Sand Story Privacy Policy

Sand Story is a diary product service provided by Guigang Sand Story Technology Co., Ltd. (hereinafter referred to as "we"). To explain how we collect, use, and store your personal information and the rights you have, we will elaborate on related matters through this guide. The key points are as follows:

1. We will explain the types of your personal information we collect and their corresponding purposes one by one, so that you understand the specific categories, reasons for use, and methods of collection of personal information for a particular function.

2. When you use certain functions, we will collect some of your sensitive information after obtaining your consent. Refusing to provide this information will only prevent you from using the relevant specific functions but will not affect your normal use of other functions of this software.

3. Currently, we will not actively share or transfer your personal information. If there are other situations where we need to share or transfer your personal information, or you need us to share or transfer your personal information to a third party, we will directly obtain or confirm that the third party has obtained your explicit consent for the above actions. Furthermore, we will conduct risk assessments for providing information externally.

4. Currently, we will not actively obtain your personal information from third parties. If it becomes necessary for business development to indirectly obtain your personal information from third parties in the future, we will clearly indicate to you the source, type, and scope of use of your personal information before obtaining it. If the personal information processing activities required for our business exceed the scope of authorization and consent you originally provided to the third party, we will obtain your explicit consent before processing your personal information. Additionally, we will strictly comply with the provisions of relevant laws and regulations and require the third party to ensure the legality of the information it provides.

5. You can access, correct, and delete your personal information through the channels listed in this guide.

6. To collect your information under this guide, or to provide you with services, optimize our services, and protect the security of your account, we will need to request relevant permissions from you; sensitive permissions such as microphone, photo album, etc., will not be enabled by default and will only be authorized to us after you explicitly agree.

It is particularly important to note that obtaining sensitive permissions is a necessary but not sufficient condition for us to collect specific information. Our obtaining a specific sensitive permission does not mean that we will necessarily collect your relevant information; even if we have obtained sensitive permissions, we will only collect your relevant information when necessary and according to this guide.

1. When you register for our services, we collect your email, nickname, gender, and avatar. This information is collected to help you complete registration.

2. When you use our services, to ensure normal use of our services, we collect information such as your device model, operating system, unique device identifier, login IP address, software version number, method of accessing the network, type and status of network, network quality data, etc. This type of information is basic information necessary for providing the service.

3. When you use our services, the software will display your nickname to users using that function, as well as information such as pictures, text, voice, etc., that you upload through this function, because displaying such information to users using the function is necessary to achieve this function. Unless you independently choose or in compliance with relevant laws and regulations, we will not provide the above information externally or use it for purposes other than this function.

Furthermore, according to relevant laws, regulations, and national standards, in the following circumstances, we may collect and use your relevant personal information without seeking your authorized consent:

1. Related to the personal information controller fulfilling obligations stipulated by laws and regulations.

2. Directly related to national security and national defense security.

3. Directly related to public safety, public health, and significant public interests.

4. Directly related to criminal investigation, prosecution, trial, and execution of judgments, etc.

5. Necessary for safeguarding the major legitimate rights and interests, such as life and property, of the personal information subject or other individuals, but where it is difficult to obtain the consent of the individual.

6. The personal information involved is disclosed to the public by the personal information subject themselves.

7. Necessary for concluding and performing a contract as requested by the personal information subject.

8. Collected from legally publicly disclosed information, such as through lawful news reports, government information disclosure, and other channels.

9. Necessary for maintaining the secure and stable operation of the provided products or services, such as discovering and handling product or service failures.

10. The personal information controller is a news unit, and it is necessary for conducting lawful news reporting.

11. The personal information controller is an academic research institution, necessary for conducting statistical or academic research in the public interest, and when providing the results of academic research or descriptions to the outside world, it de-identifies the personal information contained in the results.

Please understand that the functions and services we provide to you are constantly updated and developed. If a function or service is not mentioned above and collects your information, we will separately explain to you the content, scope, and purpose of the information collection through page prompts, interactive processes, website announcements, etc., to obtain your consent.

Please note that currently we will not actively obtain your personal information from third parties. If it becomes necessary for business development to indirectly obtain your personal information from third parties in the future, we will clearly indicate to you the source, type, and scope of use of your personal information before obtaining it. If the personal information processing activities required for our business exceed the scope of authorization and consent you originally provided to the third party, we will obtain your explicit consent before processing such personal information. Additionally, we will strictly comply with the provisions of relevant laws and regulations and require the third party to ensure the legality of the information it provides.

