Privacy Policy
Last updated: 10 November 2026. Applies to the app 入境之路 / 30 Days to Immigration on iOS (the "app").
1. Who we are
The app is published by Shi Tsz Him (Maple Hour), an individual developer in Hong Kong ("we", "us"). We are the "data user" under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO") for the personal data described here. Contact: himhimtwice@gmail.com.
The app is an independent practice tool. It is not made by, or affiliated with, the Hong Kong SAR Government or the Immigration Department.
2. The short version
- You sign in with Apple or Google. We keep the account details they give us.
- When you do AI practice, the text of your answers (typed, or turned from your voice into text) is sent to an AI service, DeepSeek, which runs from mainland China, together with the practice question and the conversation so far. We do not send your name, e-mail address or account ID to it.
- On iPhone your voice is turned into text by Apple's speech recognition, on the device where possible. We never store audio.
- We use your data to run the app, mark your practice, manage your subscription, keep the service safe and fix problems. We do not sell it, show ads, or track you across other companies' apps and websites.
- You can delete your account and data inside the app (Settings, Delete account and data) and you can switch off usage and crash reporting in Settings.
3. What we collect, why, and whether you have to give it
| Data | Purpose |
|---|---|
| Account: the sign-in provider (Apple or Google), a unique account ID, the e-mail address the provider shares (for Apple this may be a private relay address) and your name if the provider shares it (stored as a display name, up to 80 characters). | To create and secure your account, let you sign in again, and link your subscription to you. Providing it is necessary: without signing in you cannot use the app. |
| Your setup and preferences: target track (IA or IO), app and speech language, target stage and date, daily study time, reminder time. Most of this stays on your device. | To personalise your plan and practice. The track, language, difficulty and topic of a practice session are sent to our server and to the AI service with it. |
| Practice content: your typed answers, the text of your spoken answers, essays, the AI's questions and replies, and the scores and feedback reports. Interview and group-discussion sessions (transcript and report) are saved on our server so you can see your report; other one-off scoring (for example essay, impromptu talk and the spoken part of the warm-up) is processed and returned to you. | To run the practice, mark it, and show your results. Please do not include sensitive personal information (for example your HKID number, health details or details of other people) in your answers. |
| Voice: see section 4. Audio is not stored by us. | To turn speaking practice into text. |
| Subscription status: which plan, trial or paid period, expiry, whether it renews, and whether it is a sandbox or live purchase. Apple processes the payment; we never see your card details or Apple ID. | To unlock the paid features and keep them in step across a reinstall or a new phone. |
| Usage limits: daily counts of AI sessions and AI requests, an estimate of AI cost, and short-lived rate-limit counters. | To apply fair-use limits (for example 5 AI sessions a day) and protect the service from abuse and runaway cost. |
| Usage and crash data (can be switched off): event names such as "lesson completed" with small numeric or category values, error name, message and trimmed stack trace (with e-mail addresses and phone numbers removed on your phone before sending), the screen name, app version and platform, linked to your account ID. It never contains your answers, transcripts, name or e-mail. | To see which features are used, find and fix crashes, and plan improvements. It is on by default; turn it off under Settings, "Share anonymous usage and crash data". |
| Reports about AI content: if you tap the flag (Report) icon next to an AI question or report, we receive the reason you give, the reported AI text (cut to 500 characters, never your own words), where it appeared and the session ID. | To review and improve AI answers and respond to safety concerns. |
| Technical data: your IP address and device and app information are visible to our hosting and subscription providers when the app contacts them, and may appear in their security logs. | To deliver the service and keep it secure. |
| Stored only on your device: lesson and plan progress, test results, settings, and reminders. Reminders are local notifications scheduled on your phone; we do not run a push-notification server. | To make the app work. Removed when you delete the app or use Delete account and data. |
We do not collect your location, contacts, photos, advertising identifier, health data or any payment card details. We do not use a third-party advertising or analytics SDK. Our own usage and crash data is stored in our own database.
4. Your voice
- Normally, speech recognition by Apple. The app uses the speech recognition built into iPhone (Cantonese zh-HK and British English). The app asks iOS to recognise on the device. If the language model for on-device recognition is not installed, iOS may instead send your audio to Apple's servers to recognise it, which is governed by Apple's privacy policy. Only the resulting text reaches our app.
