我們是誰
ButterFact 由 Being Free International Company Limited（「Being Free」或「我們」）提供及營運。我們負責決定處理個人資料的目的及方式。
公司註冊地：香港；公司註冊編號：76948775。
註冊地址：Shop No.6-7 UG Prudential 216-228 Nathan Road, Hong Kong, Hong Kong
私隱事務聯絡電郵：contact@beingfreebutterfact.com
我們的團隊目前位於香港及台灣。就適用法律而言，我們是香港《個人資料（私隱）條例》下的資料使用者，以及台灣《個人資料保護法》下的非公務機關。
適用範圍
本政策適用於 ButterFact 的 iOS 及 Android App、beingfreebutterfact.com 上與 ButterFact 有關的服務，以及 Beta 報名與候補名單。
本服務目前以香港及台灣為服務市場。日後擴展至其他地區時，我們會在提供當地服務前處理適用的告知、同意及地區要求；本政策不表示本服務已在全球開放。
第三方網站、App 商店或你另行使用的服務依其自身政策處理資料。
我們收集的資料
我們收集你提供的資料、你使用本服務時自動產生的資料，以及我們由這些資料推算出的資料。下表列出類別、例子、來源，以及你可否選擇不提供。
| 類別 | 例子 | 來源 | 必須提供？ |
|---|---|---|---|
| 帳戶資料 | 電郵地址、用戶名稱、登入驗證資料、介面語言 | 你 | 必須，否則無法建立帳戶 |
| 個人檔案 | 年齡；以及選填的感情狀態、身高、體重、興趣、喜好與不喜好、挑戰度設定、所選用戶模式、電話號碼 | 你 | 年齡必須；其餘選填 |
| 你發布的內容 | 觀察（case）、相片及其中繼資料（拍攝時間、拍攝地點、是否在 App 內拍攝）、證據與「下一步」、真實度投票、標記、加入（join）紀錄、What If 的答案、經 AI 按鈕改寫的文字 | 你 | 選填，但相關功能需要 |
| 位置資料 | 精確位置（GPS）、你所在或提及的地點及其地點編號（place ID）、移動速度與方向 | 你的裝置（須你授權） | 選填；關閉後仍可使用，但建議與附近內容的相關性會降低 |
| 互動與使用資料 | 你看過的卡片及停留時間、略過或忽略的內容、接受、取消或完成的行動、開啟 App 的時間與常用時段 | 自動產生 | 使用本服務即會產生 |
| 裝置與技術資料 | 裝置型號、作業系統及 App 版本、推播通知權杖、IP 位址、錯誤紀錄 | 自動產生 | 使用本服務即會產生 |
| 社交資料 | 好友清單、你與其他用戶內容之間的連結、其他用戶在內容中提及你 | 你、其他用戶 | 選填 |
| 聯絡與報名資料 | 你寄給我們的訊息、Beta 報名表內容（例如學校、畢業年份、你想做到的事） | 你 | 選填 |
我們推算的資料。 我們會由上述資料推算你的傾向與狀態，用來排序內容和生成建議。例子包括：你在時間、地點、人物、物品、距離、事件內容六個面向上的偏好（我們稱為「6D」）、你的作息節律、你對不同類型建議的反應，以及用戶可信度（依活躍度、互證紀錄及完成紀錄計算）。
我們不刻意收集的資料。 我們不要求你提供病歷、醫療、基因、性生活、健康檢查、犯罪前科、政府身份證號碼或銀行帳戶資料。請避免在公開內容中發布這類資料，或發布他人的個人資料。
未成年用戶的資料收集及公開範圍另受第 11 節限制。年齡判斷及家長同意流程可能需要年齡範圍、監護人聯絡方式及同意紀錄；只收集完成核實所需的最少資料。
資料用途及選擇
我們在特定目的所需範圍內處理資料，包括提供服務、個人化、驗證行動、維持安全及改善產品。依具體處理及所在地法律，依據包括契約或類似契約關係、有效同意及法定事由；商業利益本身不構成無限制處理資料的授權。
| 用途 | 涉及的資料及安排 |
|---|---|
| 核心功能 | 帳戶、內容、相關位置、互動及推算資料，用於事件卡、Veins、行動建議、Future Engine、What If、翻譯與步驟引導。 |
| 個人化及事件連結 | 依偏好、情境、參與及完成紀錄排序內容、連結事件、評估真實性與可信度。選填檔案欄位如用於介紹他人，會另行說明並取得同意；兒童帳戶不使用感情狀態或身體特徵作配對。 |
