私隱政策
最後更新：2026 年 6 月 9 日
關春傑工程有限公司（下稱「我們」）開發並營運「建築工程管理」流動應用程式（下稱「本 App」）。
本政策說明我們如何收集、使用、儲存及保護用戶資料。使用本 App 即代表你同意本政策內容。
1. 收集嘅資料
1.1 你直接提供嘅資料
- 帳號資料：手機號碼（用作帳號識別碼）、姓名、所屬公司、職位／角色、密碼（加密儲存）。
- 工地操作資料：你建立或更新嘅工地項目、進度、樓層完成情況、備注、每日日誌、物料申請、行事曆事件。
- 問題報告：問題標題、描述、現場照片、留言。
- 工地文件：你上載或建立嘅圖則（PDF／圖片）、工地指令（SI）、變更指令（VO，含 HKD 報價金額）、工作許可證（PTW）及相關照片、檔案與描述。
- 相片及檔案：你喺問題、圖則、工地指令、許可證、每日日誌等功能主動拍攝或選擇上載嘅相片及文件。
- 位置資料：當你主動為某張工地指令（SI）加上現場位置時，我們會記錄當時嘅 GPS 座標（經緯度及精確度），用以標示該指令發出嘅地點。唔加位置就唔會收集。
- 錄音：當你喺工地指令主動錄製語音備忘時，我們會儲存該段錄音。
- 電子簽名：當你喺工作許可證（PTW）或審批流程簽核時，我們會儲存你嘅手寫電子簽名圖像。
- 項目通訊錄：你喺「聯絡人」功能手動輸入嘅工地聯絡人姓名、工種、電話。此為你自行輸入嘅資料，我們不會讀取你手機本身嘅通訊錄。
- 申請紀錄：你申請加入工地嘅角色、批准／拒絕嘅紀錄、時間戳記。
1.2 自動收集嘅資料
- 裝置識別碼：用於推送通知（透過 Apple Push Notification service）。
- 使用紀錄：登入時間、操作時間戳記，用作紀錄追溯及審計。
1.3 我們不收集嘅
- 你手機本身嘅通訊錄（裝置聯絡人）
- 瀏覽紀錄
- 背景或持續嘅位置追蹤（位置只在你主動標示工地指令地點嗰一刻收集）
- 付款／信用卡資料
- 第三方廣告或追蹤識別碼
2. 相機、相簿、麥克風、位置 權限
本 App 喺以下情況可能要求使用相機、相簿、麥克風或位置權限，全部只在你主動使用相關功能時先會調用：
- 相機／相簿：報告問題、上載圖則、工地指令、工作許可證、每日日誌時，拍攝或選擇相片及文件。我們只上傳你主動選擇嘅內容。
- 麥克風：喺工地指令錄製語音備忘時。
- 位置：喺你選擇為工地指令標示現場位置時，讀取一次當時嘅 GPS 座標；本 App 唔會喺背景持續追蹤你嘅位置。
你可以隨時喺 iOS 設定 → 私隱與安全性（相機／相片／麥克風／定位服務）或通知中，關閉個別權限。
3. 推送通知
我們透過 OneSignal 服務發送以下通知：
- 新問題報告（給對應處理層人員）
- 問題上呈（給下一層處理人員）
- 問題已解決（給報告者）
- 工地指令、變更指令、工作許可證嘅簽核及狀態更新
- 工地申請通過或拒絕（給申請者）
- 被指派為 PM 或負責人
你可以喺 iOS 設定 → 通知 → 「CK Construction」中關閉推送通知。
我們不會用推送通知做行銷或廣告。
4. 資料儲存與第三方服務
本 App 嘅資料儲存於以下第三方服務嘅基礎設施上：
5. 資料保留與刪除
- 帳號資料：保留至帳號被刪除為止。
- 工地相關資料（進度、問題、圖則、指令、許可證、相片、錄音、簽名等）：保留作工程紀錄及審計用途，與工地壽命相符。
- 用戶可隨時喺 App 內（「個人」頁）刪除帳號，或聯絡我們要求刪除帳號及相關資料（見第 10 節）。
- 系統日誌：保留 90 日後自動刪除。
6. 資料分享
我們不會將你嘅資料賣俾或分享俾廣告商或第三方營銷公司。
我們僅在以下情況下分享資料：
- 同一工地內嘅成員可以見到該工地嘅進度、問題、文件、申請紀錄（基於角色權限）。
- 系統管理員（Admin）可以見到所有用戶帳號資料（用於管理）。
- 法律或政府部門合法要求時。
7. 資料保安
- 所有 API 通訊使用 HTTPS / TLS 加密。
- 密碼使用 bcrypt 雜湊儲存，絕不明文儲存。
- 資料庫使用 Row-Level Security（行級安全）防止越權存取。
- 相片、圖則、錄音及簽名以受權限保護嘅路徑儲存，需透過已驗證身份方可存取。
8. 兒童隱私
本 App 為工地專業人員設計，不向 13 歲以下兒童提供。我們不會故意收集兒童資料。
9. 你嘅權利
你有權：
- 查閱我們儲存嘅關於你嘅資料
- 修改不正確嘅資料
- 要求刪除你嘅帳號及資料
- 撤回對推送通知、相機、相簿、麥克風或位置嘅授權
請聯絡我們（見第 10 節）行使上述權利。
10. 聯絡我們
如有任何關於私隱嘅查詢，請聯絡：
- 公司名稱：關春傑工程有限公司
- 電郵：kck980724@gmail.com
11. 政策修訂
我們可能不時修訂本政策。重大變更會喺 App 內或透過電郵通知你。
繼續使用本 App 即表示你接受最新版本嘅政策。
Privacy Policy (English)
Last updated: 9 June 2026
Kwan Chun Kit Construction Ltd. ("we", "us") develops and operates the "Construction Management"
mobile application ("the App"). This Privacy Policy explains how we collect, use, store, and protect
user data. By using the App, you agree to this policy.
