Privacy Policy

This statement adopts a rights-and-responsibilities perspective to clearly explain: the privacy rights you enjoy when using our services, and the protection responsibilities we undertake as the service provider. We believe that trust is built only when rights are clearly defined and responsibilities are firmly upheld.

Part I: Your Privacy Rights

You have the following eight statutory rights over your personal information:

No.	Right	Description
1	Right to Know	You have the right to receive clear and comprehensive information about how we collect, use, store, and share your personal information
2	Right to Decide	You have the right to autonomously decide whether to consent to the processing of your personal information, free from interference or coercion
3	Right to Access	You have the right to access your personal information held by us and understand how it is processed
4	Right to Rectification	You have the right to request correction or supplementation of inaccurate or incomplete personal information
5	Right to Deletion	You have the right to request deletion of your personal information under legally permissible conditions
6	Right to Withdraw Consent	You have the right to withdraw your consent to data processing at any time; we will cease processing upon withdrawal
7	Right to Cancellation	You have the right to request account cancellation at any time, which we will process in accordance with law
8	Right to Complain	You have the right to file complaints with regulatory authorities or seek judicial remedies regarding privacy concerns

Part II: Our Protection Responsibilities

To safeguard your privacy rights, we undertake the following eight core responsibilities:

No.	Responsibility	Description
1	Information Duty	Provide clear, plain-language explanations of our data processing rules to ensure full transparency
2	Minimization Duty	Collect only the minimum information necessary for service delivery — no overreach, no forced bundling
3	Lawful Use Duty	Use your information only within legally permitted and authorized scopes, not exceeding agreed purposes
4	Security Duty	Implement both technical and administrative measures to protect your information from leakage, alteration, and destruction
5	Limited Sharing Duty	Do not share your information arbitrarily; share only as agreed with you or as legally permitted
6	Timely Response Duty	Respond promptly to your access, rectification, deletion, and cancellation requests within legal timeframes
7	Change Notification Duty	Notify you prominently in advance of material changes to the privacy policy and provide opt-out choices
8	Liability Duty	Bear compensation liability in accordance with law if your rights are harmed due to our violation of regulations or this statement

Part III: Core Data Processing Activities

1. Collection Activities

Scenario	Collected Information	Legal Basis	Rejectable?
Registration/Login	Phone number/email, verification code, password	Contractual necessity	No (otherwise registration impossible)
Profile Completion	Nickname, avatar, gender, bio	Voluntary provision	Yes (optional)
Service Usage	Browsing history, search terms, click behavior	Service quality & security	Yes (can disable tracking)
Location Services	Precise/approximate geographic location	Separate authorization	Yes (can disable permission)
Push Notifications	Device identifier, push token	With your consent	Yes (can disable in settings)

2. Storage Activities

Storage Location: Within the territory of China (by default);
Retention Period:

Stored continuously during active account status;
After account cancellation, retained no longer than the minimum legally required period;
Upon expiry, data will be deleted or anonymized.

3. Usage Activities

We process your information only on the following lawful bases:

Contractual Performance: Necessary to provide services;
Legitimate Interests: Security assurance and experience optimization (provided such interests do not override your fundamental rights);
Legal Obligations: Compliance with applicable laws and regulations;
Your Consent: After obtaining your explicit authorization.

4. Sharing Activities

We implement tiered control over information sharing:

Level	Scenario	Control Measures
Level 1 (Internal)	Internal departmental transfers	Minimum-privilege access, audit logging
Level 2 (Partner Sharing)	Sharing with payment, push, cloud service providers	Data processing agreements, regular security audits
Level 3 (Legal Disclosure)	Responses to lawful requests from judicial/administrative authorities	Review legal documentation, limit disclosure scope
Level 4 (Other)	Any sharing beyond the above	Must obtain your separate explicit consent

Part IV: Cookies and Tracking Technologies

Type	Purpose	Your Choice
Necessary Cookies	Maintain login status, ensure basic functionality	Cannot be disabled (otherwise services won't work properly)
Preference Cookies	Remember language, theme, and other personalization	Can be disabled
Analytics Cookies	Traffic statistics, user behavior analysis	Can be disabled
Marketing Cookies	Deliver personalized ad recommendations	Can be disabled

You may make a one-time selection via the pop-up on your first visit, or adjust settings anytime in "Privacy Settings."

Part V: Children's Personal Information Protection

We do not proactively collect personal information from children under 14;
If you are a child user, please use our services under the supervision of a guardian who has read and consented to this statement;
If we discover that children's information has been collected without guardian consent, we will immediately delete it and take reasonable steps to notify the guardian.

Part VI: Your Choices and Opt-Out Mechanisms

Choice	How to Exercise	Expected Effect
Disable Personalized Recommendations	Privacy Settings → Recommendation Management → Turn off	No longer receive preference-based recommendation content
Disable Targeted Advertising	Privacy Settings → Ad Preferences → Turn off	Ads will still appear but no longer based on your preferences
Withdraw Data Consent	Privacy Settings → Consent Management → Withdraw	Non-essential data processing will stop
Delete Personal Data	Account Center → Data Management → Delete	Delete specific content or all data (excluding legally retained)
Cancel Account	Account Center → Security Settings → Cancel	Account deactivated; personal information processed as required by law

Part VII: Contact Us and Redress Channels

Channel	Contact Details
Privacy Dedicated Email	privacy@example.com
Privacy Service Hotline	+86 400-000-0000
Postal Address	Data Compliance Department, No. 1 XXX Road, XXX District, XXX City, XXX Province, China
Online Submission	Log in → Help Center → Privacy Complaint

Response Time: We commit to providing a substantive response to your requests within 15 business days.

External Redress: If you are not satisfied with our response, you have the right to file a complaint with the Cyberspace Administration or other competent regulatory authorities, or to bring legal proceedings before a court of competent jurisdiction.