VISPO CARE
Vispo Care 刪除帳號與資料
繁體中文
摘要
- App：Vispo Care（家長 App）。開發者：智加雲科技有限公司（Vispo Technology Co., Ltd.）。
- 你可以在 Vispo Care App 內刪除家長帳號，也可以不使用 App，寄信到 privacy@vispo.app 申請。
- 刪除範圍是整個家庭帳號：連結到這個家庭帳號的所有登入方式（手機、Email、Google 等），包括家庭中其他家長的登入，都會一併刪除；其他家長需要重新註冊並重新綁定孩子。
- 刪除後，家庭帳號立即停止家長存取與通知。清除工作在下一次執行時刪除帳號資料，通常在 1 分鐘內。刪除後沒有取消期間。
- 刪除家長帳號不會撤回孩子的人臉辨識同意。要撤回時，請在刪除帳號前於 App 撤回。
1. 在 App 內刪除帳號
- 開啟 Vispo Care，登入要刪除的帳號。
- 點選「個人設定」。
- 點選「刪除帳戶」。閱讀「刪除帳戶？」視窗的說明，再點選「刪除帳戶」。
- 在「先驗證身分」區塊點選「寄驗證碼到…」。系統會寄驗證碼到你目前的手機或 Email。
- 輸入 6 位數驗證碼，再點選「確認刪除」。
帳號沒有可接收驗證碼的手機或 Email 時，App 無法完成刪除。請改用下方的寄信方式。
2. 不使用 App 申請刪除
- 寄信到 privacy@vispo.app，主旨寫「刪除 Vispo Care 帳號」。
- 在信中寫明登入用的手機號碼或 Email。
- 請勿寄送密碼、驗證碼或孩子照片。
我們只用下列方式確認你是帳號本人：你從帳號的登入 Email 回覆我們的信，或我們傳簡訊驗證碼到家庭已驗證的手機。無法用這兩種方式確認時，我們不會刪除帳號，並請你改用 App 內刪除。確認後的處理與在 App 內刪除相同。
3. 刪除的資料
| 資料 | 處理方式 |
|---|---|
| 家長存取與通知 | 立即停止 |
| 連結到家庭帳號的所有登入方式（包括家庭中其他家長的登入）與家庭帳號的連結 | 立即刪除 |
| 這些登入帳號（Email、手機、Google 身分、姓名）與頭像 | 清除工作在下一次執行時刪除，通常在 1 分鐘內 |
| 推播裝置與 LINE 綁定 | 立即停用，清除工作在下一次執行時刪除 |
| 通知內容、通知偏好與已讀紀錄 | 清除工作在下一次執行時刪除 |
| 手機驗證與 LINE 綁定過程中的暫存紀錄 | 清除工作在下一次執行時刪除 |
刪除範圍是整個家庭帳號：連結到這個家庭帳號的所有登入方式（手機、Email、Google 等），包括家庭中其他家長的登入，都會一併刪除；其他家長需要重新註冊並重新綁定孩子。
同一個登入也是 Vispo 出勤系統的員工或學生帳號時，保留共用的登入帳號、Email、手機、姓名與頭像，只刪除家長資料。之後可以用同一支手機或登入方式重新註冊，系統會建立空白家庭，你需要重新綁定孩子。
4. 保留的資料與原因
| 資料 | 保留原因與期限 |
|---|---|
| 匿名帳號編號（不含個人資料） | 讓下列紀錄仍可對應。保留到引用它的紀錄都到期為止，之後刪除 |
| 家長與孩子的連結 | 立即停用，作為機構可查的綁定紀錄。登入帳號刪除後只連到匿名帳號編號，保留期限與匿名帳號編號相同 |
| 人臉辨識同意紀錄 | 作為同意的證明。同意結束（撤回，或孩子的臉部特徵值刪除）後保存 5 年，之後刪除。刪除帳號不會撤回同意；刪除後要撤回，請聯絡孩子的機構 |
| 寄信申請刪除的處理紀錄 | 作為已處理申請的證明。內容是案件編號、處理人員、驗證方式與結果，不含 Email 或手機。保存 5 年後刪除 |
| 帳號刪除事件 | 用於執行清除工作。只含隨機產生的帳號編號與登入帳號編號，不含姓名、手機或 Email。與刪除處理紀錄一起保存，最多 5 年，之後刪除 |
| 孩子資料與到離班紀錄 | 由機構保管，不因刪除家長帳號而刪除。需要更正或刪除時，我們協助轉交機構處理 |
| 依法必須保留的交易與安全紀錄 | 依法律規定的期間保留 |
| 伺服器與服務商的技術紀錄（Google Cloud Logging、Supabase、Resend、LINE、Expo） | 依各服務商的保存設定到期後刪除。保存天數：依服務商設定 |
| 資料庫備份 | 刪除前建立的備份仍含有刪除的資料，備份依服務商設定到期後消失。我們不會用備份重建已刪除的帳號 |
5. 只刪除部分資料
不刪除帳號也可以移除部分資料：
- 移除頭像或修改個人資料：「個人設定」。
- 移除推播裝置：「個人設定」→「通知裝置」。
- 解除 LINE 綁定：「個人設定」→「LINE 綁定」。
- 撤回人臉辨識同意：「個人設定」→ 孩子的人臉辨識區塊 →「撤回同意」。
- 其他資料：寄信到 privacy@vispo.app 說明要刪除的項目。
Vispo Care Account and Data Deletion
Summary
- App: Vispo Care (parent app). Developer: Vispo Technology Co., Ltd. (智加雲科技有限公司).
