BuriBuri 私隱政策
Privacy Policy

生效日期 Effective: 2026-10-20

私隱政策

BuriBuri（「我們」）是一個讓家人一起照顧寵物的應用程式，由 BuriBuri 營運。本政策說明我們收集哪些個人資料、用途、與誰分享、保存多久，以及你根據香港《個人資料（私隱）條例》（第 486 章）享有的權利。

1. 我們收集的資料

帳戶資料：使用 Google 登入時，我們取得你的 Google 帳戶識別碼、電郵地址及名稱；使用 Apple 登入時，取得 Apple 帳戶識別碼、電郵地址（可以是 Apple 的轉寄地址）及你選擇提供的名稱；以訪客身份使用時，只會建立一個匿名識別碼。
你輸入的寵物資料：寵物名字、種類、品種、生日、年齡、相片（包括每日相片日記）、過敏、藥物、晶片號碼、狗牌號碼、是否住在新界或行山；緊急聯絡卡（獸醫名稱、電話、診所、備註）；照顧任務及完成紀錄；疫苗及驅蟲紀錄；病況及藥物（藥名、劑量、服藥時間）；體重紀錄；便便和尿的紀錄（種類、樣子或份量、有否血或用力等、時間、備註、由誰記錄）；獸醫診症紀錄（診所、獸醫、診斷、備註、費用、費用明細及單據相片）。
家庭共享資料：家庭成員的帳戶識別碼、每位成員是家人還是照顧者（例如家傭）、你設定的暱稱、邀請連結（家人及照顧者各一條）、邀請次數、家庭動態（例如誰在甚麼時間餵了寵物），以及輪值表（每項任務每天由哪位成員負責）和「提醒家人」的設定。
客服訊息：BuriBuri 客服傳給你帳戶的訊息，會保留至你刪除帳戶為止。
裝置資料：推送通知所需的裝置識別碼（Firebase Cloud Messaging token）、提醒設定、語言及單位設定。App 的語言及你是否接收家人提醒亦會儲存在你的帳戶，讓伺服器發出的通知使用你的語言。部分資料會暫存於你的裝置上，以便離線使用。
使用及診斷資料：我們使用 Google Firebase Analytics 記錄 App 內的操作（例如完成任務、記錄體重、開啟某個畫面），並以你的帳戶識別碼關聯；使用 Firebase Crashlytics 收集當機及錯誤報告，報告只附上你的帳戶識別碼（只在測試版本中，亦會附上測試者的電郵地址及名稱，以便跟進他們報告的問題）；以及使用 Shorebird 發送 App 更新：App 檢查更新時會把 App 版本、平台及一個隨機安裝識別碼傳送給 Shorebird，不包括你的帳戶或寵物資料。

我們不會收集你的位置、通訊錄或廣告識別碼，不會在 App 內放置廣告，也不會出售你的個人資料。

2. 使用目的

提供 App 的功能：登入、儲存及在你的裝置之間同步寵物紀錄、與你邀請的家庭成員共享紀錄。
發送你開啟的提醒：照顧任務、疫苗到期、保險索償期限，家庭成員已完成某項任務的通知，以及共享任務過了時間仍未完成時給其他成員的提醒（由我們的伺服器讀取任務及完成紀錄後發出）。疫苗到期提醒由我們的伺服器讀取紀錄的到期日後發出。
按你的要求產生 PDF 健康紀錄或索償文件。
找出及修正錯誤、了解功能的使用情況，以改善 App。
回覆你的查詢，以及處理查閱、更正或刪除資料的要求。

