FogRover 隱私權政策
最後更新:2026 年 9 月 13 日
生效日:2026 年 9 月 13 日
本政策說明 FogRover(以下稱「本 App」)如何處理你的資料。本 App 由個人開發者 candan(以下稱「我們」)開發與提供。
摘要(30 秒版本)
- 本 App 沒有伺服器,也沒有帳號。 我們不蒐集、不接收、也看不到你的任何一筆資料。
- 你走過的位置、解鎖的網格、步數、寵物與成就,全部存在你 iPhone 的 App 沙箱裡。
- 沒有分析工具、沒有崩潰回報、沒有廣告 SDK、沒有第三方追蹤。
- 本 App 不會為了運作而連網。全程開飛航模式,走路、開圖與所有單人功能都完全正常。
- 只有三件事會讓資料離開這支手機,而且三件都預設關著,需要你自己打開:iCloud 備份、Game Center 排行榜、隊伍共享。
- 刪除本 App 就會清除這支手機上的全部資料。
1. 誰負責你的資料
| 提供者 | candan(個人開發者) |
| App | FogRover: Urban Expeditions |
| 聯絡方式 | candanweng@gmail.com |
由於本 App 不蒐集、不傳輸任何資料給我們,在絕大多數情境下,我們並不是你個人資料的「控管者」——我們沒有一個存放你資料的資料庫,因為我們沒有伺服器。
2. 我們不蒐集的東西
我們不會蒐集、要求或接收以下任何一項:
- 姓名、電子郵件、電話號碼或任何帳號資訊(本 App 沒有註冊與登入)
- 你的位置資料(它不會離開你的裝置,見第 3 節)
- 裝置識別碼、廣告識別碼(IDFA)或任何追蹤識別碼
- 使用行為分析、事件記錄、當機報告
- 聯絡人、行事曆、麥克風、相機或健康 App(HealthKit)資料
- 任何付款或信用卡資訊(購買全由 Apple 處理,見第 6 節)
本 App 不會為了廣告或任何目的,跨其他公司的 App 或網站追蹤你。
3. 本 App 在你的裝置上處理哪些資料
以下資料全部儲存在你 iPhone 的 App 沙箱內(App 專屬的本機資料庫),不會傳送給我們:
| 資料 | 來源 | 用途 | 是否離開裝置 |
|---|---|---|---|
| 位置座標 | 裝置 GPS(Core Location) | 即時計算你踏進了哪些網格,撥開地圖迷霧 | 否(除非你開啟第 5 節的功能) |
| 已解鎖網格 | 上述計算結果 | 記錄拓荒進度、成就與行政區完成度 | 否(除非你開啟第 5 節的功能) |
| 步數 | 裝置計步器(Core Motion) | 換算每日鑽石獎勵與寵物派遣進度 | 否 |
| 遊戲存檔 | App 內產生 | 寵物血量、鑽石餘額、成就、報表 | 否(除非你開啟 iCloud 備份) |
| 照片的拍攝座標 | 你授權存取的相簿(PhotoKit) | 把照片錨定到你已走過的網格,製作「時空記憶明信片」 | 否 |
| 購買權益 | Apple StoreKit | 判定你買過哪些項目,以發放對應內容 | 由 Apple 管理(見第 6 節) |
關於照片:本 App 只讀取照片的 EXIF 拍攝座標用於比對,不會複製你的原始照片、不會上傳,也不會將照片傳送到任何地方。明信片是在你的裝置上合成的。
4. App 會向你要求的權限,以及為什麼
| 權限 | 為什麼需要 | 不給會怎樣 |
|---|---|---|
| 定位(使用 App 期間 / 永遠) | 這是本 App 的核心:沒有位置就無法撥開迷霧。選擇「永遠允許」才能在你把 App 收到背景或關閉螢幕時,繼續沿路開圖 | 拒絕則無法開圖;僅允許「使用期間」則背景不會開圖 |
| 動作與健身 | 讀取計步資料,換算每日獎勵與寵物派遣進度 | 步數相關的獎勵與進度不會累積 |
| 照片(讀取) | 讀取照片的拍攝座標,製作時空記憶明信片 | 無法使用明信片的照片錨定功能 |
| 照片(寫入) | 把產生的明信片存回你的相簿 | 無法儲存明信片到相簿 |
| 通知 | 本機通知(寵物派遣完成、每日提醒等)。這些通知全部在你的裝置上產生,不經過任何推播伺服器 | 收不到提醒 |
你可以隨時在 iOS「設定」→ FogRover 中變更任何權限。
5. 唯三會讓資料離開這支手機的功能
以下三項功能預設全部關閉。沒有打開時,本 App 連一次網路連線都不會建立。
5.1 iCloud 備份(預設關)
- 何時發生:只在你自己按下「立即備份」時。本 App 沒有自動同步。
- 送到哪裡:你自己的 iCloud 私有資料庫,只有你的 Apple ID 讀得到,也不會出現在「檔案」App 裡。不是我們的伺服器——我們沒有伺服器。
- 送出什麼:你的遊戲存檔(已解鎖網格、寵物血量、鑽石餘額、成就紀錄)。
- 誰看得到:只有你。我們無法存取。
- 適用 Apple 的隱私權政策。
5.2 Game Center 排行榜與成就(預設關)
- 何時發生:只在你自己開啟此功能之後。未開啟時,本 App 連 Game Center 的登入都不會呼叫。
- 送出什麼:兩個數字——你最高的行政區完成度百分比,以及最近七天的步數總和。不含任何座標或路線。
