Suspicious Craft Report – Privacy Policy
Effective Date: October 3, 2026
INXSOFT Ltd. (“INXSOFT,” “we,” “us,” or “our”) values and respects your privacy. This Privacy Policy explains how we handle information when you use the Suspicious Craft Report Android app, the web app at reporting.tw/app and the website reporting.tw (together, the “Service”). The Service lets anyone report suspicious drones, boats and other craft in Taiwan, in the air, at sea or on the coast.
Demonstration. The Service is currently a demonstration for the Taiwan Defense Tech Hackathon 2026. It is not an official government service. Reports are handled by the demonstration team and the evaluators of the demonstration; they are not automatically forwarded to government authorities. In an emergency, call 110.
Information Collection
No account is needed. We never ask for your name, phone number or email address. When you send a report, the Service receives:
- Location and time of the report, with its accuracy, or a position you set on the map.
- Direction and angle your phone was pointing (compass and motion sensors), if you aim at the craft.
- Your answers to the short questions about the craft and any description you type.
- Photos, video and sound recordings you choose to add, with a fingerprint (hash) of each file to show it was not altered.
- Drone Remote ID broadcasts your phone picked up (Android only): a drone’s serial number, position and sometimes its operator’s position.
- Technical information: a random ID created when the app was installed (stored by us only in hashed form), the app version, whether you used Android or the web, your language, and on Android a Google Play Integrity check that the app is genuine.
- Network information: your IP address is used when your report arrives to prevent abuse and floods of fake reports. We store only a keyed hash of the network it belongs to, not the address itself.
- Notification token (only if you allow notifications): a token from Google Firebase Cloud Messaging so we can tell you that your report was updated. Notifications never contain details of the report.
Every permission (location, camera, microphone, nearby devices, notifications) is optional; you can refuse any of them and still send a report.
The Service does not use advertising, analytics or tracking tools, and the website does not set tracking cookies. The app and the web app keep your reports’ follow-up keys and your settings on your device (in the browser’s storage for the web app).
Use of Information
- To receive your report, combine it with other reports and sensor data about the same craft, judge its urgency, and show it to the people handling reports.
- To let you follow your report, see its outcome and answer requests for more evidence. Only your device holds the key for this.
- To detect and prevent abuse such as fake or automated reports.
- To produce statistics about where and when suspicious craft are reported.
- Automated image analysis: photos, and still frames taken from videos, may be analysed by an AI model to suggest what kind of craft is visible. The result is advisory: a person always decides, and the AI can only raise, never lower, the urgency of a report.
We do not use your information for marketing or advertising and we do not sell it.
Disclosure of Information
- People handling reports: staff accounts of the Service (during the demonstration: the demonstration team and evaluators) can see reports, evidence and their status. Access depends on role and is logged.
- Service providers that process data on our behalf: Google Cloud (server hosting), Cloudflare (network security and delivery; processes IP addresses), Featherless AI (the AI image analysis described above; receives the photo or frame and the type of craft, nothing else), Google Play Integrity and Google Firebase Cloud Messaging (Android only, as described above). Some of these providers may process data outside Taiwan.
- Maps: map images are loaded from the National Land Surveying and Mapping Center (NLSC) map service; the no-fly zone map opens the Civil Aviation Administration’s website. These services see your IP address when they deliver the map.
- Legal requirements: we disclose information when required by Taiwanese law.
Reports are never published.
Data Security
All connections are encrypted (HTTPS). Evidence files are checked against their fingerprints and protected from modification, staff access requires individual accounts, every view of a report is recorded in an audit log, and especially sensitive notes are encrypted. Your follow-up key is never stored on our servers; we keep only a keyed hash of it. Please only film the craft and its surroundings: photos and video may show bystanders.
Data Retention
Reports, evidence files and related records are kept for the duration of the demonstration and deleted when it ends. Abuse-prevention counters are deleted after one day.
Your Choices & Control
- You can refuse or withdraw any permission in your phone’s settings.
- In the app, Settings → “Clear report history” removes your reports and their follow-up keys from your device. Uninstalling the app or clearing the browser’s data has the same effect.
- Under Taiwan’s Personal Data Protection Act you may ask to access, correct or delete information about you. Because reports are anonymous, please include your case number so that we can find the report.
Children
The Service is not directed at children under 13. Children should not approach drones or vessels; if anyone is in danger, call 110.
Contact Us
If you have any questions or concerns about this Privacy Policy or the Service, you may contact us at:
Email: [email protected]
Company: INXSOFT Ltd.
Address: No 55 Zhouzi Street, 4F, Taipei, Taiwan
Changes to this Policy
We may update this Privacy Policy to clarify our practices or to comply with legal requirements, in particular before the Service is used outside the demonstration. Updates will be published on this page with the “Effective Date” adjusted accordingly.
