Defo 隱私權政策
Privacy Policy
繁體中文
發布者與聯絡方式
本政策適用於 Defo Android 應用程式。
Google 帳號與必要驗證
所有使用者（包括免費使用者）都必須先用 Google 帳號登入。Defo 不提供電子郵件／密碼或其他登入方式。首次登入需要網路；成功後可完整離線使用相機、相簿、匯入及濾鏡庫。
約每 30 天在有網路且 App 位於前景時，背景重新驗證；網路失敗不會阻擋已登入使用者拍照。伺服器確認帳號停用、刪除或憑證撤銷時會登出；其他離線裝置需連線驗證後才會得知撤銷。
驗證資料、用途與處理服務
Defo 使用 Google LLC 提供的 Firebase Authentication 處理 Google 登入。App 讀取電子郵件地址與 Firebase 使用者 ID（UID），用於必要的帳號管理與存取 App；UID 日後可用來綁定購買權益。目前沒有整合付款功能，不蒐集購買紀錄。App 不讀取、顯示或另存 Google 姓名與頭像。
Google 登入／Firebase 服務本身仍可能依授權接收 Google 提供的基本個人資料；App 沒有讀取某欄位不代表服務端一定沒有該欄位。驗證服務也會處理 IP 位址、User-agent 與驗證憑證，以提供登入及防止濫用。Firebase 使用 HTTPS 加密傳輸，並依其資料處理條款處理驗證資料；Google 帳號本身另受 Google 政策約束。App 不會把登入 token、電子郵件或 UID 寫入診斷日誌。
App 沒有廣告、Analytics、Crashlytics 或 Gemini SDK，也沒有把照片或 EXIF 上傳到 Firebase 或發布者的功能。
保存、登出與刪除帳號
帳號資料在您要求刪除前保留於 Firebase Authentication。您可從「濾鏡庫 → 關於 Defo → 帳號」登出或刪除 Defo 帳號；刪除可能要求重新使用同一 Google 帳號驗證。登出不等於刪除伺服器帳號。成功刪除會清除本機登入與驗證狀態並回到登入頁，不會刪除您的 Google 帳號，也不會刪除裝置上的照片。
無法使用 App 時，請依帳號刪除說明，從登入使用的電子郵件寄信至 support@defocam.com。發布者會確認帳號歸屬並刪除 Firebase 帳號，不會要求您的密碼、驗證碼或 token。Firebase 的 IP 安全紀錄可能保留數週；依 Firebase 政策，帳號刪除後，相關資料從其即時及備份系統移除可能需要最多 180 天。
照片、EXIF 與分享
相機權限僅供拍照及即時預覽，影像與濾鏡在裝置上處理，JPEG 存於 Pictures/Defo。RAW 的 DNG 與伴隨 JPEG 只作暫存，處理後刪除；中斷後會重試清理，RAW 模式只保存處理後的 JPEG。
匯入只讀取您透過 Android 相片選擇器授權的照片。來源供應者可能自行從雲端讀取您選取的照片；這不會把照片交給 Firebase。來源可讀取的既有 EXIF（包含 GPS 位置）會保留在儲存的副本中，方向、尺寸、軟體／濾鏡與等效焦長會依輸出更新；被供應者遮蔽的欄位無法保留。App 不要求定位權限，不取得即時位置。
照片留在裝置的共享媒體庫；登出、刪除帳號或解除安裝都不會自動刪除照片。主動分享可能把含 EXIF／GPS 的照片交給您選定的 App；系統相簿或您啟用的服務也可能備份或同步照片，請查閱接收方的政策與設定。
本機設定與 Android 備份
濾鏡、常用、工具順序及相機／相簿偏好儲存在本機設定中，可能依您的設定納入 Android 的裝置備份或移機。Firebase 登入憑證與私有影像快取不包含在備份內。驗證時間與 UID 的雜湊參照存於不納入備份的裝置保護儲存區，並綁定此次安裝；新裝置或還原的裝置必須重新登入。雜湊參照不是購買權益或密碼，目前不會傳送至任何付款服務。
政策更新
資料流程改變時會更新本政策與日期。Firebase 的資料處理及保存資訊：firebase.google.com/support/privacy
English
Publisher and contact
This policy applies to the Defo Android application.
Contact: support@defocam.com
Policy URL: https://defocam.com/privacy/
Required Google sign-in
Every user, including free users, must sign in with a Google account. Defo offers no email/password or other sign-in provider. The first sign-in needs a connection; afterwards the camera, album, import and filter library work fully offline.
Roughly every 30 days, while online and in the foreground, Defo silently re-verifies the account. A network failure never blocks an already signed-in user from taking photos. A server-confirmed disabled or deleted account, or a revoked credential, signs the user out. Other offline devices learn about the revocation after reconnecting and verifying.
Authentication data and purposes
Google LLC provides Firebase Authentication for Google sign-in. The app reads your email address and Firebase user ID (UID) for required account management and app access. The UID may later be used to bind purchases. Billing is not integrated and no purchase history is collected. The app does not read, display or separately save your Google display name or photo.
Google sign-in and Firebase may themselves receive basic profile data supplied by Google under your authorization; a field the app does not read is not a guarantee that the provider stores no such field. Authentication also processes IP addresses, user agents and credentials for sign-in and abuse prevention. Firebase encrypts transport with HTTPS and processes authentication data under its data-processing terms. Your Google account is separately governed by Google's policies. App diagnostics never log tokens, email addresses or UIDs.
There are no advertising, Analytics, Crashlytics or Gemini SDKs, and no feature that uploads photos or EXIF to Firebase or to the publisher.
Retention, sign-out and deletion
Account data stays in Firebase Authentication until you request deletion. Use Filter library → About Defo → Account to sign out or delete your Defo account. Deletion may require re-authentication with the same Google account. Signing out does not delete the server account. A successful deletion clears the local sign-in and verification state and returns to the sign-in screen. It deletes neither your Google account nor the photos on your device.
Without the app, follow the account deletion page and email support@defocam.com from your sign-in address. The publisher will verify ownership and delete the Firebase account, without asking for passwords, verification codes or tokens. Firebase may retain IP security logs for a few weeks; under Firebase's policy, removal of deleted account data from live and backup systems can take up to 180 days.
Photos, EXIF and sharing
Camera access is used only to take photos and show the live preview. Images and filters are processed on the device; JPEGs are stored in Pictures/Defo. RAW DNG and companion JPEG files are temporary and are deleted after processing, or cleaned up on retry after an interruption. RAW mode saves only the processed JPEG.
Import reads only photos you authorize through Android's photo picker. A source provider may retrieve a selected original from its cloud; this does not upload it to Firebase. Readable existing EXIF, including GPS location, is preserved in the saved copy; orientation, dimensions, software/filter and equivalent focal length are updated. Fields withheld by a provider cannot be preserved. The app requests no location permission and obtains no live location.
Photos remain in the device's shared media library; signing out, deleting the account or uninstalling does not delete them. When you choose to share, the receiving app may get photos containing EXIF/GPS. Your gallery or services you enable may separately back up or sync photos; please review their settings and policies.
Local settings and Android backup
Filter selections, favourites, tool order and camera/gallery preferences are stored locally. Android's own device backup or transfer may include those settings, depending on your settings. Firebase credentials and private image caches are excluded. The verification time and a UID hash reference are kept in backup-excluded, device-protected storage bound to this installation; a new or restored device must sign in again. The hash reference is not a purchase entitlement or password and is not currently sent to any payment service.
Updates
This policy and its date will be updated when the data flow changes. Firebase processing and retention details: firebase.google.com/support/privacy