隱私權政策 / Privacy Policy

生效日期 / Effective date: 2026-09-28

1. 這份政策說明什麼 / What this policy covers

這份政策說明 LexiCraft.XYZ（由 Kurt Chen 個人經營）（以下稱「我們」）在您使用 rejoiceenglish.com（喜樂美語 Rejoice English Online，包括學習包、朗讀練習、班級授權與字脈辭典）時，蒐集哪些個人資料、為什麼蒐集、交給誰處理、保存多久，以及您可以怎麼查詢或刪除。

不登入也能用：免費內容和字脈查字不需要登入。不登入時，我們不會在伺服器上建立您的學習紀錄。

This policy explains what personal data LexiCraft.XYZ, operated by Kurt Chen (individual) ("we") collects when you use rejoiceenglish.com (喜樂美語 Rejoice English Online, including the packs, read-aloud practice, class licences and the 字脈 dictionary), why, who processes it, how long it is kept, and how you can see or delete it.

No account needed for free content or for looking up words in 字脈. When you are not signed in, we keep no learning record about you on our servers.

2. 我們蒐集的資料 / What we collect

帳號：您的 email。用 Google 登入時，另有 Google 提供的帳號識別資料。登入系統也會記錄帳號建立與登入的時間。
購買紀錄：Lemon Squeezy 通知我們的訂單資料，包括訂單編號、您的 email 與姓名、購買項目、金額、稅額、退款狀態，以及 Lemon Squeezy 的客戶編號與收據連結。不含卡號。
使用權限：哪個 email 可以使用哪個學習包或訂閱、開始與到期時間，以及開通的來源（購買、兌換碼、贈送）。
兌換碼與班級授權：兌換碼的收件 email 與使用紀錄；班級授權的購買者 email、成員 email 與座位數。
學生練習檔案：老師或家長替學生取的顯示名稱與表情圖示。不需要學生的 email。
朗讀錄音：一般只存在您的裝置上。班級檔案可以把錄音上傳到雲端的私人儲存空間，讓連結到這個檔案的老師和家長聽到。
聽寫檢查的語音：您說的一小段聲音，會送到語音辨識服務轉成文字再比對。我們不保存這段聲音。
練習進度：登入後的作答與完成紀錄；未登入時只存在您的瀏覽器裡。
字脈學習足跡：登入後，您打開過哪些字、讀過哪些分支的句子、從哪個連結來到這一頁，以及時間。在您按下「知道了」之前，字脈不會記下任何東西。
問題回報：您在表單寫的問題、您選填的回覆 email、是否同意公開，以及送出的頁面。
技術紀錄：網站主機和網路服務商在處理連線時，會留下包含 IP 位址的技術紀錄（例如錯誤與存取紀錄）。我們目前沒有使用另外的網站分析工具。

我們不販售您的個人資料，也不拿來投放廣告。

Account: your email. If you sign in with Google, the account identifier Google provides. The sign-in system also records when the account was created and when you signed in.
Purchases: the order data Lemon Squeezy sends us: order number, your email and name, item, amount, tax, refund status, and the Lemon Squeezy customer id and receipt links. No card numbers.
Access: which email may use which pack or subscription, start and expiry dates, and how it was granted (purchase, code, gift).
Codes and class licences: a code's recipient email and redemption record; a licence's buyer email, member emails and seat count.
Class profiles: a display name and emoji a teacher or parent chooses for a student. No student email is needed.
Read-aloud recordings: normally kept only on your device. A class profile can upload recordings to private cloud storage so the teachers and parents linked to it can hear them.
Speech for dictation checks: a short clip of your speech, sent to a speech-recognition service to be turned into text and compared. We do not keep the clip.
Practice progress: answers and completion when signed in; when signed out it stays in your browser.
字脈 footprint: when signed in, which words you opened, which branches' sentences you read, which link brought you to a page, and when. 字脈 records nothing until you press 知道了 ("Got it").
Help requests: your question, an optional reply email, whether we may publish it, and the page you sent it from.
Technical logs: our web host and network provider keep technical logs, including IP addresses, when serving a request (for example error and access logs). We do not currently use a separate analytics tool.

We do not sell your personal data or use it for advertising.

3. 存在您裝置上的資料 / Data kept on your device

登入 cookie：維持登入狀態。
zm_tier cookie：記住您是否訂閱字脈，讓頁面一打開就顯示正確。它只是提示，本身不給任何權限。
rjc_dict_free cookie：計算未登入者用了幾次免費聽寫檢查，保存一年。
瀏覽器儲存空間：佈景主題、是否看過字脈足跡說明、未登入時的練習進度與字脈標記；訂閱者的付費內容暫存依帳號分開、最多 7 天，登出、換帳號或訂閱結束時清除，而且只存內容，不存瀏覽歷史。
未上傳的朗讀錄音：只存在這台裝置上。

清除瀏覽器資料，就會刪除這些裝置上的資料。

Sign-in cookies keep you signed in.
zm_tier cookie remembers whether you subscribe to 字脈 so a page shows correctly at once. It is only a hint and grants nothing.
rjc_dict_free cookie counts a signed-out user's free dictation checks; kept for one year.
Browser storage: theme, whether you have seen the 字脈 footprint notice, signed-out practice progress and 字脈 marks; a subscriber's cached paid content, kept per account for at most 7 days and cleared on sign-out, account change or when the subscription ends. It holds content only, never your history.
Recordings you have not uploaded stay on this device.

Clearing your browser data deletes all of this.

4. 為什麼使用這些資料 / Why we use it

提供服務：讓您登入、判斷您可以使用哪些內容、在不同裝置接續進度、讓老師和家長聽到學生的錄音。
付款與退款：與 Lemon Squeezy 對帳，開通或停止使用權限，並依法保存交易紀錄。
字脈學習足跡：讓您在「我的」頁面和字的頁面上，看到自己走過哪些字。
回覆您：回覆問題表單；只有在您同意時才公開問題內容。
改善網站：用整體統計了解使用情形和錯誤。
Running the service: signing you in, deciding what you can access, carrying progress across devices, letting teachers and parents hear students' recordings.
Payments and refunds: reconciling with Lemon Squeezy, turning access on or off, and keeping transaction records as the law requires.
字脈 footprint: showing you, on /me and on word pages, which words you have visited.
Answering you: replying to the help form; publishing a question only if you agreed.
Improving the Site: overall statistics about usage and errors.

5. 誰會處理您的資料 / Who processes your data

我們只把資料交給提供服務所需的廠商：

Lemon Squeezy（記錄商戶）：結帳、付款、稅務、收據、訂閱與退款。付款資料依 Lemon Squeezy 自己的隱私權政策處理。
Supabase：資料庫、登入系統與錄音儲存。
Railway：網站主機（伺服器位於新加坡）。
Google：只在您選擇用 Google 登入時，提供登入驗證。
Groq：聽寫檢查的語音辨識。
Cloudflare：網站的網路服務與防護——所有連線都會經過它，公開的字典頁面也由它暫存（快取）；它也存放並提供示範朗讀與字典發音的音檔。它不接收您的學習資料，但會留下連線紀錄。

這些廠商的主機大多在台灣以外，所以您的資料會在台灣境外處理。除了以上廠商，以及法律要求的情況（例如法院命令），我們不會把您的個人資料提供給別人。

We share data only with the providers needed to run the service:

Lemon Squeezy (Merchant of Record): checkout, payment, tax, receipts, subscriptions and refunds. It handles payment data under its own privacy policy.
Supabase: database, sign-in and recording storage.
Railway: website hosting (servers in Singapore).
Google: sign-in, only if you choose to sign in with Google.
Groq: speech recognition for dictation checks.
Cloudflare: the site's network and protection layer — every connection passes through it, and it caches public dictionary pages; it also stores and serves model readings and dictionary pronunciations. It receives no learning data, but keeps connection logs.

Most of these providers' servers are outside Taiwan, so your data is processed outside Taiwan. Apart from these providers, and where the law requires it (such as a court order), we do not give your personal data to anyone.

6. 誰看得到 / Who can see it

您本人：您的帳號資料與學習足跡（在「我的」頁面）。
網站管理者：為了提供服務和處理您的要求，可以看到資料庫中的資料。
老師與家長：班級學生檔案的練習進度和上傳的錄音，連結到這個檔案的老師與家長看得到。
You: your account data and footprint (on /me).
Site administrators: can see database records in order to run the service and handle your requests.
Teachers and parents: the progress and uploaded recordings of a class profile are visible to the teachers and parents linked to it.

7. 保存多久 / How long we keep it

帳號與練習進度：保存到您刪除帳號為止。我們不會因為久未使用而自動刪除帳號。
字脈學習足跡：從您最後一次使用字脈起算保存 24 個月，之後由系統每天自動刪除。
購買紀錄（訂單、使用權限、班級授權本身、兌換碼紀錄）：依台灣稅務與會計法規要求的期間保存。Lemon Squeezy 另依它自己的義務保存交易紀錄。
學生檔案與雲端錄音：保存到老師或您刪除為止；班級授權結束後 90 天刪除。
問題回報：保存 12 個月。
聽寫檢查的語音：我們不保存。
Account and practice progress: kept until you delete your account. We never delete an account automatically for inactivity.
字脈 footprint: kept for 24 months from your last use of 字脈, then deleted automatically by a daily job.
Purchase records (orders, access records, the class licence itself, code records): kept for the period Taiwan tax and accounting law requires. Lemon Squeezy separately keeps transaction records under its own obligations.
Class profiles and cloud recordings: kept until the teacher or you delete them, and deleted 90 days after a class licence ends.
Help requests: kept for 12 months.
Speech sent for dictation checks: not kept by us.

