣告識別碼、廣告展示與互動、App 操作事件，以及當機及效能資料，用於提供、衡量及改善廣告。鍵盤輸入內容及 iCloud 學習備份不會提供予廣告服務。
個人化廣告及跨 App 或網站追蹤須先取得你的 iOS「App 追蹤透明度」（ATT）許可，以及適用地區要求的廣告同意。你可以拒絕或稍後撤回許可；拒絕後仍可使用鍵盤，並可能看到非個人化或有限廣告。非個人化廣告仍可能處理提供廣告及防止欺詐所需的資料。
5. 我們不會做的事
- 不會收集你用鍵盤輸入的內容作產品分析；自選 iCloud 備份見第 3 節；
- 不會出售你的資料；
- 不會將鍵盤輸入內容或 iCloud 學習備份用於廣告；
- 不會在未取得所需許可的情況下進行個人化廣告追蹤。
6. 服務供應商
| Google AdMob | 在顯示廣告的版本中提供及衡量廣告。私隱政策 |
|---|---|
| PostHog | 產品分析、錯誤報告及推送通知。私隱政策 |
| RevenueCat | 購買驗證及訂閱狀態。私隱政策 |
| Supabase | 儲存匿名帳戶識別碼及推送代碼。私隱政策 |
| Apple | App Store 付款及推送通知服務。私隱政策 |
7. 資料保留
我們只會在提供及改善 OtterBoard 所需的期間保留 App 收集的資料。裝置的推送代碼被新代碼取代時，舊代碼會被刪除。你可隨時要求刪除與你裝置有關的資料。
8. 你的選擇及權利
- 在 iOS「設定」→「私隱與保安」→「追蹤」拒絕或撤回 OtterBoard 的追蹤許可；廣告版本亦會按適用地區提供廣告同意選項；
- 在 iOS「設定」中關閉 OtterBoard 的通知；
- 在 App 內清除學習紀錄，或刪除 App 以移除裝置上的所有資料；
- 根據適用的資料保護法例，你可以要求查閱、更正或刪除與你有關的資料。由於資料以匿名識別碼儲存，請在電郵中提供足以讓我們找出相關資料的資訊，例如大約的安裝日期及裝置型號。
9. 兒童
OtterBoard 並非專為 13 歲以下兒童設計，我們不會在知情的情況下收集兒童的個人資料。
10. 政策更新
如本政策有重大修改，我們會更新本頁的生效日期，並在適當情況下於 App 內通知你。
11. 聯絡我們
如對本政策有任何疑問，或需要行使你的權利，請電郵至 [email protected]。
Privacy Policy
The OtterBoard keyboard processes everything you type on your iPhone. We do not collect your input for analytics. You can choose to manually back up settings and learning data to your own iCloud.
This policy explains what data OtterBoard (the OtterBoard app and the OtterBoard keyboard extension, together "OtterBoard") handles, why, and what you can control. OtterBoard is provided by One Eternal LTD ("we").
1. Keyboard input
Cangjie, Quick, Jyutping and English input are processed entirely on the device. The keyboard extension does not upload input text, candidates or swipe paths for product analytics. Complete typed text and swipe paths are not included in backups. See section 3 for the companion app’s optional iCloud backup.
2. Full Access
iOS asks whether to allow Full Access for OtterBoard. With it on, the keyboard can play key clicks and haptics and share settings, learned choices and purchase status with the OtterBoard app. The keyboard sends technical diagnostics without input content to investigate stability and performance problems. Without Full Access the keyboard still types normally.
3. Data stored on your device
The following is stored on your device by default, including the App Group storage shared by the app and the keyboard:
- keyboard settings such as input method, theme and gesture options;
- learning data: candidates and follow-up characters you have chosen, used to improve ranking;
- recently used emoji.
Use "清除學習紀錄" (Clear learning) in the OtterBoard app, or delete the app, to remove this local data.
