私隱政策
最後更新：2026年10月2日
KartZone（「我們」）營運 KartZone 卡丁車社群應用程式（iOS 及 Android）及相關網站 kartzone.co 和 app.kartzone.co（統稱「服務」）。本政策說明我們收集甚麼資料、用途、與誰分享，以及您擁有的權利。
1. 我們收集的資料
- 帳戶資料：電郵地址、用戶名稱及密碼（密碼經雜湊處理，我們無法讀取）。如使用 Apple 登入，我們會收到 Apple 提供的電郵（可為 Apple 隱藏轉寄電郵）及姓名。
- 個人檔案（自願提供）：頭像、簡介、所屬車隊，以及您選擇公開的聯絡方式和社交連結（例如 Instagram、Facebook、Threads、YouTube、WeChat、WhatsApp）。
- 您建立的內容：帖子、回覆、圖片、文件、活動、活動報名、車隊申請及成員資料、私訊、投票、收藏及關注。
- 推送通知憑證：如允許通知，我們會儲存裝置的推送憑證、平台（iOS / Android）及應用程式語言，用於發送通知。
- 當機及錯誤報告：應用程式出錯時，我們會收集裝置型號、作業系統版本、應用程式版本及錯誤詳情，用於修正問題。我們不會在錯誤報告中附加您的姓名或電郵。
我們不會取得您的實時位置。活動天氣預報使用固定地區座標（例如廣東省 / 香港），而非您的裝置位置。我們不會出售您的個人資料，亦不會用作廣告用途。
2. 使用資料的目的
- 提供及維護服務：帳戶、論壇、活動、車隊、私訊及排行榜。
- 發送與您相關的通知（例如回覆、關注、車隊申請結果、活動提醒）及帳戶電郵（驗證、重設密碼、密碼已更改）。
- 管理內容、處理舉報及執行服務條款。
- 修正錯誤及改善應用程式穩定性。
- 遵守法律義務。
3. 公開資料
您的用戶名稱、頭像、簡介、帖子、回覆、車隊成員身份及您選擇公開的社交連結，其他用戶可以看到。私訊只有對話雙方可見。電郵地址不會公開顯示。
4. 服務供應商
我們只與協助營運服務的供應商分享所需資料：
| 供應商 | 用途 |
|---|
| Supabase | 數據庫、登入驗證、檔案儲存 |
| Expo (650 Industries) | 應用程式發佈及推送通知傳送 |
| Google Firebase Cloud Messaging / Apple Push Notification service | 將推送通知傳送至 Android / iOS 裝置 |
| Sentry | 當機及錯誤報告 |
| Postmark | 發送帳戶電郵 |
| Open-Meteo | 活動天氣預報（只傳送固定地區座標，不含個人資料） |
| Apple / Google | 應用程式商店發佈及 Apple 登入 |
部分供應商可能在香港以外地區（例如美國）處理資料。
5. 保安
資料在傳輸時經 HTTPS 加密。數據庫使用列級保安（Row Level Security），用戶只能存取獲授權的資料。密碼經雜湊處理，絕不以明文儲存。
6. 保留期限
帳戶存在期間我們會保留您的資料。刪除帳戶後，個人資料會即時移除（詳見下一節）。伺服器日誌及錯誤報告會在較短時間後自動刪除。
7. 刪除帳戶
您可隨時在應用程式內刪除帳戶：個人檔案 → 設定 → 刪除帳戶。詳情請參閱刪除帳戶頁面。
8. 您的權利
您可隨時在應用程式內查看及修改個人檔案、在裝置設定中關閉推送通知，或刪除帳戶。如需索取或更正您的資料副本，請電郵 support@kartzone.co。
9. 兒童
本服務不適用於 13 歲以下人士。如發現 13 歲以下兒童的帳戶，我們會將其刪除。
10. 政策更新
如政策有重大變更，我們會透過應用程式或電郵通知用戶，並更新本頁頂部的日期。
11. 聯絡我們
私隱查詢：support@kartzone.co
Privacy Policy
Last updated: October 2, 2026
KartZone ("we", "us") operates the KartZone karting community app (iOS and Android) and the websites kartzone.co and app.kartzone.co (together, the "Service"). This policy explains what we collect, why, who we share it with, and the choices you have.
1. Information we collect
- Account information: email address, username and password (stored as a hash; we cannot read it). If you use Sign in with Apple, we receive the email Apple provides (which may be an Apple private relay address) and your name.
- Profile information (optional): avatar, bio, racing team, and any contact details or social links you choose to show (for example Instagram, Facebook, Threads, YouTube, WeChat, WhatsApp).
- Content you create: posts, replies, images, documents, events, event RSVPs, team applications and memberships, direct messages, votes, bookmarks and follows.
- Push notification token: if you allow notifications, we store your device's push token, platform (iOS / Android) and app language so we can deliver notifications.
- Crash and error reports: when the app fails, we collect device model, OS version, app version and error details to fix the problem. We do not attach your name or email to these reports.
We do not access your device's live location. Event weather forecasts use fixed regional coordinates (for example Guangdong / Hong Kong), not your position. We do not sell your personal data or use it for advertising.
2. How we use it
- To provide and maintain the Service: accounts, forum, events, teams, messages and leaderboards.
- To send notifications relevant to you (replies, follows, team application results, event reminders) and account emails (verification, password reset, password changed).
- To moderate content, handle reports and enforce our Terms of Service.
- To fix bugs and improve app stability.
- To comply with legal obligations.
3. What is public
Your username, avatar, bio, posts, replies, team memberships and any social links you choose to show are visible to other users. Direct messages are visible only to the people in the conversation. Your email address is never shown publicly.
4. Service providers
We share only what is needed with providers that help run the Service:
| Provider | Purpose |
|---|
| Supabase | Database, authentication, file storage |
| Expo (650 Industries) | App distribution and push notification delivery |
| Google Firebase Cloud Messaging / Apple Push Notification service | Delivering push notifications to Android / iOS devices |
| Sentry | Crash and error reporting |
| Postmark | Sending account emails |
| Open-Meteo | Event weather forecasts (fixed regional coordinates only, no personal data) |
| Apple / Google | App store distribution and Sign in with Apple |
Some providers may process data outside Hong Kong (for example in the United States).
5. Security
Data is encrypted in transit over HTTPS. Our database uses Row Level Security so users can only access data they are authorised to see. Passwords are hashed and never stored in plain text.
6. Retention
We keep your data while your account exists. When you delete your account, your personal data is removed straight away (see the next section). Server logs and error reports are deleted automatically after a shorter period.
7. Deleting your account
You can delete your account at any time in the app: Profile → Settings → Delete Account. See Delete your account for details.
8. Your choices
You can view and edit your profile in the app, turn off push notifications in your device settings, or delete your account at any time. To request a copy of your data or a correction, email support@kartzone.co.
9. Children
The Service is not intended for anyone under 13. If we learn that an account belongs to a child under 13, we will delete it.
10. Changes
If we make material changes, we will notify users in the app or by email and update the date at the top of this page.
11. Contact
Privacy questions: support@kartzone.co
