Privacy Policy — Mivello Postcards

Last updated: October 3, 2026

Which app and developer this policy covers

This privacy policy applies to the following Android application and its developer, as listed on Google Play:

• App name: Mivello Postcards (listed on Google Play as "Mivello Postcards: Pet Travel"; the same app is listed as 《Mivello 風寄小箋：小獸旅行》 in Traditional Chinese and 《Mivello 风寄小笺：小兽旅行》 in Simplified Chinese, and its launcher icon reads simply Mivello)
• Package name / application ID: com.yzy.farawaypost (the package keeps an older internal spelling, "farawaypost"; it is an identity, not a name, and it is the same app)
• Google Play listing: play.google.com/store/apps/details?id=com.yzy.farawaypost
• Developer name (Google Play developer account): yzyy, an individual developer based in Singapore
• Contact email: yzyapps99@gmail.com

Mivello Postcards ("the app") is a small, quiet game. A drawn tapir lives in a room on your phone. You pack it a bag and close the app; some time later it leaves on its own, sends a few short moments back from the road, and comes home with one postcard of a real place, which you can keep in an album. This page explains what data the app handles and who it is shared with. The app is provided by yzyy, an individual developer based in Singapore ("we", "us").

Summary

• There is no account and no sign-in. We do not know who you are, and we never ask for your name, your email or your phone number.
• Your album, your settings and your trips are stored on your phone, in the app's own private storage. We never receive them. When you save a backup file or save a card as a picture, you choose where it goes and it goes only there.
• The app requests no location permission of any kind and cannot read your GPS position. The places on the postcards are fixed artwork and text that ship inside the app; they have nothing to do with where you are. However, the analytics service described below does infer an approximate (country or city level) region from the IP address your requests come from, so this policy discloses approximate location as collected rather than claiming the app has none.
• The app does send two things over the internet by default: a fixed, closed set of usage events (Google Analytics for Firebase) and crash reports (Firebase Crashlytics). Both can be switched off, and the first screen you ever see in the app tells you about them. Turning them off does not change the game in any way.
• There are no ads and no advertising SDK, and the app does not collect an advertising ID: the three permissions that would let it read one are removed from the app package.
• We do not sell your data, and we do not share it with anyone for advertising or for anyone else's own purposes.
• The app is free. There is one optional one-time purchase, Mivello Plus, handled entirely by Google Play. We never see or store your payment details. If you buy it, usage analytics notes the purchase (see Purchases).

What is stored on your phone

All of the following lives in the app's private storage on your device, and is never sent to us:

• Your album — the postcards you have kept, the places they came from, their words, the date each first arrived and how many times you have been there.
• Your journeys — the trips that have finished and the short moments that came back from the road during them.
• The trip in progress — what you packed and when it is due home.
• Your settings — the language, whether the pet may knock when it comes home, your quiet hours, and your two privacy switches.
• Your one-time unlock, if you bought it — recorded as a simple yes or no, and re-checked with Google Play.

Uninstalling the app deletes all of it. You can also write an album backup to a file you choose, and read one back in; that file is yours, we never see it, and it contains album records only — not the pictures, not your settings and not a purchase.

What the app collects and sends

Two Google services run inside the app. Both are on when you first install it, both are described on the "Before you start" card the app shows on its very first run, and either can be turned off at any time in Settings → What is collected.

Usage analytics (Google Analytics for Firebase)

A fixed, closed set of events about how the app is used, so we can tell which parts people actually reach:

• that a trip was prepared, that it departed, that it was notified home, and that a notification was opened;
• that a postcard was opened, kept or saved as a picture;
• that the album was opened, and that a card in it was reopened;
• that a backup was exported;
• if you buy Mivello Plus, that the purchase was made — this event of ours carries no details at all: no price, no currency, no order number;
• how long the first screen was open and whether you touched the animal on it — as coarse ranges, never a time of day and never an exact count;
• which of the app's own screens you reached;
• how you say you heard about the app, if you answer that optional question;
• plus the events Google Analytics collects automatically — first_open, session_start, user_engagement, screen_view, app_update, os_update, app_remove and app_exception, and, if you buy Mivello Plus, possibly in_app_purchase (see Purchases) — and standard device and diagnostic information such as device model, manufacturer, operating system version, app version and language.