- You can delete your parent account in the Vispo Care app. You can also ask for deletion without the app by email to privacy@vispo.app.
- Deletion covers the whole family account: every sign-in method linked to the family account (phone, email, Google and others), including the sign-ins of other parents in the family, is deleted. Other parents must register again and link the children again.
- After deletion, parent access and notifications for the family account stop immediately. The clean-up job deletes the account data on its next run, usually within 1 minute. There is no cancellation period after deletion.
- Deleting a parent account does not withdraw your child's face recognition consent. To withdraw it, do so in the app before you delete the account.
1. Delete your account in the app
- Open Vispo Care and sign in to the account that you want to delete.
- Tap Profile.
- Tap Delete account. Read the "Delete account?" dialog, then tap Delete account.
- In the identity check, tap the button that sends a code. The system sends a code to your current phone or email.
- Enter the 6-digit code, then tap Confirm deletion.
If the account has no phone or email that can receive a code, the app cannot complete the deletion. Use the email request below.
2. Ask for deletion without the app
- Email privacy@vispo.app with the subject "Vispo Care account deletion".
- Write your sign-in phone number or email in the message.
- Do not send passwords, verification codes or child photos.
We confirm that you own the account only in one of these ways: you reply to our email from the account's sign-in email, or we send an SMS code to the family's verified phone. If we cannot confirm it in one of these ways, we do not delete the account, and we ask you to delete it in the app. After we confirm, the request is processed in the same way as a deletion in the app.
3. Data that is deleted
| Data | What happens |
|---|---|
| Parent access and notifications | Stop immediately |
| Links between the family account and every sign-in method linked to it (including the sign-ins of other parents in the family) | Deleted immediately |
| These sign-in accounts (email, phone, Google identity, name) and avatars | Deleted by the clean-up job on its next run, usually within 1 minute |
| Push devices and LINE links | Deactivated immediately, then deleted by the clean-up job on its next run |
| Notification content, notification preferences and read records | Deleted by the clean-up job on its next run |
| Temporary phone verification and LINE link records | Deleted by the clean-up job on its next run |
Deletion covers the whole family account: every sign-in method linked to the family account (phone, email, Google and others), including the sign-ins of other parents in the family, is deleted. Other parents must register again and link the children again.
If the same sign-in is also a staff or student account in the Vispo attendance system, the shared sign-in account, email, phone, name and avatar are kept, and only the parent data is deleted. You can register again later with the same phone or sign-in method. The system creates an empty family, and you must link your children again.
4. Data that is kept and why
| Data | Reason and period |
|---|---|
| Anonymous account ID (no personal data) | Lets the records below stay linked. Kept until the records that refer to it expire, and then deleted |
| Links between the parent and children | Deactivated immediately and kept as a link record that the organization can check. After the sign-in account is deleted, they refer only to the anonymous account ID and are kept for the same period as the anonymous account ID |
| Face recognition consent records | Proof of consent. Kept for 5 years after the consent ends (it is withdrawn, or the child's face template is deleted), and then deleted. Deleting the account does not withdraw consent. To withdraw it after deletion, contact your child's organization |
| Records of email deletion requests | Proof that we handled the request. They contain the case number, staff member, verification method and result, with no email or phone. Kept for 5 years and then deleted |
| Account deletion event | Used to run the clean-up job. Only randomly generated account IDs and sign-in account IDs, with no name, phone or email. Kept with the deletion processing records for up to 5 years, and then deleted |
| Child data and attendance records | Kept by the organization. They are not deleted when you delete a parent account. To correct or delete them, we help send your request to the organization |
| Transaction and security records that the law requires us to keep | Kept for the period that the law sets |
| Server and provider technical records (Google Cloud Logging, Supabase, Resend, LINE, Expo) | Deleted when each provider's retention setting expires. Retention days: follow the provider setting |
| Database backups | Backups made before deletion still contain the deleted data. Backups disappear when the provider's retention setting expires. We never use backups to re-create a deleted account |
5. Delete only some data
You can remove some data without deleting your account:
- Remove your avatar or edit your profile: Profile.
- Remove push devices: Profile → Notification devices.
- Unlink LINE: Profile → LINE link.
- Withdraw face recognition consent: Profile → the child's face recognition section → Withdraw consent.
- Other data: email privacy@vispo.app and tell us what to delete.