旅管家 TripButler · 最後更新 Last updated: 2026-06-23
TripButler（"旅管家"，下稱"本服務"）由 Nelson Leung 開發及營運。本私隱政策說明我哋喺你使用本服務時會收集、使用、儲存、分享同保護嘅個人資料。請仔細閱讀；使用本服務即代表你同意本政策。
電郵地址（用於登入、密碼重設、通知）
Email address — used for sign-in, password reset, notifications.顯示名稱、頭像（你上傳嘅圖片或 Gravatar）
Display name + avatar (uploaded image or Gravatar).你建立嘅行程：日期、事件、消費、參與成員
Trip data: dates, events, expenses, member list.你上傳到行程嘅相片，儲存喺雲端 object storage
Photos uploaded to trips, stored in object storage.事件地點嘅座標（你手動輸入或從地圖選擇）
Event location coordinates (you enter or pick from map).當你授權推送通知時，APNs / FCM / Web Push 嘅 device token
Push notification device token (when you grant permission).本服務採用以下第三方服務，全部只會接收為提供該服務所需嘅最小資料：
| 服務 | 用途 | 接收嘅資料 |
|---|---|---|
| MongoDB Atlas（新加坡 / 香港 region） | 資料庫托管 | 所有帳戶 + 行程資料 |
| Cloudflare R2 / S3-compatible | 相片儲存 | 你上傳嘅相片檔案 |
| Let's Encrypt（TLS） | HTTPS 憑證 | 加密傳輸 |
| Apple Push Notification (APNs) | iOS 推送 | 裝置 token（自選） |
| Firebase Cloud Messaging (FCM) | Android 推送 | 裝置 token（自選） |
| SMTP（自托管） | 電郵通知 | 你嘅電郵地址 |
你嘅資料會喺帳戶活躍期間保留。你可以隨時：
DELETE /api/v1/me（需要 JWT 認證）收到要求後，我哋會喺 30 日內刪除你嘅帳戶及相關個人資料；備份會喺 90 日內自動清除。
本服務主要喺新加坡及香港 region 托管。如果你喺歐盟、英國或其他地區使用，你嘅資料可能被傳輸到你所在司法管轄區以外。我哋採取合約措施（標準合約條款 SCCs）確保傳輸合規。
根據適用法例（GDPR、PDPO 等），你有權：
行使以上權利，請聯絡 nelson@tripbutler.com。
本服務唔針對 13 歲以下兒童，亦唔會主動收集佢哋嘅個人資料。如果你相信我哋意外收集咗兒童資料，請聯絡我哋即時刪除。
如果本政策有重大更改，我哋會透過 in-app 橫額同電郵通知你（最少 30 日預先通知）。繼續使用本服務代表你接受更新後嘅政策。
本政策受香港特別行政區法律管轄。任何爭議將提交香港法院解決。
資料控制者 Data Controller: Nelson Leung
電郵 Email: nelson@tripbutler.com
網站 Website: tripbutler.nelsonleung.org
TripButler ("the Service") is developed and operated by Nelson Leung. This Privacy Policy explains what personal information we collect, how we use it, how we store and share it, and how we protect it when you use the Service. Please read carefully — by using the Service you agree to this policy.
Email address — sign-in, password reset, notifications.
Display name + avatar (uploaded image or Gravatar).
Trips you create: dates, events, expenses, members.
Photos you upload to trips, stored in object storage.
Coordinates for event locations (you enter or pick from map).
APNs / FCM / Web Push device tokens (when you grant permission).
The Service uses the following third-party providers, each receiving only the minimum data required for their function:
| Service | Purpose | Data shared |
|---|---|---|
| MongoDB Atlas (Singapore / HK region) | Database hosting | All account + trip data |
| Cloudflare R2 / S3-compatible | Photo storage | Photos you upload |
| Let's Encrypt (TLS) | HTTPS certificates | Encrypted transit |
| Apple Push Notification (APNs) | iOS push | Device token (opt-in) |
| Firebase Cloud Messaging (FCM) | Android push | Device token (opt-in) |
| SMTP (self-hosted) | Email notifications | Your email address |
Your data is retained while your account is active. You can request deletion at any time:
DELETE /api/v1/me (requires JWT auth)We will delete your account and associated personal data within 30 days of the request. Backups are purged within 90 days.
The Service is primarily hosted in Singapore and Hong Kong regions. If you are in the EU, UK, or other jurisdictions, your data may be transferred outside your jurisdiction. We use contractual safeguards (Standard Contractual Clauses) to ensure compliant transfers.
Under applicable law (GDPR, PDPO, etc.) you have the right to:
To exercise these rights, contact nelson@tripbutler.com.
The Service is not directed at children under 13 and we do not knowingly collect personal data from them. If you believe we have inadvertently collected such data, contact us for immediate deletion.
If we make material changes, we will notify you via in-app banner and email (minimum 30 days' notice). Continued use of the Service after the effective date constitutes acceptance of the updated policy.
This policy is governed by the laws of the Hong Kong Special Administrative Region. Any disputes will be submitted to Hong Kong courts.
Data Controller: Nelson Leung
Email: nelson@tripbutler.com
Website: tripbutler.nelsonleung.org
文件版本 Document version: 1.0.0 (2026-06-23)