隱私權政策

養肌聯盟 PRO

隱私權政策 — 養肌聯盟 PRO

最後更新：2026 年 6 月 1 日

1. 前言

本隱私權政策說明養肌場運動工作室（以下稱「我們」）所經營的「養肌聯盟 PRO」行動應用程式（以下稱「本 App」）如何蒐集、使用、儲存與分享您的個人資料。本 App 是一套健身房會員管理系統，提供會員帳號管理、課程預約、上課簽到、課程與會籍購買紀錄等功能。

當您下載、註冊或使用本 App 時，即表示您已閱讀並同意本政策的內容。

2. 我們蒐集哪些資料

我們僅蒐集提供會員管理服務所必需的資料，分為以下幾類：

2.1 帳號與聯絡資料

  • 姓名（顯示名稱）
  • 電子郵件（透過 Google、Apple 或電子郵件註冊登入取得）
  • 電話號碼，以及您選填的緊急聯絡人電話
  • 個人頭像照片（您選擇上傳時）
  • 帳號識別碼與角色（會員 / 教練 / 管理者）

2.2 上課與服務紀錄

  • 課程預約紀錄（時段、教練、課程類型）
  • 上課簽到紀錄，包含您在簽到時親簽的電子簽名圖檔與上課時數
  • 課程餘額與會籍到期日

2.3 購買紀錄

  • 課程與會籍的購買紀錄：購買堂數 / 天數、金額、購買與到期日期、備註。

註：這些紀錄通常由健身房管理者於後台代為登錄，本 App 不在程式內處理信用卡或金流付款，因此我們不蒐集您的信用卡號或銀行帳戶資訊。

2.4 電話驗證資料

  • 為驗證您的電話號碼，我們會產生一次性驗證碼（OTP）並透過簡訊發送。我們會暫存驗證碼與發送 / 驗證的相關紀錄（含異常紀錄，例如重試次數），以防止濫用。

2.5 第三方登入資料

  • 當您選擇使用 Google 或 Apple 登入時，我們會自您所選擇的登入服務取得您的基本帳號資料（電子郵件、顯示名稱，Apple 登入支援「隱藏我的電子郵件」）。

2.6 相機與裝置權限

  • 相機：當您使用「掃描會員 QR code 進行簽到」或「拍攝、上傳個人頭像照片」功能時，本 App 會向您請求相機權限。掃描 QR code 時僅即時讀取畫面中的條碼資訊、不會儲存或上傳任何影像；頭像照片則僅在您主動拍攝並選擇上傳時才會保存（見 2.1）。您可隨時於裝置的系統設定中關閉相機權限，但屆時將無法使用掃描簽到等相關功能。

2.7 診斷與當機資料

  • 為維持本 App 的穩定性並修正錯誤，當本 App 於正式版發生錯誤或當機時，我們會透過 Firebase Crashlytics 蒐集當機與錯誤診斷資料，包括：錯誤訊息與錯誤代碼、發生當下的畫面與操作、App 版本與建置編號，以及為協助除錯而附帶的帳號識別碼（uid）與角色。此類資料僅用於診斷與修正問題，不用於廣告，也不會進行跨 App／跨網站追蹤。開發測試模式不會送出此類資料。

我們不蒐集的資料：本 App 不蒐集您的地理位置、不讀取您的通訊錄、不蒐集健康量測數據（如體重 / 心率，不串接 HealthKit）、不蒐集瀏覽紀錄，也沒有使用任何廣告或行為分析（analytics）追蹤工具（當機診斷工具 Firebase Crashlytics 僅用於修正錯誤，非廣告或行為追蹤）。

3. 我們如何使用這些資料

我們僅將上述資料用於提供與維運本 App 的功能，包括：

  • 姓名、Email、電話：建立與辨識您的會員帳號、聯繫您、發送電話驗證簡訊。
  • 緊急聯絡人：於緊急狀況時聯繫。
  • 頭像：於 App 內辨識會員與教練。
  • 預約、簽到、電子簽名：安排課程、記錄出席，作為上課與扣課堂的憑證。
  • 課程餘額、會籍到期、購買紀錄：管理您的課程權益、結算堂數與會籍。
  • 電話驗證碼與紀錄：確認電話真實性、防止帳號濫用。

我們不會將您的個人資料用於跨應用程式或跨網站的廣告追蹤，也不會將您的資料出售給資料仲介或廣告商。

4. 第三方服務與資料分享

為了提供服務，我們使用下列第三方服務供應商。這些供應商僅為協助本 App 運作而處理資料，受其各自隱私政策規範：

  • Firebase（Google Cloud Platform）：處理帳號、聯絡資料、頭像、電子簽名、預約 / 簽到 / 購買等所有會員資料，作為本 App 的雲端後端，提供身份驗證、資料庫、雲端函式與檔案儲存。資料儲存於亞洲（台灣 asia-east1）區域。
  • Every8D（互動資通股份有限公司）：僅處理您的電話號碼與驗證碼簡訊內容，用於發送電話驗證（OTP）簡訊。我們不會將您的姓名、Email 或其他資料提供給簡訊供應商。
  • Google 登入：於您選擇使用 Google 登入時，取得您的 Google 基本帳號資料（Email、顯示名稱、頭像）以驗證您的身份。
  • Apple 登入：於您選擇使用 Apple 登入時，取得您的 Apple 基本帳號資料（Email、姓名）以驗證您的身份，並支援 Apple 的「隱藏我的電子郵件」。
  • Firebase Crashlytics（Google）：處理當機與錯誤診斷資料（含錯誤訊息、App 版本、帳號識別碼 uid 等），用於回報並修正本 App 的當機與錯誤。資料受 Google 隱私政策規範。

除上述供應商外，除非取得您的同意、或依法律要求（如法院命令或主管機關要求）外，我們不會將您的個人資料提供給其他第三方。

5. 資料保留與刪除

保留期間：在您的帳號存續期間，我們會保留您的會員資料以提供持續服務。基於營運與帳務需求（例如課程權益、購買與簽到紀錄的查證），部分交易與簽到紀錄可能在帳號刪除後，以去識別化或封存形式保留一段合理期間。

帳號刪除（自助）：您可以隨時於本 App 的「個人資料」頁面使用「刪除帳號」功能刪除您的帳號，您也可以透過下方聯絡方式提出刪除請求。帳號刪除後，您的個人識別資料將被移除或封存，且不再用於提供服務。

6. 您的權利

在適用法律允許的範圍內，您對自己的個人資料享有下列權利：

  • 查詢與閱覽：要求查詢我們持有的您的個人資料。
  • 更正：要求更正不正確的資料（部分資料可於 App 內自行修改）。
  • 刪除：要求刪除您的帳號與個人資料（見第 5 節）。
  • 停止使用 / 撤回同意：要求停止蒐集或使用您的個人資料；撤回同意可能導致無法繼續使用本 App。

欲行使上述權利，請透過第 10 節的聯絡方式與我們聯繫。我們將於合理期間內回覆。

7. 資料安全

我們採取合理的技術與管理措施保護您的資料，包括透過 Firebase 平台的加密傳輸與存取控制。惟請理解，沒有任何網路傳輸或儲存方式能保證百分之百安全。

8. 兒童隱私

本 App 主要面向健身房會員，並非針對 13 歲以下兒童設計。若未成年人欲使用本服務，應由其法定代理人同意並代為管理帳號。若我們發現在未經適當同意下蒐集了兒童的個人資料，將儘速刪除。

9. 政策變更

我們可能不時更新本政策。重大變更時，我們會於 App 內或透過適當方式通知您，並更新本頁的生效日期。建議您定期查閱本政策。

10. 聯絡我們

若您對本隱私權政策有任何疑問，或欲行使您的權利，請聯絡：

  • 資料控管者：養肌場運動工作室
  • 聯絡 Email：service@hoyodigital.com
  • 地址：台中市西區柳川東路二段 131 號 3 樓
  • 準據法與管轄：本政策依中華民國（台灣）法律解釋與適用。

‍

Privacy Policy — Muscle Alliance PRO

Last updated: June 1, 2026

1. Introduction

This Privacy Policy explains how the "Muscle Alliance PRO" mobile application (the "App"), operated by Yang Ji Sports Studio ("we", "us", "our"), collects, uses, stores, and shares your personal data. The App is a gym membership management system that provides member account management, class booking, class check-in, and records of course and membership purchases.

By downloading, registering for, or using the App, you acknowledge that you have read and agree to this Policy.

2. What Data We Collect

We collect only the data necessary to provide our membership management service, in the following categories:

2.1 Account and Contact Data

  • Name (display name)
  • Email (obtained when you register or sign in via Google, Apple, or email)
  • Phone number, and an optional emergency contact phone number you may provide
  • Profile photo (when you choose to upload one)
  • Account identifier and role (member / coach / manager)

2.2 Class and Service Records

  • Class booking records (time slot, coach, class type)
  • Check-in records, including the electronic signature image you sign at check-in and the class duration
  • Course balance and membership expiry date

2.3 Purchase Records

  • Records of course and membership purchases: number of sessions / days purchased, amount, purchase and expiry dates, and notes.

Note: These records are usually entered on your behalf by gym managers in the back office. The App does not process credit card or other payments in-app, so we do not collect your credit card number or bank account information.

2.4 Phone Verification Data

  • To verify your phone number, we generate a one-time passcode (OTP) and send it by SMS. We temporarily store the passcode and related send/verify records (including anomaly records such as retry counts) to prevent abuse.

2.5 Third-Party Sign-In Data

  • When you choose to sign in with Google or Apple, we obtain basic account data from the sign-in service you select (email and display name; Apple Sign In supports "Hide My Email").

2.6 Camera and Device Permissions

  • Camera: When you use the "scan member QR code to check in" or "take/upload a profile photo" features, the App requests camera permission. When scanning a QR code, we only read the barcode information from the camera frame in real time and do not store or upload any image; a profile photo is saved only when you actively take and choose to upload it (see 2.1). You may disable camera permission at any time in your device settings, but you will then be unable to use scan check-in and related features.

2.7 Diagnostics and Crash Data

  • To maintain the stability of the App and fix errors, when an error or crash occurs in the production version of the App, we collect crash and error diagnostics data via Firebase Crashlytics, including: the error message and error code, the screen and action at the time, the app version and build number, and—to assist debugging—the attached account identifier (uid) and role. This data is used solely to diagnose and fix issues, and is not used for advertising or any cross-app/cross-site tracking. Development/test mode does not send this data.

Data we do NOT collect: The App does not collect your geolocation, does not read your contacts, does not collect health measurement data (such as weight / heart rate; it does not integrate with HealthKit), does not collect browsing history, and does not use any advertising or behavioral analytics tracking tools (the crash-diagnostics tool Firebase Crashlytics is used only to fix errors and is not advertising or behavioral tracking).

3. How We Use This Data

We use the above data solely to provide and operate the App's features, including:

  • Name, email, phone: to create and identify your member account, contact you, and send phone verification SMS.
  • Emergency contact: to reach someone in case of an emergency.
  • Profile photo: to identify members and coaches within the App.
  • Bookings, check-ins, electronic signature: to schedule classes, record attendance, and serve as proof of attendance and session deduction.
  • Course balance, membership expiry, purchase records: to manage your course entitlements and reconcile sessions and membership.
  • Phone verification codes and records: to confirm the authenticity of your phone number and prevent account abuse.

We do not use your personal data for cross-app or cross-site advertising tracking, and we do not sell your data to data brokers or advertisers.

4. Third-Party Services and Data Sharing

To provide the service, we use the following third-party service providers. These providers process data only to help operate the App and are governed by their respective privacy policies:

  • Firebase (Google Cloud Platform): processes accounts, contact data, profile photos, electronic signatures, and all member data such as bookings / check-ins / purchases, serving as the App's cloud backend for authentication, database, cloud functions, and file storage. Data is stored in the Asia (Taiwan, asia-east1) region.
  • Every8D (Teamplus Technology): processes only your phone number and the OTP message content, to send phone verification (OTP) SMS. We do not provide your name, email, or other data to the SMS provider.
  • Google Sign-In: when you choose to sign in with Google, obtains your basic Google account data (email, display name, profile photo) to verify your identity.
  • Apple Sign-In: when you choose to sign in with Apple, obtains your basic Apple account data (email, name) to verify your identity, and supports Apple's "Hide My Email".
  • Firebase Crashlytics (Google): processes crash and error diagnostics data (including error messages, app version, and account identifier uid) to report and fix crashes and errors in the App. This data is governed by Google's privacy policy.

Other than the providers above, we do not provide your personal data to any other third party except with your consent or as required by law (such as a court order or a request from a competent authority).

5. Data Retention and Deletion

Retention period: While your account is active, we retain your member data to provide ongoing service. For operational and accounting needs (such as verifying course entitlements, purchases, and check-in records), some transaction and check-in records may be retained for a reasonable period after account deletion in de-identified or archived form.

Account deletion (self-service): You can delete your account at any time using the "Delete Account" feature on the App's "Profile" page, or request deletion via the contact methods below. After account deletion, your personally identifiable data will be removed or archived and no longer used to provide the service.

6. Your Rights

To the extent permitted by applicable law, you have the following rights regarding your personal data:

  • Access: request access to the personal data we hold about you.
  • Correction: request correction of inaccurate data (some data can be edited within the App).
  • Deletion: request deletion of your account and personal data (see Section 5).
  • Stop processing / withdraw consent: request that we stop collecting or using your personal data; withdrawing consent may prevent continued use of the App.

To exercise these rights, please contact us using the methods in Section 10. We will respond within a reasonable time.

7. Data Security

We take reasonable technical and organizational measures to protect your data, including encrypted transmission and access control via the Firebase platform. Please understand, however, that no method of transmission over the Internet or method of electronic storage can be guaranteed to be 100% secure.

8. Children's Privacy

The App is primarily intended for gym members and is not designed for children under the age of 13. If a minor wishes to use this service, it should be done with the consent of, and managed by, their legal guardian. If we become aware that we have collected a child's personal data without appropriate consent, we will delete it as soon as possible.

9. Changes to This Policy

We may update this Policy from time to time. For significant changes, we will notify you within the App or by other appropriate means and update the effective date on this page. You are advised to review this Policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

  • Data controller: Yang Ji Sports Studio (養肌場運動工作室)
  • Contact email: service@hoyodigital.com
  • Address: 3F, No. 131, Sec. 2, Liuchuan E. Rd., West Dist., Taichung City, Taiwan
  • Governing law: This Policy is interpreted and applied under the laws of the Republic of China (Taiwan).

‍