DriveMate（以下称“本应用”）是一款面向在美国考驾照的中文用户的学习工具，由独立开发者 Rohan Song 开发与运营。本政策说明本应用会收集哪些信息、为什么收集、交给了哪些第三方，以及你可以怎么处理这些信息。
本应用的大部分功能需要登录。收集的内容取决于你选择的登录方式：
登录后，你还可以自行填写昵称、从相册选择一张照片作为头像。头像文件保存在 Firebase Storage。相册访问权限仅在你主动点击更换头像时请求，我们不会浏览你相册中的其他照片。
你所选择的州、练习与模拟考记录、错题记录、收藏的路标、手册阅读进度、以及会员/购买状态。这些数据与你的账号 ID 绑定，保存在 Cloud Firestore，用于在你换设备或重新登录后恢复进度。
评分、评论与“我也通过了”会连同你的昵称和头像展示给其他用户——请不要在评论中写入你不希望公开的信息。
位置权限是可选的，你拒绝后仍然可以手动选择所在州并正常使用题库。授权后：
此外，当你在路考标签页搜索地址或地点时，你输入的搜索词会发送给 Google Places API 以返回候选地点及其坐标。我们不保存你的搜索记录。
我们不会记录或保存你的位置轨迹历史，位置只在需要时实时使用。
通过 Firebase Crashlytics，我们在应用崩溃或出现严重错误时收集崩溃堆栈、设备型号、操作系统版本与应用版本，用于定位缺陷。通过 Firebase Analytics，我们收集使用事件，例如：打开了哪个页面、开始了一次练习、选择了哪个州、位置权限的授予结果、点击了预约按钮等。我们还设置了少量用户属性：当前所选的州、是否已登录、应用版本号。这些事件包含 Firebase 生成的应用实例标识符，但不包含你的姓名、邮箱或答题内容。应用还会读取当前网络连接状态（是否离线），在 Android 上读取系统版本号以决定请求哪一种相册权限。
本应用通过 Google AdMob 展示广告（开屏广告与页面内广告）。本应用不会弹出 App Tracking Transparency 授权框，因此无法获取你的广告标识符（IDFA），也不会将你的数据与其他公司的数据关联用于定向广告。AdMob 仍会为投放广告、频次控制与反作弊收集设备层面的信息，具体以 Google 的政策为准。
付费内容通过 Apple 的 App 内购买完成。付款由 Apple 处理，我们不会接触到你的信用卡号或 Apple ID 密码。我们会把 Apple 返回的购买收据发送给 Apple 的验证服务器校验，并在服务器上记录你账号的购买/会员状态，以便你换设备后恢复购买。
我们不会出售你的个人信息，也不会把你的邮箱或手机号用于与本应用无关的营销。
我们没有自建服务器数据库，后端完全建立在 Google Firebase 之上。以下第三方会按其各自的隐私政策处理上述数据：
| 服务 | 用途 | 涉及的数据 |
|---|---|---|
| Firebase Authentication | 账号登录 | 邮箱、密码、手机号、Apple / Google 账号标识 |
| Cloud Firestore | 存储用户数据 | 个人资料、学习进度、错题、评论与评分、反馈 |
| Firebase Storage | 存储图片 | 题目与路标图片、你上传的头像 |
| Firebase Analytics | 使用情况统计 | 事件与页面浏览、应用实例标识符 |
| Firebase Crashlytics | 崩溃诊断 | 崩溃堆栈、设备型号与系统版本 |
| Cloud Functions / Remote Config | 距离计算、收据校验、远程配置 | 经纬度、购买收据 |
| Google Maps Platform（Maps SDK、Directions API、Places API） | 地图、路线与地点搜索 | 位置坐标、考点坐标、你输入的地点搜索词 |
| Google AdMob | 广告 | 设备层面的广告投放信息 |
| Google 登录 / Apple 登录 | 第三方登录 | 账号标识、邮箱、昵称、头像 |
| Apple App 内购买 | 付款与收据校验 | 购买收据、交易标识 |
相关政策：Firebase 隐私说明、Google 隐私政策、Google Maps Platform 服务条款、Apple 隐私政策。本应用使用 Google Maps；使用地图功能即表示你同意 Google 的相关条款。
数据存储在 Google 位于美国的服务器上。如果你在美国境外使用本应用，你的信息会被传输到美国处理。
你有两种方式删除账号：
你也可以在不删除账号的前提下：在系统设置中随时关闭定位权限与相册权限；在“我的”里修改昵称与头像；发邮件要求我们导出或更正你的数据。
本应用面向准备美国驾照考试的用户，不面向 13 岁以下儿童，我们也不会有意收集 13 岁以下儿童的个人信息。如果你是家长或监护人，发现孩子在未经你同意的情况下向我们提供了信息，请发邮件联系我们，我们会删除相关账号与数据。
如果你是加州居民，你有权：知道我们收集了哪些类别的个人信息以及用途；要求删除你的个人信息；要求更正不准确的信息；在行使这些权利时不受歧视性对待。上文第 1 节列出了我们收集的信息类别，第 5 节说明了如何提出删除请求。
我们不会为金钱出售你的个人信息。需要说明的是：本应用内嵌了 Google AdMob 广告 SDK，在加州法律对“分享”（跨环境行为广告）的宽泛定义下，广告 SDK 的数据使用有可能被认定为“分享”。如果你希望我们停止此类使用，请发邮件到 heronsong1024@gmail.com，我们会为你的账号处理。
我们依赖 Google Firebase 提供的基础设施安全能力（传输加密、静态加密、按用户隔离的安全规则）。但没有任何系统可以做到绝对安全，我们无法保证通过互联网传输的数据 100% 不被泄露。
本政策如有变更，我们会更新本页顶部的 “Last updated” 日期。涉及重大变化时，我们会在应用内提示。继续使用本应用即表示你接受更新后的政策。
任何与隐私有关的问题、请求或投诉，请发邮件到 heronsong1024@gmail.com。我们通常在 3 个工作日内回复。
DriveMate is a Chinese-language study app for the US driver's license written test, developed and operated by an independent developer, Rohan Song. This policy explains what the app collects, why, which third parties receive it, and what you can do about it.
