隱私權政策
版本 2026-11-05・生效日 2026-11-05・更新日 2026-11-05
本政策說明 ResonMate 蒐集哪些個人資料、為什麼蒐集、怎麼使用、提供給誰、保存多久,以及你可以怎麼行使權利。
一、營運者與適用範圍
ResonMate 由 ResonMate 團隊營運(以下稱「我們」)。本政策適用於 ResonMate App 與 resonmate.com 網站。ResonMate 只提供給年滿 18 歲的人使用;得知使用者未滿 18 歲時,我們會停用並刪除該帳號。
二、我們蒐集的資料
你提供的資料
- 帳號:Email。用 Google 或 Apple 登入時,我們會從 Google 或 Apple 收到你的 Email(Apple 提供的可能是轉寄地址)。我們不要求姓名與大頭照。
- 個人檔案:暱稱、生日,以及大頭照。
- 故事:你寫的真實經歷。
- 側寫與自介:你要求時,從你挑選的故事寫成的側寫,以及你選來放在個人檔案上的自介。
- 互動:你建立與加入的聊天群、群裡的訊息與回覆、在群裡分享的故事,以及封鎖。
- 檢舉:原因、你寫的說明、你勾選的訊息與故事,以及是在哪個群檢舉的。
- 同意紀錄:你同意的條款版本與時間。
使用服務時產生的資料
- 帳號建立、登入與最近使用的時間。
- 故事的分析結果:故事裡的人物、事件、地點、物品與主題的摘要,以及你的故事和其他人故事的相似程度。這些分析不含你的帳號資料。
- 接收通知所需的裝置資料與 App 語言,以及「通知」分頁裡的通知紀錄。
- Passkey 登入資料,不含指紋或臉部資料。
- 照片比對資料,用來擋下別人盜用你的照片,無法還原成照片。
- 被系統判定有詐騙跡象的聊天訊息。
- 同群紀錄:你和哪些人在同一個群待過、一起待過幾個群、每次各自是帶哪一篇故事加入的,以及第一次與最近一次同群的時間。不包含聊了什麼,也不包含故事內容。
- 照片查看紀錄、錯誤紀錄,以及可能包含 IP 位址的連線紀錄。
- 用來限制濫用的使用次數,以及確認你用的是正版 App 的驗證結果。
我們不蒐集你的精確位置、通訊錄或廣告識別碼,不放廣告,也不追蹤你在其他 App 或網站的活動。
三、使用目的
- 建立與登入帳號、防止帳號被盜用。
- 比對你和其他人的故事,找出經歷相似的人,並說明你們為什麼共鳴。
- 在你要求時,從你挑選的故事寫出側寫與自介。
- 顯示你的個人檔案、處理聊天群與訊息、傳送通知。
- 審核照片與故事、提醒詐騙、處理檢舉與申訴、維護平台安全。
- 記錄你和哪些人同群過,用來在之後的功能裡告訴你和誰又遇到了、介紹你們認識。介紹時,別人的故事你只會知道他分享過的那幾篇。新功能推出時會先更新本政策。
- 遵守法律義務。
我們不會出售或出租你的個人資料,也不會把它用在廣告或行銷。
通知只說發生了什麼事(例如「你收到一則新訊息」),不會出現暱稱、訊息內容或照片,因為通知會顯示在鎖定畫面。
四、其他使用者看得到什麼
- 你的故事只有你看得到,直到你在聊天群裡分享它。分享後,那個群現在與之後的成員都讀得到,讀到的是最新的版本;你離開那個群後就讀不到了。分享的故事如果是你的側寫讀過的,會標示出來。
- 你在群裡時,可能加入的人(他們的故事和建群的那篇共鳴)看得到你的暱稱、年齡(不顯示生日)與自介,看不到你的大頭照和故事。
- 同一個群的成員看得到彼此的暱稱、年齡、自介與大頭照。
- 群裡的訊息,所有成員都讀得到,包括之後才加入的人;離開群的人就讀不到了。封鎖的雙方在共同的群裡看不到彼此的訊息。
- 側寫只有你自己看得到。
- 同群紀錄目前不會給任何使用者看。
- 沒有人看得到群是誰建的。
五、照片
- 照片上傳後會移除拍攝位置等資訊,再加密保存,不會公開在網路上。只有和你在同一個群的人能透過 App 看到。
- 誰看過你的照片都會留下紀錄,照片外流時可以追查。
- 別人看你的照片時,照片上會有平常看不出來的標記,截圖外流時可以查出是誰截的。
六、AI 處理
我們使用第三方 AI 服務處理以下內容。送去處理的只有照片或文字本身,不包含你的帳號資料:
- 審核照片:檢查照片是否看得到真人,以及是否有看起來未滿 18 歲的人、裸露、暴力、聯絡方式等不適當的內容。
- 審核與分析故事:檢查故事有沒有不適當的內容;再整理出故事裡的人物、事件、地點、物品與主題,用來和其他人的故事比對,並為共鳴的兩篇寫一句說明。說明不會引用故事內容。需要時,故事可能由我們的人員確認。
- 側寫與自介:你要求時,從你挑選的故事寫出側寫,再從側寫寫出幾個自介讓你挑選。自介不會提到具體經歷,你不選就不會出現在個人檔案上。
- 提醒詐騙:有人加入群後的一段時間內,在聊天到一定的則數,或訊息出現可能和詐騙有關的字眼(例如其他通訊軟體、匯款、投資)時,檢查最近的聊天內容有沒有詐騙跡象。發現時,提醒被懷疑者以外的成員(每個人的提醒只有自己看得到),並保存相關訊息 180 天,供審查與處理檢舉;沒問題的對話不另外保存。
AI 的判斷可能出錯。我們不會只根據 AI 的判斷終止帳號。
七、保存期限
- 帳號、個人檔案與照片:保存到你刪除(照片可以隨時刪除),或帳號刪除。
- 故事:保存到你刪除這篇故事,或帳號刪除。故事的分析結果與共鳴紀錄,在你修改或刪除故事時一併刪除。
- 側寫:保存到你產生新的側寫,或帳號刪除。刪除側寫讀過的故事時,側寫與自介照樣保留,直到你重新產生或撤下自介。
- 聊天群與群裡的訊息:保存到群結束,之後幾天內群和訊息一起刪除。群從建立起最多 33 天,最後一個成員離開時也會提早結束。你離開群或刪除帳號後,你傳過的訊息仍留在群裡直到群結束,讓其他成員回看時對話是完整的;其他成員會看到你已離開,帳號刪除後則顯示為「已刪除的帳號」。
- 封鎖紀錄:保存到任一方刪除帳號。
- 同群紀錄:保存到任一方刪除帳號。
- 「通知」分頁裡的通知:90 天,你也可以隨時刪除。
- 檢舉與詐騙紀錄(包括被檢舉的訊息與故事內容):180 天。
- 通知用的裝置資料:登出時刪除,60 天沒使用也會刪除。
- 照片查看紀錄:400 天。期間內任何人(包括我們)都無法刪除,帳號刪除後也會保留到期滿,用來在照片外流時查出誰看過,並證明照片已經銷毀。
- 錯誤紀錄與連線紀錄:30 天。
八、服務供應商與跨境處理
我們委託以下服務供應商,在提供服務所需的範圍內處理資料:
- 雲端服務:保存帳號、資料與照片,傳送通知,以及提供網站。
- AI 服務:審核照片與故事、分析故事、寫出側寫與自介,以及提醒詐騙。
- Email 寄送服務:寄送登入驗證碼。
- Apple 與 Google:用它們的帳號登入、傳送通知,以及確認你用的是正版 App。
你的資料會在台灣以外的地區(例如日本、美國)處理與保存。除了上述供應商、你顯示給其他使用者的內容,以及法律要求的情形,我們不會把你的個人資料提供給第三方。
九、刪除帳號
- 在「我的 → 刪除帳號」申請後,帳號立刻停用、所有裝置登出,其他人也立刻看不到你。
- 7 天內可以從登入頁救回。期間內,這個 Email 不能重新註冊。
- 7 天後(最晚第 8 天),我們會刪除你的照片、個人檔案、故事與它們的分析結果、側寫與自介、你按過的表情回應,並讓你離開所有的群,以及登入資料;用 Apple 登入的,會一併取消對 Apple 帳號的授權。你在群裡傳過的訊息會留到那個群結束,其他成員看到的名字是「已刪除的帳號」。
- 以下資料會保留到期滿:你提出的檢舉(不再記錄是你)、別人對你的檢舉與詐騙紀錄(180 天),以及第七節的查看、錯誤與連線紀錄。
- 刪除後無法還原。
十、你的權利
依個人資料保護法,你可以請求查詢或閱覽、製給複製本、補充或更正、停止蒐集處理或利用,以及刪除你的個人資料。請寄信到 privacy@resonmate.com,寫明帳號的 Email 與你的請求;我們可能需要先確認你的身分。很多資料在 App 內就能直接修改或刪除,你的每一篇故事也可以在 App 內分享出來另外保存。依法不能受理的部分(例如無法刪除的查看紀錄),我們會說明原因。停止處理必要的資料後,你可能無法繼續使用服務。
十一、安全
我們以加密、存取權限控管與查看紀錄保護你的資料,並限制登入與使用次數,防止濫用。
你的照片、故事、故事的分析摘要、側寫與聊天訊息,都以專屬的金鑰加密後才保存。只有在提供服務需要時(例如比對故事、審核內容、寫出側寫、提醒詐騙、處理檢舉,或顯示給看得到的人),才會解開;聊天訊息在成員的手機上解開。每次使用金鑰都會留下紀錄。用來比對故事相似程度的數值無法還原成故事,不另外加密。
但沒有任何系統能保證絕對安全。發現疑似外洩或帳號被盜用,請立刻聯絡 privacy@resonmate.com。
十二、手機上的資料
App 會在你的手機上保存登入狀態,以及加密過的照片暫存(一段時間沒用到會自動清除)。登出或刪除帳號時,照片暫存會清空。
十三、政策修訂
政策修訂時,會在本頁標示新的版本與日期。需要重新取得同意的變更,App 會請你再次同意。
十四、聯絡我們
隱私與個人資料的問題:privacy@resonmate.com
Privacy Policy
Version 2026-11-05 · Effective 2026-11-05 · Updated 2026-11-05
This policy explains what personal data ResonMate collects, why, how we use it, who we share it with, how long we keep it, and the rights you have.
1. Who we are and what this covers
ResonMate is run by the ResonMate team ("we"). This policy covers the ResonMate app and the resonmate.com website. ResonMate is only for people aged 18 or over; if we learn that a user is under 18, we close and delete the account.
2. What we collect
What you give us
- Account: your email address. When you sign in with Google or Apple, we receive your email address from them (Apple may give a relay address). We do not ask for your name or profile picture.
- Profile: nickname, birthday and your photo.
- Stories: the true experiences you write.
- Portrait and introduction: when you ask, a portrait written from the stories you pick, and the introduction you choose for your profile.
- Activity: the group chats you start and join, the messages and replies in them, the stories you share in them, and blocks.
- Reports: the reason, what you write, the messages and stories you pick, and the group you report from.
- Consent: which version of the terms you agreed to, and when.
What is created as you use ResonMate
- When your account was created, when you signed in and when you last used the app.
- The analysis of your stories: a summary of the people, events, places, things and topics in each, and how similar your stories are to other people's. The analysis contains no account details.
- What your device needs to receive notifications, the app's language, and the notifications listed in the Notifications tab.
- Passkey sign-in data, which contains no fingerprint or face data.
- Photo matching data, used to stop others from stealing your photos. It cannot be turned back into a photo.
- Chat messages our system flags as signs of a scam.
- Who you have been in a group with: which people, in how many groups, the story each of you joined each one with, and when you first and last shared one. Nothing of what was said, nor the stories' words.
- Records of who viewed photos, error records, and connection records that may include IP addresses.
- Usage counts to limit abuse, and checks confirming you are using the genuine app.
We do not collect your precise location, contacts or advertising identifier, we show no ads, and we do not track what you do in other apps or websites.
3. Why we use it
- To create your account, sign you in and keep it from being taken over.
- To compare your stories with other people's, find people who lived something similar, and say why your stories resonate.
- When you ask, to write a portrait and introductions from the stories you pick.
- To show your profile, run group chats and their messages, and send notifications.
- To review photos and stories, warn about scams, handle reports and appeals, and keep the service safe.
- To record who you have been in groups with, for a future feature that tells you when you meet someone again and introduces you to each other. Of someone else's stories, you will only ever learn those they shared. We will update this policy before it launches.
- To meet our legal obligations.
We do not sell or rent your personal data, and we do not use it for advertising or marketing.
Notifications only say what happened (for example "You have a new message"), never a nickname, message or photo, since they show on your lock screen.
4. What other people can see
- Only you can read your stories until you share one in a group chat. Once shared, that group's members, now and later, can read it, as it reads now; once you leave the group, they no longer can. A shared story your portrait read is marked as one.
- While you are in a group, people who may join it (their story resonates with the one it was started from) see your nickname, age (not your birthday) and introduction, not your photo or stories.
- Members of the same group see each other's nickname, age, introduction and photo.
- Every member reads a group's messages, including people who join later; someone who leaves reads them no more. Two people who blocked one another do not see each other's messages in a group they share.
- Only you can see your portrait.
- No user sees who you have been in groups with, for now.
- No one is shown who started a group.
5. Photos
- When you upload a photo, we remove details such as where it was taken, then store it encrypted. It is never public on the web; only people in a group with you can view it, in the app.
- Every view of your photos is recorded, so a leak can be traced.
- When someone views your photos, they carry a mark you normally cannot see, so a leaked screenshot can be traced to whoever took it.
6. AI processing
We use third-party AI services for the following. Only the photo or the text itself is sent, never your account details:
- Photo review: checking that a photo shows a real person, and that it shows no one who looks under 18, no nudity, violence, contact details or other unsuitable content.
- Story review and analysis: checking a story for unsuitable content, then summarising the people, events, places, things and topics in it, to compare with other people's stories and write one line on why two stories resonate. The line never quotes either story. Where needed, a person on our team may look at a story.
- Portrait and introduction: when you ask, writing a portrait from the stories you pick, then a few introductions from the portrait for you to choose from. Introductions do not mention specific experiences, and none shows on your profile unless you choose it.
- Scam warnings: for a while after someone joins a group, after a set number of messages, or when a message mentions something often tied to scams (such as another messaging app, a transfer or an investment), checking the latest messages for signs of a scam. If there are signs, the members other than the person suspected are warned (each sees only their own warning), and the messages concerned are kept for 180 days for review and reports; chats without signs are not kept for this.
AI can be wrong. We never close an account on an AI decision alone.
7. How long we keep it
- Account, profile and photos: until you delete them (you can delete photos any time) or your account.
- Stories: until you delete the story or your account. A story's analysis and resonance records go when you edit or delete it.
- Portrait: until you make a new one or delete your account. Deleting a story your portrait read keeps your portrait and introduction until you make a new one or take your introduction down.
- Group chats and their messages: until the group ends, after which the group and its messages are deleted together within a few days. A group lasts at most 33 days from when it starts, and ends early when its last member leaves. Messages you sent stay in a group after you leave it or delete your account, until the group ends, so that the conversation reads whole to the others; they see that you have left, or "Deleted account" once your account is deleted.
- Blocks: until either of you deletes their account.
- Who you have been in groups with: until either of you deletes their account.
- Notifications in the Notifications tab: 90 days, and you can delete them any time.
- Reports and scam records (including the messages and story text reported): 180 days.
- Device data for notifications: deleted when you sign out, or after 60 days unused.
- Photo view records: 400 days. Nobody, including us, can delete them before then, and they stay after an account is deleted, to trace who viewed a leaked photo and to show the photo was destroyed.
- Error and connection records: 30 days.
8. Service providers and processing abroad
We use these service providers to process data as far as needed to run the service:
- Cloud services: storing accounts, data and photos, sending notifications, and hosting the website.
- AI services: reviewing photos and stories, analysing stories, writing portraits and introductions, and warning about scams.
- Email delivery: sending sign-in codes.
- Apple and Google: signing in with their accounts, sending notifications, and confirming you are using the genuine app.
Your data is processed and stored outside Taiwan (for example in Japan and the United States). Apart from these providers, what you show other users, and where the law requires it, we do not give your personal data to anyone else.
9. Deleting your account
- Once you ask under Me > Delete account, your account is closed at once, every device is signed out, and nobody can see you any more.
- You can restore it from the sign-in screen within 7 days. Until then, the same email cannot sign up again.
- After 7 days (by day 8 at the latest), we delete your photos, profile, stories and their analysis, portrait and introduction, and the reactions you gave, and you leave every group, and sign-in data; if you signed in with Apple, we also revoke the app's access to your Apple account. The messages you sent in groups stay until each group ends, where the other members see "Deleted account" as the name.
- These are kept until they expire: reports you made (no longer linked to you), reports and scam records about you (180 days), and the view, error and connection records in section 7.
- Deletion cannot be undone.
10. Your rights
Under Taiwan's Personal Data Protection Act, you can ask to see or read your personal data, get a copy, add to or correct it, have us stop collecting, processing or using it, and delete it. Email privacy@resonmate.com with your account's email address and your request; we may need to confirm it is you first. Much of your data can be changed or deleted in the app itself, and each of your stories can be shared out of the app to keep a copy. Where the law does not let us act on a request (such as view records that cannot be deleted), we will say why. If we stop processing data we need, you may not be able to keep using the service.
11. Security
We protect your data with encryption, access controls and view records, and limit sign-ins and usage to prevent abuse.
Your photos, stories, the summaries drawn from your stories, your portrait and chat messages are all encrypted with keys of their own before they are stored. They are opened only when the service needs them (for example to compare stories, review content, write a portrait, warn about scams, handle a report, or show them to the people who can see them); chat messages are opened on members' phones. Every use of a key is recorded. The numbers used to measure how alike stories are cannot be turned back into a story, and are not encrypted separately.
No system can be perfectly secure, though. If you suspect a leak or that your account was taken over, contact privacy@resonmate.com straight away.
12. Data on your phone
The app keeps on your phone your sign-in and an encrypted cache of photos that clears itself when not used for a while. Signing out or deleting your account empties the photo cache.
13. Changes to this policy
When this policy changes, this page shows the new version and date. For changes that need your consent again, the app will ask you to agree again.
14. Contact us
Privacy and personal data: privacy@resonmate.com