- 送到哪裡:Apple 的 Game Center 服務,由 Apple 營運,適用 Apple 的隱私權政策與 Game Center 的相關條款。
- 誰看得到:你在 Game Center 的好友。
- 你可隨時在 App 內關閉此功能。
5.3 隊伍共享開圖(預設關)
這是三者中唯一會送出「你去過哪裡」的功能,因此它送出的資料是刻意粗化的:
- 解析度:約 5 平方公里一格(一個行政區通常橫跨好幾格)。街道尺度的紀錄從來不會離開這支手機。
- 送到哪裡:透過 Apple 的 CloudKit 分享功能,送往你與隊友之間的共享資料庫。不是我們的伺服器。
- 誰看得到:只有你邀請或你加入的隊友。
- 退出後:你退出隊伍時,隊友裝置上你的那一份覆蓋資料會被清除。
- 請注意:隊友在他的裝置上看得到這份粗略覆蓋。請只與你信任的人組隊。
6. 購買與付款
本 App 的所有購買都經由 Apple 的 App Store 完成。
我們不會接觸、接收或儲存你的付款資料(信用卡、Apple 帳戶資訊、帳單地址等)——這些全部由 Apple 處理,適用 Apple 的隱私權政策。
本 App 從 Apple 的 StoreKit 讀取的,只有「你買過哪些項目」這件事實(購買權益),用來發放對應的遊戲內容。這項判定在你的裝置上完成。
7. 兒童隱私
本 App 不針對 13 歲以下兒童設計,也不會蒐集任何兒童的個人資料——事實上,本 App 不蒐集任何人的個人資料。
本 App 不含使用者自製內容、聊天或陌生人交友功能。若你是家長或監護人,建議使用 iOS 的「螢幕使用時間」管理 App 內購買。
8. 資料保存與刪除
| 資料在哪 | 保存多久 | 怎麼刪除 |
|---|---|---|
| 你 iPhone 上的 App 沙箱 | 直到你刪除 | 刪除本 App 即清除這支手機上的全部資料 |
| 你的 iCloud(若你備份過) | 直到你刪除 | 在 iOS「設定」→ 你的 Apple 帳戶 → iCloud →「管理帳戶儲存空間」 中刪除 FogRover 的資料 |
| Game Center(若你開啟過) | 依 Apple 政策 | 在 Game Center 設定中管理,或聯絡 Apple |
| 隊伍共享(若你加入過) | 直到你退出 | 退出隊伍,隊友裝置上的那一份即被清除 |
我們手上沒有你的資料副本,因此沒有需要我們刪除的東西。
9. 你的權利(GDPR / CCPA 等)
各地法律(如歐盟 GDPR、英國 UK GDPR、美國加州 CCPA/CPRA、台灣個人資料保護法)賦予你查詢、更正、刪除、限制處理與資料可攜等權利。
由於我們不蒐集、不接收、不儲存你的個人資料:
- 我們沒有可供你查詢或索取的資料;
- 我們沒有可供我們刪除的資料——刪除權由你透過刪除 App 直接行使(見第 8 節);
- 我們不販售、不分享你的個人資料(我們沒有可販售的東西);
- 我們不進行任何自動化決策或側寫。
你的資料在你的裝置上,控制權完全在你手上。若你仍有任何疑問,歡迎來信:candanweng@gmail.com。
10. 安全性
你的遊戲資料存放在 iOS 的 App 沙箱中,受 iOS 本身的檔案保護機制保障。少數一次性的購買旗標存放於 iOS 鑰匙圈(Keychain)。
若你開啟第 5 節的任一功能,傳輸與儲存由 Apple 的基礎建設(iCloud、CloudKit、Game Center)負責,適用 Apple 的安全與隱私措施。
請注意:沒有任何方法能保證絕對安全。 保護你裝置的密碼、Face ID 與 Apple 帳戶安全,是保護這些資料最有效的方式。
11. 第三方
本 App 不含任何第三方分析、廣告或追蹤 SDK。
本 App 使用的第三方服務只有 Apple 自家服務:App Store(購買)、iCloud / CloudKit(備份與隊伍共享)、Game Center(排行榜)。使用這些服務時,適用 Apple 的隱私權政策。
本 App 內建的離線公開資料集(行政區界線、景點資料等)是隨 App 一起打包的靜態檔案,使用時不會向任何伺服器發出請求。其來源與授權標示列於 App 內「關於 → 開源授權」。
12. 本政策的變更
我們可能更新本政策。有實質變更時,我們會更新本頁的「最後更新」日期,並在 App 內適當處提示。建議你不時回來查看。
13. 聯絡我們
對本政策有任何疑問或意見,請來信:
candanweng@gmail.com
我們是個人開發者,會盡力在合理時間內回覆。
FogRover Privacy Policy
Last updated: September 13, 2026
Effective: September 13, 2026
This policy explains how FogRover (the "App") handles your data. The App is developed and provided by candan, an independent developer ("we", "us", "our").
