Privacy policy
Updated and effective: 13 October 2026 · Version 3.2
Understand the data behind your reading, games and everyday tools—and the choices you have.
01｜Provider, scope and purposes
JLapp Studio (“we”) operates toponepapa.com.tw and its related products. We process data as needed to provide services, authenticate users, manage entitlements and preferences, answer support requests, correct content, maintain security and meet legal obligations. Optional analytics are described separately below.
Data comes from information you provide, device features you use, login or store platforms you authorize, and team members acting within their permissions. External publishers, identity providers and app stores process data under their own policies.
02｜Website visits and contacting us
Product and policy pages do not require an account. Hosting services may process IP addresses, request times, browser and device information, and connection or security logs to serve pages, investigate errors and prevent abuse. Services requiring login save only the cookies or device data needed to maintain your session.
When you contact us, we process your email address, any name you provide, your message and attachments to respond and resolve the issue. Do not send passwords, verification codes or unnecessary identity documents. You can redact unrelated personal information from screenshots.
03｜News PaNer: accounts and subscriptions
- Sign-in：Supported versions use Apple, Google, Facebook or a pre-created dedicated account. We store the provider identifier, the name and email address shared with authorization, session status and necessary verification data. Dedicated-account passwords are protected and are not stored in a directly readable form. We do not request posts, friend lists or private messages. Different sign-in methods are not automatically merged by matching names or emails.
- Entitlements：We keep selected countries, slot-change timestamps, subscription status, store transaction identifiers, purchase ownership and necessary verification credentials to synchronize country slots, restore purchases, check expiry and prevent duplicate entitlement claims. Retained revocation or purchase-verification credentials are encrypted.
- Payments：The applicable App Store or Google Play service processes payment. We receive transaction and subscription information needed to verify access, not your full payment-card number or bank-login information. Store test purchases and production transactions are handled separately.
04｜News PaNer: local data and device features
- Favourites, history and reading settings：Favourite news, the latest 200 external-link history entries, read status, interests, language and font preferences are stored on your device or browser. We do not provide cross-device synchronization for favourites or history; member country slots are separately checked by the server. You can remove favourites and history through the available controls. Clearing app or browser data may erase local information. Operating-system backups depend on your device settings.
- Location and weather：Weather defaults to the capital of the selected news country. If you permit location access, location is obtained only while using the app, rounded to two decimal places and sent through our site to MET Norway for a forecast. Location is not retained in member or news records or used to select news. You can revoke device location permission. Necessary connection logs may still be generated.
- Translation：Mobile translation depends on device support, runs on the device and may require language-pack downloads. External articles use accessible readable text without bypassing paywalls; we do not additionally retain these device translations permanently. The Android translation service still sends Google diagnostics such as device/app versions, installation identifiers, languages, model downloads, feature events, duration, errors and input/output sizes. On-device processing does not mean the whole feature transmits no data.
- Notifications, widgets and watches：Daily reading reminders are scheduled locally and can be disabled. Remote news push notifications are not currently enabled. Widgets display public headlines without storing login credentials or paid article bodies. Supported Apple Watch features synchronize news for reading and country/language settings from a paired iPhone; sign-in and purchases remain on the phone.
- External links and news production：Opening a publisher’s site sends it the connection data needed to serve its page. It may use its own cookies, ads and analytics; we do not pass it your News PaNer account credentials. AI assists in preparing briefs from public reporting and facts. Your favourites, account data and private messages are not supplied to AI to generate the news.
05｜Optional usage statistics
News PaNer usage statistics are off by default. You can enable or disable them in the app’s Privacy information page. If enabled, the app first accumulates button-use counts, interaction intervals and foreground seconds by country/reading language locally. When the app opens online in the next month, it sends the previous month’s totals.
Each month uses a new random batch identifier. Totals do not include names, emails, member IDs, article bodies or a complete event-by-event browsing history. The server retains aggregates for up to 13 months to improve features; they are not store download counts. Network requests may still carry technical information such as an IP address. Disabling statistics clears unsent totals and stops timing and transmission, without affecting reading or purchased access. This control does not govern external websites or the translation service’s own data practices.
06｜GumGum Island (禾火島)
GumGum Island is a single-player life-adventure game in development, designed to run locally on mobile devices and support offline play. The native version and cloud services remain in development/testing. This policy does not announce the launch of production player accounts, social sign-in, cloud synchronization or paid services.
Local versions save character, inventory, farming, quest, game-time, world-state and return-location progress. Formal checkpoints are created through the home diary/sleep interaction and designated save points; ordinary movement does not trigger an upload for each action. Uninstalling, clearing storage or switching devices may lose progress that has not been separately saved.
Planned sign-in and cloud save synchronization will process verified identity, necessary name/email information, account and save identifiers, complete checkpoint progress, revisions, and sync/security records only when enabled, to restore progress for the same account and handle conflicts. Cloud records reflect successfully synchronized checkpoints, not continuous monitoring of all play. Before production activation, we will provide the actual providers, retention and account-deletion details, with appropriate notice or consent.
