EcoStrider（綠色足跡）
Privacy Policy / 隱私權政策

Last updated / 最後更新：2026-10-13

This Privacy Policy describes how the EcoStrider (綠色足跡) app ("the App") handles your information. The App is provided by Taiwan Institute of Economic Research (台灣經濟研究院), No. 16-8, Dehui St., Zhongshan Dist., Taipei 104, Taiwan ("we", "us").

本政策說明「綠色足跡（EcoStrider）」App（以下稱本 App）如何處理您的資訊。本 App 由台灣經濟研究院（104 台北市中山區德惠街16-8號，以下稱「我們」）提供。

Which section applies to you

This App reads the country or region of your App Store or Google Play account on your device, only to decide whether to show the Green Transport Platform, which is available only in Taiwan. The App does not store this information and does not send it to us or to the platform.

Section A applies if the App shows the Green Transport Platform to you: for example, your store account's country is Taiwan or cannot be determined, you have linked the App with the platform, or you have trip records waiting to be uploaded to it. Otherwise, Section B applies.

哪一節適用於您

本 App 會在您的裝置上讀取您 App Store 或 Google Play 帳號所在的國家／地區，只用來判斷是否顯示僅在臺灣提供的「綠色運輸服務平臺」。本 App 不會儲存這項資訊，也不會把它傳給我們或平臺。

若 App 對您顯示綠色運輸服務平臺（例如您商店帳號的國家是臺灣或無法判斷、已與平臺連動，或有等待上傳到平臺的行程紀錄），適用 A 節；否則適用 B 節。

Common to all users

• We use your current location to show the correct map when you open the App's home page.
• When you record a trip, the App records GPS location data (coordinates, timestamps, movement speed, heading, altitude, floor level when your device provides it, and the accuracy of the position, speed, heading and altitude) and the transport mode you choose.
• Step data (step count; on iOS also the system's estimated walking distance) is used to detect walking and estimate walking distance. Raw step counts are processed on your device.
• Barometric pressure readings (on devices with a barometer) are used to estimate altitude change and climb. Motion sensor readings (acceleration) are collected while you record a trip, on devices that support it, to improve transport mode detection.
• The body weight you enter is used to estimate calories burned and is kept only on your device.
• The start and end points and reminder times of your favorite routes are used for recording reminders and are kept only on your device. If you set them by address, the address is sent to your phone system's address lookup service to convert it to coordinates.
• Trip data is stored on your device encrypted with AES-256. Secrets used by the App are kept in the system's secure storage (iOS Keychain / Android Keystore). Data the App sends is transmitted over HTTPS.
• This App does not have user accounts. Your trip records are stored on your device. You can delete any trip on the History page of the App.
• Cross-device sync (optional, off by default): If you turn on cross-device sync in Settings, your trip records (summaries, segments and the recorded track) are end-to-end encrypted on your device and stored in your own iCloud (iPhone/iPad) or your own Google Drive app data folder (Android). The encryption key stays on your devices (iCloud Keychain on Apple devices; a sync passphrase you set on Android). We and the cloud provider cannot read this data. Turning sync off stops further sync and does not delete your local records; data already in your cloud is not deleted by the App.
• Watch: Trips recorded on Apple Watch or Wear OS watch are transferred to your paired phone and handled the same way as trips recorded on the phone (including upload and sync settings). Apple Watch also reads barometric pressure and, only if you turn on "Share my green footprint", acceleration; these readings are stored encrypted on the watch with the trip, sent to your phone, and handled the same way as the phone's sensor readings. The sharing setting used is the one most recently synced from your phone to the watch. The phone also sends the watch a summary of your recent trips (up to 20) for display on the watch, including each trip's route shape as relative points only (no coordinates).
• When you record a walk on a watch, the watch reads your step count (and, on Apple Watch, the system's estimated walking distance) and sends it to your paired phone to estimate walking distance. The phone keeps only the estimated distance; step counts are not uploaded.
• Transfer file (optional): When you change phones, you can create a transfer file in the App and import it on your new phone. The file contains your trip records (including the recorded track and the platform member ID used when the trips were uploaded) and is encrypted with a passphrase you set. You choose where the file is saved; it is never sent to our servers, and we cannot read it. If you forget the passphrase, the file cannot be opened.