Every value is a number, a yes/no, or a label from a fixed list. There is no free-text field anywhere in this reporting: the app provides no way for a place name, a postcard's words, a backup's contents or anything you typed to be recorded in it.

Crash reports (Firebase Crashlytics)

If the app stops or misbehaves, a report is sent containing the technical details of the failure — the stack trace, the exception type, the moment it happened, and the state of the device at the time (model, operating system version, memory and storage available). Crash collection is switched off in the app package itself and only turned on once your choice has been read, so nothing is collected from somebody who switches it off on the first screen.

The identifiers this is tied to

The two services above tie what they send to installation identifiers generated by Google's own software: a Firebase installation ID, a Crashlytics installation UUID and an Analytics app-instance ID. They identify this installation of the app, not you. They are not derived from your device's hardware, from any account, or from an advertising ID — the app collects no advertising ID at all. Because these identifiers are stable for as long as the app is installed, we describe this reporting as pseudonymous rather than calling it anonymous.

Approximate location

The app asks for no location permission and cannot read your device's position. Google Analytics for Firebase nonetheless derives an approximate region — country, and sometimes city — from the IP address your requests arrive from, in the ordinary way any internet service sees an IP address. We use it only to know roughly where players are. Turning off usage analytics stops this too. Precise location is never collected.

Notifications

The app posts at most one notification a day, and only one kind: a quiet note that your pet has come home. Android asks for notification permission at the moment you first send the pet off, never before, and saying no does not stop the trip — the letter simply waits for you on the first screen. You can turn the knock off, and set quiet hours, in Settings. Notifications are scheduled and delivered entirely on your device; nothing about them is sent anywhere.

Purchases

The app is free and the album is never behind a paywall. There is a single optional one-time purchase, Mivello Plus, that unlocks extra places for the pet to visit. It is sold through Google Play Billing: Google handles the payment and we never receive or store your card number, your billing address, your name or any other payment detail. What the app learns from Google Play is whether this Google account owns the unlock. Reinstalling the app, or installing it on another phone with the same Google account, restores the unlock from Google Play. A card you have already kept is never taken away, hidden or locked, whatever happens to a purchase.

Purchase analytics. If you buy Mivello Plus while usage analytics is on, two things may be recorded by Google Analytics for Firebase: our own event saying that a purchase was made, which carries no details of its own; and in_app_purchase, an event Google Analytics may record automatically for a Google Play purchase, with the item's product id, its price, its currency and the quantity. Neither contains your card, your billing address, your name, a purchase token or an order number. This is purchase history. Google processes this purchase history on our behalf, only to help us understand how the app is doing. We do not share it for advertising or anyone else's own purposes. Turning off usage analytics in Settings → What is collected stops it. Our event is not recorded again when the unlock is restored on a reinstall or on another phone.

Advertising

The app contains no advertising, no advertising SDK and no ad network. It does not collect an advertising ID: the AD_ID permission and both Privacy Sandbox advertising permissions are explicitly removed from the app package, and the analytics library is configured not to attach an advertising ID to anything it sends.

Who the data is shared with

The only recipients are the Google services the app is built on, which process the data described above on our behalf and under their own privacy policies:

• Google Analytics for Firebase — the usage events, device and diagnostic information, the IP-derived approximate region, and, if you buy Mivello Plus, the purchase analytics described above.
• Firebase Crashlytics — crash reports.
• Google Play Billing — the one-time purchase.

Google's handling of this data is governed by the Firebase privacy documentation and the Google Privacy Policy. There is no other third-party SDK in the app, no server of our own, and no analytics, attribution, advertising or social network beyond the three above. We do not sell your data and we do not share it with anyone for their own purposes or for advertising.

Keeping it, and getting rid of it

• Turn it off: Settings → What is collected has a switch for usage analytics and a switch for crash reports. Turning either off stops that collection from that moment.
• Uninstall: uninstalling the app stops all collection and deletes everything the app stored on your phone, including your album.
• There is no account, so there is nothing for us to look up and nothing for you to log into. Because what is sent is tied only to a Google-generated installation identifier, we have no way to find "your" records — and no way to connect them to you. Crash reports are retained by Crashlytics for up to 90 days; Analytics data is retained for the period configured in Firebase and is deleted after that.
• If you would like the collection stopped and you do not want to uninstall, the two switches above do exactly that. If you have any other request, write to yzyapps99@gmail.com and we will do what we can.

