Upfolio隐私政策
一句话：你的账本在上传前已经在你的装置上用你的密码加密，我们看不到内容；我们只保存运行账户、备份、排行榜和付费功能所需的最少资料，不会出售你的资料。
Upfolio（「本应用」）由马来西亚商号 JLYC TECH（SSM 注册号码 CT0170994-D）营运（「我们」）。本政策说明本应用收集哪些资料、怎么使用、存在哪里，以及你有什么权利。我们依照马来西亚《2010 年个人资料保护法》（PDPA）处理你的个人资料。
1. 我们收集的资料
| 资料 | 用途 | 存在哪里 |
|---|---|---|
| 电邮地址、密码（加密后由 Supabase 保存） | 注册、登入、找回账户 | Supabase 云端 |
| 用户名、等级、经验、攻击力、血量、胜败场、道具生效时间 | 全球排行榜、竞技场对战 | Supabase 云端，其他玩家看得到 |
| 资产金额（只有你在设定里打开「公开资产」才会上传） | 排行榜显示 | Supabase 云端 |
| 账本、投资、预算等全部记录 | 网上备份与同步 | 先在你的装置上用你的密码加密（AES-256），云端只存加密后的内容，我们无法读取 |
| 收据照片 | 只存在你的装置上 | 你的装置 |
| Pro / 去广告 / 试用状态、优惠码使用记录、每日 AI 使用次数 | 提供付费功能、防止滥用 | Supabase 云端 |
| 检举记录（谁检举了谁、原因、时间） | 处理不雅用户名和作弊 | Supabase 云端，只有开发者看得到 |
2. AI 功能（Pro）
当你使用「AI 收据审核」或「AI 读截图」时，该张图片或文字会经过我们的服务器传送给 Google Gemini 进行辨识，结果送回你的装置。我们的服务器不保存图片或文字。我们使用 Google 的付费服务，依 Google 的条款，这些内容不会被用来训练 Google 的模型。
3. 银行通知（Android）
如果你在 Android 上开启「读取通知」，本应用只会在你的装置上读取看起来是付款或收款的通知（例如 Maybank、Touch 'n Go），用来帮你建立待确认的记录。通知内容不会上传，除非你是 Pro 用户并让 AI 帮忙辨识。你可以随时在手机设定里关闭这项权限。
4. 广告
免费版会显示 Google AdMob 广告。AdMob 可能会收集装置识别码、大概位置和使用资料来投放和衡量广告，详见 Google 广告政策。Pro 用户和已购买「永久去广告」的用户不会看到广告。iPhone 上，只有在你允许追踪时才会显示个人化广告。在欧洲 / 英国，应用会先请你选择是否同意，之后可在「设定 → 广告隐私设定」更改。
5. 投资报价
自动更新股价时，本应用会把股票代码（例如 1155.KL）发送给 Yahoo Finance 取得价格，不会发送你的持股数量或身份资料。
6. 付款
订阅和购买由 Apple App Store 或 Google Play 处理。我们看不到你的信用卡或付款资料，只会收到购买是否成功的确认。
7. 我们不会做的事
- 不会出售或出租你的个人资料。
- 不会读取你的银行账户或密码。
- 不会把你的账本内容用于广告。
8. 资料保存与删除
只要你的账户存在，我们就保存上述资料。你可以随时在应用里删除账户（背包 → 账户 → 永久删除账户），或依照删除账户页面的方法要求删除。删除后，云端的账户、备份、排行榜和对战记录、付费资格会立即永久删除；系统备份最多在 30 天内清除。
9. 你的权利
你可以要求查阅、更正或删除你的个人资料，也可以撤回同意（例如关闭通知权限、删除账户）。请用下方电邮联络我们，我们会在 21 天内回复。
10. 儿童
本应用不适合 13 岁以下儿童使用，我们也不会故意收集他们的资料。
11. 资料安全与传输
所有传输都经过加密（HTTPS）。云端服务由 Supabase 提供，伺服器可能位于马来西亚以外的地区。
12. 政策更新
如果政策有重要改变，我们会在应用内或本页面通知，并更新生效日期。
13. 联络我们
Privacy Policy
In short: your ledger is encrypted on your device with your password before it is uploaded, so we cannot read it. We keep only what is needed to run your account, backup, leaderboard and paid features, and we never sell your data.
Upfolio ("the app") is operated by JLYC TECH, a business registered in Malaysia (SSM CT0170994-D) ("we"). We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Data we collect
| Data | Purpose | Where it is stored |
|---|---|---|
| Email address, password (hashed by Supabase) | Sign-up, sign-in, account recovery | Supabase cloud |
| Username, level, XP, attack, HP, wins/losses, item timers | Global leaderboard, arena battles | Supabase cloud, visible to other players |
| Net worth (only if you turn on "Show assets") | Leaderboard display | Supabase cloud |
| All ledger, investment and budget records | Cloud backup and sync | Encrypted on your device with your password (AES-256); the cloud stores only the encrypted copy, which we cannot read |
| Receipt photos | Kept on your device only | Your device |
| Pro / no-ads / trial status, coupon use, daily AI use count | Paid features, abuse prevention | Supabase cloud |
| Reports (who reported whom, reason, time) | Handling offensive usernames and cheating | Supabase cloud, visible only to the developer |
2. AI features (Pro)
When you use AI receipt check or AI screenshot reading, that image or text is sent through our server to Google Gemini and the result is returned to your device. Our server does not keep it. We use Google's paid service, under whose terms this content is not used to train Google's models.
3. Bank notifications (Android)
If you allow notification access on Android, the app reads, on your device only, notifications that look like payments (e.g. Maybank, Touch 'n Go) to suggest records for you to confirm. They are not uploaded unless you are a Pro member using AI reading. You can turn this permission off at any time in your phone settings.
4. Advertising
The free version shows Google AdMob ads. AdMob may collect device identifiers, approximate location and usage data to serve and measure ads; see Google's advertising policies. Pro members and players who bought "Remove ads forever" see no ads. On iPhone, personalised ads are shown only if you allow tracking. In the EEA / UK the app asks for your choice first, and you can change it later in Settings → Ad privacy choices.
5. Investment prices
To update prices, the app sends ticker symbols (e.g. 1155.KL) to Yahoo Finance — never your holdings or identity.
6. Payments
Subscriptions and purchases are processed by the Apple App Store or Google Play. We never see your card or payment details, only confirmation that a purchase succeeded.
7. What we never do
- Sell or rent your personal data.
- Access your bank accounts or banking passwords.
- Use your ledger contents for advertising.
8. Retention and deletion
We keep this data while your account exists. Delete your account in the app at any time (Bag → Account → Delete account permanently) or as described on the account deletion page. Your account, backup, leaderboard and battle records and paid status are then permanently deleted at once; system backups are purged within 30 days.
9. Your rights
You may ask to access, correct or delete your personal data, or withdraw consent (e.g. turn off notification access, delete your account). Email us below; we reply within 21 days.
10. Children
The app is not intended for children under 13, and we do not knowingly collect their data.
11. Security and transfers
All traffic is encrypted (HTTPS). Cloud services are provided by Supabase, whose servers may be outside Malaysia.
12. Changes
We will announce material changes in the app or on this page and update the effective date.
13. Contact
Email: customer@upfolio.my