| 改善、研究及成效評估 | 分析接受、完成、傳播及使用情況，測試演算法與產品，製作匯總統計。對外資料合作依第 6 節處理。 |
| 安全及營運 | 身份驗證、防止濫用與詐欺、處理客服及 Beta 報名、發送必要服務通知、履行法律義務。 |
| 選擇性通知及行銷 | 取得適用同意後，向成年訂閱者寄送 ButterFact 產品、活動及推廣電郵。每封行銷電郵提供免費退訂；拒絕不影響核心服務。 |
| 第三方廣告 | 可提供廣告展示、成效衡量及防詐功能。啟用前另行告知供應商、資料用途及選擇；依法取得同意。兒童及年齡不明用戶不接受行為定向廣告。 |
新的不相容用途須另行告知並取得所需同意。拒絕非必要資料或權限，不影響不依賴該資料或權限的功能。
AI 與自動化處理
我們使用自動化系統及第三方 AI 模型產生建議、可能性、翻譯及分類，排序卡片及連結事件，並評估偏好、完成紀錄及可信度。相關功能可能向 AI 供應商傳送你輸入的內容及完成任務所需的情境資料。啟用前會告知所用服務及資料用途，並取得適用同意。
建議只是可能性，是否採取行動由你決定。請自行判斷安全、合法性及適切性。部分卡片可由系統生成，不代表真實用戶曾發布或完成所述行動。
我們不會只憑自動化處理作出對你有法律效力或類似重大影響的決定。你可聯絡我們提出疑問或要求覆核。
模型訓練與服務改善是不同用途。我們可在已告知的必要範圍內改善自身排序與建議系統；把可識別資料用於第三方模型訓練，須另外清楚告知及取得所需同意，且不得違反法律或平台規則。兒童資料不提供作第三方通用模型訓練。
AI 功能須符合該供應商的年齡及地區限制。不符合使用資格的用戶不會獲提供相關功能；家長同意不能取代供應商的使用資格要求。
資料分享、廣告及合作
你選擇公開的內容可連同顯示名稱被其他用戶看到、連結及互動。發布前請確認可見範圍。私人內容、個人檔案、精確位置及未公開的未來情境不因本政策而獲得公開授權。兒童的可見性及互動另受第 11 節限制。
| 接收對象 | 目的及範圍 |
|---|---|
| 雲端及 AI 服務 | 可使用 Google Cloud 等主機、儲存、模型及相關服務處理必要資料；具體 AI 服務的年齡、地區與資料使用條款分別適用。 |
| 地圖、搜尋及推播服務 | 為相關功能處理必要的地點、查詢或推播權杖；使用時按功能提供告知。 |
| 網站報名及電郵服務 | 網站報名表經 Web3Forms 傳送你填寫的資料供我們處理；電郵服務處理寄送及回覆所需資料。 |
| Apple、Google Play | 提供 App 分發及更新，並按其自身政策處理相關資料。 |
| 廣告及其他新增服務 | 在相關資料處理啟用前，於功能告知列明供應商或接收者類別、資料、目的、地區、期限及退出方法，並取得所需同意。 |
受託處理者須受適當的保密、保安、用途及保存限制。另可在必要範圍向負有保密責任的專業顧問、依法有權取得資料的機關，或承接業務且須保障資料的交易方披露。
我們保留進行研究、事件資料授權及商業合作的可能性，優先使用不能合理識別個人的資料。涉及可識別資料向第三方提供作其自身用途時，會在提供前另行告知對象或類別、用途、資料範圍、是否有償、期限及拒絕影響，並取得法律要求的同意（包括適用的書面同意）。即使取得同意，也不進行法律或 App 平台禁止的資料出售或分享。
第三方在 App 投放廣告，不代表可任意取得用戶資料。兒童資料不提供作商業資料授權、行為定向廣告或跨 App／網站追蹤。
處理地區與跨境傳輸
我們在香港及台灣的團隊可按工作需要處理資料。雲端、AI、電郵及其他供應商也可能在你所在地以外處理資料；團隊所在地不等同伺服器所在地。
與特定功能有關的跨境處理會在收集告知中說明處理地區或範圍、接收者及目的。我們會採取適當合約及其他保障，依法取得所需同意，並遵守主管機關的傳輸限制。
新增國家、供應商或用途涉及重大改變時，會按第 13 節更新告知；本政策不構成對任何未指明跨境用途的概括同意。
保存期限與刪除
一般個人資料按用途設定 30 日至 24 個月的保存週期，但這不是一律至少保存 30 日的要求。目的完成、有效刪除要求、法律或供應商條款要求較早處理時，會提前刪除或不可逆匿名化。短暫快取可少於 30 日。
| 資料 | 保存安排 |
|---|---|
| 帳戶及必要個人檔案 | 為持續提供帳戶保留最新的必要資料；停用或最後活動後最長 24 個月。收到並核實有效刪除要求後停止一般使用，30 日內從正式系統刪除；法律要求更早者從其規定。 |
| 原始精確位置紀錄 | 自收集起最長 30 日；只在相關功能所需範圍使用，不永久保留個人移動軌跡。 |
| 內容、互動、使用及可識別推算資料 | 每筆收集或實質更新起最長 24 個月；刪除帳戶或內容時提前處理。不以單純讀取或備份重設期限。 |
| 一般運作／安全紀錄 | 一般運作日誌最長 90 日；必要的安全及防詐紀錄最長 24 個月。 |
| Beta 報名及客服紀錄 | 每筆收集或實質跟進起最長 24 個月；轉正式帳戶時只轉移必要資料。行銷用途須另取得同意，不因報名而自動加入。 |
| 同意、撤回及拒收紀錄 | 相關用途結束後最長 24 個月，只保留證明選擇及執行拒收所需的最少資料。拒收持續有效；紀錄清除不表示重新取得行銷同意。 |
| 備份及供應商副本 | 我們控制的備份於有效刪除請求起 90 日內輪替清除，期間隔離於一般使用。受託供應商依適用合約及刪除流程處理；實際較長的底層清除週期須在使用該服務前告知，並遵守適用期限。 |
刪除帳戶時，我們會刪除帳戶、個人檔案及須按法律與平台規則刪除的相關個人資料及用戶發布內容。為維持事件脈絡，在規則允許且無法合理重新識別你的情況下，可保留不含你原文、影像、識別碼或可識別特徵組合的抽象事件關係與匯總結果，例如「一名參與者完成行動」。
我們不會只把 username 換成特徵、編號或假名便視為完成刪除。精確時間地點、罕見特徵及關聯資料也會納入再識別判斷。真正不可逆匿名化的事件關係及統計可按產品、研究及商業需要繼續保存；若仍能合理識別個人，則繼續適用上述個人資料期限。
法律規定、有效法律保全或處理具體爭議確有必要時，僅保留相關最少資料至該事由結束，限制存取及用途並定期覆核，不把例外用作一般商業資料無限期保存的理由。備份恢復後會重新套用刪除要求。
資料安全
我們有責任採取與資料風險相稱的技術及管理措施，包括限制存取、保護傳輸、管理驗證資訊及處理事故；並要求受託處理者採取適當保護。
任何系統都無法保證絕對安全。請妥善保管登入資料，發現帳戶異常時聯絡我們。如發生資料事故，我們會控制影響、調查及補救，並依適用法律通知受影響人士及主管機關。
你的權利
你可要求查詢、閱覽、取得副本、補充、更正、停止收集／處理／利用或刪除個人資料，並可撤回同意或拒絕直接促銷。撤回不影響撤回前合法進行的處理。法定權利不因接受本政策而被放棄。
請透過 contact@beingfreebutterfact.com 提出要求；App 中提供的資料、權限及刪除控制也可使用。我們會以適當方式核實身份。目前處理查閱、更正及刪除等個人資料權利要求不收費。
台灣的查詢、閱覽及副本要求，於 15 日內作出准駁決定；更正、停止或刪除要求於 30 日內決定。必要時依法延長一次，延長不超過原期限並書面說明原因。香港查閱要求依適用的 40 日期限處理。備份清除週期不延後法定回覆。
若依法不能完全滿足要求，我們會說明理由及保留範圍。你可向香港個人資料私隱專員公署或台灣有管轄權的主管機關投訴。
年齡、兒童及監護人
最低使用年齡為 8 歲。未滿 8 歲不得註冊。8 歲至未滿 18 歲須由家長或合法監護人閱讀本政策，完成適用的同意及核實程序，並在適當監督下使用；當地法律或特定功能要求更高年齡時，適用較高限制。
兒童功能只會在具備適用的家長同意、年齡判斷、內容安全及資料保護安排，並符合服務供應商及 App 平台要求後開放。單純在裝置上按「允許」，不等同已完成家長同意。
兒童帳戶採取較嚴格的公開及互動限制：不公開即時精確位置，不作行為定向廣告或跨服務追蹤，不把兒童資料用於第三方通用模型訓練或商業資料授權。在啟用交換個人資料的功能前須有成人操作，並提供監護人管理相關互動的方式。未完成年齡判斷的用戶也不接受行為定向廣告。
監護人可透過 contact@beingfreebutterfact.com 申請查閱、更正、撤回同意或刪除兒童資料；我們會核實其權限。如發現未達年齡或未完成所需同意而收集的兒童資料，會停止相關處理並依法刪除或採取適當措施。
權限及類似技術
在啟用相關功能時，我們會逐項說明及請求所需的裝置權限。你可在裝置設定中撤回。
| 權限／技術 | 用途與選擇 |
|---|---|
| 位置 | 經授權提供附近情境及建議。背景定位如推出，須另行說明必要性及取得相應授權；不能以一般定位同意取代。 |
| 相機及相片 | 在你選擇拍攝或上載時使用；可用系統選取器時，只取得你選取的內容。 |
| 通知 | 取得系統授權後發送建議及提醒；關閉不影響 App 內瀏覽。 |
| 本機儲存、Cookie 及分析 | 本網站以本機儲存記住語言選擇。新增非必要分析、廣告 Cookie 或類似追蹤時，先提供相關告知及適用的同意選擇。 |
| 追蹤及行銷 | 與其他權限分開處理，取得所需同意及系統授權；兒童限制見第 11 節。 |
拒絕權限只影響依賴該權限的功能。接受本政策不代表同意所有裝置權限、行銷、模型訓練或未列明用途。
政策修訂
我們可因服務或法律變更修訂本政策，並更新日期。重大變更會在生效前透過網站、App 或電郵作適當告知；需要重新同意的新用途會在取得同意後才開始。
新功能、更多國家或更多資料類別不因本政策而自動獲得處理授權。我們會按具體改變更新告知與選擇。
聯絡與語言版本
私隱聯絡：contact@beingfreebutterfact.com
郵寄：Being Free International Company Limited，Shop No.6-7 UG Prudential 216-228 Nathan Road, Hong Kong, Hong Kong
本政策提供中文及英文版本。如有歧義，以中文版本為準；適用法律賦予你的強制性權利不受此語言條款限制。
生效日期：2026 年 10 月 20 日。
Who we are
ButterFact is provided and operated by Being Free International Company Limited (Being Free, we or us). We determine the purposes and means of processing personal data.
Place of incorporation: Hong Kong. Company registration number: 76948775.
Registered address: Shop No.6-7 UG Prudential 216-228 Nathan Road, Hong Kong, Hong Kong
Privacy contact: contact@beingfreebutterfact.com
Our team is currently based in Hong Kong and Taiwan. Under applicable law, we are a data user under Hong Kong’s Personal Data (Privacy) Ordinance and a non-government agency under Taiwan’s Personal Data Protection Act.
Scope
This policy covers the ButterFact iOS and Android apps, ButterFact services on beingfreebutterfact.com, and Beta applications and waiting lists.
Our current service markets are Hong Kong and Taiwan. Before expanding to another market, we will address applicable notices, consent and local requirements. This policy does not mean that the service is available worldwide.
Third-party websites, app stores and services you use separately process data under their own policies.
Data we collect
We collect information you provide, information generated through your use of the Service, and information inferred from it.
| Category | Examples | Source | Required? |
|---|---|---|---|
| Account | Email address, username, authentication information and interface language | You | Required to create an account |
| Profile | Age; optional relationship status, height, weight, interests, likes and dislikes, challenge settings, selected user mode, and phone number | You | Age is required; other fields are optional |
| Your content | Observations (cases), photos and metadata (capture time, location and whether taken in-app), evidence, next steps, truthfulness votes, tags, join records, What If answers and AI-rewritten text | You | Optional, but needed for the relevant features |
| Location | Precise GPS location, places you are in or mention and their place IDs, speed and direction | Your device, with permission | Optional; nearby content and suggestions become less relevant when disabled |
| Interactions and usage | Cards viewed and viewing time, skipped or ignored content, actions accepted, cancelled or completed, app opening times and habitual usage periods | Generated automatically | Generated through use |
| Device and technical | Device model, operating system and app version, push token, IP address, error logs | Generated automatically | Generated through use |
| Social information | Friends, links between your content and other users’ content, and mentions of you by others | You and other users | Optional |
| Contact and applications | Messages to us and Beta application information, such as school, graduation year and what you hope to achieve | You | Optional |
Inferences. We infer preferences and states to rank content and generate suggestions. These include preferences across six dimensions (“6D”: time, place, people, objects, distance and event content), activity rhythms, responses to different suggestions, and user credibility based on activity, corroboration and completion records.
Information we do not deliberately request. We do not ask for medical records, medical treatment, genetic data, sexual life, health examinations, criminal records, government identity numbers or bank account details. Avoid publishing such information, or other people’s personal data, in public content.
Collection and public visibility for minors are also subject to section 11. Age checks and parental consent may require an age range, guardian contact information and consent records, limited to what is necessary for verification.
Purposes and choices
We process data within the scope necessary for specified purposes, including delivering and personalising the service, verifying actions, maintaining security and improving the product. Depending on the processing and applicable law, grounds include a contractual or similar relationship, valid consent and statutory grounds. Commercial interests do not provide unlimited authority to process data.
| Purpose | Data and arrangements |
|---|---|
| Core features | Account, content, relevant location, interaction and inferred data support event cards, Veins, action suggestions, Future Engine, What If, translation and step guidance. |
| Personalisation and connections | Preferences, context, participation and completion records support ranking, event connections, authenticity and credibility assessments. Using optional profile fields to introduce people requires a separate explanation and consent. Relationship status and physical characteristics are not used to match child accounts. |
| Improvement, research and evaluation | We analyse acceptance, completion, propagation and usage, test algorithms and products, and produce aggregate statistics. External data collaborations are addressed in section 6. |
| Security and operations | Authentication, prevention of abuse and fraud, support and Beta administration, essential service notices and legal obligations. |
| Optional notifications and marketing | With the required consent, we may email adult subscribers about ButterFact products, events and promotions. Each marketing email provides free unsubscribe. Refusal does not affect core services. |
| Third-party advertising | Advertising, measurement and fraud prevention may be offered. Before activation, we provide supplier, purpose and choice information and obtain required consent. No behavioural advertising is served to children or users whose age is unknown. |
New incompatible purposes require further notice and the required consent. Declining optional data or permissions does not affect features that do not depend on them.
AI and automated processing
We use automated systems and third-party AI models for suggestions, possibilities, translation, classification, ranking, event connections and assessments of preferences, completion and credibility. These features may transmit your input and the context needed for the task to an AI provider. Before activation, we identify the service and data purposes and obtain required consent.
Suggestions are possibilities; you decide whether to act. Assess safety, legality and suitability for yourself. Some cards may be system-generated and do not represent an actual user’s post or completed action.
We do not make decisions with legal or similarly significant effects on you solely through automated processing. You may contact us with questions or request review.
Model training and service improvement are distinct purposes. We may improve our own ranking and recommendation systems within the disclosed, necessary scope. Using identifiable data for third-party model training requires a separate clear notice and required consent, and must comply with law and platform rules. Children’s data is not provided for training third-party general-purpose models.
AI features are subject to the provider’s age and territorial restrictions. Ineligible users will not receive the relevant features. Parental consent does not override provider eligibility requirements.
