愛飛隱私權政策
Who runs 愛飛, what this page covers, and the date it takes effect. No company byline beyond what the law needs (L-357).
愛飛會留下什麼
What 愛飛 keeps and why: the phone number (kept only as a keyed hash), what the member says to 愛飛 in chat, the 行程 events and reminders, the facts 愛飛 remembers, saved items, bookings and purchases with their delivery contacts, and the phone the app runs on.
Google 日曆
你連上 Google 日曆時，愛飛只要求這些權限：
- 查看你所有日曆上的活動（唯讀）
https://www.googleapis.com/auth/calendar.events.readonly
- 愛飛只讀，不寫：不會在你的 Google 日曆新增、修改或刪除任何東西。
- 愛飛只讀今天前 7 天到之後 60 天的活動，每 30 分鐘同步一次。
- 中斷連線時，愛飛存的活動和你的授權會立刻刪除，也會請 Google 收回授權。
How calendar events are used: only to show them on 行程 and to plan, prepare and remind around them. Never sold, never used for ads, never used to train a model. The scopes, the window and the deletion lines above are rendered from code; don't restate them.
Aifi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The Limited Use sentence above, in 繁中, kept as close to Google's wording as the language allows.
誰會經手你的資料
- Anthropic：愛飛用它的模型理解你說的話、寫回覆。你跟愛飛說的話，和回覆用得到的行程、記得的事，會送到這裡。愛飛替你上網查資料時，搜尋也經過它。
- Amazon Web Services：愛飛的服務和資料放在這裡。
What 愛飛 never does with member data (sell it, advertise with it), and when people see it: the 專員 who carry out a booking or a purchase see what that task needs. The vendors are listed above from config; don't list them here.
保存多久
- Google 日曆的活動：結束超過 7 天，下一次同步就刪除；中斷連線時立刻全部刪除。
- PENDING 對話紀錄，和愛飛替你工作時留下的紀錄：保存多久還沒定。 (transcript retention, call 3)
- 刪除我的資料以後：24 小時內全部清除。
刪除你的資料
- 在愛飛的「我的」按「刪除我的資料」，帳號會立刻結束：每支手機都會登出，還沒送出的通知也不會再送。
- 24 小時內，你的資料會全部清除，沒辦法復原。這段時間裡用同一個手機號碼登入，會從一個新的帳號重新開始。
- 留下的只有稽核紀錄：發生過什麼、在什麼時候，不含你的任何資料。
- 也可以只刪掉某一天的對話，或請愛飛忘掉一件事。
安全
How data is protected, in transit and at rest, stated only as far as the build does it.
這份政策的變更
How a change to this page is announced, and when it takes effect.
聯絡我們
How to reach the people behind 愛飛 about privacy: an address that is read.