最後更新 / Last updated: 2026-10-24
Reboku（套件名 com.reboku.reader,以下稱「本 App」）是一款電子書閱讀器。你的閱讀資料只留在你的裝置;本 App 免費下載並顯示廣告,可透過應用程式內購買一次性解鎖「完整版」以移除廣告與各項上限。
你匯入的書籍、閱讀進度、書籤、書架與各項設定,預設只儲存在你的裝置本機,本 App 不會收集、上傳或分享這些資料,開發者也無法存取。移除本 App 即會一併刪除這些本機資料。
例外只有兩種,都要你自己動手:一是你開啟「雲端備份與同步」 —— 那時部分資料會上傳到你自己的 Google 雲端硬碟,詳見下一節;這個功能預設關閉,不開就完全不會有任何上傳。二是你選取文字後按〔定義〕或〔網路搜尋〕 —— 那時你選的那段文字會送到 Google 搜尋,詳見下方「網路權限」。
打開有密碼的 PDF 時,本 App 會請你輸入密碼,只用來在你的裝置上解開這本書。只有你勾選〔記住密碼〕時才會把它存起來:它只以加密方式存在這台裝置(由 Android 系統金鑰庫保護),不會上傳、不會納入任何備份或匯出檔、不會同步到其他裝置,開發者也無法取得;刪除這本書就會一併刪除它。沒有勾選時,密碼不會被存下來。若這台裝置的系統金鑰庫無法使用,〔記住密碼〕不會出現。
本 App 可以把你的閱讀紀錄放到你自己的 Google 雲端硬碟,讓你在多台裝置之間接續閱讀,或在換機/重裝後還原。這個功能預設關閉,只有你自己連結 Google 帳號並開啟之後才會運作。
資料存在哪裡:存在你自己的 Google 雲端硬碟,放在一個名為 Reboku_EPUB_Reader 的資料夾裡。開發者沒有伺服器、也無法存取那個資料夾;那是你的帳號、你的空間、你隨時可以打開來看或直接刪掉。
存取範圍:本 App 使用 Google 官方的「單檔存取」授權(drive.file),這種授權只讓 App 看到它自己建立的檔案。你雲端硬碟裡其他的檔案、文件與照片,本 App 看不到也讀不到。
會上傳什麼
不會上傳什麼
與 Google 的連線:同步或備份時會連到 Google 雲端硬碟的伺服器,與任何網路請求一樣,Google 會看到你的 IP 位址並依其自身政策處理(參見 Google 隱私權政策)。這些連線不經過開發者的任何伺服器。
你可以隨時停止
Reboku_EPUB_Reader 整個資料夾。那個資料夾裡放了一份說明檔告訴你它是什麼、刪掉會失去什麼。免費版透過 Google AdMob 顯示廣告。為了投放廣告,Google 的廣告 SDK 可能會收集與使用裝置識別碼(廣告 ID)、裝置與粗略概略位置(由 IP 推估)、以及廣告互動資料等,詳見 Google 的說明:
付費版(已購買解鎖)不含廣告、不初始化廣告 SDK,因而不會有上述廣告相關的資料收集。 唯一的例外是重新安裝本 App 或換到新裝置後的第一次啟動:本 App 要先向 Google Play 確認你的購買,才知道你是付費版;在確認完成之前,可能會照免費版的流程初始化廣告 SDK(在歐洲經濟區、英國或瑞士會先看到同意視窗),也可能短暫出現橫幅廣告。確認完成後就不再顯示廣告,之後每次啟動也不再初始化廣告 SDK。
本 App 提供一次性的「完整版」解鎖(移除廣告、書庫與書架上限)。付款完全由 Google Play 處理,本 App 與開發者不會收到、也不會儲存你的付款資料(卡號等)。本 App 只在你的裝置本機記錄一個「已解鎖」狀態,並向 Google Play 查詢以確認/還原你的購買(換裝置或重裝時自動還原);這些購買驗證不經過開發者的任何伺服器(本 App 無自有伺服器)。退款後,下次連上 Google Play 時會自動回復為免費版。
本 App 具有網路(INTERNET)權限,用於:(1) 免費版的廣告;(2) 每天確認一次目前時間 —— App 每天最多一次向開發者在 GitHub Pages 上的網站送出一個請求,只讀取對方回覆裡的「目前時間」,用來計算免費版的時數與次數(例如看廣告換來的免廣告時間),不受手機時鐘被調整影響;這個請求不下載也不顯示任何內容、不上傳任何東西,但與任何網頁請求一樣,對方伺服器(GitHub Pages)會看到你的 IP。本隱私權政策、版權宣告與 App 內所有說明頁面都隨 App 一起打包、完全不連網 —— App 內看到的永遠是你安裝的這個版本所附的那一份(網路上的版本只供商店頁面連結);(3) 向 Google Play 查詢購買狀態(見上);(4) 線上書庫(OPDS) —— 只在你自己設定並開啟時,連到你填的那台書庫伺服器瀏覽與下載書;(5) 選取文字後的〔定義〕與〔網路搜尋〕 —— 只在你按下時,把你選取的文字(〔定義〕最多 60 字、〔網路搜尋〕最多 120 字)送到 Google 搜尋,並在 App 內的網頁視窗顯示結果,Google 依其自身政策處理這筆查詢(〔字典 App〕則是交給你裝置上安裝的字典 App 處理)。除了你主動按下的〔定義〕與〔網路搜尋〕,你的閱讀資料本身不會被傳出裝置。
本 App 具有網路狀態(ACCESS_NETWORK_STATE)權限,唯一用途是在你開啟「只在 Wi-Fi 同步」時,判斷目前這條連線是 Wi-Fi 還是行動網路 —— 不是的話就先不同步,免得吃掉你的行動數據。