Optional iCloud backup
Only after you confirm "Back Up to iCloud" in the app does the companion app upload settings, learning data (chosen candidates, choice counts and follow-up characters), and recent emoji and skin tone to your private Apple iCloud database. Only the latest backup is kept; it does not sync automatically. Complete typed text, swipe paths, purchase entitlements and analytics identifiers are not backed up. Restoring replaces the corresponding local data.
Clearing local learning data or deleting the app does not delete the iCloud backup. You can delete the cloud backup from the app’s iCloud Backup page. Data stored separately by the keyboard without Full Access cannot be backed up by the companion app.
4. Data collected by the OtterBoard app
The OtterBoard app (the companion app used to configure the keyboard, not the keyboard itself) collects the following to understand usage, fix problems, process purchases and send notifications:
Product analytics (PostHog)
- app lifecycle events and the names of app screens you open;
- settings changes and actions you take in the app;
- error and crash reports;
- feature flag state and notification open events;
- technical data such as device model, iOS version, app version and language.
This is sent with a randomly generated anonymous identifier to PostHog's EU servers (eu.i.posthog.com). We do not link it to your name, email address or phone number.
Purchases (Apple and RevenueCat)
OtterBoard Pro payments are processed by Apple's App Store. We use RevenueCat to validate purchases and entitlements; it processes an anonymous purchase identifier, transaction records and subscription status. We never receive your payment card details.
Push notifications (Apple, Supabase and PostHog)
If you allow notifications, the app obtains a device push token from Apple and stores it in Supabase together with the app language, the push environment and a randomly generated device identifier, linked to an anonymous account identifier. The push token is also provided to PostHog to deliver notifications. OtterBoard has no user accounts and never asks for personal details. You can turn notifications off at any time in iOS Settings.
Advertising and tracking permission (Google AdMob)
In versions that display ads, OtterBoard uses Google AdMob to serve advertising. AdMob may process approximate location inferred from IP addresses, device and advertising identifiers, ad impressions and interactions, app interaction events, and crash and performance data to deliver, measure and improve ads. Keyboard input and iCloud learning backups are not provided to advertising services.
Personalized advertising and tracking across apps or websites require your iOS App Tracking Transparency (ATT) permission and any advertising consent required in your region. You can decline or later withdraw permission and continue using the keyboard. You may still see non-personalized or limited ads. Non-personalized ads may still process data needed to deliver ads and prevent fraud.
5. What we do not do
- We do not collect keyboard input for product analytics. See section 3 for optional iCloud backup.
- We do not sell your data.
- We do not use keyboard input or iCloud learning backups for advertising.
- We do not perform personalized advertising tracking without the required permissions.
6. Service providers
| Google AdMob | Ad delivery and measurement in versions that display ads. Privacy policy |
|---|---|
| PostHog | Analytics, error reports and notifications. Privacy policy |
| RevenueCat | Purchase validation and subscription status. Privacy policy |
| Supabase | Stores the anonymous account identifier and push token. Privacy policy |
| Apple | App Store payments and push notification delivery. Privacy policy |
7. Retention
We keep data collected by the app only as long as needed to provide and improve OtterBoard. When your device's push token changes, the old one is deleted. You can ask us to delete data related to your device at any time.
8. Your choices and rights
- Decline or withdraw OtterBoard tracking permission in iOS Settings → Privacy & Security → Tracking. Versions with ads also provide advertising consent choices where required.
- Turn off OtterBoard notifications in iOS Settings.
- Clear learning in the app, or delete the app to remove all on-device data.
- Subject to applicable data protection law, you may request access to, correction of or deletion of data about you. Because data is stored under anonymous identifiers, please include details that help us find it, such as the approximate install date and device model.
9. Children
OtterBoard is not directed at children under 13, and we do not knowingly collect personal data from children.
10. Changes
If we make material changes, we will update the effective date on this page and, where appropriate, let you know in the app.
11. Contact
For questions about this policy or to exercise your rights, email [email protected].