- If that is not available, the app can record a short clip (up to about 90 seconds) and send it over an encrypted connection to our server, which passes it to Microsoft Azure AI Speech to turn it into text. The audio is held in memory for that one request only and is deleted from your phone once the text comes back. We do not save or log it.
- You can always type your answer instead. You can turn off microphone and speech recognition access in iOS Settings at any time.
5. AI processing and transfer to mainland China
The app's AI practice (mock interview, group discussion, impromptu talk, essay marking, rehearsal) is powered by DeepSeek, an AI provider that operates from mainland China. When you use these features, our server sends DeepSeek the practice question, the conversation so far, your answers as text, and the practice settings (for example track, language and difficulty), so it can reply and mark you. We do not send your name, e-mail address, account ID or audio, and we do not put your identity in the request. We never log the content of these requests on our servers.
This is a transfer of personal data out of Hong Kong to mainland China. Laws there differ from Hong Kong's and DeepSeek handles content under its own terms and privacy policy, which we do not control. If you are not comfortable with this, do not use the AI practice features: lessons, Basic Law and National Security Law tests and the fitness features do not use DeepSeek. Because your answers go to this provider, keep them to the practice topic.
Before your first AI practice the app shows a one-time screen that names DeepSeek and asks for your agreement. If you choose "Not now", nothing is sent and the rest of the app keeps working. You can withdraw at any time under Settings, "AI practice"; you will be asked again the next time you start AI practice.
AI replies can be wrong, incomplete or inappropriate. Tap the flag (Report) icon on any answer you think is wrong or unsafe.
6. Who else receives data
We share data only with the service providers we need to run the app. We do not sell personal data.
| Recipient | What they get | Where |
|---|---|---|
| Supabase | Hosts our database, sign-in and server functions: everything in section 3 that is stored on our server. | Project hosted in Singapore (provider is a US company) |
| DeepSeek | Practice text as described in section 5. | Mainland China |
| Microsoft (Azure AI Speech) | Audio clip, only when the fallback in section 4 is used. | Microsoft data centre region selected by us |
| RevenueCat, Inc. | Your account ID as the customer ID, purchase and subscription details, app and device basics (such as app version, platform, country and currency) to validate and manage subscriptions. | United States |
| Apple | Sign in with Apple, App Store payments and subscriptions, speech recognition (section 4). Apple's own privacy policy applies. | Worldwide |
| Only if you choose to sign in with Google: the sign-in itself. Google's own privacy policy applies. | Worldwide |
Other than DeepSeek, which is described above, these providers process data on our behalf to provide their service under their standard terms. We may also disclose data where the law requires it, to protect our rights or users' safety, or if the app is transferred to a new owner (we would tell you).
7. How long we keep data
- Account, practice sessions, subscription status, usage counters and AI reports: until you delete your account, then removed (see section 9).
- Usage and crash data: older records are cleared out regularly (our aim is no more than 90 days), and all of it is deleted with your account.
- Audio: not kept (section 4).
- On your device: until you delete the app or the account.
- Backups: our hosting provider keeps routine backups for a short period, so deleted data can remain in a backup until it is overwritten.
- Records we must keep by law (for example tax records of store payments) are held by Apple, not by us.
8. Security
Data travels over encrypted connections (HTTPS). Our database allows each signed-in user to reach only their own rows, administrative access is limited to us, and secret keys are never placed in the app. The app asks for sign-in with Apple or Google, so we never hold your passwords. No system is perfectly secure; if there is a breach that is likely to cause you harm we will tell you and take the steps the PDPO and the Privacy Commissioner's guidance expect.
9. Your rights, and deleting your account
Under the PDPO you may ask whether we hold personal data about you, ask for a copy (a data access request), and ask us to correct it. Write to himhimtwice@gmail.com from the e-mail address linked to your account, so we can check it is you. We aim to reply within 40 days. The PDPO allows us to charge a reasonable fee for copying.
Delete your account in the app: Settings, "Delete account and data". This removes your practice sessions, scores, reports, usage records, subscription record, profile and sign-in account from our database, asks RevenueCat to delete your customer record, and (for Apple sign-in) revokes the Apple sign-in link. It also clears the app's data on your phone. It cannot be undone. It does not cancel your subscription: cancel in your Apple ID settings (Settings > your name > Subscriptions) to stop being charged. If deletion fails, write to us and we will do it by hand.
