隐私政策

闲言APP 隐私政策

版本号：V6.7

更新日期：2026年6月5日

生效日期：2026年6月6日

弥勒市朋普镇微风暴网络科技工作室（以下简称"我们"）深知个人信息对您的重要性，我们将按照法律法规的规定，保护您的个人信息及隐私安全。我们制定本隐私政策以帮助您了解我们如何收集、使用、存储和保护您的个人信息。本政策适用于闲言APP提供的所有服务。

零、定义

本隐私政策中使用的术语定义如下：

• **个人信息**：以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息，不包括匿名化处理后的信息
• **敏感个人信息**：一旦泄露或者非法使用，容易导致自然人的人格尊严受到侵害或者人身、财产安全受到危害的个人信息，包括生物识别、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等信息，以及不满十四周岁未成年人的个人信息
• **个人信息处理者**：在个人信息处理活动中自主决定处理目的、处理方式的组织或个人，在本政策中指我们
• **匿名化**：个人信息经过处理无法识别特定自然人且不能复原的过程
• **去标识化**：个人信息经过处理使其在不借助额外信息的情况下无法识别特定自然人的过程
• **我们**：指弥勒市朋普镇微风暴网络科技工作室
• **您/用户**：指使用闲言APP服务的自然人
• **第三方SDK**：指由第三方提供的、集成在我们应用中用于实现特定功能的软件开发工具包
• **工作日**：指中华人民共和国法定工作日（不含法定节假日及调休日）

一、我们收集的信息

我们仅收集为您提供核心服务所必需的信息。拒绝提供非必要信息不会影响您使用应用的基础功能。

1.1 自动收集的信息

• 设备信息：设备型号、操作系统版本、设备标识符、屏幕分辨率（用于兼容性优化和崩溃分析）
• 应用信息：应用版本号、构建号（用于版本管理和功能适配）
• 日志信息：崩溃日志、性能指标（用于提升应用稳定性）
• 设备指纹信息：设备唯一标识符（device_id）、User-Agent，用于设备识别和安全验证
• IP地址信息：您的IP地址及IP归属地，用于安全验证、异常登录检测和城市级位置服务
• 互动行为信息：您的浏览记录、搜索关键词、点赞、收藏、分享、评论等互动行为，用于个性化推荐和服务优化
• 使用行为信息：浏览时长、浏览进度，用于使用统计和个性化推荐

1.2 您主动提供的信息

• 账号信息：注册时提供的手机号/邮箱、昵称、头像
• 个人偏好：主题设置、字体大小、使用偏好等个性化配置
• 用户内容：您发布的笔记、文章、评论等
• 安全信息：密保问题和答案（加密存储），用于账号安全验证