3. 與誰分享

你邀請的家庭成員：他們可以查看及修改共享寵物的所有紀錄（包括相片及費用），並在家庭動態中看到你的暱稱及你做過的事。
你以照顧者身分邀請的人（例如家傭）：他們可以查看共享寵物的資料、任務、健康紀錄及藥物，並為任務打勾及記錄便便和尿；除自己記錄的便便和尿外，不能修改或刪除任何紀錄，亦不能查看獸醫紀錄及費用。他們亦會在家庭動態中看到成員的暱稱及做過的事。如你是照顧者，家人會看到你的暱稱及你完成的任務。
BuriBuri 客服人員：為回覆你的查詢或處理你的要求，獲授權的客服人員可以用你的電郵地址、帳戶識別碼、寵物的晶片號碼或狗牌號碼，或寵物名字找出你的帳戶，並查閱帳戶的摘要：電郵地址、登入方式、加入及最近登入日期、裝置數目、語言、家庭人數及你的身分（家人或照顧者），以及每隻寵物的名字、種類、品種、年齡和各類紀錄的數目（例如任務、最近 30 天的完成次數、疫苗紀錄、體重紀錄）。摘要不包括相片、費用、備註、任務內容、藥名或訊息內容。每次查閱都會記錄查閱的人員、帳戶及時間。
服務供應商：Google LLC（Firebase 驗證、Cloud Firestore 資料庫、Cloud Storage、Cloud Functions、Cloud Messaging、Analytics、Crashlytics 及 Google 登入）、Apple Inc.（Apple 登入及 App Store 評分視窗）及 Shorebird（App 更新）。他們只會按我們的指示處理資料。
你選擇分享的對象：你透過系統分享表單傳送的 PDF、相片或邀請連結，會交給你選擇的 App 或人。
字型下載：第一次匯出 PDF 時，App 會從 Google Fonts 下載中文字型，Google 會因此知道你的 IP 地址。
掃描獸醫單據：單據上的文字在你的手機上讀取，不會傳送給我們或任何人；只有在你儲存附有該相片的獸醫紀錄時，相片才會上載。在 Android 上，Google ML Kit 可能會向 Google 傳送匿名的使用及效能數據。挑選每日相片時，App 亦會在手機上檢查相片是否清晰、有沒有寵物，相片不會因此上載。
法律要求時，我們可能需要向執法或監管機構披露資料。

4. 跨境轉移

我們的資料儲存在 Google Cloud 的資料中心，可能位於香港以外的地方（例如美國或亞洲其他地區）。我們依賴服務供應商的保安措施及合約保障這些資料。

5. 保存期限

你的帳戶及紀錄會保存至你刪除為止。你可以在 App 內隨時修改或刪除個別紀錄。
在「設定 → 刪除帳戶」刪除帳戶時，我們會刪除你的帳戶、你的個人寵物及其相片和紀錄。如你是家庭的最後一位成員，整個家庭及其寵物資料會被刪除；如家庭仍有其他成員，共享的寵物會保留給他們，而你在家庭動態中的名字會改為「Former member」。使用 Apple 登入的帳戶，我們亦會撤銷 App 的 Apple 授權。
分析資料及當機報告按 Google 的保存設定保存，之後自動刪除（當機報告一般為 90 天）。

6. 保安

資料以加密連線傳送，存取受 Firebase 驗證及資料庫規則保護：只有你本人及你家庭的成員可以讀取相關紀錄；獲授權的客服人員只能查看上文第 3 節所述的摘要，而每次查閱都有紀錄。但互聯網傳輸無法保證絕對安全。

7. 你的權利

根據《個人資料（私隱）條例》，你有權要求查閱及更正我們持有的你的個人資料。大部分資料可以直接在 App 內查看、修改或刪除；其他要求請電郵至 info@buriburi.io。我們可能會為處理查閱要求收取不超乎適度的費用。你亦可以隨時在裝置設定中關閉通知。

8. 兒童

BuriBuri 並非為 13 歲以下兒童而設。如你得知兒童在未經家長同意下向我們提供了個人資料，請聯絡我們，我們會刪除有關資料。

9. 政策更新

如本政策有重大修改，我們會在 App 內或本頁通知你，並更新上方的生效日期。

10. 聯絡我們

BuriBuri
電郵：info@buriburi.io

收集個人資料聲明

本聲明根據《個人資料（私隱）條例》保障資料第 1 原則提供。

收集目的

我們收集你的個人資料，用於：提供及同步你的寵物照顧紀錄；與你邀請的家庭成員共享紀錄；發送你開啟的提醒；產生你要求的 PDF 文件；修正錯誤及改善 App；以及回覆你的查詢。

提供資料是否必須

登入帳戶（Google、Apple 或訪客）是使用 App 的必要條件；如不提供，你將無法使用 App。寵物資料、相片、獸醫紀錄、暱稱等其他資料均屬自願提供；如不提供，相關功能（例如共享、提醒或 PDF 匯出）可能無法使用。

資料轉移對象

你邀請的家庭成員；代我們處理資料的服務供應商（Google LLC、Apple Inc.），其資料中心可能位於香港以外；你選擇分享的對象；以及法律要求時的執法或監管機構。我們不會將你的個人資料用於直接促銷，亦不會出售予任何人。

查閱及更正

你有權要求查閱及更正你的個人資料。請電郵至 info@buriburi.io，註明「個人資料查閱／更正要求」。

Privacy Policy

BuriBuri ("we") is an app that helps families look after their pets together, operated by BuriBuri. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486).

1. What we collect

Account data: with Google sign-in, your Google account ID, email address and name; with Sign in with Apple, your Apple account ID, email address (which may be an Apple relay address) and the name you choose to share; as a guest, only an anonymous ID.
Pet data you enter: pet names, species, breed, birthday, age, photos (including the daily photo diary), allergies, medications, microchip and licence numbers, whether you live in the New Territories or go hiking; the emergency card (vet name, phone, clinic, notes); care tasks and when they were done; vaccine and deworming records; conditions and medications (name, dose, times); weights; pee and poo entries (kind, how it looked or how much, signs such as blood or straining, time, note, who logged it); vet visits (clinic, vet, diagnosis, notes, cost, itemised charges and photos of bills).
Household data: household members' account IDs, whether each member is family or a helper (for example a domestic helper), the nickname you set, invite links (one for family, one for helpers; each works for 7 days), requests to join a household (the name and email address of the person asking, the role and whether it was approved), the number of invites sent, the household activity feed (for example, who fed a pet and when), and the rota (which member is on duty for each task on each day) with the family nudge setting.
Support messages: messages from BuriBuri support sent to your account, kept until you delete your account.
Device data: the push notification token (Firebase Cloud Messaging), reminder settings, and language and unit settings. The app language and whether you get family nudges are also saved to your account, so notifications sent by our server are in your language. Some data is cached on your device so the app works offline.
Usage and diagnostics: we use Google Firebase Analytics to record actions in the app (for example, completing a task, logging a weight, opening a screen), linked to your account ID; Firebase Crashlytics for crash and error reports, which include only your account ID (test builds also include testers' email address and name, so we can follow up on problems they report); and Shorebird to deliver app updates: when the app checks for an update it sends Shorebird the app's version, platform and a random install identifier, never your account or your pets' data.

We do not collect your location, contacts or advertising identifier, we show no ads, and we never sell your personal data.

2. Why we use it

To run the app: sign-in, storing your pet records and syncing them across your devices, and sharing them with household members you invite.
To send the reminders you turn on: care tasks, vaccine due dates, insurance claim deadlines, notices that a household member has finished a task, and nudges to the other members when a shared task is still open after its time. Vaccine reminders and nudges are sent by our server, which reads the records' due dates, the tasks and whether they were done.
To create the PDF health records or claim documents you ask for.
To find and fix bugs and understand how features are used, so we can improve the app.
To answer your questions and handle requests to access, correct or delete your data.

3. Who we share it with

The family of a household you ask to join: when you open an invite link and ask to join, the household's family members see your name and email address so they can approve or decline you. Nothing is shared with you until they approve.
Household members you invite: they can see and edit all records of a shared pet (including photos and costs), and see your nickname and what you did in the activity feed.
People you invite as helpers (for example a domestic helper): they can see a shared pet's details, tasks, health records and medicines, tick tasks and log pee and poo; they can't edit or delete any record except pee and poo entries they logged, and can't see vet visits or costs. They also see members' nicknames and what they did in the activity feed. If you are a helper, the family sees your nickname and the tasks you complete.
BuriBuri support staff: to answer your enquiry or handle your request, authorised support staff can find your account by your email address, user id, a pet's microchip or licence number, or a pet's name, and look up a summary of it: your email address, how you sign in, the dates you joined and last signed in, the number of devices, your language, your household's size and your role in it (family or helper), and for each pet its name, species, breed, age and how many records of each kind it has (for example tasks, completions in the last 30 days, vaccine records, weigh-ins). The summary does not include photos, costs, notes, task details, medicine names or message text. Each lookup is logged with the staff member, the account and the time.
Service providers: Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Analytics, Crashlytics and Google Sign-In), Apple Inc. (Sign in with Apple and the App Store rating prompt), and Shorebird (app updates). They process data only on our instructions.
People and apps you choose: PDFs, photos or invite links you send through the share sheet go to the app or person you pick.
Font download: the first time you export a PDF, the app downloads a Chinese font from Google Fonts, so Google sees your IP address.
Scanning a vet bill: the text on the bill is read on your phone and isn't sent to us or anyone else; the photo is only uploaded if you save the vet visit with it. On Android, Google ML Kit may send Google anonymous usage and performance data. When you pick the photo of the day, the app also checks on your phone whether photos are sharp and show your pet; this doesn't upload them.
Law enforcement or regulators, where the law requires it.

4. Transfers outside Hong Kong

Our data is stored in Google Cloud data centres, which may be outside Hong Kong (for example in the United States or elsewhere in Asia). We rely on our providers' security measures and contractual safeguards to protect it.

5. How long we keep it

Your account and records are kept until you delete them. You can edit or delete individual records in the app at any time.
When you delete your account (Settings → Delete account), we delete your account and your personal pets with their photos and records. If you are the last member of a household, the household and its pets are deleted; if others remain, the shared pets stay with them and your name in the activity feed becomes "Former member". For Sign in with Apple accounts, we also revoke the app's Apple authorisation.
Analytics data and crash reports are kept under Google's retention settings and then deleted automatically (crash reports usually for 90 days).

6. Security

Data is sent over encrypted connections, and access is protected by Firebase Authentication and database rules: only you and members of your household can read the records concerned; authorised support staff can see only the summary described in section 3, and each lookup is logged. No transmission over the internet is completely secure.

7. Your rights

Under the Personal Data (Privacy) Ordinance you have the right to request access to and correction of the personal data we hold about you. You can view, change or delete most of it directly in the app; for anything else, email info@buriburi.io. We may charge a fee that is not excessive for handling an access request. You can turn off notifications in your device settings at any time.

8. Children

BuriBuri is not intended for children under 13. If you learn that a child has given us personal data without a parent's consent, contact us and we will delete it.

9. Changes

If we make a significant change to this policy, we will tell you in the app or on this page and update the effective date above.

10. Contact

BuriBuri
Email: info@buriburi.io

Personal Information Collection Statement

This statement is given under Data Protection Principle 1 of the Personal Data (Privacy) Ordinance.

Purposes

We collect your personal data to provide and sync your pet care records; share them with household members you invite; send the reminders you turn on; create the PDF documents you request; fix bugs and improve the app; and answer your enquiries.

Is it obligatory?

Signing in (with Google, Apple or as a guest) is required to use the app; without it you cannot use the app. Pet details, photos, vet records, your nickname and other data are voluntary; without them, related features (such as sharing, reminders or PDF export) may not work.

Transferees

Household members you invite; service providers who process data for us (Google LLC, Apple Inc.), whose data centres may be outside Hong Kong; people and apps you choose to share with; and law enforcement or regulators where the law requires it. We do not use your personal data for direct marketing and never sell it.

Access and correction

You have the right to request access to and correction of your personal data. Email info@buriburi.io with the subject "Personal data access / correction request".