TalentPGround 隱私權政策

生效日期：2026-09-20

1. 我們是誰

TalentPGround（以下稱「本服務」）由 TalentPGround 團隊 營運，讓家長、孩子與教練共同記錄孩子的才藝學習。對本政策有任何問題，或要行使您的權利，請來信：eric01301117@icloud.com。

2. 我們蒐集哪些資料

我們只蒐集提供服務所需的資料：

• 帳號資料：家長與教練的姓名、電子郵件與登入憑證。孩子沒有自己的電子郵件或密碼，由家長建立並以登入碼使用。
• 孩子的資料：家長填寫的名字、出生年、才藝項目；孩子在 app 內的顯示名稱與頭像照片。
• 學習紀錄：練習與上課紀錄的文字、時間長度、日期，以及附加的照片與影片；教練的評語與回覆；家長的確認與回饋。
• 互動內容：孩子與已加為好友的孩子之間的留言、孩子選擇分享給好友的紀錄（文字與照片）。
• 課表與記帳：課程時間、請假紀錄；家長自行記錄的學費與繳費資訊（僅家長本人可見，我們不處理任何付款，也不蒐集信用卡等支付資料）。
• 裝置資料：用來傳送推播通知的裝置推播權杖，以及 app 版本。

3. 我們如何使用資料

資料只用於提供與維護本服務的功能：顯示與同步學習紀錄、在家長／孩子／教練之間分享家長已授權的內容、傳送通知、計算孩子的練習回饋與遊戲進度，以及保護帳號安全。

我們不投放廣告、不使用第三方分析工具、不追蹤您在其他 app 或網站的活動，也不販售任何個人資料。

4. 誰看得到孩子的資料

• 家長：自己孩子的全部資料。
• 教練：僅限家長以邀請碼連結的孩子，且只能看到該才藝的課堂與練習紀錄；看不到家長專屬的資訊（例如記帳、家長的回饋）。家長可隨時停用連結。
• 好友：孩子只能與互相接受邀請的孩子成為好友；好友看得到顯示名稱、頭像、房間，以及孩子選擇分享的紀錄。家長可以關閉分享。

5. 受我們委託處理資料的服務供應商

下列供應商代表我們處理資料，僅用於提供本服務：

• Supabase：資料庫、檔案儲存與帳號登入。
• Expo 推播服務、Apple Push Notification service、Google Firebase Cloud Messaging：傳送推播通知（處理裝置推播權杖與通知內容；通知內容可能包含孩子的顯示名稱）。
• Google Gemini（Google LLC）：僅在下方第 6 節所述的條件下處理。

6. 第三方 AI（預設關閉，需要您明確同意）

本服務有兩項功能可以使用第三方 AI 服務 Google Gemini（由 Google LLC 提供）：「孩子自主練習的評分與回饋」以及「教練的程度評估建議」。

AI 功能預設為關閉。只有在本服務已啟用 AI 功能，且您在 app 內看過完整說明並按下「同意」之後，才會傳送資料；在那之前，以及您不同意或撤回之後，我們不會向第三方 AI 傳送任何資料，這些功能會改用內建的計分公式與內建問卷，仍可正常使用。

誰來同意：孩子的資料一律由家長決定（每個孩子、每項用途分開設定）；孩子本人無法開啟。教練輸入的文字由教練本人決定。教練的程度評估必須「教練」與「該孩子的家長」都同意才會使用 AI。

同意後會傳送的資料：孩子的練習心得文字（含最近數筆）、練習時間與日期、連續練習天數等統計、當天是否上課、家長確認紀錄的比例、附件的種類與長度、才藝名稱、教練評定的初始程度、孩子的年齡（僅程度評估），以及教練輸入的文字與（在該教練也同意時）教練最新一則評語。照片與影片本身不會傳送。

我們不會主動附帶姓名、帳號、照片或影片；但輸入的文字會原樣傳送，請不要在文字中寫入姓名、學校、電話等個人資料。

練習紀錄與教練評語依本政策儲存；AI 處理不另行保存組合後的完整提示詞，評分與回饋會保存。Google 依其服務條款，可能為了安全與防止濫用而短期留存輸入與輸出。本服務目前**未啟用** AI 功能；啟用之前，我們會確認所採用的方案不會把內容用於訓練模型，並在本政策更新供應商與條件。

您可以隨時在設定的「AI 資料使用」關閉。關閉後不會再有新的傳送；已送出的請求無法收回，既有的 AI 評分結果會保留。

7. 兒童隱私

孩子的帳號只能由家長建立。我們只蒐集孩子使用本服務所需的資料，不向孩子顯示廣告，不讓孩子與陌生人互動，也不提供對外連結或購買功能給孩子。

家長可以隨時在 app 內查看、更正孩子的資料，關閉好友分享、停用教練連結、撤回 AI 同意，或刪除帳號與全部資料；也可以來信 eric01301117@icloud.com 要求協助。

8. 資料保存與刪除

資料會保存到您刪除為止。家長可在「家庭 → 設定 → 刪除帳號」刪除帳號：帳號、所有孩子的資料、全部紀錄與雲端上的照片影片、課表、記帳與孩子的遊戲進度會被永久刪除。

教練刪除帳號時，會刪除教練帳號與所有學生連結；教練已上傳的課堂紀錄會保留給該家庭，因為那是孩子的成長紀錄。

以 Sign in with Apple 建立的帳號，刪除時會一併撤銷本 app 的 Apple 授權。

刪除後，服務供應商的例行備份會依其週期自動清除。

9. 資料安全

資料在傳輸過程中加密；資料庫以逐列的存取規則確保每個人只能讀到被授權的資料；照片與影片以有時效的簽名網址提供。

10. 政策變更

本政策若有重大變更，我們會在 app 內通知；若變更涉及第三方 AI 會傳送的資料或供應商，先前的同意會失效，我們會重新徵求您的同意。

TalentPGround Privacy Policy

Effective date: 2026-09-20

1. Who we are

TalentPGround (the "Service") is operated by TalentPGround 團隊. It lets parents, children and coaches keep a shared record of a child's extracurricular learning. For questions about this policy or to exercise your rights, contact eric01301117@icloud.com.