You can also turn off usage and crash reporting in Settings, and switch off the microphone, speech recognition and notification permissions in iOS Settings.
10. Children
The app is meant for adults and young people looking for a career in the civil service. It is not directed at children under 16, and we do not knowingly collect personal data from anyone under 16. If you are under 16, please do not use the app. If you are a parent or guardian and believe a child has given us personal data, write to us and we will delete it.
11. No advertising or tracking
The app has no ads. We do not use your data for direct marketing, we do not sell or share it with data brokers, and we do not track you across other companies' apps or websites, so the app does not show Apple's tracking permission prompt.
12. Changes to this policy
If we change how we use data, we will update this page and its date, and if the change is significant we will tell you in the app before it applies.
13. Contact and complaints
Questions, access or correction requests, or anything about your data: himhimtwice@gmail.com. You may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).
私隱政策
最後更新：2026 年 11 月 10 日。適用於 iOS 程式「入境之路 / 30 Days to Immigration」（下稱「本程式」）。
1. 我們是誰
本程式由香港個人開發者 Shi Tsz Him (Maple Hour)（下稱「我們」）發布。就本政策所述的個人資料，我們是香港《個人資料（私隱）條例》（第 486 章，下稱「私隱條例」）所指的「資料使用者」。聯絡電郵：himhimtwice@gmail.com。
本程式是獨立的練習工具，並非由香港特別行政區政府或入境事務處製作，亦與其無任何隸屬關係。
2. 重點摘要
- 你透過 Apple 或 Google 登入，我們會保存它們提供的帳戶資料。
- 進行 AI 練習時，你作答的文字（打字輸入，或由語音轉成文字）連同練習題目及至今的對話，會傳送至 AI 服務 DeepSeek（營運地為中國內地）。我們不會向其傳送你的姓名、電郵地址或帳戶編號。
- 在 iPhone 上，語音由 Apple 的語音識別轉成文字，並盡可能在裝置上處理。我們不會儲存錄音。
- 我們使用你的資料來運作程式、為練習評分、管理訂閱、保障服務安全及修正問題。我們不會出售資料、不會顯示廣告，亦不會跨其他公司的程式或網站追蹤你。
- 你可在程式內刪除帳戶及資料（設定 > 刪除帳戶及資料），亦可在設定中關閉使用情況及當機資料分享。
3. 我們收集甚麼、為何收集、是否必須提供
| 資料 | 用途 |
|---|---|
| 帳戶：登入方式（Apple 或 Google）、唯一帳戶編號、登入服務提供者分享的電郵地址（Apple 可能是私人轉寄地址），以及如其有分享的姓名（儲存為顯示名稱，最多 80 字）。 | 建立及保障你的帳戶、讓你再次登入，並把訂閱與你連結。此項資料屬必需：不登入便無法使用本程式。 |