If you join an invited test, we also process reports, device versions, error logs or test saves you choose to provide for troubleshooting. Submit only relevant information. News PaNer accounts, subscriptions and favourites do not automatically carry over to the game.
07｜Other tools still provided
If you use the PaNer order-management tool or the existing 禾火田單 service, we may process customer/contact details, products, orders, deliveries, payment records, notes, roles and activity records entered by you or an authorized team, for operations, exports, support and security. These are separate from News PaNer reading data.
LINE/AI order assistance applies only where the feature is available, connected and appropriately authorized. A LINE official account added to a group may receive group message events, not only messages mentioning it; administrators must explain the purpose and obtain necessary authorization. Once enabled, necessary messages and order context may be processed by an entrusted AI service, with human review of suggestions. Photos, audio or files are processed only if the corresponding feature is available and you provide them. Removing the official account stops future input from that source, but does not delete existing business records.
Existing tool accounts use entrusted sign-in and cloud services. Planned features are not treated as enabled. Relevant purposes and provider details will be updated before activation.
08｜Service providers, disclosures and international processing
Access is limited to personnel and providers who need it for their duties. Entrusted cloud service providers help store News PaNer member data and operate our website. Apple, Google or Meta/Facebook verify your chosen sign-in method, and the applicable store handles purchases/subscriptions. Translation, weather and legacy-tool integrations use the providers described above.
We do not sell personal data. We disclose it only as necessary to provide requested features, carry out appropriately authorized processing, maintain security, resolve disputes or meet legal obligations and lawful authority requests. Common ownership is not blanket permission to share accounts or activity across products.
Electronic processing may occur in Taiwan, the United States, Japan, Europe and other locations where the relevant providers process or store data, depending on the feature and deployment. Data is not necessarily kept only in Taiwan. We apply any required cross-border protections or additional consent under applicable law.
09｜Retention and safeguards
- Accounts and local data：Member and dedicated test-account data is kept while the account exists, then handled as described below. Local favourites, settings and saves stay on the device until removed, cleared or replaced under a feature’s storage limit.
- Statistics and transactions：Optional usage aggregates are kept for up to 13 months. After News PaNer account deletion, purchase-ownership, transaction and deletion records with login identifiers removed are retained to prevent duplicate claims and handle transaction disputes. The current system has no automatic expiry for those records; an administrator must review necessity and deletion requests. We do not describe deletion as immediate removal of every record.
- Backups and logs：Encrypted member backups and restore-test copies are currently managed manually; app account deletion does not automatically clear every backup. Contact us to request review and handling. Hosting connection/security logs follow provider retention policies. Support and other-tool business records are retained for their purpose, legal requirements and disputes, then deleted, restricted or de-identified when appropriate under law.
- Security：We protect data during transfer and storage, verify user identities, and limit access to the information needed for each role. No system is risk-free. We investigate, address and notify personal-data incidents as required by law.
10｜Account deletion and subscription management
In News PaNer, use Account → Manage account → Delete account, or sign in using the original method on the web account page below. Deletion removes provider identifiers, name, email, dedicated-account password data, sessions, retained verification/revocation credentials and country preferences. Necessary transaction and backup records are handled as described above.
Retained Apple authorization is revoked where a usable credential is available; otherwise follow the app’s direction to remove it in Apple Account settings. Google/Facebook permissions can be managed with those providers. Signing in again with a third-party provider may create a new member without automatically transferring the old subscription. Deleted dedicated accounts are not automatically recreated.
Deleting the app or member account does not cancel App Store/Google Play renewal. Separately use Paid access → Manage store subscription, or the original store, to cancel. We cannot operate the store cancellation control for you. Request deletion of other-service or invited game-test data through our contact email.
11｜Your choices, rights and contact
You can decline optional data or revoke device permissions: without location access, default-city weather remains available; without analytics, reading remains available. Without necessary sign-in/purchase information, entitlement verification or purchase restoration may not work. Planned game cloud features do not begin collecting data merely because this policy exists.
Subject to applicable law, you may request access, copies, correction, supplementation, cessation of collection/processing/use, deletion, and withdrawal of consent for optional consent-based processing. Email eason@toponepapa.com.tw with the product, account and request. We will verify identity as necessary, respond under applicable law and explain any lawful retention reason. Do not send passwords or full identity documents in your first message.
These services are not intended to collect children’s personal information. Users below the applicable age of consent should have a guardian assist with features requiring personal data or purchases. Contact us about children’s data submitted without necessary authorization. Game age suitability follows its released version and store rating.
Material changes to purposes or providers will be dated and appropriately notified; processing requiring additional consent will obtain it separately. Traditional Chinese and English versions are provided. Contact us about any discrepancy; your statutory rights are not reduced by a translation difference.