可疑載具通報 隱私權政策
生效日期：2026 年 10 月 3 日
INXSOFT Ltd.（以下稱「INXSOFT」或「我們」）重視並尊重您的隱私。本隱私權政策說明您使用「可疑載具通報」Android App、網頁版 （reporting.tw/app）及網站 reporting.tw（以下合稱「本服務」）時，我們如何處理相關資訊。本服務讓任何人通報在臺灣空中、海上或海岸出現的 可疑無人機、船隻及其他載具。
展示用途。本服務目前為「Taiwan Defense Tech Hackathon 2026」之展示系統，並非政府官方服務。通報由展示團隊及評審處理， 不會自動轉交政府機關。如遇緊急狀況，請撥打 110。
蒐集的資訊
使用本服務不需要帳號，我們不會詢問您的姓名、電話或電子郵件。送出通報時，本服務會收到：
- 位置與時間（含定位精確度），或您在地圖上設定的位置。
- 若您對準載具，手機指向的方向與角度（指南針與動作感測器）。
- 您對載具相關簡短問題的回答，以及您輸入的說明。
- 您選擇附上的照片、影片與錄音，以及每個檔案的指紋（雜湊值），用以證明檔案未被修改。
- 手機接收到的無人機遙控識別（Remote ID）廣播（僅 Android）：無人機序號、位置，有時包含操作人位置。
- 技術資訊：安裝 App 時產生的隨機識別碼（我們僅以雜湊形式保存）、App 版本、使用 Android 或網頁版、語言，以及 Android 上用來確認 App 為正版的 Google Play Integrity 檢查結果。
- 網路資訊：通報送達時會使用您的 IP 位址防止濫用及大量假通報。我們只保存該 IP 所屬網段的加密雜湊值，不保存 IP 位址本身。
- 通知權杖（僅在您允許通知時）：Google Firebase Cloud Messaging 的權杖，用於通知您通報有更新。通知內容不會包含通報細節。
所有權限（位置、相機、麥克風、附近的裝置、通知）皆為選擇性，拒絕任何權限仍可送出通報。
本服務不使用廣告、分析或追蹤工具，網站也不設定追蹤用 Cookie。App 與網頁版會將通報的追蹤金鑰及您的設定保存在您的裝置上（網頁版保存在瀏覽器儲存空間）。
資訊的使用
- 接收您的通報，與同一載具的其他通報及感測資料整合、判斷緊急程度，並提供給處理通報的人員。
- 讓您追蹤通報進度、查看結果並回覆補充證據的請求；只有您的裝置持有追蹤金鑰。
- 偵測並防止假通報或自動化通報等濫用行為。
- 統計可疑載具被通報的地點與時間。
- 自動影像分析：照片及影片擷取的畫面可能由 AI 模型分析，以判斷畫面中的載具類型。結果僅供參考：最終由人員判斷，且 AI 只能提高、不能降低通報的緊急程度。
我們不會將您的資訊用於行銷或廣告，也不會出售。
資訊的揭露
- 處理通報的人員：本服務的工作人員帳號（展示期間為展示團隊及評審）可查看通報、證據及處理狀態；權限依角色而定，且所有存取都會記錄。
- 代我們處理資料的服務供應商：Google Cloud（主機代管）、Cloudflare（網路安全與傳輸，會處理 IP 位址）、Featherless AI（上述 AI 影像分析，只會收到照片或畫面及載具類型）、Google Play Integrity 與 Google Firebase Cloud Messaging（僅 Android，用途如上）。部分供應商可能在臺灣以外處理資料。
- 地圖：地圖圖資由內政部國土測繪中心（NLSC）提供；禁航區地圖會開啟交通部民用航空局網站。這些服務在提供地圖時會看到您的 IP 位址。
- 法律要求：依中華民國法律規定須提供時，我們會依法揭露。
通報內容絕不公開。
資料安全
所有連線皆經加密（HTTPS）。證據檔案會以指紋核對並防止修改，工作人員須使用個人帳號登入，每次查看通報都會記入稽核紀錄，特別敏感的備註會加密保存。 您的追蹤金鑰不會儲存在我們的伺服器上，我們只保存其加密雜湊值。拍攝時請只拍載具及周邊環境，照片與影片可能拍到旁人。
資料保存
通報、證據檔案及相關紀錄於展示期間保存，展示結束後刪除。防止濫用的計數資料於一天後刪除。
您的選擇與控制
- 您可以隨時在手機設定中拒絕或撤回任何權限。
- 在 App 的「設定 → 清除通報紀錄」可從您的裝置移除通報及追蹤金鑰；移除 App 或清除瀏覽器資料亦有相同效果。
- 依《個人資料保護法》，您可以請求查詢、更正或刪除與您有關的資料。由於通報為匿名，請提供案件編號以便我們找到該通報。
兒童
本服務並非以未滿 13 歲之兒童為對象。兒童請勿接近無人機或船隻；如有人身危險，請撥打 110。
聯絡我們
如您對本隱私權政策或本服務有任何問題，請與我們聯絡：
電子郵件：[email protected]
公司：INXSOFT Ltd.
地址：台灣台北市洲子街 55 號 4 樓（No 55 Zhouzi Street, 4F, Taipei, Taiwan）
政策變更
我們可能為說明實際作法或符合法律要求而更新本隱私權政策，特別是在本服務於展示以外使用之前。更新內容將公布於本頁，並同步調整「生效日期」。