BridgeAIWorks
Privacy Policy
All Apps / 所有 App
General policy / 通用政策:This page describes the shared privacy practices for BridgeAIWorks products that link to it. A product-specific or platform-specific policy controls whenever one is linked below. 本頁說明連結至本頁的 BridgeAIWorks 產品之通用隱私權做法;如產品另有專屬或平台專屬隱私權政策,該專屬政策優先適用。
- Euclid Lab: Apple Privacy Policy | Android Privacy Policy
- ExamCreator: iOS Privacy Policy | Android Privacy Policy
- ResearchNote AI: iOS Privacy Policy | Android Privacy Policy
- MagicMap iOS / iPadOS Privacy Policy
- Magic Travel Map / 魔法旅行地圖 (LINE LIFF web app; covered here)
- Nerd Dojo / 書呆子的練功房 (covered here)
- SafeMed / 安心藥盒 (covered here)
- AI Grader Pro (covered here)
- AI Grader Pro Special Edition (covered here)
Android App Privacy Policy is the default Android policy only when an Android App does not publish a separate product policy. AI Provider / BYOK is a configuration option, not a separate App.
This Privacy Policy explains shared BridgeAIWorks practices for our website and apps, including Nerd Dojo / 書呆子的練功房, SafeMed, Magic Travel Map / 魔法旅行地圖, AI Grader Pro, AI Grader Pro Special Edition, and other BridgeAIWorks apps that link to this page. Where an app-specific policy is linked above, that separate policy controls for the relevant App and platform. AI Grader Pro has an official product website at aigraderpro.com.
General Privacy Practices
BridgeAIWorks designs its apps with a privacy-conscious, local-first approach where practical. Many app features store user-created content on the user's own device by default. We do not sell personal information. We do not use advertising tracking. We process information only as needed to provide app functionality, support, safety, diagnostics, user-requested export or deletion, or features the user chooses to enable.
Depending on the app and enabled features, information may include learning content, handwritten input, practice answers, LINE identity information, trip Room information, location coordinates, meeting points, SOS events, documents, grading content, medication-related notes, images, OCR input, device diagnostics, app version, crash information, or support messages sent by the user.
If a specific BridgeAIWorks app provides additional in-app disclosures or a separate privacy notice, that app-specific notice applies to the relevant feature or app.
Nerd Dojo / 書呆子的練功房
Nerd Dojo is a learner-first native mobile and tablet app, not a SaaS learning platform. By default, learning data is stored locally on the user's device.
This may include handwritten work, practice answers, mistakes, review notebooks, learning progress, generated exercises, images, and study history. Unless the user enables a feature that requires external processing, BridgeAIWorks does not require this learning content to be uploaded to BridgeAIWorks servers.
If the user enables an AI provider, the app may send prompts, questions, answers, images, handwriting, or related learning context to the AI provider selected by the user. Provider processing is governed by that provider's terms and privacy practices.
API keys should not be stored in plain text. Nerd Dojo is designed to use secure platform storage such as Apple Keychain or Android Keystore when API keys are saved on-device.
Nerd Dojo does not use advertising tracking and does not sell personal information. Users may delete local learning data within the app where supported, by deleting app data from the operating system, or by uninstalling the app. Export features, where available, allow users to save their own learning records outside the app.
SafeMed / 安心藥盒
SafeMed, listed on the App Store as 安心藥盒, may involve health, medication, prescription, reminder, OCR, or medicine-safety-related information. Health and medication information can be sensitive, and users should avoid entering information they do not want processed by the app or by any provider they choose to enable.
SafeMed is designed with a conservative local-first approach unless a specific feature clearly requires external processing. If the user enables OCR, AI, cloud sync, backup, or a third-party provider, images, labels, medication names, notes, or related context may be transmitted to that provider for processing.
SafeMed is not an emergency medical service and is not a substitute for professional medical advice, diagnosis, treatment, pharmacy review, or emergency care. Users should consult qualified healthcare professionals for medical decisions and call local emergency services in an emergency.
SafeMed does not sell personal information.
