KokoTrac Privacy Policy KokoTrac 私隱政策
This page answers the questions Google Play and the App Store ask about accounts and data.
It is the same policy in English and in Traditional Chinese; the English text is the reference.
本頁同時提供英文與繁體中文版本，內容相同；如有歧義，以英文版本為準。
English
KokoTrac is a schedule and cost tracker for parents. It is made for parents and guardians, not for children, and it has no advertising profiling. This policy explains what the app stores, where it goes, how long it stays, and how to erase it.
1. What stays on your device
Children, activities, schedules and costs live in your browser's localStorage under the key
kokotrac_data_v1:<account id>. That record holds the parent display name,
each child's name, date of birth, avatar and colour, each activity's name, category, cost,
billing frequency, location and description, the schedule, the app language, your invite
code state and your visit streak. This data is not uploaded unless you press
Upload to cloud in Settings. Convex Auth also keeps a sign-in token on the
device so you do not have to type your password on every launch. If you have enabled your
device's own backup (for example Android backup to your Google account), the operating system
may copy the app's local data; that copy is controlled by your device account and your
platform's backup settings, not by KokoTrac.
2. What reaches the cloud
KokoTrac uses Convex for its database, authentication and server functions. The cloud holds:
- Account: your email address and a password hash. The password itself is never stored.
- Sign-in records: session and refresh tokens needed to keep you signed in, with expiry times.
- Referral facts: your invite code (a hash of your account id), which account joined with it, and which code you joined with.
- Optional backup: one JSON snapshot of the data listed in section 1, written only when you press Upload to cloud, and overwritten on the next upload.
- Pro record: whether the account is entitled to Pro, which store confirmed it, and when that record changed.
There are no analytics services, no advertising SDKs, no third-party trackers and no sale of personal data.
3. Sponsored links
The app shows a small number of clearly labelled sponsored recommendations for online class providers (Preply, AmazingTalker, Outschool). They are ordinary links: choosing one opens the provider's own site in a browser. KokoTrac does not pass your account or your children's data to those sites, and their own privacy policies apply once you arrive. KokoTrac may earn a commission when you sign up through a link.
4. Who processes the data
Convex (convex.dev) hosts the database, the authentication service and the server functions, and processes the data in section 2 on our behalf. No other processor receives personal data. Local data is processed only by your own device.
5. How long it is kept
Device data stays until you delete the account, clear the app's site data, or uninstall the app. Cloud data stays until you delete the account. After deletion the rows described in section 2 are removed immediately; Convex may keep limited operational logs and encrypted backups for a short period under its own retention policy. Export a backup before deleting if you want to keep your children's records.
6. Deleting your account and your data
Open Settings → Account → Delete account while signed in. After one confirmation, the app deletes the account, the sign-in records, the referral facts, any cloud backup and the Pro record, and then removes this device's copy of the children, activities, schedules and costs. The action cannot be undone.
If you can no longer sign in, email support@kokotrac.app from the address on the account and ask for deletion. We treat it as a deletion request and remove the account's cloud data within 30 days. You can also clear local data yourself by removing the site data for this app in your browser settings, or by uninstalling the app.
Deleting the account erases the device copy too. Export your data from Settings first if you want to keep it.
7. Children
KokoTrac is intended for adults (parents and guardians). Children do not have accounts. Information about a child is entered by the parent, stays on the parent's device unless the parent uploads a backup, and is never used for advertising. Do not create an account on behalf of a child.
8. Security
Cloud traffic uses HTTPS. Passwords are hashed by Convex Auth, and sessions expire. No method of storage is perfectly secure, so keep your device and your account password protected.
9. Changes and contact
Material changes to this policy are published on this page with a new date. Questions, or a deletion request you cannot make in the app, go to support@kokotrac.app.
