Privacy Policy

Privacy Policy

FLIP is a location-based guide. We collect the minimum data needed to run the service: your account email, profile name and optional avatar, the routes you purchase, and your progress unlocking stops.

Location. Your live location is used while the app is open to show nearby routes and guide you along an active walk; your continuous position is not stored. When you unlock a stop, we record the coordinates and GPS accuracy of that single moment, and for each walk we store when each stop was opened or skipped plus summary statistics (distance and time on route). These records power your walk history, prevent fraud, and are deleted with your account. Location data is never sold or shared with advertisers. If you allow background location — the app asks when you turn on hands-free audio or start a route with hands-free stops — it is used only during an active walk, to detect arrivals and alert you when you reach a stop.

Motion & Fitness (iPhone). If you allow Motion & Fitness access, FLIP reads the number of steps your iPhone counted between the start and end of a walk and stores that single number with the walk, to show it in your walk summary. We read no other health or motion data. On Android, the step figure is an estimate from walk distance and no sensor data is read. You can turn access off in iOS Settings at any time; the stored step counts are deleted with your account.

Purchases. Payments are handled by the App Store and Google Play. We store a record that you own a route, the price paid, and the transaction id — never your card details.

Notifications. If you allow notifications we store a device push token to send you alerts such as achievements, nearby routes, likes and replies on your posts, a reminder before a walk closes, arrival at a stop, and notice when a route you bought is withdrawn. You can choose which alerts you get in Account → Settings → Notifications, or turn them all off in device Settings at any time.

Usage analytics. We collect first-party, in-app usage events — such as which Discover cards you view, routes you open, purchases, and stops you unlock — to improve the app and understand what content is popular. This data is tied to your account only to power your experience; we do not track you across other apps or websites and show no third-party ads. Content you publish in FLIP — posts, photos, guestbook entries, reviews, and routes — may be used to train, fine-tune, and evaluate AI models that improve FLIP; your account details and location records are not used for this.

Service providers. We use service providers, under contract and only to run FLIP, for: hosting, database, and file storage; processing App Store and Google Play purchases; maps; crash and error reporting; and AI-assisted processing that screens published content for safety, translates posts and routes, powers search, and sorts feedback you send us by urgency. They receive only the data needed for that task and may not use it for their own purposes.

International transfers. Your data may be processed and stored outside the country you are in, including in Hong Kong and the hosting regions of our service providers.

Marketing. We only send marketing emails or promotions if you explicitly opt in under Account → Edit profile → “Send me updates.” You can withdraw consent anytime by turning it off.

Consent records. When you accept these terms, the Creator Terms, or the walk safety notice, we record the document version, time, and screen — proof of consent we are required to keep. These records are deleted with your account.

Your data & deletion. You can edit your profile in the app and permanently delete your account from Account → Edit profile → Delete account. Deletion removes your profile, entitlements, progress, location records, analytics events and notifications.

Contact

Questions about your data or these terms? Contact admin@flipthecity.tech.

私隱政策

FLIP 是一個以定位為本的導賞服務。我們只收集營運服務所需的最少資料：你的帳戶電郵、個人檔案名稱及可選的頭像、你購買的路線，以及你解鎖站點的進度。

定位。 你的實時位置在應用程式打開時用於顯示附近路線，以及在進行中的步行沿途引導你；你的連續位置不會被儲存。當你解鎖站點時，我們會記錄該一刻的座標及 GPS 精確度，並為每次步行儲存每個站點打開或略過的時間，以及摘要統計（距離及路線上的時間）。這些紀錄支援你的步行歷史、防止欺詐，並會隨你的帳戶一併刪除。位置資料絕不出售或與廣告商分享。如你允許背景定位——應用程式會在你開啟免提音訊，或開始一條設有免提站點的路線時詢問——它只會在進行中的步行期間使用，用於偵測抵達及在你到達站點時提示你。

動作與健身（iPhone）。 如你允許「動作與健身」權限，FLIP 會讀取你的 iPhone 在一次步行開始至結束期間記錄的步數，並只將這一個數字與該次步行一併儲存，用於在步行摘要中顯示。我們不會讀取任何其他健康或動作資料。在 Android 上，步數是按步行距離估算，不會讀取任何感應器資料。你可隨時在 iOS「設定」中關閉此權限；已儲存的步數會隨你的帳戶一併刪除。

購買。 付款由 App Store 及 Google Play 處理。我們只儲存你擁有某條路線的紀錄、支付的價格及交易編號——絕不儲存你的信用卡資料。

通知。 如你允許通知，我們會儲存裝置推送權杖，以向你發送提示，例如成就、附近路線、你的貼文獲讚好及回覆、步行結束前的提醒、到達站點，以及你購買的路線被下架的通知。你可在「帳戶 → 設定 → 通知」選擇接收哪些提示，或隨時在裝置「設定」中全部關閉。

使用分析。 我們收集第一方的應用程式內使用事件——例如你查看了哪些探索卡片、打開了哪些路線、購買及解鎖了哪些站點——以改進應用程式並了解哪些內容受歡迎。這些資料只為支援你的體驗而與你的帳戶關聯；我們不會跨其他應用程式或網站追蹤你，也不展示第三方廣告。你在 FLIP 發佈的內容——帖文、相片、留言簿留言、評價及路線——可能會用於訓練、微調及評估改進 FLIP 的人工智能模型；你的帳戶資料及位置紀錄不會用於此用途。

服務供應商。 我們按合約委託服務供應商，只為營運 FLIP 而處理以下工作：託管、資料庫及檔案儲存；處理 App Store 及 Google Play 購買；地圖；當機及錯誤報告；以及 AI 輔助處理——用於篩查已發佈內容的安全性、翻譯貼文及路線、支援搜尋，以及按緊急程度分類你發送給我們的意見反饋。他們只會收到該項工作所需的資料，且不得將其用於自身目的。

跨境傳輸。 你的資料可能在你身處國家／地區以外處理及儲存，包括香港及我們服務供應商的託管地區。

市場推廣。 只有當你在「帳戶 → 編輯個人檔案 → 傳送最新消息給我」明確選擇接收時，我們才會發送市場推廣電郵或優惠。你可隨時關閉該選項以撤回同意。

同意紀錄。 當你接受本條款、《創作者條款》或步行安全須知時，我們會記錄文件版本、時間及畫面——這是我們須保存的同意證明。這些紀錄會隨你的帳戶一併刪除。

你的資料與刪除。 你可以在應用程式內編輯個人檔案，並在「帳戶 → 編輯個人檔案 → 刪除帳戶」永久刪除帳戶。刪除會移除你的個人檔案、購買權益、進度、位置紀錄、分析事件及通知。

聯絡我們

對你的資料或本條款有疑問？請聯絡 admin@flipthecity.tech。