Summary (the 30-second version)
- The App has no servers and no accounts. We do not collect, receive, or see any of your data.
- Where you have walked, the cells you have unlocked, your steps, pets, and achievements all stay in the App's sandbox on your iPhone.
- No analytics. No crash reporting. No advertising SDKs. No third-party tracking.
- The App does not need a network connection to work. In Airplane Mode, walking, fog clearing, and every single-player feature work exactly as normal.
- Only three things can send data off your phone, and all three are off by default until you turn them on: iCloud backup, Game Center leaderboards, and team sharing.
- Deleting the App erases all of its data from your phone.
1. Who Is Responsible for Your Data
| Provider | candan (independent developer) |
| App | FogRover: Urban Expeditions |
| Contact | candanweng@gmail.com |
Because the App neither collects nor transmits any data to us, in nearly every scenario we are not a "controller" of your personal data — we have no database of your data, because we have no servers.
2. What We Do Not Collect
We do not collect, request, or receive any of the following:
- Name, email address, phone number, or any account information (the App has no sign-up or login)
- Your location data (it never leaves your device — see Section 3)
- Device identifiers, advertising identifiers (IDFA), or any tracking identifiers
- Usage analytics, event logs, or crash reports
- Contacts, calendar, microphone, camera, or Health (HealthKit) data
- Any payment or credit card information (all purchases are handled by Apple — see Section 6)
The App does not track you across other companies' apps or websites, for advertising or for any other purpose.
3. What the App Processes on Your Device
All of the following is stored inside the App's sandbox on your iPhone (an app-private local database) and is never sent to us:
| Data | Source | Purpose | Leaves your device? |
|---|---|---|---|
| Location coordinates | Device GPS (Core Location) | Determine in real time which map cells you have entered, and clear the fog | No (unless you enable a feature in Section 5) |
| Unlocked cells | Result of the above | Track exploration progress, achievements, and district completion | No (unless you enable a feature in Section 5) |
| Step count | Device pedometer (Core Motion) | Calculate daily diamond rewards and pet dispatch progress | No |
| Game save data | Generated in-app | Pet health, diamond balance, achievements, reports | No (unless you enable iCloud backup) |
| Photo capture coordinates | Your photo library (PhotoKit), with your permission | Anchor photos to cells you have walked, to create memory postcards | No |
| Purchase entitlements | Apple StoreKit | Determine what you have purchased, in order to deliver it | Managed by Apple (see Section 6) |
About photos: the App only reads the EXIF capture coordinates of your photos for matching. It does not copy your original photos, does not upload them, and does not send them anywhere. Postcards are composed on your device.
4. Permissions the App Requests, and Why
| Permission | Why it is needed | If you decline |
|---|---|---|
| Location (While Using / Always) | This is the core of the App: without location, fog cannot be cleared. "Always" is required for the App to keep clearing fog along your route when it is in the background or your screen is off | Denied: no fog clearing at all. "While Using" only: no fog clearing in the background |
| Motion & Fitness | Reads step data to calculate daily rewards and pet dispatch progress | Step-based rewards and progress will not accumulate |
| Photos (read) | Reads photo capture coordinates to create memory postcards | Photo anchoring for postcards is unavailable |
| Photos (add) | Saves postcards you create back to your library | Postcards cannot be saved to your library |
| Notifications | Local notifications (pet dispatch completion, daily reminders). These are generated entirely on your device and pass through no push server | You will not receive reminders |
You can change any permission at any time in iOS Settings → FogRover.
