明眼人 Good Eye
Try Good Eye試用明眼人

Privacy Policy

Last updated: 22 October 2026

Good Eye saves each analysis, including the image you upload, privately to your account so you can look at past checks again. Only you can see your analyses. We don't share them, and you can delete any of them at any time.

Who we are

Good Eye is a tool made by Kinoko Studio in Hong Kong, and it runs at goodeye.kinokostudio.com.hk. This policy explains what happens to your data when you use it.

How we handle your image

When you run a check, your image is sent over an encrypted connection to our analysis server, which we run on Fly.io in Singapore. The server analyses the image, makes the attention map and sends it back. We then save the result (the attention heat map and looking order) together with the original image in your private analysis history, so you can come back to past checks.

The analysis server keeps your image in memory only while it makes the result. It doesn't write the image to disk or to its logs, and it keeps no copy.

Your analyses are tied to your account and only you can see them. We don't share them, we don't use them to train models, and we don't use them for anything except showing them back to you. They're kept in access-controlled storage, and you can delete them at any time.

What we store

When you sign in with Google, we store your email address and name, your credit balance and a record of any purchases, so your credits are still there the next time you visit. We also keep your analysis history: the attention results and the images you analysed. We keep your 50 most recent analyses and delete older ones automatically, and you can delete any analysis yourself at any time.

If you sign in with Apple, we receive a stable Apple user id and an email address. If you choose to hide your email, that address is an Apple private relay address. Apple gives us your name only the first time you sign in. If an Apple sign-in shares a verified email address that isn't a relay address and matches an existing account, we link the two sign-ins into one account.

A cookie keeps you signed in, and your browser remembers your language choice. Outside the EEA, the UK and Switzerland, Google Analytics also sets cookies to measure usage (see below). The Good Eye apps instead keep your sign-in token in your device's secure storage, which is the iOS Keychain or the Android Keystore.

Purchases in the apps

In the iPhone and Android apps, you can buy the same credit packs through the App Store or Google Play. The store takes the payment. We receive the product you bought and a transaction or order id, and for App Store purchases the price and currency. We never see your card or payment details.

Credits bought in the apps and on the website are the same credits, in one balance.

Deleting your account

You can delete your account yourself. You can't undo it.

  • In the app: tap the Credits tab to open Your account, then choose Delete account and confirm.
  • On the website: sign in, open your account (the credit count at the top), then choose Delete account.
  • By email: write to [email protected] and ask us to delete your account.

Deleting your account removes the account itself (including your email address and name), your credit balance, your activity log, your analysis history and the images stored with it. If you signed in with Apple, we also ask Apple to revoke the sign-in.

We keep these records:

  • Purchase records. For each purchase: the credits bought, the amount paid where we have it, the date, and the transaction id from the App Store, Google Play or our payment provider.
  • Records of credits we added to your account ourselves: the date and the amount.
  • A one-way code made from your sign-in id, which can't be turned back into the id.

The purchase records and the records of credits we added are kept under a random internal number instead of your name or email, for 7 years, as Hong Kong tax law requires. The one-way code is kept for as long as Good Eye runs, so that a new account for the same sign-in doesn't get the welcome credits again. Stripe, Apple and Google keep their own records of payments, under their own privacy policies.

Analytics and cookies

We use Google Analytics 4, loaded through Google Tag Manager, to see how people use Good Eye so we can improve it: for example, which pages people visit and how much the site is used overall. It relies on cookies, a pseudonymous identifier and your approximate location. It doesn't identify you by name, and we don't use it for advertising or remarketing.

For visitors in the EEA, the UK and Switzerland, analytics is off by default and no analytics cookies are set. Everywhere else, including Hong Kong and Taiwan, it's on by default. You can opt out at any time with a browser analytics or ad blocker, with Google's Analytics opt-out add-on, or by blocking this site's cookies. We manage this with Google Consent Mode, and Google processes the data under its own privacy policy. Separately, our host Cloudflare may process standard, aggregated request logs to keep the site secure and reliable.

The Good Eye apps for iPhone and Android load no analytics or advertising code. The analytics described above runs on the website only.

