保健櫃 HEALTHSHELF

保健櫃（HealthShelf）隱私政策

最後更新：2026 年 9 月 9 日

保健櫃不收集你的任何資料。這個 App 沒有伺服器、沒有帳號、沒有雲端。你輸入的所有東西都只存在你自己的 iPhone 上，不會被上傳到任何地方。

保健櫃唯一的網路連線是下載公開資料：食藥署的藥品許可證資料集、衛福部中醫藥司的中藥基準方與中藥許可證、衛福部的中西藥交互作用資料庫，以及 App 自己的對照表（營養素上限、藥物類別、搭配規則）更新。這些檔放在一個固定的公開網址，App 整份拿回手機再比對；請求不帶任何參數、沒有 cookie、沒有帳號，對方只看得到「有一支 iPhone 來拿過這些檔」。不會把你的藥名、成分、紀錄或照片送出去，連當作查詢條件都不會。設定裡可以把這個連線關掉，關掉後 App 完全不連網，用內建的那一份資料照常運作。這條承諾改變時，這份政策會先更新。

資料存在哪裡

保健品與藥品資料、服用紀錄、身體反應、照片、花費、健檢報告的數值，全部存在你 iPhone 上 App 自己的沙箱裡。健檢報告只存你確認過的項目、數值與參考區間，不存照片或原文。開發者看不到，也沒有任何管道可以看到。

App 用到的權限

  • 相機：掃描藥袋、包裝或健檢報告上的文字。辨識用 iPhone 內建的 Vision 框架，完全在裝置上進行，照片與文字都不會離開手機。
  • 照片：讓你從相簿選一張藥單或產品照片。同樣只在本機處理。
  • 健康 App：如果你打開這個功能，保健櫃會把你打勾吃下的維生素與礦物質寫進「健康 → 營養」。只寫出，從不讀取你的健康資料。可以隨時在「設定 → 健康」關掉。
  • 通知：服藥提醒是 iPhone 的本機通知，不經過任何伺服器。

備份

你可以自己匯出一份備份檔。備份是你主動按下去才產生的，會用你設定的密碼加密（PBKDF2 + AES-GCM，Apple 系統框架）。密碼不會存在任何地方，開發者也無法解開。檔案要放哪裡（iCloud 雲碟、AirDrop、其他）由你決定，保健櫃不會自動上傳到任何地方。

App 沒有的東西

  • 沒有分析、統計或使用行為追蹤
  • 沒有廣告，沒有廣告識別碼
  • 沒有第三方 SDK
  • 不會把資料賣給、或分享給任何人

這個網站（healthshelf.app）

上面那些講的是 App。你現在看的這個網站是另一件事，所以分開講清楚。

這個網站會記錄看了哪一頁，以及有沒有人點下載按鈕。用的是 Aptabase：不寫 cookie、不寫 localStorage，請求不帶身分。送出去的是頁面路徑（例如 /privacy/）與來源網站，不含完整網址。

網站沒有表單、沒有帳號、不收 email，也不會把你在這裡看了什麼跟 App 裡的任何東西連在一起——技術上也做不到，因為 App 什麼都不送出來。

兒童

保健櫃不收集資料，因此也不會收集兒童的資料。

政策變更

如果未來有變更，會更新這一頁的日期。若哪天真的加入了會傳送資料的功能，會在 App 內明白告知並徵求同意。

聯絡

有任何疑問請寄信到 [email protected]，或到 Threads 找官方小編：@healthshelf.tw。

HealthShelf — Privacy Policy

Last updated: 9 September 2026

HealthShelf collects no data. The app has no server, no account, and no cloud component. Everything you enter stays on your own iPhone and is never uploaded.

HealthShelf's only network activity is downloading public data: the Taiwan FDA drug licence dataset, the Ministry of Health and Welfare's Traditional Chinese Medicine formularies and licences, its herb–drug interaction database, and updates to the app's own reference tables (nutrient limits, drug classes, pairing rules). These files live at a fixed public URL; the app fetches them whole and matches on your phone. Requests carry no parameters, no cookies and no account, so the host only sees that an iPhone fetched the files. Your medication names, ingredients, logs and photos are never sent out, not even as a search query. You can switch this connection off in Settings; the app then works entirely offline from its bundled copy. This policy will be updated before that promise ever changes.

Where your data lives

Your supplements and medications, intake logs, body reactions, photos, spending records and lab-report values are stored only in the app's own sandbox on your iPhone. For lab reports the app keeps only the items, values and reference ranges you confirmed — never the photo or the raw text. The developer cannot see any of it, and has no mechanism to.

Permissions

  • Camera — to scan text on medication bags, product packaging and lab reports. Recognition uses Apple's on-device Vision framework; neither the images nor the text ever leave your phone.
  • Photos — to let you pick an existing photo to scan or use as a product image. Processed entirely on device.
  • Health — if you enable it, HealthShelf writes the vitamins and minerals you check off into Health → Nutrition. It only writes and never reads your health data. You can turn this off at any time in Settings → Health.
  • Notifications — medication reminders are local iOS notifications. No server is involved.

Backups

You can export a backup file yourself. Backups are created only when you choose to, and are encrypted with a password you set (PBKDF2 + AES-GCM, using Apple system frameworks). The password is never stored anywhere and the developer cannot decrypt your backup. Where the file goes (iCloud Drive, AirDrop, elsewhere) is entirely your choice; HealthShelf never uploads it anywhere.

What the app does not do

  • No analytics or usage tracking
  • No advertising and no advertising identifiers
  • No third-party SDKs
  • Your data is never sold or shared with anyone

This website (healthshelf.app)

Everything above describes the app. This website is a separate matter, so it is stated separately.

This site records which page was viewed and whether the download button was clicked, using Aptabase: no cookies, no localStorage, no identifying request data. What is sent is the page path (for example /privacy/) and the referring site — never the full URL.

The site has no forms, no accounts and collects no email addresses, and cannot link what you read here to anything in the app — technically it could not, because the app sends nothing out.

Children

HealthShelf collects no data, and therefore collects no data from children.

Changes

Any changes will be reflected in the date at the top of this page. If a feature that transmits data is ever added, it will be disclosed in the app and require your consent.

Contact

Questions: [email protected], or message us on Threads: @healthshelf.tw.