1. Location of information storage. We will, in accordance with legal and regulatory requirements, store user personal information collected within China within China. If the storage location of your personal information is transferred from within China to overseas, we will strictly implement it in accordance with the law.

2. Duration of information storage. Generally, we only retain your personal information for the time necessary to achieve the purposes. When our product or service ceases operation, we will notify you via push notifications, announcements, etc., and delete your personal information or anonymize it within a reasonable period (so-called "anonymization processing" refers to the technical processing of personal information so that the personal information subject cannot be identified, and the processed information cannot be restored. Information obtained after anonymization of personal information does not belong to personal information.).

· We strive to provide guarantees for the security of user information to prevent loss, improper use, unauthorized access, or disclosure.

· We will use various security protection measures within a reasonable security level to ensure information security. For example, we use encryption technology (e.g., SSL), anonymization, and other means to protect your personal information.

· We strengthen the security capabilities of the software installed on your device through continuously improving technical means to prevent the leakage of your personal information. For example, for secure transmission, we complete part of the information encryption locally on your device; to prevent viruses, Trojan horses, or other malicious programs and websites, we may understand the application information installed on your device, running process information, or data stored in the device memory; to prevent fraud, account theft, impersonation of others, and other illegal activities, and for security checks, we may analyze and utilize data such as unique device identifiers, login IP addresses, operation logs, geographic location information, etc., to take security measures or provide security reminders to users.

· We establish specialized management systems, processes, and organizations to ensure information security. For example, we strictly limit the range of personnel who access information, require them to comply with confidentiality obligations, and conduct audits.

· If a security incident such as personal information leakage occurs, we will initiate an emergency plan to prevent the security incident from expanding and inform you through push notifications, announcements, etc.

· We will do our best to protect your personal information. But we also ask for your understanding that no security measures are impenetrable.

We may use the information collected through certain functions for our other services. For example, we may use the information we collect when you use one of our functions or services in another function or service to provide you or your friends with specific content, including but not limited to displaying ads, providing information security prompts for content you have read, conducting indirect audience profiling based on characteristic tags to provide more accurate and personalized services and content, etc.

To ensure service security and help us better understand the operation of our application, we may record relevant information, such as the frequency of your use of the application, crash data, overall usage, performance data, and the source of the application. We do not combine the information we store in analytics software with any personally identifiable information you provide in the application.

If our use of your personal information exceeds the purpose stated at the time of collection and the scope of direct or reasonable association, we will inform you again and obtain your explicit consent before using your personal information.

Currently, we will not actively share or transfer your personal information to third parties. If there are other situations where we need to share or transfer your personal information, or you need us to share or transfer your personal information to a third party, we will directly obtain or confirm that the third party has obtained your explicit consent for the above actions.

We will not publicly disclose the personal information we collect. If public disclosure is necessary, we will inform you of the purpose of this disclosure, the type of information disclosed, and any sensitive information that may be involved, and obtain your explicit consent.

As our business continues to develop, we may undergo mergers, acquisitions, asset transfers, etc. We will inform you of the relevant circumstances and continue to protect your personal information in accordance with laws and regulations and standards not lower than those required by this agreement, or require the new controller to continue protecting your personal information.

Additionally, according to relevant laws, regulations, and national standards, in the following circumstances, we may share, transfer, or publicly disclose personal information without prior authorized consent from the personal information subject:

1. Related to our fulfillment of obligations stipulated by laws and regulations.

2. Directly related to national security and national defense security.

3. Directly related to public safety, public health, and significant public interests.

4. Directly related to criminal investigation, prosecution, trial, and execution of judgments, etc.

6. Personal information disclosed to the public by the personal information subject themselves.

7. Collected from legally publicly disclosed information, such as through lawful news reports, government information disclosure, and other channels.

During your use of this software, to make it more convenient for you to access, correct, and delete your personal information, while safeguarding your right to withdraw consent to the use of personal information and to cancel your account, we have provided corresponding operation settings in the product design. You can refer to the guide below for operations. Additionally, we have set up channels for complaints and reports, and your feedback will be processed promptly.

Please note that operational settings may vary between different operating systems and different versions of the software; furthermore, to optimize your user experience, we may also adjust the operation settings. Therefore, the following guide is for reference only.

We may revise this guide from time to time. When the terms of the guide change, we will display the revised guide to you via push notifications, pop-ups, or other appropriate forms when you log in and during version updates.

Please contact us at support@sandstory.cn. We will review the issues involved as soon as possible and respond within fifteen days after verifying your user identity.