Privacy Policy

Last updated: July 4, 2026

YUCTS (櫻佑旅遊) (hereinafter the "Service" or "we") is operated by an individual operator and values your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the Service (including yucts.com, forum.yucts.com, the Yucts Travel App, yucdu.com, the YucDu App, status.yucts.com, and related backend services).

Our processing complies with the Personal Data Protection Act (PDPA) of the Republic of China; for users in regions such as the European Economic Area (EEA), we also comply with the General Data Protection Regulation (GDPR) to the extent applicable.

1. Data We Collect

We collect data only to the extent necessary to provide the Service, and we strive to achieve data minimization.

1.1 Account Data

When you register or use a forum account, we process: username, email, registration date, profile fields (such as bio, location, signature, and avatar), activity statistics (number of posts, reactions received), and the like. Forum accounts are created and managed at forum.yucts.com.

1.2 Device and Connection Information

• Device model and platform (such as iPhone or iPad model), App version, and language.
• Connection IP address (stored masked on the server side; full IP addresses are not retained) and the country inferred from it (via Cloudflare GeoIP).
• Session records of logged-in devices (device label, platform, last activity time), available for you to review and revoke under "Logged-in Devices."

1.3 Push Notification Data

If you consent to receiving push notifications, we process a device identifier (hashed) and a push token (stored in encrypted form; plaintext is not retained), as well as your push preferences (topics, do-not-disturb hours, time zone).

1.4 Travel Data (In-App)

Itineraries, itinerary locations, expense records, photos (and their metadata, which may include capture time and GPS location embedded in the photo), favorite places, travel journals, packing and shopping lists, travel companions, and booking records that you create in the App. This data is stored on your device and may be synced across your devices via your iCloud private database; we cannot access the contents of your iCloud private database.

1.5 Document Vault

If you use the "Document Vault" feature, sensitive information such as passport numbers, visa numbers, insurance policy numbers, booking reference codes, and driver's license numbers is stored in encrypted form only in your device's secure storage (Keychain) and is not uploaded to our servers and does not sync across devices.

1.6 Location Information

If you grant location permission, the App performs only a single location lookup and converts it into a country/region code, used to display local content; we do not upload or store your precise coordinates. You may turn off location permission in your system settings at any time.

1.7 AI Assistant Conversations

When you use the AI travel assistant or translation feature, the content you enter is sent to our AI service providers to generate responses; for logged-in users, conversation content is stored on our backend to provide conversation history and service improvement. See Section 4 on third parties for details.

1.8 User-Generated Content (UGC)

The topics, replies, private messages, profile comments, reviews, uploaded image/video attachments, reactions, and emoji you post on the forum, as well as your report records.

1.9 Newsletter

If you subscribe to the newsletter, we collect your email, language, and source, and use a "double opt-in" mechanism; every email includes an unsubscribe link.

1.10 Purchase and Subscription Data

• In-App Purchases (Yucts Plus): Billed through the Apple App Store. We receive only the transaction identifier and plan code provided by Apple in order to verify your subscription entitlements; we do not access or store your credit card, Apple ID, or receipt details.
• Forum Web Payments: If you make a payment on the forum website, it is processed by a third-party payment service (ECPay/OPay), and the related transaction records are handled in accordance with that service's rules.

1.11 Phone Verification (Forum)

If you use the phone verification feature on the forum, we process your phone number and send a verification code via an SMS service provider.

1.12 Browsing and Preferences

Reading history, bookmarks, and preference settings within the App are stored primarily on your local device, used for offline reading and content recommendations, and are periodically cleared automatically.

1.13 YucDu App (Read-Only Reader)

The YucDu App is a read-only blog reader that does not require an account, does not display ads, does not perform tracking, and has no in-app purchases. It processes only the following minimal data:

• Push identifier: If you allow notifications, we process your device's push token to notify you when there are new articles; this identifier is not linked to your identity and is not used for tracking.
• Favorites: Your Favorites are stored in your own iCloud private database and synced across your devices; we cannot access their contents.
• Reading history, reading progress, search history, and offline cache: Stored only on your local device, never uploaded, with the offline cache periodically cleared automatically.

Article content is loaded anonymously through our content service (api.yucdu.com). In addition, the Privacy Policy, Terms of Service, and service status shown in the App are sourced from docs.yucts.com and status.yucts.com, respectively, and then presented natively within the App.

