片刻 Pianke · 隱私權政策 Privacy Policy

片刻 Pianke · Privacy Policy

Last updated / 最後更新:2026-10-08

片刻 (Pianke) runs entirely on your device and has no internet access. It does not collect, transmit, or upload any of your data — there are no accounts, no servers, and no cloud. — 本 App 完全在你的裝置上運作、沒有網路權限,不收集、不傳輸、不上傳你的任何資料;沒有帳號、沒有伺服器、沒有雲端。

English

Who this is from

片刻 (Pianke) is a business-card scanner and contact organizer. It works fully offline. We (the developer) operate no servers and receive none of your information — so this policy is mostly a description of what stays on your device and what only ever leaves it when you deliberately send it somewhere.

What the app stores (on your device only)

The corrected photo of each scanned card (the original capture is discarded).
The recognized text and parsed fields: name, company, title, phone numbers, email, address, website, and your notes.
Any tags you add and an optional follow-up reminder time you set for a card.
Your own “My Card” details and the optional avatar image you pick for it.
Your settings (default country for phone formatting, theme, whether app lock is on).

All of this lives in the app's private storage on your device. It is never sent to us or any third party. The shipped app declares no internet permission — verified in the app's final merged manifest — so it is technically unable to make a network connection or upload anything.

Scanning: camera, text recognition & QR

Camera — image capture is performed by Google Play Services' on-device document scanner; the image is returned to the app and stored only on your device. The app does not run a camera in the background and does not access your photo library except for an image you explicitly pick (to scan, or to use as your “My Card” avatar).
Text recognition (OCR) — uses Google's ML Kit on-device recognizer, processing the image locally on your phone. The image and text are not sent off the device.
QR / barcode — if a card carries a contact QR code, it is decoded on-device (ZXing, a pure offline library) to help pre-fill the fields. No network is used.

Sharing & exporting (all user-initiated)

Information leaves the app only when you choose to send it out — never automatically:

Export a card as a standard .vcf (vCard) or .csv file through the Android share sheet to a destination app you pick.
Save a card into your phone's Contacts app — the app opens the system Contacts screen pre-filled and you confirm the save (no contacts permission is used).
Export a card's image as a PDF or JPEG to a location you choose.
Display a card (including your “My Card”) as a QR code for someone to scan — your private notes and tags are deliberately excluded.

Once information is handed to another app, or saved to a location you selected, we do not control what happens to it next.

Backup & restore (local, and only when you ask)

You can export a backup of your cards and import it later. A backup is created only when you tap Export, and is handed to a destination you choose (e.g. Files, a messaging app, your own cloud drive). We never receive it.
You can protect a backup with a password: it is encrypted on-device with AES-256-GCM using a key derived from your password (PBKDF2, high iteration count). We cannot read or recover a password-protected backup — keep your password safe.
Automatic system/cloud backup is disabled (allowBackup=false), so your card data is not silently copied to cloud backup without your action.

Follow-up reminders

If you set a follow-up reminder on a card, the app schedules a local notification on your device for that time and re-schedules pending reminders after a reboot. This is entirely on-device; nothing is sent over a network.

App lock

You can optionally require your device biometric (fingerprint/face) or screen lock to open the app. This is handled by Android's system prompt — the app never sees or stores your biometric data. While app lock is on, the app also hides its contents from the app switcher and screenshots.

Permissions the app uses

Permission	Why
`POST_NOTIFICATIONS`	Show the local follow-up reminder you set. No network.
`RECORD_AUDIO`	Optional voice note: the microphone is used only while you tap the mic button to dictate a note. Speech is recognised on the phone by Android's on-device recognizer; nothing is recorded, stored or sent. If the offline speech pack is missing, the app never downloads it — you install it yourself in system settings.
`RECEIVE_BOOT_COMPLETED`	Re-arm your pending reminders after the phone restarts (alarms are cleared on reboot).
`USE_BIOMETRIC`, `USE_FINGERPRINT`	Optional app lock, via Android's system prompt. The app never receives your biometric data.
`INTERNET`, `ACCESS_NETWORK_STATE`	Removed. These were pulled in transitively by a Google library; we explicitly strip them so the shipped app cannot use the network.

Data retention & deletion

Delete an individual scanned card at any time.
Settings → Clear local data deletes your saved scanned cards and their images, plus any plaintext files the app left in its cache. Your separate “My Card” profile is not affected by this.
Uninstalling the app removes all of its data from your device, including your “My Card” and its avatar.

We retain nothing, because we never receive anything.

Analytics, ads, tracking & Data safety

The app contains no analytics, no advertising, and no tracking SDKs, and requests no advertising identifier. Consistent with this, our Google Play Data safety declaration is: no data collected and no data shared. Backups and exports you create are data you move yourself; they are not collected by us.

Children

The app is a general productivity tool and is not directed at children.

Changes & contact

If data practices change, this page and the “Last updated” date will be updated. Questions about this policy: piankecard@gmail.com (片刻 Pianke).

繁體中文

由誰提供

片刻(Pianke)是一款名片掃描與聯絡人整理工具,完全離線運作。我們(開發者)不架設任何伺服器、也不會收到你的任何資料。因此本政策主要是說明:哪些資料留在你的裝置上,以及只有在你主動傳送時才會離開裝置的部分。

App 儲存了什麼(僅存在你的裝置)

每張名片校正後的影像(原始擷取圖會被捨棄)。
辨識出的文字與解析後的欄位:姓名、公司、職稱、電話、Email、地址、網站與你的備註。
你新增的標籤,以及你為名片設定的跟進提醒時間(選用)。
你自己的「我的名片」內容,以及你為它挑選的大頭貼(選用)。
你的設定(電話格式的預設國別、外觀主題、是否開啟 App 鎖)。

以上全部保存在 App 於你裝置上的私有儲存空間,絕不會傳送給我們或任何第三方。上架版本未宣告網路權限(已在最終合併後的 manifest 驗證),因此技術上無法建立任何網路連線或上傳任何東西。

掃描:相機、文字辨識與 QR

相機 — 影像擷取由 Google Play 服務的裝置端文件掃描器 執行,擷取後回傳給 App 並僅儲存在你的裝置。App 本身不會在背景使用相機,也不會存取相簿(除非是你明確挑選的圖片 — 用於掃描,或作為你的「我的名片」大頭貼)。
文字辨識(OCR) — 使用 Google ML Kit 裝置端 辨識器,在手機本機處理;影像與文字不會為了辨識而離開裝置。
QR / 條碼 — 若名片上帶有聯絡 QR,會在裝置端解碼(ZXing,純離線函式庫)以協助預填欄位,不使用網路。

分享與匯出(全部由你主動觸發)

資訊離開 App 的唯一途徑,是當你選擇送出時 — 絕不會自動發生:

透過 Android 分享面板,將名片匯出為標準 .vcf(vCard)或 .csv 檔給你選的目的地 App。
將名片存入手機的通訊錄:App 會開啟系統通訊錄並預先填入,由你確認儲存(不使用通訊錄權限)。
將名片影像匯出為 PDF 或 JPEG 到你選擇的位置。
將名片(含「我的名片」)顯示為 QR 條碼 供他人掃描 — 會刻意排除你的私人備註與標籤。

資訊交給你所選的其他 App、或存到你選的位置後,其後續處理不在我們的控制範圍。

備份與還原(本機,且僅在你要求時)

你可以匯出名片備份,日後再匯入。備份只在你點選「匯出」時建立,並交給你選擇的目的地(例如檔案、通訊軟體、你自己的雲端硬碟)。我們絕不會收到。
你可以為備份設定密碼:備份會在裝置端以 AES-256-GCM 加密,金鑰由你的密碼透過 PBKDF2(高迭代次數)導出。我們無法讀取或還原有密碼保護的備份 — 請妥善保管密碼。
系統/雲端自動備份已停用(allowBackup=false),因此你的名片資料不會在未經你操作下被悄悄複製到雲端備份。

跟進提醒

若你為名片設定跟進提醒,App 會在該時間於你的裝置排定一則本機通知,並在重開機後重新排定尚未觸發的提醒。這完全在裝置端進行,不會透過網路傳送任何資料。

App 鎖

你可以選擇以裝置生物辨識(指紋/臉部)或螢幕鎖來開啟 App。這由 Android 系統提示處理 — App 不會看到或儲存你的生物特徵資料。開啟 App 鎖時,App 也會在多工切換畫面與截圖中隱藏內容。

App 使用的權限

權限	用途
`POST_NOTIFICATIONS`	顯示你設定的本機跟進提醒。不使用網路。
`RECORD_AUDIO`	選用的語音備註：只在你按下麥克風按鈕口述備註的期間使用麥克風。語音由手機上的 Android 離線辨識轉成文字；不錄音、不儲存、不上傳。若缺少離線語音包，App 不會自行下載，由你在系統設定中自行安裝。
`RECEIVE_BOOT_COMPLETED`	手機重開機後重新排定你尚未觸發的提醒(鬧鐘在重開機時會被清除)。
`USE_BIOMETRIC`、`USE_FINGERPRINT`	選用的 App 鎖,透過 Android 系統提示。App 不會取得你的生物特徵資料。
`INTERNET`、`ACCESS_NETWORK_STATE`	已移除。這些原是被某個 Google 函式庫間接帶入;我們明確移除,使上架版本無法使用網路。

資料保存與刪除

可隨時刪除單張已掃描名片。
設定 → 清除本地資料 會刪除你已儲存的掃描名片與其影像,以及 App 留在快取中的任何明文檔案。你另存的「我的名片」個人檔案不受此影響。
解除安裝 App 會移除其在你裝置上的所有資料,包括你的「我的名片」與大頭貼。

我們不保存任何資料,因為我們從未收到任何資料。

分析、廣告、追蹤與資料安全

本 App 不含任何分析、廣告或追蹤 SDK,也不索取廣告識別碼。因此我們在 Google Play 的資料安全聲明為:不收集任何資料、不分享任何資料。你建立的備份與匯出檔,是由你自己搬移的資料,並非由我們收集。

兒童

本 App 為一般生產力工具,並非以兒童為對象。

政策變更與聯絡

若資料處理方式變動,本頁與「最後更新」日期將更新。有疑問請聯絡:piankecard@gmail.com(片刻 Pianke)。