2. Data we collect

We collect only what is needed to provide the Service:

• Account data: name, email address and sign-in credentials of parents and coaches. Children have no email or password of their own; a parent creates the child profile and the child signs in with a login code.
• Child data: the name, birth year and activities entered by the parent; the child's in-app display name and avatar photo.
• Learning records: text, duration and date of practice and lesson records, and attached photos and videos; coach comments and replies; parent confirmations and reactions.
• Interactions: messages between children who have accepted each other as friends, and records (text and photos) a child chooses to share with friends.
• Schedule and bookkeeping: lesson times and absences; tuition notes a parent records for themselves (visible only to that parent — we process no payments and collect no card details).
• Device data: the push notification token of your device and the app version.

3. How we use data

Data is used only to provide and maintain the Service: showing and syncing learning records, sharing what the parent has authorised between parent, child and coach, sending notifications, computing the child's practice feedback and game progress, and keeping accounts secure.

We show no ads, use no third-party analytics, do not track you across other apps or websites, and never sell personal data.

4. Who can see a child's data

• Parents: all data of their own children.
• Coaches: only children a parent has linked with an invitation code, and only lesson and practice records for that activity. Coaches cannot see parent-only information such as bookkeeping or parent reactions. A parent can disable the link at any time.
• Friends: a child can only be friends with children who mutually accepted an invitation. Friends can see the display name, avatar, room, and records the child chooses to share. A parent can turn sharing off.

5. Service providers that process data on our behalf

These providers process data for us solely to deliver the Service:

• Supabase: database, file storage and authentication.
• Expo push service, Apple Push Notification service and Google Firebase Cloud Messaging: delivering push notifications (device push token and notification content, which may include the child's display name).
• Google Gemini (Google LLC): only under the conditions in section 6.

6. Third-party AI (off by default; requires your explicit consent)

Two features can use the third-party AI service Google Gemini, provided by Google LLC: scoring and feedback for a child's self-practice, and grade suggestions for a coach's assessment.

AI is off by default. Data is sent only when the Service has AI enabled and you have read the full in-app disclosure and tapped "Agree". Before that — and after you decline or withdraw — nothing is sent to any third-party AI; these features use a built-in scoring formula and a built-in questionnaire instead and remain fully usable.

Who consents: a child's data is always decided by the parent (per child and per purpose); a child cannot turn AI on. Text typed by a coach is decided by that coach. A coach assessment uses AI only when both the coach and that child's parent have agreed.

Data sent after consent: the child's practice notes (including a few recent ones), practice duration and dates, streak and similar statistics, whether there was a lesson that day, the share of records the parent confirmed, the type and length of attachments, the activity name, the initial grade set by the coach, the child's age (assessment only), text typed by the coach and — only if that coach has also agreed — the coach's latest comment. Photos and videos themselves are never sent.

We do not attach names, account identifiers, photos or videos; however, typed text is sent as written, so please do not include names, schools, phone numbers or other personal details in it.

Practice records and coach comments are stored under this policy; AI processing does not separately store the assembled prompt, while the resulting score and feedback are stored. Under its terms Google may briefly retain inputs and outputs for safety and abuse prevention. The AI feature is currently **disabled**; before enabling it we will confirm that the plan we use does not train models on the content, and update this policy with the provider and the applicable terms.

You can turn this off at any time under Settings → "AI 資料使用" (AI data use). After that no new transmissions occur; requests already sent cannot be recalled, and existing AI scores are kept.

7. Children's privacy

A child profile can only be created by a parent. We collect only what the child needs to use the Service, show no ads to children, do not let children interact with strangers, and offer children no external links or purchases.

A parent can at any time review and correct the child's data in the app, turn off friend sharing, disable a coach link, withdraw AI consent, or delete the account and all data — or contact eric01301117@icloud.com for help.

8. Retention and deletion

Data is kept until you delete it. A parent can delete the account under Family → Settings → Delete account: the account, all child data, all records and the photos and videos in cloud storage, schedules, bookkeeping and the child's game progress are permanently deleted.

When a coach deletes their account, the coach account and all student links are deleted; lesson records the coach uploaded remain with the family because they are the child's learning history.

Accounts created with Sign in with Apple also have their Apple authorization for this app revoked on deletion.

After deletion, routine backups held by our service providers expire on their normal cycle.

9. Security

Data is encrypted in transit; row-level access rules ensure each person can only read what they are authorised to; photos and videos are served through time-limited signed URLs.

10. Changes

We will notify you in the app of material changes. If a change affects what is sent to a third-party AI or which provider is used, earlier consent becomes invalid and we will ask again.