2. How We Use Data

• To provide, operate, and improve the Service (including content presentation, itinerary tools, the forum, push notifications, the AI assistant, and subscriptions).
• For account management, identity verification, and security protection (fraud prevention, abuse prevention).
• To send notifications you request, the newsletter, and important service messages.
• To provide personalized content and advertising within the scope of your consent (see Section 5).
• To comply with legal obligations and handle disputes.

3. Cookies and Similar Technologies

The Service's websites (yucts.com, forum.yucts.com, etc.) use cookies for functions such as maintaining login, security, and preferences; the App and the backend API use token-based authentication and do not use cookies. For details, please refer to our Cookie Policy.

4. Data Sharing and Third Parties

We do not sell your personal data. We share necessary data with third parties only in the following circumstances:

Third Party	Purpose	Data Involved
Apple	App distribution, push notifications (APNs), in-app purchase billing, iCloud sync, weather (WeatherKit)	Push tokens, Apple transaction identifiers, etc.
Google AdMob (Alphabet)	In-app advertising and performance measurement	Advertising identifier (subject to your tracking authorization, see Section 5)
Anthropic, OpenAI	Language model computation for the AI travel assistant and translation	The conversation/content to be translated that you enter
Open‑Meteo	Weather information fallback	Query coordinates only; no identifying data
Exchange rate data sources (such as frankfurter.dev, Bank of Taiwan, Taiwan Futures Exchange)	Currency conversion tool	No personal data
SMS service providers (such as Mitake, Twilio, Chunghwa Telecom)	Forum phone verification SMS	Phone number
ECPay/OPay	Forum web payments	Payment transaction data
Cloudflare	Infrastructure, security, and content delivery for the websites and API	Connection metadata (such as masked IP and country)

In addition, where required by law, a competent authority, or judicial process, or in order to protect the rights, property, and safety of the Service and its users, we may disclose necessary data as permitted by law.

5. Advertising and Tracking

The Yucts Travel App displays advertising through Google AdMob. On iOS, the App seeks your consent in accordance with the App Tracking Transparency (ATT) framework:

• If you consent to tracking, advertising may provide personalized content based on your advertising identifier (IDFA).
• If you do not consent, you will still see advertising, but it will be non-personalized.

You may change the authorization at any time under iOS "Settings → Privacy & Security → Tracking." Upgrading to a Yucts Plus subscription removes in-app advertising.

The YucDu App displays no advertising and performs no tracking whatsoever, so the ATT tracking prompt described above does not appear.

6. International Data Transfers

The Service's servers and some third parties (such as Apple, Google, Anthropic, OpenAI, and Cloudflare) may be located outside Taiwan. When data is transferred across borders, we take appropriate safeguards to ensure compliance with applicable data protection laws.

7. Data Retention Period

We retain your personal data only for the period necessary to achieve the purposes described in this Policy, or for the period required by law. For example: local reading history is periodically cleared automatically; after you delete your account or withdraw consent, we will delete or anonymize personal data that is no longer needed within a reasonable period (except where retention is required by law).

8. Data Security

We take reasonable technical and administrative measures to protect your data, including: storing all tokens in hashed form, storing push tokens encrypted, masking connection IPs before storage, and storing sensitive documents only in encrypted form on your device. However, please understand that no method of transmission or storage can guarantee absolute security.

9. Your Rights

To the extent provided by applicable law (PDPA/GDPR), you have the following rights regarding your personal data:

• To inquire about, review, and request copies;
• To supplement or correct;
• To request deletion or cessation of collection, processing, or use;
• To object to processing or request restriction of processing;
• Data portability (to the extent technically feasible);
• To withdraw previously given consent (without affecting the lawfulness of processing before withdrawal).

You may manage your account data yourself in the App or on the forum (such as changing your email, password, avatar, or profile), or exercise the above rights via Contact Us. You also have the right to file a complaint with the competent authority.

10. Children and Minors

The Service is not intended for children. If you are under the age prescribed by applicable law, please use the Service with the consent and accompaniment of your legal guardian.

11. Third-Party Links and Content

The Service may contain links or promotional content from third-party websites or partners (such as KKday). These third parties have their own privacy policies; this Policy does not apply to such third parties, and we recommend that you review theirs separately.

12. Policy Changes

If this Policy is revised, the revision will be posted on this page and the "Last updated" date will be updated. In the event of material changes, we will notify you by appropriate means.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us via Contact Us.