5. The Only Three Features That Send Data Off Your Phone
All three are off by default. While they are off, the App never establishes a single network connection.
5.1 iCloud Backup (off by default)
- When it happens: only when you tap "Back Up Now" yourself. The App has no automatic sync.
- Where it goes: your own private iCloud database, readable only by your Apple Account and not visible in the Files app. Not our servers — we have no servers.
- What is sent: your game save (unlocked cells, pet health, diamond balance, achievement records).
- Who can see it: only you. We cannot access it.
- Apple's handling is subject to the Apple Privacy Policy.
5.2 Game Center Leaderboards and Achievements (off by default)
- When it happens: only after you enable the feature. While it is off, the App does not even call Game Center authentication.
- What is sent: two numbers — your highest district completion percentage and your total steps over the last seven days. No coordinates, no routes.
- Where it goes: Apple's Game Center service, operated by Apple and subject to the Apple Privacy Policy and Game Center's terms.
- Who can see it: your Game Center friends.
- You can turn the feature off in the App at any time.
5.3 Team Fog Sharing (off by default)
This is the only feature that sends anything about *where you have been*, so what it sends is deliberately coarse:
- Resolution: roughly 5 square kilometres per cell (a single administrative district usually spans several cells). Street-level records never leave your phone.
- Where it goes: a shared database between you and your teammates, via Apple's CloudKit sharing. Not our servers.
- Who can see it: only the teammates you invited or joined.
- After you leave: when you leave a team, your coverage data is removed from your teammates' devices.
- Please note: teammates can see this coarse coverage on their devices. Only team up with people you trust.
6. Purchases and Payment
All purchases in the App are completed through Apple's App Store.
We never touch, receive, or store your payment information (credit card, Apple Account details, billing address). All of it is handled by Apple and subject to the Apple Privacy Policy.
The only thing the App reads from Apple's StoreKit is the fact of *what you have purchased* (your entitlements), in order to deliver the corresponding content. That determination happens on your device.
7. Children's Privacy
The App is not directed at children under 13 and does not collect personal information from children — in fact, it does not collect personal information from anyone.
The App contains no user-generated content, chat, or stranger-matchmaking features. If you are a parent or guardian, we recommend using iOS Screen Time to manage in-app purchases.
8. Data Retention and Deletion
| Where the data is | How long it is kept | How to delete it |
|---|---|---|
| The App sandbox on your iPhone | Until you delete it | Delete the App — this erases all of its data on that phone |
| Your iCloud (if you have backed up) | Until you delete it | iOS Settings → your Apple Account → iCloud → Manage Account Storage, then delete FogRover's data |
| Game Center (if you enabled it) | Per Apple's policies | Manage in Game Center settings, or contact Apple |
| Team sharing (if you joined a team) | Until you leave | Leave the team — your share is then removed from teammates' devices |
We hold no copy of your data, so there is nothing for us to delete.
9. Your Rights (GDPR, CCPA, and others)
Laws in various regions (EU GDPR, UK GDPR, California CCPA/CPRA, Taiwan's Personal Data Protection Act, and others) give you rights of access, correction, deletion, restriction of processing, and data portability.
Because we do not collect, receive, or store your personal data:
- we hold nothing for you to access or request a copy of;
- we hold nothing for us to delete — you exercise deletion directly by deleting the App (see Section 8);
- we do not sell or share your personal information (we have nothing to sell);
- we perform no automated decision-making or profiling.
Your data is on your device and entirely under your control. If you still have questions, email candanweng@gmail.com.
10. Security
Your game data is stored in the iOS app sandbox and protected by iOS's own file protection. A small number of one-time purchase flags are stored in the iOS Keychain.
If you enable any feature in Section 5, transmission and storage are handled by Apple's infrastructure (iCloud, CloudKit, Game Center) under Apple's security and privacy measures.
Please note: no method is perfectly secure. Keeping your device passcode, Face ID, and Apple Account secure is by far the most effective way to protect this data.
11. Third Parties
The App contains no third-party analytics, advertising, or tracking SDKs.
The only third-party services used are Apple's own: the App Store (purchases), iCloud / CloudKit (backup and team sharing), and Game Center (leaderboards). Your use of these is subject to the Apple Privacy Policy.
The offline public datasets bundled with the App (administrative boundaries, points of interest, and so on) are static files shipped inside the App; using them makes no request to any server. Their sources and licences are listed in the App under About → Open Source Licences.
12. Changes to This Policy
We may update this policy. When there is a material change, we will update the "Last updated" date on this page and surface a notice in the App where appropriate. We encourage you to check back from time to time.
13. Contact Us
Questions or comments about this policy? Email us:
candanweng@gmail.com
We are an independent developer and will do our best to reply within a reasonable time.