共同條款（所有使用者）

• 開啟 App 主頁時使用您目前的位置顯示正確地圖。
• 記錄行程時，App 記錄 GPS 定位資料（經緯度、時間戳記、移動速度、行進方向、海拔高度、所在樓層（裝置提供時），以及位置、速度、方向與高度的精度）與您選擇的交通工具。
• 計步資料（步數；iOS 另含系統估算步行距離）用於判斷步行並估算步行距離；原始步數只在裝置上處理。
• 氣壓感測值（有氣壓計的裝置）用於估算高度變化與爬升；動作感測值（加速度，支援的裝置）在記錄行程時採集，用於提升運具判斷的準確度。
• 您輸入的體重用於估算消耗熱量，只保存在您的裝置上。
• 您設定的常用路線起訖點與提醒時間用於記錄提醒，只保存在您的裝置上；以地址設定時，地址會交由手機系統的地址查詢服務轉成座標。
• 行程資料以 AES-256 加密存於裝置；App 使用的密鑰存於系統安全存儲（iOS Keychain／Android Keystore）；App 送出的資料以 HTTPS 加密傳輸。
• 本 App 沒有使用者帳號。您的行程記錄儲存在您的裝置上，可在 App 的「歷史」頁逐筆刪除。
• 跨裝置同步（選用，預設關閉）：跨裝置同步（選用，預設關閉）：您在設定開啟跨裝置同步後，行程記錄（摘要、分段與記錄的軌跡）會先在您的裝置上端到端加密，再存放於您自己的 iCloud（iPhone／iPad）或您自己的 Google 雲端硬碟 App 資料夾（Android）。加密金鑰只在您的裝置上（Apple 裝置用 iCloud 鑰匙圈；Android 用您設定的同步密語），我們與雲端業者都無法讀取。停止同步不會刪除本機記錄，也不會刪除已在雲端的資料。
• 手錶：在 Apple Watch／Wear OS 手錶上記錄的行程會傳到配對的手機，之後與手機記錄的行程同樣處理（含上傳與同步設定）。Apple Watch 另會讀取氣壓，並只在您開啟「同意分享綠色足跡」時讀取加速度；這些感測值會隨行程加密暫存在手錶、傳給手機，並與手機的感測值相同處理。所用的分享設定以手機最近同步到手錶的為準。手機也會把最近的行程摘要（最多 20 趟）傳到手錶顯示，其中路線形狀只有相對位置（不含經緯度）。
• 使用手錶記錄步行時，手錶會讀取步數（Apple Watch 另含系統估計的步行距離），傳給您配對的手機以估算步行距離；手機只保存估算出的距離，步數不會上傳。
• 換機檔（選用）：換手機時，您可以在 App 內建立換機檔並在新手機匯入。換機檔含有您的行程紀錄（包括記錄的軌跡，以及行程上傳時使用的會員編號），以您設定的密語加密。檔案存放位置由您選擇，不會傳到我們的伺服器，我們也無法讀取；忘記密語就無法打開。

Section A: Taiwan store (Green Transport Platform)

• Raw step counts are not uploaded; for walking trips, the distance calculated from them is part of the trip distance uploaded with your records.
• If you link the App with the Green Transport Platform, the App stores the platform member ID you enter (in the system's secure storage) and sends it with your uploads.
• Trip records are uploaded to the Green Transport Platform only after you link the App with the platform, automatically or manually according to your settings. If you do not link, your trip records are not uploaded.
• Barometric pressure and motion sensor readings are uploaded with your track (including the raw samples within each second) only if you turn on "Share my green footprint".
• If you connect the app to the Green Transport Platform and upload your records, manually or automatically: if you agree to share your green footprint, the full route of the trip is uploaded, along with the height, air pressure and shaking your phone senses; if you do not agree, only the departure point and arrival point of each leg of transport (the place and time) are uploaded, along with what you took and how far you went on each leg, and where you passed in between and how fast you went are not uploaded.
• While you stay connected to the platform, records you uploaded before will also get the departure point and arrival point of each leg of transport added once (only these two points, not the route in between).
• Uploaded records are compressed (gzip) before being sent over HTTPS. Compression does not change what data is included.
• Withdrawing your upload consent (Settings > Green Transport Platform > Withdraw upload consent and unlink) stops uploads and removes the member ID you entered, but does not delete trips already recorded on your device. To delete data already uploaded to the Green Transport Platform, please contact that platform.

A 節：臺灣商店（綠色運輸服務平臺）

• 原始步數不上傳；步行行程由此算出的距離會成為上傳記錄中的行程距離。
• 連動綠色運輸服務平臺後，App 保存您輸入的會員編號（存於系統安全存儲）並隨上傳送出。
• 只有連動平臺後才依您的設定自動或手動上傳行程記錄；未連動則不上傳。
• 氣壓與動作感測值只有在開啟「同意分享綠色足跡」時才隨軌跡上傳（含每秒內的原始取樣）。
• 如果您把 App 連上綠色運輸服務平臺，並手動或自動上傳紀錄：同意分享綠色足跡時，會上傳這趟完整的路線，以及手機感測到的高度、氣壓和晃動；不同意時，只上傳每一段交通工具的出發點和抵達點（地點和時間），以及每段搭什麼、走了多遠，中間經過哪裡、走多快都不會上傳。
• 在您維持連動的情況下，以前已上傳的紀錄也會補上一次每一段交通工具的出發點和抵達點（只補這兩個點，不含中間走過的路線）。
• 上傳的記錄會先壓縮（gzip）再以 HTTPS 傳送；壓縮不改變上傳的內容。
• 撤回上傳同意（設定 → 綠色運輸服務平臺 → 撤回上傳同意並解除連動）會停止上傳並清除您輸入的會員編號，但不會刪除裝置上已記錄的行程。若需刪除已上傳至綠色運輸服務平臺的資料，請聯繫該平臺。

Section B: Other stores

The Green Transport Platform is available only in Taiwan and is not shown to you. The App does not upload your trip records, step data or sensor readings to us or to the Green Transport Platform. If you turn on cross-device sync, your records are end-to-end encrypted and stored in your own cloud as described above. Statements in the common section that mention the platform, the member ID or "Share my green footprint" do not apply to you. If the App later shows the platform to you (for example, if the country of your store account changes), Section A applies from then on.

B 節：非臺灣商店

綠色運輸服務平臺僅在臺灣提供，不會對您顯示。本 App 不會把您的行程記錄、計步資料或感測值上傳給我們或綠色運輸服務平臺。若您開啟跨裝置同步，記錄會依上述方式端到端加密並存放在您自己的雲端。共同條款中提到平臺、會員編號或「同意分享綠色足跡」的句子不適用於您。若之後 App 對您顯示平臺（例如您的商店帳號國家改變），自那時起適用 A 節。

Third-party services

• Maps: the App displays maps with the Google Maps SDK. Map tile requests let Google know which area is being viewed; Google's privacy policy applies to that service.
• Address lookup: addresses you enter for favorite routes are converted by your phone system's geocoding service (Apple on iOS, Google on Android).
• Cross-device sync uses your own iCloud or Google Drive account; the data is end-to-end encrypted as described above.
• On Android, the Google Play Billing Library is used only to read the country of your Google Play account; the App does not make or read purchases.

第三方服務

• 地圖：App 以 Google Maps SDK 顯示地圖，地圖圖磚請求會讓 Google 得知查看的區域，該服務適用 Google 的隱私權政策。
• 地址查詢：常用路線輸入的地址由手機系統的地理編碼服務轉換（iOS 為 Apple、Android 為 Google）。
• 跨裝置同步使用您自己的 iCloud 或 Google 雲端硬碟帳號，資料如上所述端到端加密。
• Android 版使用 Google Play Billing Library，只用來讀取您 Google Play 帳號的國家／地區，App 不進行也不讀取購買。

Retention and disclosure

• Data on your device stays until you delete it or uninstall the App. Data uploaded to the Green Transport Platform is retained under that platform's policy.
• We may disclose information if required by law or by valid requests from public authorities.

保存與揭露

• 裝置上的資料保存到您刪除或移除 App 為止；上傳到綠色運輸服務平臺的資料依該平臺的政策保存。
• 依法律規定或主管機關合法要求時，我們可能揭露相關資訊。

Children

The App is not directed to children under 16, and we do not knowingly collect personal information from them.

兒童

本 App 不以未滿 16 歲的兒童為對象，我們不會蓄意收集其個人資料。

Changes to this policy

We may update this policy. Changes take effect when posted on this page, and the date above will be updated. The history of this page is public.

政策變更

我們可能更新本政策，變更自公布於本頁時生效，並更新上方日期；本頁修訂歷史公開可查。

Contact us

By mail: No. 16-8, Dehui St., Zhongshan Dist., Taipei 104, Taiwan. You can also report a problem from the Settings page of the App.

聯絡我們

郵寄：104 台北市中山區德惠街16-8號。也可以透過 App 設定頁面回報問題。