Magic Travel Map / 魔法旅行地圖
This section covers the LINE LIFF web app only. For the native App Store app, see the MagicMap iOS / iPadOS Privacy Policy.
Magic Travel Map is currently a LINE LIFF travel group map at tour.bridgeaiworks.com. It helps guides create a trip Room, invite travelers by QR Code or LINE link, view member locations during the trip, set a meeting point, and receive in-app SOS events.
Magic Travel Map may process LINE identity information such as LINE user ID and display name, guide permission status, trial or subscription entitlement, organization information, Room ID, invite token, member nickname, member code, marker icon, selected sharing scope, meeting point details, location coordinates, location accuracy, timestamps, SOS events, LINE group binding information, and payment or trial records where applicable.
Location sharing is intended to be limited to the active trip Room and the user's selected visibility setting, such as guide-only visibility, all-room visibility, or selected-member visibility. Location information can reveal sensitive personal habits, routes, interests, and places a user may visit, so users should only join Rooms and share location with groups they trust.
In the current LIFF version, location updates depend on the user's device, browser, LINE in-app browser behavior, operating system permissions, network conditions, and whether the LIFF page remains active. The current LIFF product should not be described as continuous background tracking. Future native Mobile Pro versions may request background location permission only after separate app review, clear user consent, and in-app controls.
Active Rooms may expire automatically based on configured retention settings. The default Room lifecycle is designed for short trips, and ending or expiring a Room clears Room member records, member locations, SOS events, meeting settings, and active LINE group bindings for that Room. Recent displayed locations may also be filtered by freshness so stale locations are not treated as current.
If the user enables map, geocoding, payment, LINE Messaging API, cloud hosting, or future AI features, the app may send relevant Room, location, meeting point, payment, or message context to providers such as LINE, map/geocoding services, payment processors, Cloudflare, or future AI providers. Processing by those providers is governed by their own terms and privacy practices.
Magic Travel Map is not a safety-critical navigation, emergency rescue, medical, police, or travel-risk service. SOS is a group notification feature and is not a substitute for local emergency numbers, guide responsibility, traveler check-ins, travel insurance, or official safety procedures.
Magic Travel Map does not use advertising tracking and does not sell personal information.
AI Grader Pro
AI Grader Pro has its own product website at aigraderpro.com for product-specific marketing, downloads, licensing, documentation, support, and legal pages. This BridgeAIWorks Privacy Policy describes shared company-level practices that may apply when AI Grader Pro is identified as a BridgeAIWorks product or when BridgeAIWorks provides support for it.
AI Grader Pro may process documents, answers, rubrics, comments, grading criteria, scores, and feedback content. These materials may contain information provided by students, teachers, schools, or other users.
If the user enables an AI provider or cloud-based processing, documents, answers, grading content, prompts, and related context may be sent to the selected provider for analysis or generation. Users are responsible for ensuring they have the right to process and submit any student or third-party content.
BridgeAIWorks does not sell user documents, grading content, or student-provided content, and does not use such content for advertising tracking.