| 你的設定及偏好：目標職系（IA 或 IO）、程式及語音語言、目標階段及日期、每日學習時間、提醒時間。大部分只存放於你的裝置。 | 為你度身訂造計劃及練習。每次練習的職系、語言、難度及題目，會連同練習傳送至我們的伺服器及 AI 服務。 |
| 練習內容：你打字輸入的答案、口頭作答轉成的文字、文章、AI 的提問及回覆，以及評分及回饋報告。面試及小組討論練習（對話紀錄及報告）會儲存於我們的伺服器，讓你查看報告；其他一次性評分（例如文章、即席演說及熱身中的口語部分）只作處理後回傳給你。 | 運作練習、評分及顯示結果。請勿在答案中加入敏感個人資料（例如身份證號碼、健康資料或他人的資料）。 |
| 語音：見第 4 節。我們不會儲存錄音。 | 把口語練習轉成文字。 |
| 訂閱狀態：所選方案、試用或付費期、到期日、是否續期，以及屬測試或正式購買。付款由 Apple 處理，我們不會看到你的信用卡資料或 Apple ID。 | 解鎖付費功能，並讓你重新安裝或轉機後仍保留訂閱。 |
| 使用限額：每日 AI 練習次數及 AI 請求次數、AI 成本估算，以及短期的流量限制計數。 | 實施公平使用限額（例如每日 5 次 AI 練習），並防止濫用及費用失控。 |
| 使用情況及當機資料（可關閉）：事件名稱（例如「完成課堂」）連同小型數字或類別數值、錯誤名稱、訊息及精簡的堆疊紀錄（電郵地址及電話號碼會先在你的手機上移除）、畫面名稱、程式版本及平台，並與你的帳戶編號連結。內容絕不包括你的答案、對話紀錄、姓名或電郵。 | 了解哪些功能有人使用、找出並修正當機，以及規劃改進。預設開啟；可在設定「分享匿名使用情況及當機資料」中關閉。 |
| AI 內容舉報：如你按下 AI 提問或報告旁的旗幟（舉報）圖示，我們會收到你填寫的原因、被舉報的 AI 文字（截取至 500 字，絕不包括你自己的文字）、出現位置及練習編號。 | 檢視及改善 AI 回答，並處理安全問題。 |
| 技術資料：程式連線時，我們的主機及訂閱服務供應商可看到你的 IP 地址以及裝置及程式資料，並可能記錄於其保安紀錄中。 | 提供服務及維持安全。 |
| 只存於你裝置的資料：課堂及計劃進度、測驗結果、設定及提醒。提醒是在你手機上安排的本機通知，我們並無運作推送通知伺服器。 | 讓程式正常運作。刪除程式或使用「刪除帳戶及資料」時會一併移除。 |
我們不會收集你的位置、通訊錄、相片、廣告識別碼、健康資料或任何付款卡資料。我們沒有使用第三方廣告或分析 SDK，使用情況及當機資料儲存於我們自己的資料庫。
4. 你的語音
- 一般情況：由 Apple 進行語音識別。本程式使用 iPhone 內置的語音識別（粵語 zh-HK 及英式英語），並要求 iOS 在裝置上識別。如裝置上未安裝所需的語言模型，iOS 可能改為把你的錄音傳送至 Apple 的伺服器識別，該情況受 Apple 的私隱政策規管。我們的程式只會收到識別出來的文字。
- 如上述方式不可用，程式可錄製一段短片段（最長約 90 秒），經加密連線傳送至我們的伺服器，再交由 Microsoft Azure AI Speech 轉成文字。錄音只會為該次請求暫存於記憶體，文字傳回後即自你的手機刪除。我們不會保存或記錄該錄音。
- 你隨時可改用打字作答，亦可隨時在 iOS 設定中關閉麥克風及語音識別權限。
5. AI 處理及傳送至中國內地
本程式的 AI 練習（模擬面試、小組討論、即席演說、文章評分、全日模擬）由 DeepSeek 提供支援，該 AI 供應商營運地為中國內地。你使用這些功能時，我們的伺服器會向 DeepSeek 傳送練習題目、至今的對話、你以文字表達的答案，以及練習設定（例如職系、語言及難度），讓其回覆及評分。我們不會傳送你的姓名、電郵地址、帳戶編號或錄音，亦不會在請求中帶有你的身分。我們的伺服器不會記錄這些請求的內容。
首次使用 AI 練習前，程式會顯示一次性畫面，列明 DeepSeek 並請你同意。如你選擇「暫時唔使」，不會傳送任何內容，程式其餘部分照常使用。你可隨時在「設定」→「AI 練習」撤回同意，下次開始 AI 練習時會再詢問你。
