This statement follows the complete data lifecycle — Collection → Storage → Use → Sharing → Deletion — to systematically explain how your personal information is handled at each stage. Through full transparency across the entire process, we want you to clearly understand the complete journey of your data and your rights at every step.

Stage 1: Data Collection

1.1 Collection Principles

We adhere to four fundamental principles: lawfulness, fairness, necessity, and integrity. We collect information only to the minimum extent necessary to deliver our services.

1.2 Collection Categories

1.3 Special Notes on Sensitive Data

• Biometric data (e.g., fingerprint, facial features): We do not collect;

• Precise location data: Obtained only with your explicit authorization; you may disable it anytime;

• Contact list data: Obtained only when you proactively import; we do not upload it to servers (processed locally).

Stage 2: Data Storage

2.1 Storage Architecture

2.2 Storage Location

• Primary Storage: Within the territory of China;

• Backup Storage: If applicable, all within China-based compliant data centers;

• Cross-Border Transfers: Not proactively transferred overseas. If business requires, we will conduct security assessments and obtain your separate consent.

2.3 Retention Periods

After expiry, data is automatically deleted or irreversibly anonymized.

Stage 3: Data Use

3.1 Use Purpose Matrix

3.2 Data Use Red Lines

We commit not to use your data for:

• Discriminatory decisions or price discrimination ("big data price gouging");

• Unsolicited commercial marketing (spam);

• Infringement on your dignity or legitimate rights;

• Any illegal or unlawful activities.

Stage 4: Data Sharing

4.1 Sharing Principles

All external data sharing is subject to the following prerequisites:

1. Necessity Review: Essential for service delivery;

2. Minimization Provision: Only the minimum data fields necessary are shared;

3. Contractual Constraints: All recipients sign data processing agreements with security standards no lower than ours;

4. User Notification: Prior notice and consent are obtained for major sharing scenarios.

4.2 Sharing Scenario List

4.3 Prohibited Activities

• We do not sell your personal information;

• We do not transfer your personal information (except in mergers/acquisitions where the successor continues to uphold this statement);

• We do not publicly disclose your personal information (except with your separate consent or as legally required).

Stage 5: Data Deletion

5.1 Deletion Triggers

5.2 Deletion Levels

5.3 Deletion Exceptions

Data may be retained temporarily in the following cases:

• Legal retention periods have not yet expired;

• Pending legal disputes or litigation;

• Reasonably necessary to prevent fraud or abuse.

Stage 6: Your End-to-End Control Rights

You may exercise your rights at every stage of the data lifecycle:

Stage 7: Security Technology Assurance

We implement the following technical measures to protect data throughout its lifecycle: