一、我們處理哪些資料

大部分藝術內容可在不登入的情況下瀏覽。只有在您主動使用特定功能時，我們才會處理下列資料：

• 帳號資料：若您選擇註冊或登入，我們會處理電子郵件地址、Firebase 使用者識別碼與驗證所需資訊。密碼由 Firebase Authentication 安全處理，Celfavia 無法以可讀形式查看您的密碼。
• 個人頭像：若您主動從相簿選擇圖片作為頭像，該圖片會上傳至 Firebase Storage，並與您的帳號連結。
• 投稿資料：若您投稿專文或原創畫作，我們會處理您提交的姓名、指導者與課程資訊、標題、內文、日期、作品資料、說明文字、圖片、審核狀態及投稿時間。經審核通過的內容可能在 THEARTGALLERY 中公開顯示。
• 檢舉與安全回報：若您提出內容檢舉，我們會處理被檢舉內容名稱、理由、提交時間，以及登入狀態下的使用者識別碼，以供內容安全與審核使用。
• 作品互動：App 可能記錄雲端投稿作品的累計瀏覽次數，用於顯示作品觀看數據；目前不會將該次瀏覽與您的姓名或電子郵件連結。
• 訂閱狀態：App 透過 Apple StoreKit 確認 VIP 訂閱是否有效，並在裝置上保存目前的權限狀態。我們不會取得您的信用卡號或完整付款資料。
• 服務與安全資訊：Firebase Authentication 等服務可能為了登入、安全與防止濫用而處理 IP 位址、使用者代理與必要的技術資訊。

二、我們如何使用資料

資料只會用於提供帳號與登入、保存個人頭像、接收與審核投稿、處理內容檢舉、顯示作品互動數據、確認訂閱權限、回覆支援需求，以及維護服務安全與穩定。

我們不出售您的個人資料，不使用資料進行第三方廣告，也不把 THEARTGALLERY 取得的資料與其他公司 App 或網站的資料結合來追蹤您。

三、相簿、相機、音訊與位置

• 相簿：只有當您主動選取頭像或投稿圖片時，App 才會取得您選擇的那一張圖片；App 不會讀取或上傳您的整個相簿。
• 相機：目前版本的智慧藝術辨識掃描仍在開發中，只顯示功能尚未開放的說明，不會啟動掃描，也不會為該功能收集相機影像。
• 音訊：語音導覽功能只會下載並播放 Celfavia 提供的音訊，不會使用麥克風，也不會錄製您的聲音。
• 位置：App 可顯示畫作或館藏地點，但目前不會要求或收集您的即時位置。

四、裝置內資料

語言選擇、收藏清單及部分使用狀態會保存在您的裝置上。這些資料主要用於記住偏好與提供 App 功能，不會因為單純加入收藏而上傳到 Celfavia 帳號。您可透過移除 App 清除這些本機資料。

五、第三方服務

THEARTGALLERY 使用 Google Firebase Authentication、Cloud Firestore 與 Cloud Storage 提供登入、資料庫及檔案儲存服務，並使用 Apple StoreKit 處理訂閱與恢復購買。圖片與音訊也可能由 Firebase Storage 傳送至您的裝置。

這些服務可能依其基礎設施在其他國家或地區處理資料。我們要求代表 Celfavia 處理資料的服務提供者，依其適用條款與安全措施保護資料。Apple 付款與訂閱資料亦受 Apple 的隱私權政策約束。

六、保存與刪除

帳號資料通常會保存至您刪除帳號為止。投稿與檢舉資料會在審核、內容安全、提供服務或履行法律義務所需期間內保存。Apple 管理付款與訂閱紀錄；刪除 Celfavia 帳號不會自動取消 Apple 訂閱。

已登入的使用者可在 App 的個人主頁選擇「永久刪除帳號」。這會刪除 Firebase 登入帳號、個人頭像與主要投稿資料庫紀錄。若您曾上傳原創畫作圖片、需要移除其他關聯檔案，或無法登入 App，請寄信提出刪除要求。我們也可能在法律、安全、防止濫用或備份輪替所必要的有限期間內保留部分資料。

七、您的選擇與權利

您可以不建立帳號並繼續瀏覽主要內容、不提供個人頭像或投稿、在 Apple ID 設定中管理或取消訂閱，以及要求存取、更正或刪除我們持有的個人資料。若要撤回同意或提出資料請求，請使用下方聯絡方式。

八、兒童隱私

THEARTGALLERY 並非以明知方式蒐集未達所在地法定年齡兒童的個人資料為目的。若您認為兒童在未取得必要同意的情況下提供了個人資料，請聯絡我們處理。

九、政策更新與聯絡

若 App 功能、資料處理方式或適用規定改變，我們會更新本政策與頁面日期。重大變更將以合理方式通知使用者。

1. Data we process

Most art content can be viewed without signing in. We process the following data only when you choose to use the relevant features:

• Account data: If you register or sign in, we process your email address, Firebase user ID, and information required for authentication. Passwords are securely handled by Firebase Authentication; Celfavia cannot view your password in readable form.
• Profile image: If you select an image from your photo library as a profile image, it is uploaded to Firebase Storage and associated with your account.
• Submitted content: If you submit an article or original artwork, we process the name, instructor and course information, title, body text, date, artwork details, description, image, review status, and submission time you provide. Approved content may be displayed publicly in THEARTGALLERY.
• Reports and safety requests: If you report content, we process the content name, reason, submission time, and—when signed in—your user ID for moderation and safety review.
• Artwork interaction: The app may increment aggregate view counts for cloud-submitted artworks. The current implementation does not link an individual view to your name or email address.
• Subscription status: The app uses Apple StoreKit to verify whether a VIP subscription is active and stores the current access state on the device. We do not receive your credit card number or complete payment details.
• Service and security information: Services such as Firebase Authentication may process IP addresses, user-agent information, and necessary technical information for sign-in, security, and abuse prevention.

2. How we use data

We use data only to provide accounts and authentication, store profile images, receive and review submissions, process content reports, display artwork interaction counts, verify subscription access, respond to support requests, and maintain service security and reliability.

We do not sell personal data, use it for third-party advertising, or combine THEARTGALLERY data with data from other companies’ apps or websites to track you.

3. Photos, camera, audio, and location

• Photos: The app accesses only the image you actively select for a profile image or artwork submission. It does not read or upload your entire photo library.
• Camera: The smart art recognition scanner in the current version remains in development and only shows an unavailable-feature notice. It does not start scanning or collect camera images for that feature.
• Audio: Audio guides only download and play audio provided by Celfavia. The app does not use the microphone or record your voice.
• Location: The app can display artwork or collection locations but does not currently request or collect your live location.

4. Data stored on your device

Language preference, favorites, and certain access states are stored on your device. These settings support app functionality and are not uploaded to a Celfavia account merely because you add a favorite. You can remove this local data by deleting the app.

5. Service providers

THEARTGALLERY uses Google Firebase Authentication, Cloud Firestore, and Cloud Storage for authentication, database, and file-storage services, and Apple StoreKit for subscriptions and purchase restoration. Images and audio may also be delivered to your device from Firebase Storage.

These providers may process data in other countries or regions through their infrastructure. We require service providers acting for Celfavia to protect data under their applicable terms and security measures. Payment and subscription data handled by Apple is also subject to Apple’s privacy policy.

6. Retention and deletion

Account data is generally retained until you delete your account. Submission and report data is kept as needed for review, content safety, service delivery, or legal obligations. Apple manages payment and subscription records; deleting a Celfavia account does not automatically cancel an Apple subscription.

Signed-in users can choose “Delete Account” from the profile screen. This deletes the Firebase Authentication account, profile image, and primary submission database records. If you uploaded an original artwork image, need other associated files removed, or cannot access the app, email us with a deletion request. Some information may be retained for a limited period when required for legal compliance, security, abuse prevention, or backup rotation.

7. Your choices and rights

You may browse the main content without creating an account, choose not to provide a profile image or submit content, manage or cancel subscriptions in your Apple ID settings, and request access to, correction of, or deletion of personal data we hold. To withdraw consent or make a data request, contact us below.

8. Children’s privacy

THEARTGALLERY is not intended to knowingly collect personal data from children below the applicable age of consent without legally required authorization. If you believe a child has provided personal data without the necessary consent, please contact us.

9. Changes and contact

We will update this policy and its effective date if app features, data practices, or applicable requirements change. We will provide reasonable notice of material changes.