1.3 我们不会收集的信息

• 通讯录、短信、通话记录
• 精确地理位置（仅使用城市级别用于天气服务）
• 生物识别信息（指纹、面容等）
• 其他与核心服务无关的敏感信息

二、我们如何使用信息

我们收集的信息仅用于以下目的：

2.1 核心服务

• 提供每日拾句、卡片创作、诗词推荐等核心功能
• 个性化内容推荐和展示
• 账号注册、登录与安全验证

2.2 功能优化

• 优化应用性能和稳定性
• 兼容性适配与Bug修复
• 新功能开发与测试

2.3 安全保障

• 账号安全验证与异常登录检测
• 防止欺诈和违规行为

我们不会将您的个人信息用于未在本政策中说明的用途。

二点五、业务功能与个人信息映射表

根据《App违法违规收集使用个人信息行为认定方法》要求，以下逐项说明各业务功能所收集的个人信息：

业务功能	收集的个人信息类型	是否必要	拒绝提供的影响
每日拾句与发现	设备信息、应用信息	是	无法使用阅读功能
卡片创作	相册/相机权限（可选）	否	无法使用图片相关功能，可使用纯文字创作
诗词推荐	设备信息	是	无法使用诗词功能
AI智能助手	对话内容、设备信息	是	无法使用AI对话功能
文件传输助手	位置/附近设备权限（可选）	否	无法使用文件传输功能
笔记与文章	用户内容、设备信息	是	无法使用笔记功能
天气信息	粗略位置（可选）	否	需手动选择城市
每日签到与积分	账号信息	是	无法参与签到活动
推送通知	通知权限（可选）、设备标识符	否	无法接收推送消息
云端数据同步	账号信息、用户内容	是	无法使用同步功能
语音朗读	设备信息	是	无法使用朗读功能
二维码扫描	相机权限（可选）	否	无法使用扫码功能
OCR文字识别	相机权限、图片内容（可选）	否	无法使用OCR功能
会员增值服务	账号信息	是	无法使用会员功能

说明：

• 标注为"必要"的信息是提供该功能所必需的，拒绝提供将导致该功能无法使用
• 标注为"可选"的信息或权限，拒绝提供仅影响相关子功能，不影响其他功能正常使用
• 您可随时在系统设置中撤回已授予的可选权限

三、我们如何存储信息

3.1 存储方式

• 本地存储：个人偏好设置存储在应用沙盒的 SharedPreferences 和 Hive 数据库中
• 缓存数据：图片缓存、内容缓存存储在应用临时目录，可随时清理
• 结构化数据：收藏、笔记、浏览历史等存储在本地 SQLite 数据库
• 服务端数据：账号信息、用户资料、设备信息、互动记录、搜索历史、用户偏好画像等存储在云服务器MySQL数据库中
• 云端暂存：加密文件通过云端暂存服务在设备间传输，采用端到端加密

3.2 存储地域

您的数据存储在中华人民共和国境内的服务器上。当前我们不会将您的个人信息传输至中华人民共和国境外。如未来因业务需要确需跨境传输，我们将按照法律法规要求进行安全评估并获得您的单独同意，并确保境外接收方的数据保护能力达到法律法规要求的标准。

3.3 存储期限

我们仅在实现本政策所述目的所必需的期限内保留您的个人信息：

信息类型	存储期限	说明
账号信息	账号存续期间 + 注销后30日	注销后删除或匿名化处理
用户内容（笔记、文章等）	账号存续期间	注销后删除
收藏与偏好设置	账号存续期间	注销后删除
崩溃日志与性能数据	6个月	超期自动删除
缓存数据	随应用卸载删除	可手动清除
本地数据库（SQLite）	随应用卸载删除	可手动导出备份
推送令牌	账号存续期间	注销或关闭推送时删除
设备信息与IP地址	账号存续期间	注销后删除
互动行为记录	账号存续期间	注销后删除，IP数据6个月后匿名化
搜索历史	账号存续期间	注销后删除
用户偏好画像	账号存续期间	注销后删除

法律法规要求保留的日志信息，保留期限不超过6个月。超出上述期限后，我们将删除或匿名化处理您的个人信息。

3.4 安全措施

我们采用行业标准的安全措施保护您的数据，包括但不限于：

• 数据传输加密（TLS 1.2+）
• 本地敏感数据加密存储
• 访问权限控制与审计
• 定期安全评估与漏洞修复

四、我们如何共享信息

我们承诺：

4.1 我们不会出售您的个人信息

4.2 我们不会向第三方共享您的个人身份信息，以下情形除外：

• 获得您的明确同意后
• 根据法律法规要求或政府主管部门的强制性要求
• 与关联方共享：仅为实现服务功能所必需
• 与授权合作伙伴共享：仅为实现服务功能所必需，且受严格保密义务约束