隱私權政策 — AI Grader Pro Special Edition(Mac App Store)
發行者:BridgeAIWorks。App Store Connect Apple ID 6799692740,套件識別碼com.bridgeaiworks.aigraderpro.specialedition,Apple Developer 團隊 3ZVB7M2729。
生效日:2026-11-04(1.4.5 版)
本政策的英文版為 PRIVACY_POLICY.txt。若兩份有歧異,台灣地區使用者以本繁體中文版為準。
這個 App 如何處理您的資料
AI Grader Pro Special Edition 在您的 Mac 上批改學生作業。學生考卷、班級名單、評分標準、分數與報表只存在您的 Mac 上,位於 App 的沙盒容器內。本版本的開發者不營運任何伺服器,也不會取得上述任何內容。
存放在您 Mac 上、不會傳給開發者的資訊
- 您的教師個人資料(您輸入的姓名與時區);若有設定,用來解鎖視窗的選用 App 密碼,以雜湊形式儲存
- 您匯入的學生姓名、學號、電子郵件地址與名單檔案
- 您批改的學生作答 PDF 與影像,包括 AI 對每題作答的轉錄,以及每項給分的依據
- 評分標準、考卷、題庫、分數、修改紀錄、批改歷程與產出的報表
- 您的 Google Gemini API 金鑰;若設定了成績信,還有郵件密碼或 Microsoft 365 登入權杖。這些都只存放於本機 macOS 鑰匙圈。只有在鑰匙圈無法使用時,Gemini 金鑰才改存於 App 自己的資料中;舊版存下的金鑰在您存入新金鑰前會留在該處。
- 應用程式日誌與快取
除存放在 macOS 鑰匙圈的機密資訊外,其餘資訊位於 App 的沙盒容器內,任何時候都不會傳送給開發者。只刪除 App 執行檔不一定會移除沙盒資料或鑰匙圈項目;若要刪除這些紀錄,請先使用 App 內的刪除功能,並在解除安裝前於「設定」移除 API 金鑰與郵件設定。
學生姓名與學號在您的 Mac 上讀取
App 預設在您的 Mac 上以 Apple 裝置內建的文字辨識(Vision)讀取每份考卷的姓名與學號,這個步驟不傳送任何資料;每頁送去 AI 批改前也會先遮住標頭。若您匯入班級名單,讀取結果也在您的 Mac 上與名單比對。
只有當您把「姓名與學號辨識」改為「AI 辨識」時,每份考卷的標頭(姓名與學號)才會傳給 Google Gemini 辨識。
使用 AI 功能時傳送給 Google 的資訊
本 App 採 BYOK(自備金鑰) 模式。您提供自己的 Google Gemini API 金鑰,App 直接從您的 Mac、使用您的金鑰與您自己的 Google 帳戶呼叫 Google 的 API。傳送學生考卷前,App 會先請您確認。
當您批改考卷、產生評分標準、試題或詳解,或請 AI 摘要學生的成績時,相關內容 —— 可能包含學生作答、評分標準、考題、分數,以及您所提交頁面上可見的任何其他內容 —— 會依照您與 Google 之間的協議送交 Google 處理。選擇「AI 辨識」時,也包含每份考卷標頭上的姓名與學號。
使用 Batch 批改時,App 會把頁面與請求上傳到 Google 的 Batch 服務;Google 會依其條款所定的期間保留上傳的內容與結果,讓工作得以執行並於稍後取回。
開發者既不會看到也不會儲存這些內容,更不會取得您的 API 金鑰副本。
提交學生作業前,請先閱讀 Google 就 Gemini API 所訂的服務條款與隱私權政策,並確認貴校規範是否允許。 學生姓名、學號與手寫作答影像屬於個人資料;在多數情況下,決定是否送交處理的是您(教育工作者)而非本 App,相關法遵責任亦隨之歸屬於您與貴機構。
您寄出的成績信
若您設定了成績信,App 會透過您設定的郵件服務(Gmail、Microsoft 365 或您自己的 SMTP 伺服器),以您在該服務的帳戶,把每位學生的成績報告 —— 包含學生姓名、分數、評語與報告 PDF —— 寄到您指定的地址。Microsoft 365 登入使用 Microsoft 自己的登入頁面。開發者不會收到這些郵件。
由 Apple 處理的資訊
訂閱由 Apple 透過 App Store 銷售、收款與管理。付款完全由 Apple 處理,開發者不會取得您的付款資訊。App 使用 Apple 的 StoreKit 在本機驗證您的訂閱,僅得知是否存在有效訂閱,以及 Apple 提供的匿名交易識別碼。
Apple 會提供開發者彙總的銷售與訂閱報表,該等報表不會識別個別客戶。
這個 App 不會蒐集的資訊
本 App 完全不含分析、遙測、當機回報、廣告或任何形式的追蹤。不建立裝置指紋、不使用機器識別碼,也不連線任何授權伺服器。
App 會建立的網路連線
App 不開啟任何監聽連接埠,只在下列情況連網:
- 連到 Google Gemini API:執行您以自己的金鑰發起的 AI 工作,以及「設定」中的連線測試
- 連到 Google 公開的 Gemini 價格頁面:您在「設定」更新價格時(不傳送任何學生資料)
- 連到您設定的郵件服務:寄送成績信或測試信時;若連結 Microsoft 365,也會連到 Microsoft 的登入服務
- 連到 Apple:App Store 購買與訂閱狀態
- 您選擇開啟連結時:開發者網站上的本隱私權政策、您的 Apple 訂閱管理頁面、Google 建立API 金鑰的頁面,以及開發者的支援連結
PDF 產生完全離線。 App 自帶排版引擎、字型與套件,產生文件時不下載任何東西。
兒童
本 App 供教師與教育工作者使用,並非針對兒童設計。學生資訊由使用本 App 的教育工作者輸入,除本政策所述情形外,留存於該教育工作者的 Mac 上,並受其所屬機構義務規範。
您的選擇
- 讓姓名與學號留在您的 Mac 上:「姓名與學號辨識」維持「本機(不傳送)」。
- 刪除個別資料:在 App 內移除學生、批次、考卷或批改歷程。
- 解除安裝前:先刪除要移除的本機紀錄,並在「設定」移除 Gemini API 金鑰與郵件設定。只刪除 App 執行檔不一定會刪除沙盒容器或鑰匙圈項目。
- 停止 AI 處理:在「設定」中移除您的 Gemini API 金鑰。App 隨即不再發出任何外部AI 呼叫。
- 管理或取消訂閱:透過 Apple,於 App Store 設定中操作。
聯絡方式
Privacy policy — AI Grader Pro Special Edition (Mac App Store)
Publisher: BridgeAIWorks. App Store Connect Apple ID 6799692740, bundle identifier com.bridgeaiworks.aigraderpro.specialedition, Apple Developer team 3ZVB7M2729.