Children

This app is not directed to children. It is intended for teenagers and adults (13 and over), it is not part of Google Play's Designed for Families programme, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, write to the address above.

Security

Everything the app sends travels over an encrypted connection. Everything the app keeps is in the app's own private storage, which other apps on the phone cannot read. We hold no server and no database of our own, so there is no account of yours for anyone to break into.

Changes to this policy

If what the app collects changes, this page changes with it and the date at the top is updated. A change that widens collection will also be described inside the app.

Contact

Questions, corrections or requests: yzyapps99@gmail.com (yzyy, Singapore).

隱私權政策 —— Mivello 風寄小箋

最後更新：2026 年 10 月 3 日

本政策涵蓋哪一個 app、哪一位開發者

本隱私權政策適用於以下這一個 Android 應用程式，以及它在 Google Play 上的開發者：

• App 名稱：Mivello 風寄小箋（Google Play 上架名稱為 《Mivello 風寄小箋：小獸旅行》；同一個 app 的英文名稱為 "Mivello Postcards: Pet Travel"，簡體中文名稱為《Mivello 风寄小笺：小兽旅行》， 桌面圖示上顯示的是 Mivello）
• 套件名稱／application ID：com.yzy.farawaypost （套件名沿用了早期的內部拼法 "farawaypost"，它是識別碼而不是名字，指的是同一個 app）
• Google Play 商店頁： play.google.com/store/apps/details?id=com.yzy.farawaypost
• 開發者名稱（Google Play 開發者帳號）：yzyy，位於新加坡的個人開發者
• 聯絡信箱： yzyapps99@gmail.com

Mivello 風寄小箋（以下稱「本 app」）是一個安靜的小遊戲。手機裡住著一隻畫出來的小貘， 你替牠收拾好行李、關掉 app，牠會在某個時候自己出門，在路上寄幾則短短的片刻回來， 最後帶一張真實地點的明信片回家，讓你收進相簿。本頁說明本 app 會處理哪些資料、 又會交給誰。本 app 由位於新加坡的個人開發者 yzyy（以下稱「我們」）提供。

重點

• 沒有帳號，也不需要登入。我們不知道你是誰，也從不詢問你的姓名、 電子郵件或電話號碼。
• 你的相簿、設定與旅程都存在你手機上本 app 的私有空間裡，我們收不到。 你存出備份檔或把卡片存成圖片時，存到哪裡由你決定，也只會在那裡。
• 本 app 不要求任何定位權限，也讀不到你的 GPS 位置。明信片上的地點是 隨 app 一起附帶的固定圖畫與文字，與你人在哪裡無關。不過，下面說明的分析服務 會依照你連線時的 IP 位址推得一個大略的地區（國家，有時到城市層級）， 因此本政策照實把「概略位置」列為有蒐集，而不宣稱本 app 完全沒有位置資料。
• 本 app 預設會透過網路送出兩樣東西：一組固定、封閉的使用事件 （Google Analytics for Firebase）與當機報告（Firebase Crashlytics）。 兩者都可以關掉，而且你第一次打開 app 看到的第一張說明卡就會講到它們。 關掉不會改變遊戲的任何內容。
• 沒有廣告、沒有任何廣告 SDK，也不蒐集廣告 ID：能讀取廣告 ID 的三個 權限都已從安裝檔中移除。
• 我們不販售你的資料，也不會為了廣告或他人自己的用途而分享出去。
• 本 app 免費。只有一項選購的一次性購買 Mivello Plus，全程由 Google Play 處理，我們看不到也不保存你的付款資料。如果你買了，使用分析會記下 這筆購買（見購買）。

存在你手機上的東西

以下全部存放在裝置上本 app 的私有空間，永遠不會送到我們這裡：

• 你的相簿 —— 你收下的明信片、它們來自哪裡、上面的文字、 每張第一次寄到的日期，以及你去過那裡幾次。
• 你的旅程 —— 已經走完的行程，以及路上寄回來的那些片刻。
• 正在進行的那一程 —— 你帶了什麼、大概什麼時候回來。
• 你的設定 —— 語言、回家時要不要敲門、你的安靜時段， 以及那兩個隱私開關。
• 你的一次性解鎖（若你買了）—— 只記成「有」或「沒有」， 並向 Google Play 重新查核。

解除安裝會把上面這些全部刪掉。你也可以把相簿備份寫進自己指定的檔案、之後再讀回來； 那個檔案是你的，我們看不到，而且裡面只有相簿紀錄 —— 不含圖片、不含設定，也不含購買。

本 app 會蒐集並送出什麼

app 裡跑著兩個 Google 服務。剛安裝時兩者都是開啟的，兩者都寫在第一次啟動時的 「開始之前」說明卡上，而且隨時可以在「設定 → 會蒐集什麼」裡關掉。

使用分析（Google Analytics for Firebase）

一組固定、封閉的事件，讓我們知道哪些部分真的有人用到：

• 行李收拾好了、出發了、回家時發出了通知、通知被點開了；
• 明信片被打開、被收進相簿、被存成圖片；
• 相簿被打開、相簿裡的某張卡被重新打開；
• 備份被存出；
• 如果你購買 Mivello Plus，記下「有一筆購買」—— 我們這個事件本身不帶任何細節： 沒有價格、沒有幣別、沒有訂單編號；
• 第一個畫面開著多久、你有沒有摸那隻動物 —— 以粗略的區間記錄， 不記時間點，也不記次數；
• 你走到了 app 的哪些畫面；
• 如果你回答了那個選填的問題，你說你是從哪裡聽說這個 app 的；
• 以及 Google Analytics 自動蒐集的事件 —— first_open、 session_start、user_engagement、 screen_view、app_update、os_update、 app_remove、app_exception，以及在你購買 Mivello Plus 時可能出現的 in_app_purchase（見購買） —— 與標準的裝置及診斷資訊， 例如裝置型號、製造商、作業系統版本、app 版本與語言。

每一個值都是數字、是／否，或一份固定清單裡的標籤。整套回報裡沒有任何自由文字欄位： 地點名稱、明信片上的句子、備份的內容，或你打過的任何字，本 app 都沒有提供能把它們 記進去的途徑。

當機報告（Firebase Crashlytics）

如果 app 當掉或出錯，會送出一份報告，內容是這次失敗的技術細節 —— 堆疊追蹤、 例外類型、發生的時刻，以及當下的裝置狀態（型號、作業系統版本、可用記憶體與儲存空間）。 當機蒐集在安裝檔裡就是關著的，要等讀到你的選擇之後才會打開， 所以在第一個畫面就把它關掉的人，不會有任何東西被蒐集。

這些資料綁在什麼識別碼上

上面兩個服務把送出的內容綁在 Google 自己的軟體產生的安裝識別碼上： Firebase installation ID、Crashlytics installation UUID，以及 Analytics 的 app-instance ID。它們識別的是「這一次安裝」，不是你。它們不是從裝置硬體、 任何帳號或廣告 ID 推導出來的 —— 本 app 完全不蒐集廣告 ID。 由於這些識別碼在安裝期間是固定的，我們把這類回報說成化名的， 而不稱之為匿名。

概略位置

本 app 不要求任何定位權限，讀不到裝置的位置。但 Google Analytics for Firebase 仍會從你的連線 IP 位址推得一個概略地區（國家，有時到城市）， 就像任何網路服務都會看到 IP 位址那樣。我們只用它來大致知道玩家分布在哪裡。 把使用分析關掉，這一項也會一起停止。精確位置永遠不會被蒐集。

通知

本 app 一天最多發出一則通知，而且只有一種：輕輕告訴你小獸回家了。 Android 會在你第一次送牠出門的那一刻才詢問通知權限，不會更早； 你說不要，那一程照樣會走完 —— 信會安安靜靜等在第一個畫面上。 你可以在設定裡關掉敲門、也可以設定安靜時段。通知完全在你的裝置上排程與送出， 不會有任何相關內容被送到別處。