4.3 我们不会在未经您同意的情况下将数据用于广告推送

4.4 如我们委托第三方处理您的个人信息，我们将与其签署数据处理协议，确保其按照我们的要求和相关法律法规处理个人信息

4.5 如发生合并、收购、资产转让等情形，我们将要求新的持有您个人信息的主体继续受本隐私政策的约束

五、您的权利

根据《中华人民共和国个人信息保护法》等相关法律法规，您享有以下权利：

5.1 访问权：随时查看您的个人数据

5.2 更正权：修改不准确的个人信息

5.3 删除权：要求删除您的个人数据

5.4 导出权：以通用格式导出您的数据

5.5 撤回权：随时撤回已授予的权限

5.6 注销权：申请注销您的账号

您可以通过应用内的"数据导出""账号注销"等功能行使上述权利，也可通过本政策列明的联系方式联系我们。

六、Cookie 及同类技术

本应用不使用传统的网页 Cookie 技术。我们使用本地存储（SharedPreferences 和 SQLite）来保存您的偏好设置和使用数据，这些数据完全存储在您的设备上，不会传输到服务器用于追踪目的。

七、第三方SDK

我们目前接入的第三方SDK如下。我们将严格审查第三方SDK的数据收集行为，确保其符合本隐私政策的要求：

SDK名称	提供者	收集信息类型	使用目的	隐私政策链接
Flutter SDK	Google LLC	不额外收集个人信息	跨平台应用渲染引擎	https://flutter.dev/privacy
WebRTC	Google LLC / 开源社区	不额外收集个人信息	局域网文件传输	https://webrtc.org/privacy

说明：

• Flutter SDK为应用开发框架，不独立收集用户个人信息
• 我们未接入推送服务SDK、统计分析SDK、广告SDK等其他类型SDK
• 如后续接入新的第三方SDK，我们将及时更新本章节，并通过应用内公告等方式告知您

七点五、自动化决策

7.5.1 自动化决策的使用

我们可能使用自动化决策机制（包括但不限于自动化推荐算法、用户画像等）为您提供个性化内容推荐和服务优化。我们承诺：

• 自动化决策仅用于改善您的使用体验
• 我们不会仅通过自动化决策方式作出对您权益产生重大影响的决定
• 如自动化决策对您产生重大影响，您有权要求我们予以说明，并有权拒绝仅通过自动化决策方式作出的决定

7.5.2 用户权利

• 您有权了解自动化决策的逻辑和可能产生的影响
• 您有权拒绝我们仅通过自动化决策方式作出的决定
• 您有权要求我们对自动化决策的结果进行人工复核

7.5.3 保障措施

• 我们将定期评估自动化决策系统的合理性和公平性
• 我们将确保自动化决策不会产生歧视性结果
• 我们将建立人工干预机制，保障您的合法权益

八、未成年人保护

我们非常重视未成年人的隐私保护：

• 14周岁以下未成年人不得注册和使用**闲言APP**账号
• 如发现误收集14岁以下未成年人信息，将及时删除相关信息
• 建议监护人在未成年人使用本应用时进行指导和监督
• 详细的儿童隐私保护措施请参阅《儿童隐私政策》

8.1 年龄验证机制

为防止14周岁以下未成年人注册使用，我们采取以下措施：

• 注册时要求用户确认已年满14周岁
• 如后续发现用户未满14周岁，我们将立即注销其账号并删除相关信息
• 我们不会要求未成年人提供身份证件进行年龄验证，以避免收集额外的敏感信息

八点五、个人信息安全事件处置

8.5.1 安全事件定义

个人信息安全事件是指因我们或第三方的原因导致个人信息泄露、篡改、丢失等可能危害您合法权益的事件。

8.5.2 应急响应机制

如发生个人信息安全事件，我们将：

• 立即启动应急响应机制，采取补救措施
• 在事件发生后72小时内向主管部门报告
• 及时通过应用内通知、邮件、短信等方式告知受影响的用户，告知内容包括：事件类型、涉及的信息类型、可能造成的危害、我们已采取的补救措施、用户可采取的减轻危害的措施等

8.5.3 通知例外

如满足以下条件之一，我们可能无法及时通知您：

• 采取有效措施能够避免对您造成危害的
• 主管部门认为通知可能影响调查或危害扩大的
• 法律法规另有规定的

8.5.4 事后改进

安全事件处置完毕后，我们将：

• 对事件进行全面调查和评估
• 完善安全措施，防止类似事件再次发生
• 向主管部门提交事件处置报告

九、隐私政策的更新

我们可能会不时更新本隐私政策：

• 重大变更将通过应用内通知告知您
• 更新后的政策将在应用内公示
• 对于重大变更，我们将以弹窗方式提示您，您需主动确认同意后方可继续使用
• 您可以随时查看最新版本的隐私政策
• 如您不同意更新后的政策，有权停止使用本应用并要求删除个人信息

九点五、个人信息保护影响评估

9.5.1 评估范围

在以下情形中，我们将依法进行个人信息保护影响评估：

• 处理敏感个人信息
• 利用个人信息进行自动化决策
• 委托处理个人信息、向其他个人信息处理者提供个人信息或公开个人信息
• 向境外提供个人信息
• 其他对个人权益有重大影响的个人信息处理活动

9.5.2 评估内容

个人信息保护影响评估将包括以下内容：

• 个人信息的处理目的、处理方式等是否合法、正当、必要
• 对个人权益的影响及安全风险
• 所采取的保护措施是否合法、有效并与风险程度相适应

9.5.3 评估结果

• 评估结果将作为我们决策是否开展相关个人信息处理活动的依据
• 如评估结果显示处理活动可能对您的权益产生高风险，我们将仅在采取额外保护措施后方可进行
• 评估记录将至少保留3年

十、主体信息

本应用由以下主体运营，相关身份信息已通过 Dun & Bradstreet 国际企业身份认证，您可通过 D-U-N-S 编号在全球范围内核实本主体身份：

• 主体名称：弥勒市朋普镇微风暴网络科技工作室（Mile Pengpu Town Micro Storm Network Technology Studio）
• 经营别称（DBA）：微风暴（Micro Storm）
• D-U-N-S 编号：586261192
• 统一社会信用代码：92532526MA6PCX153W
• 注册地址：中国 云南省 红河州 弥勒市 朋普社区 49号
• 所属行业：计算机系统设计与相关服务（Computer Systems Design and Related Services）
• 隐私事务联系邮箱：ad@avefs.com

本主体在 Apple App Store、Google Play 等全球应用分发平台登记的开发者主体信息与本章节披露内容一致，便于监管机构、合作方及用户进行身份核验。

十一、联系我们

如果您对本隐私政策有任何疑问或建议，请通过以下方式联系我们：

• 邮箱：2821981550@qq.com
• 应用内反馈：我的 → 关于 → 用户反馈
• 通信地址：中国 云南省 红河州 弥勒市 朋普社区 49号
• ICP备案号：滇ICP备2022000863号-18A

我们将在15个工作日内回复您的隐私相关请求。

个人信息保护负责人：李先生（邮箱：gg@0gg.cc）

十二、国际数据保护

如您位于中华人民共和国境外，我们还将遵守适用的当地数据保护法律：

12.1 欧盟通用数据保护条例（GDPR）

如您位于欧洲经济区（EEA），您享有以下额外权利：

• 合法处理依据：我们依据合法利益、合同履行或您的同意等合法依据处理您的个人信息
• 欧盟代表：我们暂未指定欧盟代表（GDPR Art.27 代表）。如有需要，您可通过本政策列明的邮箱与我们联系
• 数据可携带权：您有权以结构化、通用和机器可读的格式获取您的个人数据，并有权将数据传输给其他控制者
• 限制处理权：在特定情况下，您有权要求我们限制对您个人信息的处理
• 反对权：您有权随时反对基于合法利益对您个人信息的处理

12.2 加州消费者隐私法（CCPA）

如您为加州居民，您享有以下权利：

• 知情权：您有权了解我们收集了哪些个人信息及其用途
• 删除权：您有权要求我们删除您的个人信息
• 选择退出权：我们不出售您的个人信息，因此您无需行使选择退出权
• 不受歧视权：行使隐私权利不会导致您受到歧视性对待

12.3 美国儿童在线隐私保护法（COPPA）

• 我们不针对13岁以下儿童设计或运营服务
• 如我们知悉收集了13岁以下儿童的个人信息，将立即删除
• 如您是13岁以下儿童的监护人且认为我们收集了该儿童的信息，请联系我们

本协议中任何条款被认定为无效或不可执行的，不影响其他条款的效力。

Xianyan APP Privacy Policy

Version: V6.7

Updated: June 5, 2026

Effective: June 6, 2026

Zero. Definitions

• **Personal Information**: Information that can identify a natural person, including but not limited to name, date of birth, ID number, biometric information, address, phone number, email, etc.
• **Sensitive Personal Information**: Personal information that, once leaked or illegally used, may harm personal dignity or personal/property safety, including biometric information, religious beliefs, financial information, etc.
• **Personal Information Controller**: The organization that determines the purposes and methods of processing personal information — **Mile City Pengpu Town Weifengbao Network Technology Studio**
• **Personal Information Processor**: The organization that processes personal information on behalf of the controller
• **Deletion**: Removal of personal information from the system so that it is no longer accessible
• **Anonymization**: Processing of personal information so that it cannot identify a specific individual and cannot be restored
• **Consent**: Explicit authorization given by the user after fully understanding the purposes, methods, and scope of personal information processing

I. How We Collect Your Personal Information

We collect your personal information through the following methods:

1.1 Information You Provide Actively

• Account registration: phone number/email, nickname, password
• Profile information: avatar, personal signature
• Content you publish: sentences, notes, articles, comments
• Feedback and suggestions: content you submit through the feedback feature
• Security information: security questions and answers (encrypted storage), used for account security verification

1.2 Information Collected Automatically During Service Use

• Device information: device model, operating system version, device identifier (device_id), screen resolution
• Log information: access time, pages visited, click events, crash logs
• Network information: network type (WiFi/4G/5G), carrier information
• Device fingerprint information: device unique identifier (device_id), User-Agent, used for device identification and security verification
• IP address information: your IP address and IP geolocation, used for security verification, abnormal login detection, and city-level location services
• Interaction behavior information: your browsing history, search keywords, likes, favorites, shares, comments, and other interaction behaviors, used for personalized recommendations and service optimization
• Reading behavior information: reading duration, reading progress, used for reading statistics and personalized recommendations

1.3 Information from Third-Party Services

• We currently do not integrate any third-party SDKs
• If third-party services are integrated in the future, we will update this policy and obtain your separate consent

II. How We Use Your Personal Information

2.1 Purposes of Use

• Provide core features: sentence browsing, card creation, collection management
• Account management: registration, login, security verification
• Content recommendation: recommend relevant content based on your preferences
• Service optimization: improve product performance and user experience
• Security protection: prevent fraud and illegal activities

2.2 Business Functions — Personal Information Mapping Table

Business Function	Personal Information Collected	Necessity
Account Registration	Phone/Email, Nickname, Password	Required
Content Browsing	Device Info, Log Info	Required
Collection Management	User ID, Content ID	Required
Card Creation	User ID, Device Info	Required
Content Publishing	User ID, Published Content	Required
Data Sync	User ID, Sync Data	Required
Push Notifications	Device Token, Notification Preferences	Optional
Feedback	User ID, Feedback Content	Optional
Crash Reporting	Device Info, Crash Logs	Required

2.3 We will not use your personal information for purposes other than those stated above without your additional consent

II.5. Business Functions and Personal Information Mapping Table

According to the requirements of the "Methods for Identifying Illegal and Irregular Collection and Use of Personal Information by Apps", the following details the personal information collected by each business function:

Business Function	Types of Personal Information Collected	Necessary	Impact of Refusing to Provide
Daily Sentences and Discover	Device information, app information	Yes	Unable to use reading features
Card Creation	Album/Camera permission (optional)	No	Unable to use image-related features; text-only creation available
Poetry Recommendation	Device information	Yes	Unable to use poetry features
AI Smart Assistant	Conversation content, device information	Yes	Unable to use AI conversation features
File Transfer Assistant	Location/Nearby devices permission (optional)	No	Unable to use file transfer features
Notes and Articles	User content, device information	Yes	Unable to use notes features
Weather Information	Approximate location (optional)	No	Need to manually select city
Daily Check-in and Points	Account information	Yes	Unable to participate in check-in activities
Push Notifications	Notification permission (optional), device identifier	No	Unable to receive push messages
Cloud Data Sync	Account information, user content	Yes	Unable to use sync features
Voice Reading	Device information	Yes	Unable to use reading-aloud features
QR Code Scanning	Camera permission (optional)	No	Unable to use scanning features
OCR Text Recognition	Camera permission, image content (optional)	No	Unable to use OCR features
Membership Value-Added Services	Account information	Yes	Unable to use membership features

Notes:

• Information marked as "Necessary" is required to provide that function; refusal to provide will result in the function being unavailable
• Information or permissions marked as "Optional" - refusal only affects the relevant sub-function and does not affect the normal use of other functions
• You may withdraw granted optional permissions at any time in system settings

III. How We Store Your Personal Information

3.1 Storage Location

• Your personal information is stored on servers located within the People's Republic of China
• We currently do not engage in cross-border data transfer
• Local storage: personal preferences are stored in the app sandbox's SharedPreferences and Hive database
• Cached data: image cache and content cache are stored in the app's temporary directory and can be cleared at any time
• Structured data: favorites, notes, browse history, etc. are stored in the local SQLite database
• Server data: account information, user profiles, device information, interaction records, search history, user preference profiles, etc. are stored in the cloud server MySQL database
• Cloud staging: encrypted files are transferred between devices through the cloud staging service, using end-to-end encryption

3.2 Storage Period

Information Type	Storage Period	Notes
Account Information	Duration of account existence	Deleted within 30 days after account deletion
User Content	Duration of account existence	User can delete at any time
Device Information	90 days	Automatically deleted after expiration
Log Information	90 days	Automatically deleted after expiration
Crash Logs	30 days	Automatically deleted after expiration
Feedback Records	Duration of account existence	Deleted together with account
Sync Data	Duration of account existence	User can delete at any time
Device Information & IP Address	Duration of account existence	Deleted after account deletion
Interaction Behavior Records	Duration of account existence	Deleted after account deletion, IP data anonymized after 6 months
Search History	Duration of account existence	Deleted after account deletion
User Preference Profile	Duration of account existence	Deleted after account deletion

3.3 Security Measures

• Data transmission uses SSL/TLS encryption
• Sensitive data is stored encrypted
• Strict access control and permission management
• Regular security assessments and vulnerability remediation

3.4 Cross-Border Data Transfer

• We currently do not transfer your personal information overseas
• If cross-border transfer is necessary in the future, we will:
• Conduct a security assessment in accordance with the law
• Obtain your separate consent
• Ensure the receiving country/region provides adequate protection
• Sign a cross-border data transfer agreement

IV. How We Share Your Personal Information

4.1 We will not share your personal information with third parties except in the following circumstances:

• With your explicit consent
• As required by laws and regulations
• To protect our legitimate rights and interests
• For public health or public safety purposes

4.2 Third-Party SDK Information

SDK Name	Provider	Information Collected	Purpose	Privacy Policy
Flutter SDK	Google	Device Info, App Info	App framework	https://flutter.dev/privacy
WebRTC	Google LLC / Open Source Community	No additional personal information collected	LAN file transfer	https://webrtc.org/privacy

V. Your Rights

5.1 You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your personal information
• Withdraw your consent
• Obtain a copy of your data
• Delete your account

5.2 How to Exercise Your Rights

• Within the app: My → Settings → Account Settings → Delete Account
• Via email: 2821981550@qq.com
• Via in-app feedback: My → About → User Feedback

5.3 Account Deletion Instructions

• After submitting a deletion request, there is a 3-day review period
• During the review period, you can cancel the deletion request
• After the review is complete, your account and related data will be permanently deleted
• Deleted data cannot be recovered, please proceed with caution

VI. Cookie and Similar Technologies

This app does not use traditional web Cookie technology. We use local storage (SharedPreferences and SQLite) to save your preference settings and usage data. This data is stored entirely on your device and is not transmitted to servers for tracking purposes.

VII. Third-Party SDKs

The third-party SDKs currently integrated are listed below. We strictly review the data collection practices of third-party SDKs to ensure they comply with the requirements of this Privacy Policy:

SDK Name	Provider	Information Collected	Purpose	Privacy Policy Link
Flutter SDK	Google LLC	No additional personal information collected	Cross-platform app rendering engine	https://flutter.dev/privacy
WebRTC	Google LLC / Open Source Community	No additional personal information collected	LAN file transfer	https://webrtc.org/privacy

Notes:

• Flutter SDK is an application development framework and does not independently collect users' personal information
• We have not integrated push service SDKs, statistical analytics SDKs, advertising SDKs, or other types of SDKs
• If new third-party SDKs are integrated in the future, we will promptly update this section and notify you through in-app announcements and other means

VII.5. Automated Decision-Making

7.5.1 Use of Automated Decision-Making

We may use automated decision-making mechanisms (including but not limited to automated recommendation algorithms, user profiling, etc.) to provide you with personalized content recommendations and service optimization. We commit that:

• Automated decision-making is solely used to improve your user experience
• We will not make decisions that significantly affect your rights and interests solely through automated decision-making
• If automated decision-making significantly affects you, you have the right to request an explanation from us and to refuse decisions made solely through automated decision-making

7.5.2 User Rights

• You have the right to understand the logic and potential impact of automated decision-making
• You have the right to refuse decisions made by us solely through automated decision-making
• You have the right to request that we conduct a manual review of the results of automated decision-making

7.5.3 Safeguard Measures

• We will regularly evaluate the reasonableness and fairness of the automated decision-making system
• We will ensure that automated decision-making does not produce discriminatory results
• We will establish a manual intervention mechanism to protect your legitimate rights and interests

VIII. Protection of Minors' Information

8.1 This app is not directed at children under the age of 14

8.2 We do not knowingly collect personal information from children under 14

8.3 If you are under 14, please do not use this app or provide personal information

8.4 If we discover that we have collected information from a child under 14, we will delete it immediately

8.5 Age verification mechanism: Users must confirm they are 14 years or older during registration

VIII.5. Personal Information Security Incident Response

8.5.1 Definition of Security Incidents

Personal information security incidents refer to events that may harm your legitimate rights and interests, such as leakage, tampering, or loss of personal information caused by us or third parties.

8.5.2 Emergency Response Mechanism

In the event of a personal information security incident, we will:

• Immediately activate the emergency response mechanism and take remedial measures
• Report to the competent authority within 72 hours after the incident occurs
• Promptly notify affected users through in-app notifications, emails, SMS, etc. The notification will include: incident type, types of information involved, potential harms, remedial measures we have taken, and measures users can take to mitigate harms

8.5.3 Notification Exceptions

If any of the following conditions is met, we may be unable to notify you in a timely manner:

• Effective measures have been taken to avoid causing harm to you
• The competent authority determines that notification may affect the investigation or expand the harm
• Laws and regulations provide otherwise

8.5.4 Post-Incident Improvement

After a security incident is resolved, we will:

• Conduct a comprehensive investigation and assessment of the incident
• Improve security measures to prevent similar incidents from recurring
• Submit an incident handling report to the competent authority

IX. Deceased Person's Information

9.1 The personal information of a deceased user may be handled by their close relatives in accordance with the law

9.2 Close relatives may request: reading, copying, correction, or deletion of the deceased's personal information

9.3 To exercise these rights, please contact: 2821981550@qq.com

X. Updates to This Privacy Policy

10.1 We may update this policy from time to time

10.2 For significant changes, we will notify you through:

• In-app notification
• Email notification
• Prominent notice within the app

10.3 After the policy is updated, your continued use of the app constitutes acceptance of the updated policy

X.5. Personal Information Protection Impact Assessment

10.5.1 Assessment Scope

In the following circumstances, we will conduct a Personal Information Protection Impact Assessment in accordance with the law:

