EBR App 隱私政策

最後更新：2026 年 8 月 12 日

感謝您使用 EBR（以下稱「本 App」）。本 App 由明捷實業股份有限公司（MEGAJOY ENTERPRISE CO., LTD）開發，專為搭配 EBR Cycling Trainer 室內健身訓練台使用。本政策說明我們如何蒐集、使用及保護您的資料。

一、我們蒐集哪些資料

資料類型	蒐集方式	用途	是否分享第三方
運動紀錄（距離、時間、心率、功率）	用戶訓練操作	本機儲存、顯示歷史紀錄	否
藍牙裝置名稱	BLE 配對	重新連線裝置	否
匿名當機與診斷紀錄、裝置識別碼	Firebase Crashlytics 於程式當機時自動蒐集	問題診斷與修復	否（Google 以服務供應商身分處理）

本 App 不蒐集姓名、電子郵件、位置、財務或聯絡人資料，亦不蒐集使用行為分析或廣告識別碼。

二、資料如何使用

• 運動紀錄與設定僅儲存於您的裝置本機，不上傳至任何伺服器。
• 程式發生當機時，匿名的當機與診斷紀錄會透過 Firebase Crashlytics（Google）蒐集，僅用於診斷與修正問題，不會用於廣告。

三、第三方服務

本 App 僅整合下列 Google Firebase 服務：

• Firebase Crashlytics：於程式發生當機時蒐集匿名的當機記錄、診斷資訊及裝置識別碼，以協助我們診斷並修正問題。

此資料由 Google 以我們的服務供應商身分處理，不會用於廣告，也不會分享給其他任何第三方。Firebase 的隱私政策請參閱：https://firebase.google.com/support/privacy

四、資料保留期間

本機運動紀錄由您自行管理，可隨時在 App 內刪除。Firebase Crashlytics 蒐集的當機資料會在 90 天後自動刪除。

五、您的權利

• 查閱與刪除：您可在 App 內「歷史紀錄」頁面刪除所有運動紀錄。
• 停止蒐集：卸載 App 即可停止當機資料蒐集。

六、歐洲經濟區（EEA）／英國使用者專屬條款

若您位於歐盟、歐洲經濟區或英國，以下條款依《一般資料保護規則》（GDPR）及英國 GDPR 適用於您。

6.1 資料控管者

本 App 個人資料的控管者（Data Controller）為明捷實業股份有限公司（MEGAJOY ENTERPRISE CO., LTD）。聯絡方式請見第七節。

6.2 處理的法律依據

處理目的	法律依據（GDPR 第 6 條）
運動紀錄與裝置設定的本機儲存	履行契約（第 6(1)(b) 條）——提供本 App 核心功能所必需
藍牙裝置名稱記憶以重新連線	履行契約（第 6(1)(b) 條）
匿名當機與診斷紀錄（Firebase Crashlytics）	正當利益（第 6(1)(f) 條）——確保本 App 的穩定性與安全性

心率資料屬於 GDPR 第 9 條之健康相關資料。該資料僅儲存於您的裝置本機，不會傳輸給我們或任何第三方；其處理係基於您主動連接心率裝置並開始訓練所給予的明確同意（第 9(2)(a) 條），您可隨時於 App 內刪除。

6.3 您的資料主體權利

您享有以下權利：

• 存取權——瞭解我們是否處理您的個人資料及其內容。
• 更正權——要求更正不正確的資料。
• 刪除權（被遺忘權）——要求刪除您的個人資料。
• 限制處理權——要求限制特定處理行為。
• 資料可攜權——以結構化、通用且機器可讀之格式取得您的資料。
• 反對權——反對基於正當利益所為之處理（包含當機診斷資料蒐集）。
• 撤回同意權——隨時撤回已給予之同意，不影響撤回前處理之合法性。
• 向監理機關申訴權——向您所在國家之資料保護主管機關提出申訴。

由於運動紀錄、設定與心率資料完全儲存於您的裝置本機，您可直接於 App 內「歷史紀錄」頁面行使查閱、更正與刪除權；卸載本 App 將一併刪除全部本機資料。針對 Crashlytics 當機資料，請以第七節之 Email 與我們聯絡，我們將於一個月內回覆（依 GDPR 第 12(3) 條，複雜案件得延長兩個月並通知您）。

6.4 國際傳輸

本 App 不會將您的運動紀錄或健康資料傳出您的裝置。匿名當機診斷資料由 Google（Firebase Crashlytics）處理，可能傳輸至歐洲經濟區以外之伺服器；Google 依據歐盟執委會核准之標準契約條款（Standard Contractual Clauses）提供適當保護措施。詳見 Google 的 GDPR 說明。

6.5 自動化決策

本 App 不進行任何具法律效果或類似重大影響之自動化決策或使用者剖析（profiling）。

七、兒童隱私

本 App 不針對 13 歲以下兒童（歐洲經濟區為 16 歲以下，或當地法律規定之年齡），亦不刻意蒐集兒童個人資料。若您得知有兒童向我們提供個人資料，請與我們聯絡，我們將予以刪除。

八、聯絡我們

如有隱私相關問題，請透過以下方式聯絡：
Email：ebr.trainer@gmail.com

---

EBR App Privacy Policy

Last updated: August 12, 2026

Thank you for using EBR (the "App"), developed by MEGAJOY ENTERPRISE CO., LTD for use with the EBR Cycling Trainer indoor cycling trainer. This policy explains how we collect, use, and protect your data.

1. What Data We Collect

Data Type	Source	Purpose	Shared with 3rd Party
Workout records (distance, time, heart rate, power)	User training sessions	Local storage & history display	No
Bluetooth device name	BLE pairing	Device reconnection	No
Anonymous crash & diagnostic logs, device identifier	Firebase Crashlytics (automatic, on app crash)	Bug diagnosis & fixes	No (Google acts as our service provider)

We do not collect names, email addresses, location, financial, or contact data, and we do not collect usage analytics or advertising identifiers.

2. How We Use Data

• Workout records and settings are stored locally on your device only and are never uploaded to any server.
• When the app crashes, anonymous crash and diagnostic logs are collected through Firebase Crashlytics (Google) solely to diagnose and fix problems, and are never used for advertising.

3. Third-Party Services

The App integrates only the following Google Firebase service:

• Firebase Crashlytics: Collects anonymous crash logs, diagnostic data, and a device identifier when the app crashes, so we can diagnose and fix problems.

This data is processed by Google as our service provider, is not used for advertising, and is not shared with any other third party. Firebase privacy policy: https://firebase.google.com/support/privacy

4. Data Retention

Local workout records are managed by you and can be deleted anytime within the App. Crash data collected by Firebase Crashlytics is automatically deleted after 90 days.

5. Your Rights

• Access & Deletion: Delete all workout records from the "History" screen within the App.
• Stop collection: Uninstalling the App stops crash data collection.

6. Additional Terms for Users in the EEA and the UK

If you are located in the European Union, the European Economic Area, or the United Kingdom, the following terms apply to you under the General Data Protection Regulation (GDPR) and the UK GDPR.

6.1 Data Controller

The controller of personal data processed by this App is MEGAJOY ENTERPRISE CO., LTD. Contact details are provided in Section 8.

6.2 Legal Bases for Processing

Purpose of Processing	Legal Basis (GDPR Art. 6)
Local storage of workout records and device settings	Performance of a contract (Art. 6(1)(b)) — necessary to provide the App's core functionality
Remembering the Bluetooth device name for reconnection	Performance of a contract (Art. 6(1)(b))
Anonymous crash and diagnostic logs (Firebase Crashlytics)	Legitimate interests (Art. 6(1)(f)) — ensuring the stability and security of the App

Heart rate data constitutes health-related data under GDPR Art. 9. It is stored exclusively on your device and is never transmitted to us or any third party. Its processing is based on your explicit consent (Art. 9(2)(a)), given by connecting a heart rate device and starting a workout, and you may delete it at any time within the App.

6.3 Your Data Subject Rights

You have the right to:

• Access — obtain confirmation of whether we process your personal data and a copy of it.
• Rectification — have inaccurate data corrected.
• Erasure ("right to be forgotten") — request deletion of your personal data.
• Restriction of processing — request that certain processing be limited.
• Data portability — receive your data in a structured, commonly used, machine-readable format.
• Object — object to processing based on our legitimate interests, including crash diagnostics collection.
• Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Lodge a complaint — with the data protection supervisory authority in your country.

Because workout records, settings, and heart rate data are stored entirely on your device, you can exercise your rights of access, rectification, and erasure directly from the "History" screen in the App; uninstalling the App deletes all local data. For crash data held by Crashlytics, contact us at the email address in Section 8. We will respond within one month (extendable by two further months for complex requests, with notice to you, per GDPR Art. 12(3)).

6.4 International Transfers

The App does not transmit your workout or health data off your device. Anonymous crash diagnostics are processed by Google (Firebase Crashlytics) and may be transferred to servers outside the EEA. Google provides appropriate safeguards through the Standard Contractual Clauses approved by the European Commission. See Google's GDPR resources.

6.5 Automated Decision-Making

The App does not carry out automated decision-making or profiling that produces legal effects or similarly significant effects on you.

7. Children's Privacy

This App is not directed at children under 13 (under 16 in the EEA, or the age set by applicable local law) and does not knowingly collect data from them. If you become aware that a child has provided us with personal data, please contact us and we will delete it.

8. Contact Us

For privacy-related questions, contact us at:
Email: ebr.trainer@gmail.com