Privacy Policy

We follow the principles of lawfulness, propriety, necessity and good faith, and collect only what the features below require. Declining to provide a required item may make that feature unusable but does not affect the rest of the Service.

• Account information: the phone number, or email address and password, needed to register and sign in; the user identifier returned by a third party when you sign in with a third-party account; and the nickname and time zone you set. Passwords are stored in an irreversibly encrypted form.
• What you create: the content you create, edit and publish within the Service, and the related usage and progress records.
• Device and sign-in information: the device name and platform used to sign in, and the validity period and last-used time of each credential, so that signed-in devices can be listed and revoked.
• Transaction information: order number, item, amount and payment outcome. We do not collect your card number, payment password or other payment credentials.
• Log information: time of access, network address, request path, response status and errors, used to keep the Service secure and stable.

Content you create while not signed in is stored only on your device and is not uploaded to our servers; it is uploaded only if you sign in and choose to import it.

We use your personal information only to: create and verify your account and keep it secure; provide and improve the features of the Service; sync and display the content you create across your devices; complete transactions and deliver the corresponding entitlements; diagnose faults, prevent abuse and safeguard operational security; contact you about service changes, security incidents and account anomalies; and meet obligations imposed by law.

If we wish to use your personal information beyond these purposes, we will explain why and obtain your consent again first.

We may de-identify or anonymise personal information for statistics and product improvement. Information so processed that cannot be restored is not personal information.

We do not sell your personal information. We provide it to third parties only: with your separate consent; where necessary to deliver a feature; where the law requires it or a competent authority requests it through due process; where necessary to protect the life or property of you or another person; and in other circumstances provided by law.

To deliver certain features we engage third-party service providers to process limited information within the necessary scope, covering: SMS and notification delivery, payment and settlement, content generation and computation, and cloud computing and storage. We provide only what the feature requires and bind them by agreement as to purpose, means and protection obligations, prohibiting any other use. You may request the names and contact details of these third parties using the contact details at the end of this policy.

If a merger, demerger, reorganisation or bankruptcy requires personal information to be transferred, we will tell you the recipient’s name and contact details and require it to remain bound by this policy; if the recipient changes the purpose or means of processing, it must obtain your consent again.

Content you publish, and the nickname you set, are visible to other users as a result of your own act of publishing.

Your personal information is stored within the mainland of the People’s Republic of China. If providing it outside the country becomes genuinely necessary, we will complete the procedures required by law and obtain your separate consent.

We keep your personal information for the shortest period necessary to achieve the purpose of processing; where the law prescribes a retention period, that period applies. Information held beyond that is deleted or anonymised.

We apply security measures that meet industry standards, including encryption in transit, irreversible encryption of passwords, individually revocable sign-in credentials, and internal access control with operational auditing.

These measures cannot guarantee absolute security. If personal information is or may have been leaked, altered or lost, we will begin incident response immediately, notify you promptly and report to the regulator as required.

Subject to the law, you have the right to access, copy, correct, supplement and delete your personal information, to withdraw your consent, to close your account, and to ask us to explain our personal information handling rules.

Your nickname, phone number, email address, password and time zone can be viewed and changed in the Service’s settings; you can also delete content you created, or close your account yourself, within the Service.

After closure, your identity information and the content you created are cleared. To meet statutory obligations, complete settlement and protect other users’ lawful rights, transaction records, settlement evidence and content others have already obtained are retained, and those records no longer point to your identity.

To exercise these rights, contact us using the details at the end of this policy. We will respond within the statutory period after verifying your identity. We may decline a request that is repetitive, would require disproportionate technical effort or cost, could harm the lawful rights of others, or is plainly without factual basis, and will give our reasons.

Withdrawing consent does not affect processing already carried out on the basis of your consent before the withdrawal.

Minors should use the Service and provide personal information with the consent and guidance of a parent or guardian.

We do not knowingly collect the personal information of children under 14. A child under 14 must have their guardian’s consent to use the Service.

If a guardian finds that we have collected a child’s personal information without their consent, they may contact us using the details at the end of this policy and we will delete it promptly.

We may update this policy as the law and our business change. An updated version is published on this page with its update date and effective date.

For material updates — a change of purpose, means or categories of personal information, or a change in how you exercise your rights — we will tell you within the Service before they take effect and, where necessary, obtain your consent again.

Continuing to use the Service after an update takes effect means you accept it.

To reach us about this document, your account or your personal information — including access, copies, correction, deletion and complaints — file it through GitHub Issues. We respond within 15 working days of verifying your identity.