1. Information We Collect
1.1 Information You Provide
- Account data: phone number (used as account identifier), name, company, role, password (stored encrypted).
- Project operation data: project items, progress updates, floor completion, notes, daily logs, material requests, calendar events.
- Issue reports: issue title, description, on-site photos, comments.
- Site documents: drawings you upload (PDF/image), Site Instructions (SI), Variation Orders (VO, including HKD quotation amounts), Permits to Work (PTW), and their related photos, files and descriptions.
- Photos and files: photos and documents you actively capture or choose to upload across issues, drawings, site instructions, permits, daily logs and other features.
- Location data: when you choose to tag a Site Instruction (SI) with its on-site location, we record the GPS coordinates (latitude, longitude and accuracy) at that moment to mark where the instruction was issued. No location is collected unless you add one.
- Audio recordings: when you choose to record a voice memo on a Site Instruction, we store that recording.
- Electronic signatures: when you sign off a Permit to Work (PTW) or an approval step, we store the handwritten electronic signature image.
- Project contacts: names, trades and phone numbers you manually enter in the Contacts feature for the project. This is data you type in yourself; we do not read your phone's own address book.
- Application records: roles applied for, approval/rejection records, timestamps.
1.2 Automatically Collected
- Device identifier (for push notifications via APNs).
- Usage timestamps (login, operation times) for audit purposes.
1.3 We Do Not Collect
- Your phone's own address book (device contacts)
- Browsing history
- Background or continuous location tracking (location is captured only at the moment you choose to tag a Site Instruction's location)
- Payment / credit card data
- Third-party advertising or tracking identifiers
2. Camera, Photos, Microphone & Location Permissions
The App may request camera, photo library, microphone or location access, in every case only when you
actively use the relevant feature:
- Camera / Photos: to capture or attach photos and documents when reporting issues, uploading drawings, or working on Site Instructions, Permits to Work and daily logs. We only upload what you actively select.
- Microphone: to record a voice memo on a Site Instruction.
- Location: read once, at the moment you choose to tag a Site Instruction's on-site location; the App does not track your location in the background.
You can revoke any of these permissions at any time in iOS Settings → Privacy & Security
(Camera / Photos / Microphone / Location Services) or Notifications.
3. Push Notifications
We send push notifications via OneSignal for the following events:
- New issue reported (to handler-level personnel)
- Issue escalated (to next-level handler)
- Issue resolved (to reporter)
- Site Instruction / Variation Order / Permit to Work sign-off and status updates
- Project membership approved or rejected (to applicant)
- You were assigned as PM or task owner
You can disable push notifications at any time in iOS Settings → Notifications → "CK Construction".
We never use push notifications for marketing or advertising.
4. Storage and Third-Party Services
App data is stored on the following third-party infrastructure:
-
Supabase (database + file storage)
— all data transmitted over HTTPS; passwords stored as bcrypt hashes; photos, drawings, audio and
signatures stored in permission-protected storage.
https://supabase.com/privacy
-
OneSignal (push notification routing)
— receives only user identifiers for delivery targeting; does not receive personal data,
photos, location, audio, or project content.
https://onesignal.com/privacy_policy
-
Apple (APNs)
— only delivers notification tokens; does not store content.
5. Data Retention and Deletion
- Account data: retained until account deletion.
- Project data (progress, issues, drawings, instructions, permits, photos, audio, signatures): retained for the duration of the project as construction records and for audit.
- You may delete your account in-app (Profile page) at any time, or contact us to request deletion of your account and associated data (see section 10).
- System logs: automatically deleted after 90 days.
6. Data Sharing
We do not sell or share your data with advertisers or marketing companies.
We share data only when:
- Members of the same project can see project progress, issues, documents, and applications (per role-based permissions).
- System administrators can see all user account data for management purposes.
- Required by law or government authority.
7. Security
- All API traffic uses HTTPS / TLS.
- Passwords are bcrypt-hashed — never stored in plaintext.
- Database uses Row-Level Security to prevent unauthorized access.
- Photos, drawings, audio and signatures are stored at permission-protected paths; access requires an authenticated session.
8. Children's Privacy
The App is designed for construction professionals and is not directed at children under 13.
We do not knowingly collect data from children.
9. Your Rights
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request deletion of your account and data
- Withdraw consent for push notifications, camera, photos, microphone, or location access
10. Contact
- Company: Kwan Chun Kit Construction Ltd.
- Email: kck980724@gmail.com
11. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated in-app or by email.
Continued use of the App constitutes acceptance of the updated policy.