Effective 2026-11-04 (version 1.4.5)
A Traditional Chinese version is provided as PRIVACY_POLICY_zh-Hant.txt. Where the two differ, the Traditional Chinese text governs for users in Taiwan.
What this app does with your data
AI Grader Pro Special Edition grades student work on your Mac. Student papers, rosters, rubrics, scores, and reports are stored only on your Mac, inside the app's sandbox container. The developer operates no server for this edition and receives none of that content.
Information stored on your Mac, not sent to the developer
- Your teacher profile (the name and time zone you enter) and, if you set one, the optional app password used to unlock the window, stored as a hash
- Student names, identifiers, email addresses, and roster files you import
- Student answer PDFs and images you grade, including the AI's transcription of each answer and the evidence for each score
- Rubrics, exams, question banks, scores, corrections, grading history, and generated reports
- Your Google Gemini API key and, if you set up report email, your mail password or Microsoft 365 sign-in token. These are stored device-locally in the macOS Keychain. Only if the Keychain cannot be used is the Gemini key kept in the app's own data; a key saved by an earlier version stays there until you save a new one.
- Application logs and caches
Except for the secrets in the macOS Keychain, this information lives in the app's sandbox container. It is never transmitted to the developer. Deleting the app binary does not necessarily remove its sandbox data or Keychain items; use the in-app deletion controls and remove the API key and mail settings in Settings before uninstalling if you want those records deleted.
Student names and IDs are read on your Mac
By default the app reads each paper's name and student ID on your Mac with Apple's on-device text recognition (Vision). Nothing is sent for this, and the header of each page is masked before the page is sent for AI grading. If you import a roster, the readings are compared with it on your Mac.
Only if you change "Name and ID recognition" to "With AI" is each paper's header (its name and ID) sent to Google Gemini to be read.
Information sent to Google when you use AI features
This app uses a bring-your-own-key model. You supply your own Google Gemini API key, and the app calls Google's API directly from your Mac using your key and your own account with Google. The app asks for your confirmation before it sends students' papers.
When you grade papers, generate rubrics, questions or solutions, or ask for an AI summary of a student's results, the relevant content — which may include student answers, rubrics, exam questions, scores, and anything else visible on the pages you submit — is sent to Google for processing under your agreement with Google. With "With AI" recognition, that includes the names and IDs in each header.
