RoundQ ("the Service") takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Taiwan's Personal Data Protection Act.

1. Data Controller

The data controller for this Service is:

Service Name: RoundQ
Website: jjlindev.com
Contact Email: privacy@jjlindev.com

2. Purpose of Data Collection

We collect your personal data for the following purposes:

Account creation and authentication
Providing friend circle Q&A service functionality
Service-related notifications and communication
Maintaining service security and preventing abuse

3. Categories of Data Collected

We collect the following categories of personal data:

Required Data

Email address - Used for account registration, login, and notifications
Name/Display name - Used to identify you within friend circles
Password hash - Only for email registration (we do not store plain text passwords)

Optional Data

Profile picture - You may upload a custom avatar or use your Google account avatar
User-generated content - Including circles you create, rounds you initiate, responses, comments, and reactions
Uploaded images - Images you insert in your responses

Automatically Collected Data

Login session cookies - Used to maintain your login state
Language preference - Remembers your chosen interface language (Traditional Chinese or English)

4. Data We Do NOT Collect

To protect your privacy, we explicitly do not collect:

IP addresses - We do not log your network address
Geographic location - We do not detect or store your location information
Device identifiers - We do not track your device information
Browsing analytics - We do not use Google Analytics or other tracking tools
Payment information - This is currently a free service; we do not collect any payment data

5. Data Usage Period, Region, and Recipients

Usage Period: Your data will be retained until you delete your account. When you delete your account, all your personal data will be permanently deleted.

Usage Region: Your data is stored in Supabase cloud service data centers.

Recipients: Limited to what is necessary for operating this Service. We do not sell or share your personal data with third parties for advertising purposes.

6. Third-Party Services

This Service uses the following third-party services:

Supabase: Provides database, user authentication, and file storage services. All your data is stored on the Supabase platform.
Google OAuth: If you choose to sign in with Google, we receive your name, email, and avatar URL from Google. You can revoke this authorization at any time in your Google account settings.

7. Your Rights

Under Taiwan's Personal Data Protection Act, you have the following rights:

Query or request access to your personal data
Request supplementation or correction of your personal data
Request deletion of your personal data (account deletion)
Request cessation of collection, processing, or use of your personal data
Withdraw your consent

To exercise these rights, please use the settings page or contact our support email.

8. Cookie Usage

This Service only uses essential functional cookies:

Login session cookies - Maintain your login state so you don't need to log in repeatedly
Language preference cookies - Remember your chosen interface language

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: HTTPS encrypted transmission, database-level data isolation (Row Level Security), secure password hashing, and regular security reviews.

10. Policy Changes

We may update this Privacy Policy from time to time. When significant changes are made, we will notify you within the Service. We recommend regularly reviewing this page to stay informed about our privacy protection measures.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please contact us at privacy@jjlindev.com.