繁體中文
KokoTrac 是供家長記錄孩子活動日程與費用的工具。本程式以家長及監護人為對象，並非供兒童使用， 也不會建立廣告用戶画像。本政策說明程式儲存哪些資料、資料傳送到哪裡、保存多久，以及如何刪除。
一、儲存在您裝置上的資料
孩子、活動、日程與費用資料儲存在瀏覽器的 localStorage，鍵值為
kokotrac_data_v1:<帳戶識別碼>。內容包括家長顯示名稱、每位孩子的姓名、
出生日期、頭像與顏色、每項活動的名稱、類別、費用、收費頻率、地點與描述、日程、程式語言、
邀請碼狀態及連續使用週數。除非您在設定中按下上傳到雲端，這些資料不會上傳。
Convex Auth 亦會在裝置上保存登入憑證，以免每次開啟程式都要重新輸入密碼。若您啟用了裝置本身的
備份功能（例如 Android 備份至 Google 帳戶），作業系統可能會複製本程式的本機資料；該副本由您的
裝置帳戶及平台的備份設定控制，並非由 KokoTrac 控制。
二、傳送到雲端的資料
KokoTrac 使用 Convex 提供資料庫、身份驗證與伺服器函數。雲端保存：
- 帳戶資料：您的電郵地址及密碼雜湊值。密碼本身不會被儲存。
- 登入紀錄：維持登入狀態所需的 session 與 refresh token，以及其到期時間。
- 邀請紀錄：您的邀請碼（由帳戶識別碼雜湊而成）、以該邀請碼加入的帳戶，以及您加入時使用的邀請碼。
- 選擇性備份：第一節所述資料的一份 JSON 快照，只在您按下上傳到雲端時寫入，下一次上傳會覆蓋。
- Pro 紀錄：帳戶是否擁有 Pro 資格、由哪個商店確認，以及紀錄更新時間。
本程式不使用分析服務、廣告 SDK 或第三方追蹤器，也不會出售個人資料。
三、贊助連結
程式會顯示少量清楚標示為贊助的網上課程平台推薦（Preply、AmazingTalker、Outschool）。 這些是一般連結，按下後會在瀏覽器開啟該平台的網站。KokoTrac 不會把您的帳戶或孩子的資料傳給 這些網站，抵達後適用該平台自己的私隱政策。若您透過連結註冊，KokoTrac 可能獲得佣金。
四、資料處理者
Convex（convex.dev）代我們託管資料庫、身份驗證服務與伺服器函數，並處理第二節所述的資料。 除此以外，沒有其他處理者會收到個人資料。本機資料只由您的裝置處理。
五、保存期限
裝置上的資料會一直保存，直到您刪除帳戶、清除本程式的網站資料或解除安裝程式。雲端資料會一直 保存，直到您刪除帳戶。刪除後，第二節所述的紀錄會即時移除；Convex 可能依其自身的保存政策， 短暫保留有限的營運日誌與加密備份。如欲保留孩子的紀錄，請在刪除前先匯出備份。
六、刪除帳戶與資料
登入後開啟設定 → 帳戶 → 刪除帳戶。確認一次後，程式會刪除帳戶、登入紀錄、 邀請紀錄、任何雲端備份與 Pro 紀錄，然後移除本裝置上的孩子、活動、日程與費用副本。 此操作無法復原。
若您已無法登入，請以帳戶所用的電郵地址寄信至 support@kokotrac.app 要求刪除。我們會把它視為刪除要求，並在 30 天內移除該帳戶的雲端資料。您也可以在瀏覽器設定中 清除本程式的網站資料，或解除安裝程式，以自行清除本機資料。
刪除帳戶亦會清除裝置上的副本。如欲保留資料，請先在設定中匯出備份。
七、兒童
KokoTrac 供成人（家長及監護人）使用，兒童不設帳戶。孩子的資料由家長輸入，除非家長上傳備份， 否則只留在該家長的裝置上，且不會用於廣告。請勿以孩子的名義建立帳戶。
八、安全
雲端傳輸使用 HTTPS。密碼由 Convex Auth 雜湊保存，登入 session 會到期。任何儲存方式都無法 保證絕對安全，請為裝置及帳戶設定密碼保護。
九、政策更新與聯絡
本政策的重大變更會在本頁公布並更新日期。如有疑問，或無法在程式內提出刪除要求，請電郵 support@kokotrac.app。