這是 Android 的一般權限(安裝時自動授予、不會跳出詢問視窗)。它問到的只有「現在是哪一種連線」這一個是非題,不會取得 Wi-Fi 名稱、不會取得網路位置、不會知道你連的是哪個基地台或路由器,而且這個答案完全留在你的裝置上,不會傳給任何人,也不會被記錄下來。
為了讓「朗讀」與「匯入書籍」在關閉螢幕或切到其他 App 時能繼續,本 App 具有前景服務(FOREGROUND_SERVICE / FOREGROUND_SERVICE_MEDIA_PLAYBACK / FOREGROUND_SERVICE_DATA_SYNC)、保持喚醒(WAKE_LOCK) 與通知(POST_NOTIFICATIONS) 權限:
這些權限只在你啟用朗讀、或你自己匯入書籍時使用,所有處理都在你的裝置上完成,不涉及任何資料收集或傳輸。(2026-09-27 更新:新增背景匯入;先前的版本只寫了朗讀。)
使用「朗讀」時會呼叫你裝置上的系統語音引擎;使用「查詢／查字典」時會依你的選擇開啟你裝置上的其他 App。那些 App 各有自己的隱私權政策,不在本政策範圍內。
Android 系統的「自動備份」可能會把本 App 的本機資料備份到「你自己的」Google 帳號雲端。開發者無法存取;可在裝置「設定 → Google → 備份」管理或關閉。
本 App 不針對兒童設計。
若本政策更新,會同步更新本頁「最後更新」日期。
如有疑問,請聯絡:Reboku.app@gmail.com
Reboku (package com.reboku.reader, the "App") is an eBook reader. Your reading data stays on your device; the App is free and shows ads, and offers a one-time in-app purchase to unlock the full version (removing ads and limits).
The books you import, your reading positions, bookmarks, shelves, and settings are stored on your device by default. The App does not collect, transmit, or share this data, and the developer cannot access it. Uninstalling the App deletes this local data.
There are only two exceptions, and both are your own action: when you turn on Cloud backup & sync — some of that data is then uploaded to your own Google Drive, see the next section; the feature is off by default, and nothing is ever uploaded unless you switch it on. And when you select text and tap Define or Web search — the text you selected is then sent to Google Search, see "Network permission" below.
When you open a password-protected PDF, the App asks for its password and uses it only to unlock that book on your device. Only if you tick "Remember password" is it stored: encrypted, on this device only (protected by the Android Keystore), never uploaded, never included in any backup or export file, and never synced to another device, and the developer cannot obtain it. Deleting the book deletes it. If you do not tick the box, the password is not stored. If this device's system keystore is unavailable, "Remember password" is not offered.
The App can put your reading records in your own Google Drive so you can continue reading on another device, or restore after a reinstall or a new phone. This is off by default and only runs after you link your Google account and enable it.
Where the data lives: in your own Google Drive, inside a folder named Reboku_EPUB_Reader. The developer runs no server and cannot access that folder — it is your account, your storage, and you can open or delete it at any time.
Scope of access: the App uses Google's official per-file authorization (drive.file), which lets an app see only the files it created itself. Everything else in your Drive — your other files, documents and photos — is invisible and unreadable to this App.
What is uploaded
What is never uploaded
Connections to Google: syncing or backing up contacts Google Drive's servers. As with any web request, Google sees your IP address and handles it under its own policies (see Google's privacy policy). None of this passes through any server belonging to the developer.
You can stop at any time
Reboku_EPUB_Reader folder from your Google Drive. That folder contains a README explaining what it is and what deleting it loses.The free version shows ads via Google AdMob. To serve ads, Google's ad SDK may collect and use device identifiers (advertising ID), device and coarse/approximate location (derived from IP), and ad‑interaction data, among others. See:
The paid (purchased/unlocked) version contains no ads and does not initialize the ad SDK, so none of the above ad‑related collection occurs. The one exception is the first launch after you reinstall the App or move to a new device: the App must first confirm your purchase with Google Play before it knows you have the paid version. Until that check completes it may initialize the ad SDK as the free version does (in the EEA, the UK or Switzerland you may first see the consent form) and may briefly show a banner ad. Once the check completes no more ads are shown, and later launches do not initialize the ad SDK.
The App offers a one-time "full version" unlock (removes ads and the library/shelf limits). Payment is handled entirely by Google Play; neither the App nor the developer receives or stores your payment details. The App only records an "unlocked" flag locally on your device and queries Google Play to verify/restore your purchase (auto-restored on a new device or reinstall); this verification does not pass through any developer server (the App has none). After a refund, the App reverts to the free version the next time it reaches Google Play.
The App holds the INTERNET permission for: (1) ads in the free version; (2) checking the current time once a day — at most once a day the App sends one request to the developer's website on GitHub Pages and reads only the "current time" in its reply, to count the free version's hours and allowances (for example the ad-free time earned by watching an ad) without being affected by a changed phone clock; that request downloads and shows nothing and uploads nothing, though — as with any web request — the serving host (GitHub Pages) sees your IP address. This privacy policy, the copyright notice and every in-app help page ship inside the App and make no network requests — what you read in the App is always the copy that came with your installed version (the online copies exist for the store listing); (3) checking your purchase state with Google Play (see above); (4) online catalogs (OPDS) — only when you set one up yourself, to browse and download books from the server you entered; (5) Define and Web search on selected text — only when you tap them, the text you selected (up to 60 characters for Define, 120 for Web search) is sent to Google Search and the result is shown in an in-app web view; Google handles that query under its own policies (Dictionary app hands the text to the dictionary app installed on your device). Apart from the Define and Web search you tap yourself, your reading data itself is not sent off the device.
The App holds the ACCESS_NETWORK_STATE permission for exactly one purpose: when you turn on "Sync on Wi-Fi only", it checks whether the current connection is Wi-Fi or mobile data, and skips syncing on mobile data so your data allowance is not spent.
This is an Android normal permission (granted at install, with no prompt). It answers only the yes/no question "is this Wi-Fi?" — it does not reveal the Wi-Fi network name, your network location, or which router or cell tower you are on — and that answer never leaves your device and is never recorded.
So "Read aloud" and "Import books" can keep going with the screen off or while you switch apps, the App holds foreground-service (FOREGROUND_SERVICE / FOREGROUND_SERVICE_MEDIA_PLAYBACK / FOREGROUND_SERVICE_DATA_SYNC), WAKE_LOCK, and notification (POST_NOTIFICATIONS) permissions:
These permissions are used only while read-aloud is running or while books you imported are being processed; all processing happens on your device and involves no data collection or transmission. (Updated 2026-09-27: background import added; earlier versions mentioned read-aloud only.)
"Read aloud" invokes your device's system text‑to‑speech engine; "look up / dictionary" opens another app of your choosing. Those apps have their own privacy policies, outside the scope of this one.
Android's Auto Backup may back up the App's local data to your own Google account cloud. The developer cannot access it; manage or disable it under Settings → Google → Backup.
The App is not directed at children.
If this policy changes, the "Last updated" date above will be updated.
Questions: Reboku.app@gmail.com