購買

本 app 免費，相簿永遠不會被收費牆擋住。只有一項選購的一次性購買 Mivello Plus，用來解鎖更多可以去的地方。它透過 Google Play billing 販售： 付款由 Google 處理，我們不會收到也不會保存你的卡號、帳單地址、姓名 或任何其他付款資料。本 app 從 Google Play 得知的只有「這個 Google 帳號 有沒有這項解鎖」。重新安裝，或用同一個 Google 帳號裝到另一支手機上， 解鎖會從 Google Play 還原。已經收進相簿的卡片，無論購買狀態怎麼變， 都不會被收回、隱藏或鎖住。

購買分析。如果你在使用分析開著的時候購買 Mivello Plus， Google Analytics for Firebase 可能會記下兩樣東西：我們自己的事件，只表示「有一筆購買」， 本身不帶任何細節；以及 in_app_purchase，這是 Google Analytics 可能針對 Google Play 購買自動記錄的事件，內容包括商品 ID、價格、幣別與數量。 兩者都不含你的卡號、帳單地址、姓名、購買憑證或訂單編號。這屬於購買紀錄。 Google 代我們處理這些購買紀錄，只用來了解 app 的使用情況。我們不會為了廣告或他人自己的用途而分享這些資料。在「設定 → 會蒐集什麼」 關掉使用分析即停止。重新安裝或換手機還原解鎖時，我們的事件不會再記一次。

廣告

本 app 沒有廣告、沒有廣告 SDK、也沒有任何廣告聯播網。它不蒐集廣告 ID： AD_ID 權限與兩個 Privacy Sandbox 廣告權限都已明確從安裝檔中移除， 分析程式庫也設定成不在送出的任何內容上附加廣告 ID。

資料會交給誰

唯一的接收方是本 app 所依賴的 Google 服務，它們代我們處理上述資料， 並適用它們自己的隱私權政策：

• Google Analytics for Firebase —— 上述使用事件、裝置與診斷資訊、 由 IP 推得的概略地區，以及（若你購買 Mivello Plus）上述的購買分析。
• Firebase Crashlytics —— 當機報告。
• Google Play Billing —— 那一項一次性購買。

Google 對這些資料的處理適用 Firebase 隱私權說明與 Google 隱私權政策。 app 裡沒有其他第三方 SDK，我們沒有自己的伺服器， 也沒有上述三者以外的任何分析、歸因、廣告或社群服務。 我們不販售你的資料，也不會為了他人自己的用途或廣告而分享出去。

保留與刪除

• 關掉它：「設定 → 會蒐集什麼」裡有一個使用分析開關和一個 當機報告開關。任一個關掉，該項蒐集就從那一刻停止。
• 解除安裝：解除安裝會停止全部蒐集，並刪除 app 存在你手機上的 所有東西，包含你的相簿。
• 沒有帳號，所以我們沒有東西可查，你也沒有地方可登入。 由於送出的內容只綁在 Google 產生的安裝識別碼上，我們沒有辦法找出「你的」紀錄， 也沒有辦法把它們連到你身上。當機報告在 Crashlytics 最多保留 90 天； 分析資料依 Firebase 設定的期間保留，到期後刪除。
• 如果你想停止蒐集又不想解除安裝，上面那兩個開關做的正是這件事。 若還有其他需求，請寫信到 yzyapps99@gmail.com，我們會盡力處理。

兒童

本 app 並非以兒童為對象，適用對象是 13 歲以上的青少年與成人， 不參加 Google Play 的「兒童與家庭」計畫，我們也不會在知情的情況下蒐集兒童的個人資訊。 若你認為有兒童向我們提供了資訊，請寫信到上面的信箱。

安全

本 app 送出的一切都走加密連線；本 app 保存的一切都放在自己的私有空間， 手機上的其他 app 讀不到。我們沒有自己的伺服器、也沒有自己的資料庫， 因此沒有任何屬於你的帳號可以被闖入。

本政策的變更

如果本 app 蒐集的內容有變動，本頁會一併更新，頁首日期也會更新。 擴大蒐集範圍的變動，也會在 app 內說明。

聯絡方式

有問題、需要更正或有任何請求： yzyapps99@gmail.com（yzyy，新加坡）。