Privacy Policy隱私權政策

繁體中文

Euclid Lab（以下稱「本 App」）由 BridgeAIWorks 提供。本政策適用於目前的 iOS、iPadOS 與 macOS 本機優先版本，說明本 App 如何處理學習資料、Apple 服務及使用者的隱私選擇。

目前版本不要求建立網路帳號，不會把學習者檔案或學習內容傳送至 BridgeAIWorks，也不包含廣告、跨 App 追蹤、產品分析、雲端同步或第三方當機回報 SDK。因此，依目前的實際資料流，BridgeAIWorks 不會從本 App 蒐集學習者資料。

1. 儲存在裝置上的資料

為了恢復個別學習者的狀態，本 App 可能在自己的本機 App 容器與偏好設定空間中保存：

• 由使用者輸入的暱稱或教室識別名稱、App 產生的 Profile UUID、圖像與色彩選擇、建立及最近使用時間；
• 已選語言、互動模式、共用裝置模式及目前關卡；
• 基礎教材閱讀狀態、命題準備進度、提示進度與完成狀態；
• 尺規作圖的語意事件、幾何工作區狀態、Undo／Redo 分支及逐步回放歷史；
• 證明草稿、結構化理由、工作簿內容、嘗試紀錄、積分與獎勵狀態。

這些資料只用於 App 內的學習流程，不會因保存而自動傳送到 BridgeAIWorks 或第三方伺服器。它們受 Apple 作業系統的 App sandbox 與裝置安全機制保護；這不代表端對端加密，也不能保證任何裝置在所有情況下均不受未授權存取。

訪客模式：訪客的閱讀、作圖、證明與積分狀態不會寫入持久儲存。離開訪客模式或關閉 App 後，該狀態可能無法復原。

播放音效：App 只播放內建的鼓勵音效，或使用系統語音合成播放固定短句；不錄製學習者聲音，也不要求麥克風權限。

2. 網路、AI、分析及裝置權限

目前版本沒有外部 AI、社群登入、教師後台、遠端資料庫、廣告、分析、遙測或第三方當機回報。App 不要求相機、麥克風、照片圖庫、通訊錄、行事曆、定位、健康資料、藍牙或區域網路權限。

App 內的歷史來源資訊可能包含可由使用者主動開啟的外部來源紀錄連結。只有在您點選連結後，所選網站及瀏覽器才可能取得 IP 位址、瀏覽器資訊與該次請求；其處理受該網站自身政策約束，BridgeAIWorks 不控制第三方網站。

若未來加入外部 AI、帳號、CloudKit／雲端同步、教師管理、匯出、分析、廣告或新的第三方 SDK，我們會在功能上線前重新檢查資料流，更新本政策、App 內說明與商店隱私揭露，並在需要時取得使用者同意。

3. App Store 與購買

首發版本永久免費提供 Foundations 與 Book I 命題 I.1–I.12，且不顯示付費內容購買入口。若後續版本提供非消耗型內容包，商品資訊、購買、恢復購買、退款與交易驗證將由 Apple App Store 與 StoreKit 處理。

BridgeAIWorks 不會從本 App 取得完整付款卡或銀行資料。購買權利屬於 Apple Account、Family Sharing（如適用）或學校授權所管理的 App Store entitlement，不綁定在 App 內的學習者 Profile；刪除或切換 Profile 不會取消購買。Apple 對 App Store 資料的處理受 Apple 自身政策約束。

4. 兒童、學生與共用教室裝置

本 App 是幾何學習工具，可由家庭、學生、教師或教室使用。App 內的 Learner Profile 是裝置上的本機學習檔案，不是 BridgeAIWorks 網路帳號。

教師與家長應只輸入完成教學所需的最少資料。Profile 名稱可以使用暱稱或教室代號；請勿輸入不必要的法定姓名、電子郵件、電話、生日、完整學號、學校全名或其他敏感個人資料。共用同一裝置的使用者可能看到裝置上其他 Profile 的名稱，因此共用者應使用彼此信任的裝置與適當的作業系統管理設定。

5. 保存與刪除

非訪客 Profile 的本機資料會保留在裝置上，直到使用者透過 App 內可用的 Profile 控制項刪除，或透過作業系統移除該 App 的資料。新增的學習者 Profile 可在再次確認後刪除，其閱讀、工作簿、作圖歷史、證明草稿、提示與積分等 Profile 專屬資料會一併移除。

App 必須保留至少一個本機 Profile，因此最後一個 Profile 不一定能由目前的 Profile 管理畫面刪除。如要移除剩餘資料，請使用作業系統提供的 App 資料移除方式。裝置備份或作業系統行為可能影響資料何時從備份中消失。

刪除 Profile 或本機學習資料不會刪除 Apple 管理的 App Store 交易或購買紀錄。BridgeAIWorks 沒有學習資料的伺服器副本，因此無法遠端讀取、恢復或刪除只存在您裝置上的資料。

6. 安全、跨境處理與您的選擇

我們以本機優先、App sandbox、最少權限與不整合追蹤 SDK 等方式降低風險。您有責任保護裝置密碼、裝置備份及共用教室裝置的存取。

BridgeAIWorks 不將本機學習資料傳送至自有後端，因此不會為這些資料進行 BridgeAIWorks 伺服器端跨境傳輸。Apple 服務或您主動開啟的外部來源網站可能在其他國家或地區處理連線資料，請查閱其政策。

您可使用訪客模式避免保存學習狀態、使用暱稱代替真實姓名、刪除可刪除的 Profile，或停止使用並移除 App 資料。

English

Euclid Lab (the “App”) is provided by BridgeAIWorks. This policy applies to the current local-first iOS, iPadOS, and macOS versions and explains how the App handles learning data, Apple services, and privacy choices.