Third parties we rely on

We use Cloudflare for hosting and storage, Fly.io (in Singapore) to run our analysis server, Google for sign-in and for measuring usage (Google Analytics and Tag Manager), Apple for Sign in with Apple, and Stripe for payments on the website. The App Store and Google Play take payments in the apps. Each of them handles your data under its own privacy policy. Our analysis server also passes Sign in with Apple requests to Apple. Your image goes only to our own analysis server, which produces the result, and is then saved to your private history as described above. We never send it to any other third party.

Your rights

Depending on where you live, you may have rights over your personal data, for example under Hong Kong's Personal Data (Privacy) Ordinance or the GDPR in the EEA and the UK. You can delete any saved analysis, along with its image, yourself in the app. You can also ask us at any time to show you or delete all your account data: your email address, name, credit and purchase history, and saved analyses, except records we must keep by law and the one-way sign-in code we keep to stop repeat welcome credits (see Deleting your account). Use the contact details below. You can also delete your account yourself, as described above.

Children

Good Eye isn't aimed at children under 13, and we don't knowingly collect their personal data.

Changes

We may update this policy from time to time. When we do, we'll change the "Last updated" date above.

Contact

If you have questions about this policy, email [email protected] or contact Kinoko Studio through kinokostudio.com.hk.

私隱政策

最後更新：2026 年 10 月 22 日

明眼人會把每次分析（包括你上載的圖片）私密存進你的帳戶，方便你日後回看。這些分析只有你看得到，我們不會分享，你也可以隨時刪除任何一次分析。

關於我們

明眼人是香港 Kinoko Studio 製作的工具，網址為 goodeye.kinokostudio.com.hk。本政策說明你使用明眼人時，我們會怎樣處理你的資料。

我們怎樣處理你的圖片

每次分析時，你的圖片會經加密連線傳送到我們的分析伺服器。我們在新加坡的 Fly.io 上運行這個伺服器，由它分析圖片、製作注意力圖，再把結果傳回。之後，我們會把結果（注意力熱力圖和觀看次序）連同原圖存進你的私人分析紀錄，方便你回看。

分析伺服器只會在製作結果期間，把你的圖片放在記憶體中。它不會把圖片寫入磁碟或伺服器的運作紀錄，也不會留下副本。

這些分析與你的帳戶綁定，只有你看得到。我們不會分享，不會用來訓練模型，除了顯示給你看之外，也不會作任何其他用途。資料存放在設有存取控制的儲存空間，你可以隨時刪除。

我們儲存甚麼

你用 Google 登入時，我們會儲存你的電郵地址、名稱、點數結餘和購買紀錄，讓你下次回來時點數仍在。我們也會保存你的分析紀錄，即注意力結果和你分析過的圖片。我們保留最近 50 次分析，較舊的會自動刪除；你也可以隨時自行刪除任何一次分析。

如果你用 Apple 登入，我們會收到一個固定的 Apple 用戶識別碼和一個電郵地址。如果你選擇隱藏電郵，這個地址會是 Apple 的私人轉寄地址。Apple 只會在你首次登入時提供你的名稱。如果 Apple 登入分享的電郵地址已經驗證、不是轉寄地址，而且與現有帳戶相同，我們會把兩種登入連結成同一個帳戶。

一個 cookie 會讓你保持登入，瀏覽器則會記住你選擇的語言。在歐洲經濟區、英國及瑞士以外的地區，Google Analytics 亦會設定 cookie 來量度使用情況（見下文）。明眼人應用程式則會把你的登入憑證存放在裝置的安全儲存空間，即 iOS 的 Keychain 或 Android 的 Keystore。

應用程式內購買

在 iPhone 和 Android 的應用程式內，你可以經 App Store 或 Google Play 購買同樣的點數包，款項由商店處理。我們會收到你購買的產品和交易或訂單編號；App Store 的購買還會有金額和貨幣。我們不會看到你的信用卡或付款資料。