8. 兒童與學生 / Children and students

朗讀比賽的練習內容是給國小與國中學生用的，設計上是讓學生透過老師或家長使用：學生檔案由老師或家長建立，只需要一個顯示名稱，不需要學生的 email；上傳的錄音只有連結到這個檔案的老師與家長能聽。建議顯示名稱用暱稱，不要用全名。

家長如果想查看或刪除孩子的檔案或錄音，可以聯絡孩子的老師，或直接寫信給我們。

The read-aloud practice is for elementary and junior-high students and is designed to be used through a teacher or parent: a teacher or parent creates the student profile, which needs only a display name and no student email, and uploaded recordings can be heard only by the teachers and parents linked to that profile. We suggest a nickname rather than a full name.

Parents who want to see or delete their child's profile or recordings can ask the child's teacher, or write to us directly.

9. 刪除帳號 / Deleting your account

您可以隨時自己刪除帳號：登入後到「我的」頁面，或打開刪除帳號，輸入帳號的 email 確認後永久刪除。無法登入的話，請寫信給我們，確認是本人後我們會代為刪除。

會刪除的：

您的登入帳號；
字脈的學習足跡、標記、複習紀錄與設定；
練習進度；
您建立的學生檔案，連同它們的練習進度和雲端錄音（已經由其他帳號接手的檔案除外）；
您在別人班級裡的座位，以及您和學生檔案之間的連結（您接手的檔案會回到建立它的老師那裡）；
您寄給我們的問題回報。

會保留的：購買紀錄（訂單、使用權限、班級授權本身、兌換碼紀錄），因為稅務與會計法規要求保存。這些紀錄仍然包含您的 email。如果之後用同一個 email 重新註冊，仍在有效期內的購買會重新出現，但以前的學習紀錄不會回來。付款與退款資料另由 Lemon Squeezy 保存。

刪除後無法復原。刪除帳號不會取消字脈訂閱，請先到 Lemon Squeezy 的訂閱管理頁取消。

You can delete your account yourself at any time: sign in and go to /me, or open Delete account, type your account's email to confirm, and delete it permanently. If you cannot sign in, write to us; once we confirm it is you, we will delete it for you.

Deleted:

your sign-in account;
your 字脈 footprint, marks, review history and settings;
your practice progress;
student profiles you created, with their progress and cloud recordings (except profiles another account has taken over);
your seats in other people's classes and your links to student profiles (a profile you took over goes back to the teacher who created it);
help requests you sent us.

Kept: purchase records (orders, access records, the class licence itself, code records), because tax and accounting law requires them. These records still contain your email. If you later sign up again with the same email, purchases that are still valid reappear, but your past learning records do not. Payment and refund data is kept separately by Lemon Squeezy.

Deletion cannot be undone. Deleting your account does not cancel a 字脈 subscription; please cancel it first on Lemon Squeezy's subscription page.

10. 您的其他權利 / Your other rights

依個人資料保護法，您可以查詢、閱覽、取得複製本、補充或更正您的資料，也可以要求我們停止蒐集、處理或利用，或刪除您的資料。例如，您可以只刪除字脈學習足跡和練習進度，而保留帳號。

請用您帳號的 email 寫信到 [email protected]，方便我們確認是您本人。我們會在法律規定的期限內回覆。與付款、收據、退款有關的資料由 Lemon Squeezy 持有，您也可以直接向 Lemon Squeezy 提出。

Under Taiwan's Personal Data Protection Act you may ask to see your data, get a copy, have it completed or corrected, have us stop collecting, processing or using it, or have it deleted. For example, you can delete only your 字脈 footprint and practice progress and keep your account.

Write to [email protected] from your account's email so we can confirm it is you. We reply within the period the law sets. Data about payments, receipts and refunds is held by Lemon Squeezy, and you can also ask Lemon Squeezy directly.

11. 資料安全 / Security

我們用合理的方式保護您的資料，例如加密連線、資料庫依帳號限制讀取、錄音存在不公開的儲存空間並只用短時間有效的連結提供。不過，沒有任何系統能保證絕對安全。如果發生個人資料外洩，我們會依法通知您。

We protect data with reasonable measures, such as encrypted connections, database reads limited to each account's own rows, and recordings kept in private storage and served only through short-lived links. No system is perfectly secure. If a personal-data breach occurs, we will notify you as the law requires.

12. 政策修改 / Changes to this policy

我們可能修改這份政策，並更新上方的生效日期。重大修改會在生效日至少 30 天前公告在本網站的 /legal 頁面；如果修改會擴大資料的使用方式，必要時會先取得您的同意。

We may change this policy and will update the effective date above. Material changes are posted on the Site's /legal pages at least 30 days before they take effect; if a change widens how data is used, we will ask for your consent first where required.

13. 聯絡我們 / Contact us

[email protected]