The current version does not require an online account and does not transmit learner profiles or learning content to BridgeAIWorks. It contains no advertising, cross-app tracking, product analytics, cloud synchronization, or third-party crash-reporting SDK. Under the current data flow, BridgeAIWorks does not collect learner data from the App.

1. Data stored on the device

To restore each learner’s state, the App may store the following in its local App container and preferences:

• A user-entered nickname or classroom identifier, an App-generated Profile UUID, avatar and color choices, and creation and last-active timestamps;
• Selected language, interaction mode, shared-device mode, and current mission;
• Foundation reading state, mission preparation, hint progress, and completion state;
• Semantic straightedge-and-compass events, geometry workspace state, Undo/Redo branches, and step-by-step replay history; and
• Proof drafts, structured reasons, workbook content, attempt history, points, and reward state.

This information is used only for in-App learning and is not automatically sent to BridgeAIWorks or a third-party server. It is protected by the operating system’s App sandbox and device-security mechanisms. This does not mean the data is end-to-end encrypted or that unauthorized access is impossible in every circumstance.

Guest mode: Guest reading, construction, proof, and points are not written to persistent storage. The state may not be recoverable after leaving Guest mode or closing the App.

Audio playback: The App plays bundled encouragement audio or uses system speech synthesis for fixed short phrases. It does not record the learner or request microphone access.

2. Network, AI, analytics, and device permissions

The current version has no external AI, social sign-in, teacher backend, remote database, advertising, analytics, telemetry, or third-party crash reporting. It does not request access to the camera, microphone, photo library, contacts, calendars, location, health data, Bluetooth, or local network.

Historical source information in the App may include links to external source records that you can choose to open. Only after you select such a link may the destination website and browser receive an IP address, browser information, and the request. That processing is governed by the destination’s policies, which BridgeAIWorks does not control.

If a future version adds external AI, accounts, CloudKit or other cloud sync, teacher administration, export, analytics, advertising, or another third-party SDK, we will review the data flow and update this policy, in-App notice, and store privacy disclosure before release, obtaining consent where required.

3. App Store and purchases

The initial release provides Foundations and Book I propositions I.1–I.12 permanently free and does not display a paid-content purchase entry point. If a later version offers a non-consumable content pack, product information, purchase, restoration, refund, and transaction verification will be handled by Apple through the App Store and StoreKit.

BridgeAIWorks does not receive full payment-card or bank information from the App. Purchase access belongs to an App Store entitlement managed through the Apple Account, Family Sharing where applicable, or a school license, and is not tied to an in-App learner Profile. Deleting or switching a Profile does not cancel a purchase. Apple’s processing is governed by Apple’s own policies.

4. Children, students, and shared classroom devices

The App is a geometry-learning tool that may be used by families, students, teachers, and classrooms. A Learner Profile is a local learning record on the device, not a BridgeAIWorks online account.

Teachers and parents should enter only the minimum information needed for learning. A nickname or classroom code can be used as the Profile name. Do not enter an unnecessary legal name, email address, phone number, birth date, full student number, school name, or other sensitive personal information. Users sharing one device may be able to see other local Profile names, so shared devices should be used by trusted participants with appropriate operating-system management.

5. Retention and deletion

Local data for a non-Guest Profile remains on the device until it is deleted using available Profile controls or the App’s data is removed through the operating system. An additional learner Profile can be deleted after confirmation, removing its Profile-specific reading, workbooks, construction history, proof drafts, hints, and points.

The App must retain at least one local Profile, so the final Profile may not be removable from the current Profile-management screen. To remove the remaining data, use the operating system’s method for removing App data. Device backups and operating-system behavior may affect when data disappears from backups.

Deleting a Profile or local learning data does not erase App Store transactions or purchase records managed by Apple. BridgeAIWorks has no server copy of the learning data and therefore cannot remotely access, recover, or delete information stored only on your device.

6. Security, international processing, and your choices

We reduce risk through a local-first design, App sandboxing, minimal permissions, and the absence of tracking SDKs. You are responsible for protecting the device passcode, backups, and access to a shared classroom device.

BridgeAIWorks does not transmit local learning data to a proprietary backend and therefore does not perform BridgeAIWorks server-side international transfer of that data. Apple services or an external source website you choose to open may process connection data in another country or region; review their policies.

You may use Guest mode to avoid persisting learning state, use a nickname instead of a legal name, delete removable Profiles, or stop using the App and remove its data.

Policy changes and contact / 政策更新與聯絡

We may update this policy if the App’s features, services, or data practices change. We will revise the effective date and provide additional notice when reasonably appropriate.

若 App 功能、服務或資料處理方式改變，我們可能更新本政策，並修改生效日期；如有需要，亦會提供額外通知。

Operator / 營運者：BridgeAIWorks
Email / 電子郵件：support@bridgeaiworks.com