Most features require an account. What we collect depends on how you sign in:
After signing in you may set a nickname and pick a photo from your library as an avatar. Avatars are stored in Firebase Storage. Photo library access is requested only when you tap to change your avatar; we do not browse other photos.
The state you select, practice and mock-exam records, wrong-answer records, saved road signs, handbook reading progress, and membership/purchase status. This data is tied to your account ID and stored in Cloud Firestore so your progress survives reinstalls and device changes.
Ratings, reviews, and pass markers are shown to other users along with your nickname and avatar. Please do not include anything in a review that you do not want to be public.
Location is optional; if you decline, you can still pick your state manually and use the app normally. When granted:
In addition, when you search for an address or place on the road-test tab, the text you type is sent to the Google Places API to return candidate places and their coordinates. We do not store your searches.
We do not log or store a history of your location; it is used in real time only.
Firebase Crashlytics collects crash stack traces, device model, OS version, and app version when the app crashes or hits a serious error. Firebase Analytics collects usage events such as which screen was viewed, a practice session starting, which state was selected, the outcome of a location permission prompt, and reservation-button taps. We also set a few user properties: the state currently selected, whether you are signed in, and the app version. These events carry a Firebase-generated app instance identifier but not your name, email, or answers. The app also reads current network connectivity, and on Android reads the OS version number to decide which photo permission to request.
The app shows ads through Google AdMob (app-open and in-page ads). The app does not present an App Tracking Transparency prompt, so it cannot access your advertising identifier (IDFA) and does not link your data with other companies' data for targeted advertising. AdMob still collects device-level information to serve ads, cap frequency, and prevent fraud, per Google's policies.
Paid content is sold through Apple In-App Purchase. Apple processes payment; we never see your card number or Apple ID password. We send the receipt Apple returns to Apple's verification servers and record your account's purchase/membership status so purchases can be restored.
We do not sell your personal information and do not use your email or phone number for marketing unrelated to this app.
The backend is built entirely on Google Firebase. The following third parties process the data described above under their own privacy policies: Firebase Authentication (sign-in credentials), Cloud Firestore (profile, study data, reviews, feedback), Firebase Storage (question images and your avatar), Firebase Analytics (usage events and app instance identifier), Firebase Crashlytics (crash diagnostics), Cloud Functions and Remote Config (distance calculation, receipt verification, remote configuration), Google Maps Platform — Maps SDK, Directions API, and Places API (location, office coordinates, and place-search text), Google AdMob (ad serving), Google Sign-In and Sign in with Apple (account identifiers), and Apple In-App Purchase (receipts and transaction identifiers).
See the Firebase Privacy and Security page, the Google Privacy Policy, the Google Maps Platform Terms of Service, and the Apple Privacy Policy. This app uses Google Maps; by using the map features you agree to Google's applicable terms.
Data is stored on Google servers in the United States. If you use the app outside the United States, your information is transferred to the United States for processing.
Without deleting your account, you can also turn off location and photo permissions in system settings at any time, change your nickname and avatar in the app, or email us to request an export or correction of your data.
The app is intended for people preparing for a US driver's license test. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Parents or guardians who believe a child provided us information may email us and we will delete the account and data.
California residents have the right to know what categories of personal information we collect and why, to request deletion, to request correction of inaccurate information, and not to be discriminated against for exercising these rights. Section 1 lists the categories we collect; section 5 explains how to make a deletion request.
We do not sell your personal information for money. Note that the app embeds the Google AdMob SDK; under California's broad definition of "sharing" for cross-context behavioral advertising, an advertising SDK's use of data may qualify. If you want us to stop such use for your account, email heronsong1024@gmail.com.
We rely on the infrastructure security Google Firebase provides (encryption in transit and at rest, per-user security rules). No system is perfectly secure, and we cannot guarantee that data transmitted over the internet is never exposed.
If this policy changes, we update the "Last updated" date at the top of this page, and notify you in the app for material changes. Continued use of the app means you accept the updated policy.
For any privacy question, request, or complaint, email heronsong1024@gmail.com. We normally reply within three business days.