在應用程式內和網站購買的點數是同一種點數，共用一個結餘。

刪除帳戶

你可以自行刪除帳戶。刪除後無法復原。

  • 在應用程式內：按一下「點數」分頁，打開「你的帳戶」，再按一下「刪除帳戶」並確認。
  • 在網站上：登入後打開你的帳戶（畫面頂部的點數結餘），再按一下「刪除帳戶」。
  • 用電郵：電郵至 [email protected]，要求我們刪除你的帳戶。

刪除帳戶會移除帳戶本身（包括你的電郵地址和名稱）、點數結餘、活動紀錄、分析紀錄，以及隨紀錄儲存的圖片。如果你曾用 Apple 登入，我們也會要求 Apple 撤銷該登入。

刪除帳戶後，我們會保留以下紀錄：

  • 購買紀錄：每次購買的點數、付款金額（如我們有紀錄）、日期，以及 App Store、Google Play 或付款服務供應商提供的交易編號。
  • 我們手動為你的帳戶加入點數的紀錄：日期和數量。
  • 用你的登入識別碼製成的單向代碼，無法還原成原本的識別碼。

購買紀錄和手動加入點數的紀錄，以一個隨機的內部編號存放，不附你的姓名或電郵，保留 7 年，以符合香港稅務法例的要求。只要明眼人還在運作，單向代碼就會保留，讓你用同一個登入重新建立帳戶時，不會再次獲得迎新點數。Stripe、Apple 和 Google 會按各自的私隱政策，保存它們自己的付款紀錄。

數據分析與 cookie

我們使用 Google Analytics 4（經 Google Tag Manager 載入）了解大家怎樣使用明眼人，以便改善服務，例如哪些頁面有人瀏覽，以及整體使用量。它會用到 cookie、一個化名識別碼和你的約略位置，但不會以姓名識別你；我們亦不會用它來投放廣告或再營銷。

對於歐洲經濟區、英國及瑞士的訪客，數據分析預設關閉，不會設定任何分析 cookie。其他地區（包括香港和台灣）則預設開啟。你可以隨時用瀏覽器的分析或廣告攔截工具、Google 的 Analytics 停用擴充功能，或封鎖本網站的 cookie 來停用。我們以 Google Consent Mode 管理這項設定，Google 會按其私隱政策處理這些資料。另外，我們的寄存商 Cloudflare 可能會處理標準的彙總請求紀錄，以維持網站安全和穩定。

iPhone 和 Android 版明眼人不會載入任何數據分析或廣告程式碼。上文所述的數據分析只用於網站。

我們使用的第三方服務

我們使用 Cloudflare 寄存網站和儲存資料，用位於新加坡的 Fly.io 運行分析伺服器，用 Google 處理登入及量度使用情況（Google Analytics 與 Tag Manager），用 Apple 處理「使用 Apple 登入」，並用 Stripe 處理網站上的付款。應用程式內的付款則由 App Store 和 Google Play 處理。它們各自按本身的私隱政策處理你的資料。分析伺服器亦會把「使用 Apple 登入」的請求轉交給 Apple。你的圖片只會送到我們自己的分析伺服器產生結果，然後按上文所述存進你的私人紀錄。我們絕不會把圖片交給任何其他第三方。

你的權利

視乎你身處的地區，你對自己的個人資料可能享有某些權利，例如香港《個人資料（私隱）條例》，或歐洲經濟區及英國的 GDPR 所賦予的權利。你可以在應用程式內自行刪除任何已儲存的分析及其圖片，也可以隨時透過下方的聯絡方法，要求我們讓你查閱或刪除你的全部帳戶資料，包括電郵地址、名稱、點數與購買紀錄，以及已儲存的分析，但法律規定我們必須保留的紀錄，以及我們為防止重複獲得迎新點數而保留的單向代碼除外（見「刪除帳戶」）。你也可以自行刪除帳戶，方法見上文。

兒童

明眼人並非為 13 歲以下兒童而設，我們亦不會在知情的情況下收集他們的個人資料。

政策更新

我們可能不時更新本政策。更新時，我們會修改上方的「最後更新」日期。

聯絡我們

如對本政策有任何疑問，請電郵至 [email protected]，或透過 kinokostudio.com.hk 聯絡 Kinoko Studio。