• Processing sensitive personal information
• Using personal information for automated decision-making
• Entrusting the processing of personal information, providing personal information to other personal information controllers, or making personal information public
• Providing personal information overseas
• Other personal information processing activities that have a significant impact on personal rights and interests

10.5.2 Assessment Content

The Personal Information Protection Impact Assessment will include the following content:

• Whether the processing purposes, methods, etc. of personal information are lawful, legitimate, and necessary
• The impact on personal rights and interests and security risks
• Whether the protection measures taken are lawful, effective, and commensurate with the level of risk

10.5.3 Assessment Results

• The assessment results will serve as the basis for our decision on whether to carry out relevant personal information processing activities
• If the assessment results show that the processing activities may pose a high risk to your rights and interests, we will only proceed after taking additional protective measures
• Assessment records will be retained for at least 3 years

XI. Entity Information

This Application is operated by the following entity, whose identity has been certified by Dun & Bradstreet. You may verify our entity globally via the D-U-N-S Number:

• Entity Name: Mile Pengpu Town Micro Storm Network Technology Studio
• Doing Business As (DBA): Micro Storm
• D-U-N-S Number: 586261192
• Unified Social Credit Code: 92532526MA6PCX153W
• Registered Address: No. 49, Pengxiao Road, Pengpu Community, Pengpu Town, Honghe Hani and Yi Autonomous Prefecture, Yunnan, 652301 China
• Industry: Computer Systems Design and Related Services
• Privacy Contact Email: ad@avefs.com

The developer entity information registered on global app distribution platforms (including Apple App Store and Google Play) is consistent with the information disclosed in this section, facilitating identity verification by regulators, partners, and users.

XII. Contact Us

• Email: 2821981550@qq.com
• In-app feedback: Profile → About → User Feedback
• Mailing Address: No. 49, Pengxiao Road, Pengpu Community, Pengpu Town, Honghe Hani and Yi Autonomous Prefecture, Yunnan, 652301 China
• ICP Registration: 滇ICP备2022000863号-18A
• Personal Information Protection Officer: Mr. Li (Email: gg@0gg.cc)

We will respond to your privacy-related requests within 15 working days.

XIII. International Data Protection

If you are located outside the People's Republic of China, we will also comply with applicable local data protection laws:

13.1 EU General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), you enjoy the following additional rights:

• Lawful Basis for Processing: We process your personal information based on legitimate interests, contract performance, or your consent, etc.
• EU Representative: We have not yet designated an EU Representative under GDPR Art.27. If needed, you may contact us via the email listed in this policy.
• Right to Data Portability: You have the right to obtain your personal data in a structured, commonly used, and machine-readable format, and to transmit the data to another controller
• Right to Restrict Processing: Under certain circumstances, you have the right to request that we restrict the processing of your personal information
• Right to Object: You have the right to object at any time to the processing of your personal information based on legitimate interests

13.2 California Consumer Privacy Act (CCPA)

If you are a California resident, you enjoy the following rights:

• Right to Know: You have the right to know what personal information we collect and how it is used
• Right to Delete: You have the right to request that we delete your personal information
• Right to Opt-Out: We do not sell your personal information, so you do not need to exercise the right to opt-out
• Right to Non-Discrimination: Exercising your privacy rights will not result in discriminatory treatment

13.3 U.S. Children's Online Privacy Protection Act (COPPA)

• We do not direct our services to children under 13
• If we become aware that we have collected personal information from a child under 13, we will delete it immediately
• If you are the guardian of a child under 13 and believe we have collected that child's information, please contact us

XIV. Legal Application and Dispute Resolution

14.1 This policy is governed by the laws of the People's Republic of China.

14.2 Disputes arising from this policy shall be resolved through friendly negotiation; if negotiation fails, either party may file a lawsuit with the People's Court having jurisdiction over our location.

If any provision of this agreement is found to be invalid or unenforceable, the validity of the remaining provisions shall not be affected.