WildCore 隱私權政策 (Privacy Policy)

歡迎使用 WildCore！我們致力於為您提供卓越的野外生存工具箱，同時保護您的隱私。本隱私權政策說明了 WildCore 應用程式如何處理您的資料。

1. 本機資料處理 (離線安全)

作為一個以「離線優先 (Offline-first)」為設計核心的工具，我們絕大部分的功能完全在您的個人裝置上執行，任何相關資料均不會離開您的手機：

• 野外生存知識、物種資料庫與結繩教學： 所有搜尋與瀏覽均完全在裝置本機 SQLite 資料庫中處理。
• AI 植物與物種識別 (On-device Plant ID)： 使用本機 TensorFlow Lite (TFLite) 深度學習模型進行圖片分類。您的照片與鏡頭畫面完全在裝置本機處理，絕不傳送到任何雲端伺服器。
• 離線 LLM 助手： 使用本地編譯的 llama.cpp 進行本機 GGUF 模型推論，聊天歷史記錄安全地加密儲存於本機 Drift (SQLite) 資料庫中。
• 感測器數據 (氣壓計、指北針、GPS)： GPS 軌跡錄製、航向與氣壓高度感測完全在裝置本機讀取並儲存為本機 GPX 檔案。
• 緊急 SOS 聯絡人與安全計時器： 您的緊急聯絡人資訊與計時器狀態儲存在本機 Hive 儲存庫，僅在觸發緊急情況時才會調用系統簡訊進行發送。

2. 必要之網路傳輸

當您在使用特定網路串接功能時，App 將會在合理必要範圍內傳送部分資料：

• RevenueCat 訂閱驗證： 當您購買或驗證 Pro 專業版資格時，應用程式會與 RevenueCat API 通訊以取得與核對您的收據資訊及客戶識別碼。
• 線上地圖 (OpenStreetMap)： 當您使用線上地圖模式時，應用程式會向 OpenStreetMap 伺服器發送 Tiles 請求，此過程會向其揭露您的 IP 位址及顯示範圍。離線向量地圖包 (PMTiles) 下載則會連線至我們的 Cloudflare R2 儲存庫進行。
• 雲端 AI 備用連線 (選配)： 若您本機 LLM 推論效能受限，且您主動配置並啟用了 API Proxy base URL，則對話文字將會通過安全通道傳送至您設定的 proxy-server 進行處理。
• 語音助手 (Speech to Text)： 語音辨識功能調用系統 API，可能會將語音數據傳送至 Apple 或 Google 的伺服器進行語音轉文字解析。

3. 資料收集與第三方服務

我們本身不收集、不儲存、亦不追蹤您的任何個人識別資訊或定位記錄。我們也沒有內建任何第三方廣告追蹤器。以下為 WildCore 使用的第三方 SDK：

• RevenueCat SDK： 用於提供和管理內購與訂閱功能。閱讀 RevenueCat 隱私政策。

4. 如何要求刪除資料（WildCore / CB Studio）

WildCore 由 CB Studio 發行，不提供使用者帳號。本機資料與可能已傳送給第三方的識別碼，請依下列步驟處理：

1. 刪除本機資料：在 App 設定中清除對話紀錄／收回儲存空間，或解除安裝 WildCore。這會刪除裝置上的軌跡、聊天、緊急聯絡人與本機快取。作業系統備份仍可能保留副本，直到您一併刪除該備份。
2. 要求刪除訂閱／裝置識別碼：寄信至 stickeraistudio@gmail.com，主旨註明「WildCore 資料刪除」，並附上購買所用的 Google 帳號或訂單編號。我們會向 RevenueCat 提出刪除／匿名化請求。
3. 商店收據：Google Play／App Store 的付款紀錄由商店平台依其政策保留，開發者無法刪除平台側帳單。

我們會在收到可核對請求後 30 天內處理開發者可控的資料。已送出至上游（RevenueCat、OpenStreetMap、系統語音服務）的資料，撤回後不會自動從對方系統追回。

Privacy Policy

Welcome to WildCore! We are committed to providing you with a premium outdoor survival toolkit while respecting your privacy. This policy details how your data is processed.

1. Local Processing (On-Device Security)

As an offline-first utility, the vast majority of our features run entirely on your personal device. No data leaves your phone for these features:

• Survival Guide, Species Database, & Knot Tutorials: All search and browsing calculations are executed locally using an on-device SQLite database.
• AI Plant Identification: Image classification uses on-device TensorFlow Lite (TFLite) models. Your images and camera frames are processed locally and are never uploaded to the cloud.
• Offline LLM Chat: Chat inference runs locally via llama.cpp, and conversation history is saved securely in a local Drift (SQLite) database.
• Sensors (Barometer, Compass, GPS): GPS tracking, magnetic heading, and barometric altitude indicators read directly from device hardware and are saved as local GPX files.
• Emergency SOS Settings: Emergency contacts are saved locally via Hive and are only accessed when triggering SMS alerts via the device system composer.

2. Minimal Network Operations

The application only initiates network connections under the following scenarios:

• RevenueCat Purchases: Processing and validating Pro entitlement eligibility communicates receipts and customer identifiers securely with RevenueCat APIs.
• Online Basemaps (OpenStreetMap): Fetching online map tiles sends HTTP requests to OpenStreetMap servers, exposing your IP address and map viewport to them. Offline vector PMTiles downloads connect to our Cloudflare R2 repository.
• Cloud AI Fallback (Optional): If on-device LLM inference is disabled/unsupported and you configure an API Proxy Base URL, conversation text is routed via your proxy server.
• Speech-to-Text: Platform speech recognition APIs may process voice data via Apple or Google cloud endpoints depending on your OS configuration.

3. Data Collection & Third-Party SDKs

We do **not** collect, store, or sell your personal information or real-time location. No ad trackers are embedded in the app. The SDK used is:

• RevenueCat SDK: Used strictly for managing standard in-app purchases and subscriptions. View RevenueCat Privacy Policy.

4. How to request deletion (WildCore / CB Studio)

WildCore is published by CB Studio and does not offer user accounts. Use these steps for local data and identifiers that may have been sent to third parties:

1. Delete on-device data: Clear chat / reclaim storage in Settings, or uninstall WildCore. That removes tracks, chats, emergency contacts, and local caches on the device. OS backups may still retain a copy until you delete that backup too.
2. Request deletion of purchase / device identifiers: Email stickeraistudio@gmail.com with subject "WildCore data deletion" and the Google account or order ID used for the purchase. We will request deletion or anonymization via RevenueCat.
3. Store receipts: Google Play / App Store payment records are retained by the store under their policies; the developer cannot delete platform billing records.

We process developer-controlled data within 30 days of a verifiable request. Data already received by upstream services (RevenueCat, OpenStreetMap, OS speech) is not automatically recalled from those systems after withdrawal.