這是把個人資料由香港傳送至中國內地。當地法律與香港不同，DeepSeek 按其自身條款及私隱政策處理內容，我們無法控制。如你不接受，請勿使用 AI 練習功能：課堂、《基本法》及《國安法》測驗及體能功能並不使用 DeepSeek。由於你的答案會傳送至該供應商，請把答案限於練習題目範圍內。
AI 的回覆可能出錯、不完整或不恰當。如認為某個回答有誤或不安全，請按旗幟（舉報）圖示。
6. 還有誰會收到資料
我們只會向運作本程式所需的服務供應商分享資料，不會出售個人資料。
| 接收者 | 所收資料 | 地點 |
|---|---|---|
| Supabase | 代管我們的資料庫、登入及伺服器功能：即第 3 節中儲存於我們伺服器的全部資料。 | 專案設於新加坡（供應商為美國公司） |
| DeepSeek | 第 5 節所述的練習文字。 | 中國內地 |
| Microsoft（Azure AI Speech） | 錄音片段，只在使用第 4 節的後備方式時。 | 由我們選定的 Microsoft 資料中心區域 |
| RevenueCat, Inc. | 以你的帳戶編號作客戶編號、購買及訂閱詳情、程式及裝置基本資料（例如程式版本、平台、國家及貨幣），用以驗證及管理訂閱。 | 美國 |
| Apple | 以 Apple 登入、App Store 付款及訂閱、語音識別（第 4 節）。適用 Apple 自身的私隱政策。 | 全球 |
| 只在你選擇以 Google 登入時：登入本身。適用 Google 自身的私隱政策。 | 全球 |
除上述 DeepSeek 外，其餘供應商均按其標準條款代我們提供服務。如法律要求、為保障我們的權利或用戶安全，或本程式轉讓予新擁有人時（我們會通知你），我們亦可能披露資料。
7. 資料保存多久
- 帳戶、練習紀錄、訂閱狀態、使用限額計數及 AI 舉報：保存至你刪除帳戶為止，其後移除（見第 9 節）。
- 使用情況及當機資料：我們會定期清除舊紀錄（目標為最多保存 90 日），並會在你刪除帳戶時一併刪除。
- 錄音：不保存（第 4 節）。
- 你的裝置上：直至你刪除程式或帳戶。
- 備份：我們的主機供應商會在短時間內保留例行備份，因此已刪除的資料可能於備份被覆蓋前仍然存在。
- 法律規定須保存的紀錄（例如商店付款的稅務紀錄）由 Apple 保存，並非由我們保存。
8. 保安
資料透過加密連線（HTTPS）傳送。我們的資料庫只容許每位已登入用戶存取自己的資料，管理權限只限於我們，而密鑰從不放入程式內。本程式只使用 Apple 或 Google 登入，因此我們不會持有你的密碼。沒有任何系統能絕對安全；如發生可能對你造成傷害的資料外洩，我們會通知你，並按私隱條例及個人資料私隱專員的指引採取適當行動。
9. 你的權利及刪除帳戶
根據私隱條例，你可查詢我們是否持有你的個人資料、要求取得副本（查閱資料要求），以及要求更正。請以與帳戶連結的電郵地址致函 himhimtwice@gmail.com，以便我們核實身分。我們會力求在 40 日內回覆。私隱條例容許我們就複製資料收取合理費用。
在程式內刪除帳戶：設定 > 「刪除帳戶及資料」。這會從我們的資料庫移除你的練習紀錄、評分、報告、使用紀錄、訂閱紀錄、個人檔案及登入帳戶，要求 RevenueCat 刪除你的客戶紀錄，並（如以 Apple 登入）撤銷 Apple 登入連結，同時清除手機上的程式資料。此操作無法還原。刪除帳戶並不會取消訂閱：請在 Apple ID 設定（設定 > 你的姓名 > 訂閱項目）取消，以免再被收費。如刪除失敗，請來信，我們會人手處理。
你亦可在設定中關閉使用情況及當機資料分享，並在 iOS 設定中關閉麥克風、語音識別及通知權限。
10. 兒童
本程式適合有意投身公務員事業的成年人及青少年，並非針對 16 歲以下兒童，我們亦不會在知情下收集 16 歲以下人士的個人資料。如你未滿 16 歲，請勿使用本程式。如你是家長或監護人，並認為有兒童向我們提供了個人資料，請來信，我們會予以刪除。
11. 沒有廣告或追蹤
本程式沒有廣告。我們不會把你的資料用於直接促銷，不會出售或與資料經紀分享，亦不會跨其他公司的程式或網站追蹤你，因此本程式不會顯示 Apple 的追蹤權限提示。
12. 政策更改
如我們改變使用資料的方式，會更新本頁及日期；如屬重大更改，會在生效前於程式內通知你。
13. 聯絡及投訴
如有任何關於你資料的問題、查閱或更正要求：himhimtwice@gmail.com。你亦可聯絡香港個人資料私隱專員公署（pcpd.org.hk）。