Sharing, advertising and partnerships
Content you choose to make public may be viewed, connected and interacted with by other users together with your display name. Check visibility before posting. This policy does not authorise publication of private content, profile information, precise location or non-public future scenarios. Section 11 adds restrictions for children.
| Recipients | Purpose and scope |
|---|---|
| Cloud and AI services | Google Cloud and other hosting, storage, model and related services may process necessary data. Each AI service’s own age, territorial and data-use terms apply. |
| Maps, search and notifications | Necessary location, query or push-token data supports the relevant features, with notices at the point of use. |
| Website forms and email services | Website applications transmit the information you enter through Web3Forms for us to process. Email services process data needed to send and reply to messages. |
| Apple and Google Play | App distribution and updates, with relevant data also processed under their own policies. |
| Advertising and new services | Before the relevant processing starts, feature notices specify the provider or recipient category, data, purposes, territories, periods and opt-out methods, and required consent is obtained. |
Processors must be subject to appropriate confidentiality, security, purpose and retention restrictions. Necessary disclosures may also be made to professional advisers under confidentiality duties, legally authorised authorities, or business successors required to protect the data.
We may pursue research, event-data licensing and commercial partnerships, prioritising data that cannot reasonably identify individuals. Before disclosing identifiable data for a third party’s own purposes, we will separately explain the recipient or category, purpose, scope, whether payment is involved, retention and consequences of refusal, and obtain legally required consent, including written consent where applicable. Consent does not permit sales or sharing prohibited by law or app platform rules.
Advertising in the app does not give advertisers unrestricted access to user data. Children’s data is not provided for commercial data licensing, behavioural advertising or cross-app or cross-site tracking.
Processing locations and transfers
Our team in Hong Kong and Taiwan may process data as needed for its work. Cloud, AI, email and other providers may process data outside your location. Team locations are not necessarily server locations.
Collection notices for specific features describe relevant processing territories or their scope, recipients and purposes. We will use appropriate contractual and other safeguards, obtain legally required consent and observe regulatory transfer restrictions.
Material changes involving new countries, providers or purposes are addressed under section 13. This policy is not blanket consent to unspecified international processing.
Retention and deletion
Routine personal-data schedules range from 30 days to 24 months by purpose. This is not a mandatory 30-day minimum. Data is deleted or irreversibly anonymised sooner when the purpose ends, a valid deletion request applies, or law or provider terms require it. Transient caches may last less than 30 days.
| Data | Retention arrangements |
|---|---|
| Account and essential profile | Current necessary information supports the ongoing account; no more than 24 months after deactivation or last activity. After a valid deletion request is verified, ordinary use stops and production-system deletion is completed within 30 days, or sooner if legally required. |
| Raw precise location | Up to 30 days from collection, only as required for the relevant feature. Individual movement histories are not retained permanently. |
| Content, interactions, usage and identifiable inferences | Up to 24 months from collection or substantive update of each record, subject to earlier account or content deletion. Mere access or backup does not restart the period. |
| Operational and security records | Ordinary operational logs: up to 90 days. Necessary security and anti-fraud records: up to 24 months. |
| Beta and support records | Up to 24 months from collection or substantive follow-up. Only necessary data transfers to an active account. Marketing requires separate consent; applying does not automatically subscribe you. |
| Consent, withdrawal and suppression records | Up to 24 months after the relevant use ends, limited to evidence of choices and enforcement of opt-outs. Opt-outs remain effective; deletion of a record does not renew marketing consent. |
| Backups and provider copies | Backups we control rotate out within 90 days of a valid deletion request and are isolated from ordinary use in the meantime. Processors follow applicable contracts and deletion processes. Any longer underlying erasure cycle must be disclosed before use of that service and comply with applicable deadlines. |
On account deletion, we delete the account, profile and associated personal data and user-generated content required to be deleted by law and platform rules. Where permitted and where you cannot reasonably be re-identified, abstract event relationships and aggregate results may remain to preserve event continuity, without your original text, images, identifiers or identifying combinations of characteristics; for example, “a participant completed an action”.
Replacing a username with characteristics, a number or a pseudonym does not complete deletion. Precise times and locations, unusual traits and linked data are considered in re-identification assessments. Truly irreversibly anonymous event relationships and statistics may remain for product, research and commercial purposes. If a person can still reasonably be identified, personal-data retention periods continue to apply.
Where law, a valid legal hold or a specific dispute requires preservation, only the necessary relevant data is retained until that reason ends, with restricted access and use and periodic review. Exceptions do not justify indefinite routine commercial retention. Deletion requests are reapplied following backup restoration.
Security
We are responsible for technical and organisational measures proportionate to data risks, including restricted access, protection in transit, authentication-information management and incident handling. We also require appropriate safeguards from processors.
No system guarantees absolute security. Protect your login information and contact us if you notice suspicious activity. In a data incident, we will contain, investigate and remediate it and notify affected individuals and authorities as required by applicable law.
Your rights
You may request access, copies, supplementation, correction, cessation of collection, processing or use, or deletion of personal data. You may withdraw consent and refuse direct marketing. Withdrawal does not affect earlier lawful processing. Accepting this policy does not waive statutory rights.
Contact contact@beingfreebutterfact.com to make a request. You may also use data, permission and deletion controls provided in the app. We verify identity appropriately. We currently charge no fee for personal-data rights requests, including access, correction and deletion.
For Taiwan, access and copy requests receive an approval or refusal decision within 15 days; correction, cessation or deletion requests within 30 days. A legally permitted extension may be made once, for no longer than the original period, with written reasons. Hong Kong access requests are handled within the applicable 40-day period. Backup erasure schedules do not delay statutory responses.
If the law prevents us from fully fulfilling a request, we will explain the reason and scope of retention. You may complain to Hong Kong’s Privacy Commissioner for Personal Data or the competent authority in Taiwan.
Age, children and guardians
The minimum age is 8. Children under 8 may not register. Users aged 8 to under 18 need a parent or legal guardian to read this policy, complete applicable consent and verification procedures, and provide appropriate supervision. Higher ages required by local law or particular features take precedence.
Child-accessible features will open only when applicable parental consent, age assessment, content safety and data-protection arrangements are in place and provider and app-platform requirements are met. Tapping “Allow” on a device is not equivalent to completing parental consent.
Child accounts have stricter visibility and interaction limits: no public real-time precise location, behavioural advertising, cross-service tracking, third-party general-purpose model training or commercial data licensing involving their data. Features allowing personal-information exchange require adult action before activation and guardian controls for relevant interactions. Users whose age has not been established also receive no behavioural advertising.
Guardians may contact contact@beingfreebutterfact.com to request access, correction, withdrawal of consent or deletion of children’s data. We verify their authority. If we discover collection from an ineligible child or without required consent, we stop the relevant processing and delete or otherwise address the data as required by law.
Permissions and similar technologies
When you enable a relevant feature, we explain and request each required device permission separately. You can withdraw permissions in device settings.
| Permission or technology | Purpose and choice |
|---|---|
| Location | Nearby context and suggestions with authorisation. If background location is introduced, its necessity must be explained separately and the corresponding authorisation obtained; general location consent does not replace it. |
| Camera and photos | Used when you choose to capture or upload. Where a system picker is available, access is limited to the content you select. |
| Notifications | Suggestions and reminders after system permission. Turning them off does not prevent in-app browsing. |
| Local storage, cookies and analytics | This website uses local storage to remember language selection. New non-essential analytics, advertising cookies or similar tracking require prior notice and applicable consent choices. |
| Tracking and marketing | Handled separately from other permissions with the required consent and system authorisation. Section 11 applies to children. |
Declining a permission affects only features that depend on it. Accepting this policy is not consent to all device permissions, marketing, model training or unspecified purposes.
Changes to this policy
We may revise this policy as the service or law changes and update its date. Material changes receive appropriate advance notice through the website, app or email. New purposes requiring renewed consent begin only after that consent is obtained.
New features, countries or data categories are not automatically authorised by this policy. Notices and choices will be updated for the specific change.
Contact and language
Privacy contact: contact@beingfreebutterfact.com
Postal address: Being Free International Company Limited, Shop No.6-7 UG Prudential 216-228 Nathan Road, Hong Kong, Hong Kong
This policy is provided in Chinese and English. The Chinese version prevails in case of ambiguity. This language clause does not limit mandatory rights under applicable law.
Effective date: 20 October 2026.