VisionBridge Privacy Policy
Last updated: 2026-09-28 Version: 1.2.0
A Traditional Chinese version is the canonical text and is available inside the iOS app at Settings → Privacy → "查閱隱私政策". This English translation is provided for reference and for Apple App Store submission purposes.
Scope
This policy describes how the VisionBridge iOS application ("the App") collects, processes, and uses user data. Section 13 covers the public website wisbridge.app and its inquiry form.
1. Data We Collect
- Anonymous identifier — a UUID generated by Firebase Authentication.
- Email address (only for users who sign in) — if a user chooses Sign in with Apple or email-based sign-in, the corresponding email is collected. Anonymous mode does not collect email.
- Device events — eye-gaze-triggered phrase selections, device state changes, battery level changes, and inactivity alerts (auxiliary reminder events).
- Device metadata — iOS version, model identifier, app version, locale.
- Pairing relationships — the mapping between caregiver and patient devices.
- Anonymous telemetry (optional) — eye-tracking stability, ARKit tracking quality, gaze standard deviation at the moment an inactivity alert fires. The user can disable telemetry in Settings.
- Crash reports (Crashlytics) — call stacks and device information when the app crashes, used solely to fix software defects.
2. Data We Do Not Collect
- Real names, dates of birth, national ID numbers, health insurance information
- Residential addresses, GPS location, IP-derived location
- Contacts, photos, microphone audio content
- Health diagnostic information, medical records, vital signs
- Cross-app tracking data (Apple ATT is not invoked)
3. Purposes of Use
- Synchronize patient phrase selections to paired caregivers in real time
- App functionality (push notifications, pairing validation, inactivity reminders)
- App improvement (when telemetry is enabled)
- Bug diagnosis (Crashlytics)
4. What We Will Never Do
- Serve commercial advertisements
- Sell data to third parties
- Share data with other apps or companies
5. Data Retention
| Data type | Retention |
|---|---|
| Device event records (phraseSelected, batteryWarning, inactivityAlert) | Automatically deleted after 30 days |
| Pairing relationships | Deleted immediately on unpair |
| Anonymous telemetry | Deleted with event records (30 days) |
| Crash reports | 90 days (Firebase Crashlytics default) |
| Firebase Authentication UID | Deleted on account deletion |
| Email address (if applicable) | Deleted on account deletion |
Users may also clear all their data immediately via the in-app "Delete all my data" function without waiting for automatic deletion.
6. Cross-Border Transfer
The App uses Google Firebase services. User-generated data (events, pairing, telemetry) is stored in asia-east1 (Changhua, Taiwan) — within Taiwan.
Crash reports (Crashlytics) are transmitted via Google's global network and stored in de-identified form, which may involve cross-border transfer to the United States. Crash reports never include personally identifying information.
7. User Rights
Under Taiwan's Personal Data Protection Act (個人資料保護法 Article 3), and aligned with comparable provisions in GDPR / CCPA where applicable, users may:
- Inspect their event history within the app's Settings
- Correct their display name
- Request a data copy by contacting support@wisbridge.app (response within 30 days)
- Delete all their data via Settings → Danger Zone → "Delete all my data"
- Withdraw consent by disabling telemetry or deleting their account
8. Cookies and Tracking
The App does not use cookies. The App does not use third-party trackers. The App does not invoke Apple App Tracking Transparency (ATT).
9. Third-Party Services
| Service | Purpose | Data region |
|---|---|---|
| Firebase Authentication | Anonymous / Apple / Email sign-in | Global (de-identified) |
| Firebase Firestore | Event records, pairing state | asia-east1 (Changhua) |
| Firebase Cloud Messaging | Cross-device push notifications | Global edge nodes |
| Firebase Cloud Functions | Pairing code validation, auxiliary reminder dispatch | asia-east1 |
| Firebase Crashlytics | Crash reports | Global (de-identified) |
| Apple Push Notification Service (APNs) | iOS push delivery | Global edge nodes |
10. Minors
The App does not actively collect data from users under 13. Patient identity is set by the caregiver; we recommend caregivers choose an anonymous display name.
11. Policy Changes
When this policy changes, we will notify users via an in-app prompt and require renewed consent.
12. Contact
For any privacy-related questions: support@wisbridge.app (WisBridge Technology Co., Ltd. / 慧橋科技有限公司, Taiwan tax ID 62047058)
13. Website (wisbridge.app) and Inquiry Form
The public website wisbridge.app sets no cookies, loads no third-party scripts or fonts, and runs no analytics or advertising trackers. The interactive demo on the site runs entirely in your browser: it does not use the camera, does not track your eyes, and sends nothing to any server.
The site has one form, the institutional inquiry form
(POST /api/inquiry). If you use it:
| Item | Detail |
|---|---|
| Data collected | Organization or household name, contact person, email or phone (required); service size and free-text message (optional) |
| Purpose | Replying to your inquiry and arranging a pilot or partnership discussion. Not used for marketing. |
| Storage | Google Cloud Firestore, asia-east1 (Taiwan), written only by our server function; no client can read it |
| Notification copy | One email to support@wisbridge.app (Gmail; may involve cross-border transfer). Deleted by hand when the inquiry is closed. |
| Retention | Up to 180 days from submission, then deleted automatically by a scheduled Firestore policy (may lag a few days). You may ask us to delete it earlier at any time. |
| Logs | Our function logs a record ID and an error category only; it does not store your IP address, user agent, or form contents. Google's managed request logs are outside our application. |
| Your rights | Email support@wisbridge.app to access, copy, correct, restrict, or delete your data; we reply within 30 days. |
Please do not enter medical records, national ID numbers, or other sensitive personal data in the form. If you do, we delete that record as soon as the inquiry is handled.
Medical Disclaimer
VisionBridge is an assistive communication tool, not a medical device. It does not replace the judgment of medical professionals.
- The App does not detect seizures, arrhythmias, respiratory abnormalities, or any vital signs.
- The "inactivity alert" feature is an auxiliary reminder for caregivers — it is not a medical alarm.
- In any suspected medical emergency, call 119 (Taiwan emergency services) or contact a medical professional immediately.