With Batch grading, the app uploads the pages and the request to Google's Batch service, and Google keeps the uploaded input and the results for the period Google's terms set, so that the job can run and be collected later.
The developer neither sees nor stores this content, and receives no copy of your API key. Review Google's terms and privacy policy for the Gemini API before submitting student work, and consider whether your institution's rules permit it.
Report email you send
If you set up report email, the app sends each student's report — which includes the student's name, scores, comments, and the report PDF — to the address you choose, through the mail service you configure (Gmail, Microsoft 365, or your own SMTP server) and under your account with that service. Microsoft 365 sign-in uses Microsoft's own sign-in page. The developer does not receive these messages.
Information handled by Apple
Subscriptions are sold, billed, and managed by Apple through the App Store. Payment is handled entirely by Apple; the developer never receives your payment details. The app verifies your subscription locally using Apple's StoreKit and learns only whether an active subscription exists, together with the anonymous transaction identifiers Apple provides.
Apple provides the developer with aggregate sales and subscription reports. Those reports do not identify individual customers.
Information the app does not collect
The app contains no analytics, telemetry, crash reporting, advertising, or tracking of any kind. It does not build a device fingerprint, does not use a machine identifier, and contacts no licensing server.
Network connections the app makes
The app opens no listening port. It connects to the network only:
- to Google's Gemini API, for the AI work you start with your own key, and for the connection test in Settings
- to Google's public Gemini pricing page, when you refresh prices in Settings (no student data is sent)
- to the mail service you configure, when you send report email or a test message, and to Microsoft's sign-in service if you connect Microsoft 365
- to Apple, for App Store purchases and subscription status
- when you choose to open a link: this privacy policy on the developer's website, your Apple subscription management page, the Google page for creating an API key, and the developer's support links
PDF generation is fully offline. The app bundles its own typesetting engine, fonts, and packages, and downloads nothing to produce documents.
Children
The app is for teachers and other educators. It is not directed to children. Student information is entered by the educator using the app, stays on that educator's Mac except where this policy describes, and is subject to the educator's own institutional obligations.
Your choices
- Keep names and IDs on your Mac: leave "Name and ID recognition" set to "On this Mac".
- Delete individual data in the app: remove students, batches, exams, or grading history.
- Before uninstalling: delete the local records you want removed and remove your Gemini API key and mail settings in Settings. Deleting the app binary alone does not necessarily delete the sandbox container or Keychain items.
- Stop AI processing: remove your Gemini API key in Settings. The app then performs no external AI calls.
- Manage or cancel your subscription: through Apple, in App Store settings.
Contact
AI Provider / BYOK Data Handling
Some BridgeAIWorks apps may support bring-your-own-key, or BYOK, workflows. When a user enters an API key for an AI provider, the key is used to send user-requested content to that provider.
API keys should be stored using secure platform mechanisms where supported, such as Apple Keychain or Android Keystore, and should not be saved in plain text. Users should keep their API keys confidential and revoke keys with the provider if they believe a key has been exposed.
BridgeAIWorks does not control how external AI providers process data once the user chooses to send content to them. Users should review the selected provider's privacy policy, retention settings, and data-use terms before enabling AI features.
Data Retention and Deletion
Local app data generally remains on the user's device until the user deletes it, resets the app, removes app data through the operating system, or uninstalls the app. If a feature uses cloud storage, sync, support email, AI providers, OCR providers, crash reporting, or other external services, retention may follow the relevant provider's rules.
Users may contact support@bridgeaiworks.com to request help with data export or deletion. For data stored only on the user's device, BridgeAIWorks may not be able to access, recover, or delete that data remotely.
Children / Students
BridgeAIWorks apps may be used for learning, study, teaching, or productivity. Some content may relate to students or minors if entered by a parent, teacher, school, or user. Users are responsible for obtaining any required consent before entering student, child, school, or third-party information into an app or sending it to an AI provider.
BridgeAIWorks does not knowingly sell children's personal information and does not use advertising tracking in its apps.
Contact
For privacy questions, support requests, export or deletion help, or app-specific privacy concerns, contact: