SandStory Privacy Policy

SandStory is a journaling application provided by Guigang Sand Story Technology Co., Ltd. (hereinafter referred to as "we," "us," or "our"). This Privacy Policy explains how we collect, use, and store your personal information, as well as the rights you have regarding your data. Key points are summarized below:

1. We will clearly explain each type of personal information we collect and its corresponding purpose, so you can understand what specific personal data is collected for each feature, why it is collected, and how it is collected.

2. When you use certain features, we may collect some sensitive information only after obtaining your consent. Refusing to provide such information will only prevent you from using those specific features and will not affect your ability to use other features of the app.

3. Currently, we do not actively share or transfer your personal information to third parties. If circumstances arise where sharing or transferring your personal information becomes necessary, or if you request that we share or transfer your personal information to a third party, we will obtain your explicit consent directly or ensure the third party obtains your explicit consent. In addition, we will conduct a risk assessment of any such external disclosure.

4. Currently, we do not actively obtain your personal information from third parties. If business development needs in the future require us to indirectly obtain your personal information from third parties, we will inform you in advance of the source, type, and scope of use of such information. If the personal information processing activities required for our business exceed the scope of authorization you originally granted to the third party, we will obtain your explicit consent before processing your personal information. Furthermore, we will strictly comply with relevant laws and regulations and require third parties to ensure the legality of the information they provide.

5. You may access, correct, or delete your personal information through the methods described in this policy.

6. In order to collect your information under this policy, provide services to you, optimize our services, and safeguard your account security, we may need to request relevant permissions from you. Sensitive permissions, such as microphone and photo library access, will not be enabled by default and will only be granted after you explicitly consent.

It is important to note that obtaining a sensitive permission is a necessary but not sufficient condition for us to collect specific information. Obtaining a particular sensitive permission does not necessarily mean we will collect the related information; even when such permission has been granted, we will only collect relevant information when necessary and in accordance with this policy.

1. When you register for our services, we collect your email address, nickname, gender, and profile picture. This information is collected to help you complete the registration process.

2. When you use our services, to ensure the proper functioning of our services, we collect information such as your device model, operating system, unique device identifier, login IP address, software version number, network access method, type and status, and network quality data. This information is essential for providing our services.

3. When you use our services, the app will display your nickname, as well as images, text, voice messages, and other content you upload through the relevant features to other users of those features, as displaying such information is necessary for the functionality of those features. Unless you voluntarily choose to share it or as required by applicable laws and regulations, we will not disclose the above information externally or use it for purposes other than those features.

In addition, in accordance with relevant laws, regulations, and national standards, we may collect and use your personal information without obtaining your prior consent in the following circumstances:

1. Where it is related to the performance of obligations imposed by laws and regulations on the personal information controller.

2. Where it is directly related to national security or national defense.

3. Where it is directly related to public safety, public health, or significant public interests.

4. Where it is directly related to criminal investigation, prosecution, trial, or enforcement of judgments.

5. Where it is necessary to protect the life, property, or other significant lawful rights and interests of the personal information subject or other individuals, and it is difficult to obtain the individual's authorized consent.

6. Where the personal information involved has been voluntarily disclosed to the public by the personal information subject.

7. Where it is necessary for the conclusion and performance of a contract at the request of the personal information subject.

8. Where personal information is collected from legally and publicly disclosed information, such as lawful news reports, government information disclosure, and other channels.

9. Where it is necessary to maintain the safe and stable operation of the products or services provided, such as detecting and addressing product or service failures.

10. Where the personal information controller is a news organization and it is necessary for carrying out lawful news reporting.

11. Where the personal information controller is an academic research institution and it is necessary for conducting statistical or academic research in the public interest, and where the personal information contained in the results is de-identified when the results of academic research or descriptions are provided externally.

Please understand that the features and services we provide are continuously updated and evolving. If a feature or service not described above collects your information, we will separately inform you of the content, scope, and purpose of such collection through page notices, interactive processes, website announcements, or other appropriate means to obtain your consent.

Please note that we currently do not actively obtain your personal information from third parties. If business development needs in the future require us to indirectly obtain your personal information from third parties, we will inform you in advance of the source, type, and scope of use of such personal information. If the personal information processing activities required for our business exceed the scope of authorization you originally granted to the third party, we will obtain your explicit consent before processing such personal information. Furthermore, we will strictly comply with relevant laws and regulations and require third parties to ensure the legality of the information they provide.

1. Storage Location. In accordance with applicable laws and regulations, we store personal information collected within the territory of the People's Republic of China within China. If your personal information is to be transferred from within China to overseas, we will strictly comply with legal requirements.

2. Storage Period. Generally, we will only retain your personal information for the period necessary to fulfill the purposes for which it was collected. If our products or services cease operations, we will notify you through push notifications, announcements, or other means, and will delete your personal information or anonymize it within a reasonable period. ("Anonymization" refers to the technical processing of personal information so that the personal information subject cannot be identified, and the processed information cannot be restored. Information resulting from anonymization is no longer considered personal information.)

· We strive to safeguard the security of your information to prevent loss, misuse, unauthorized access, or disclosure.

· We employ various security measures at a reasonable level of protection to ensure information security. For example, we use encryption technologies (such as SSL), anonymization, and other methods to protect your personal information.

· We continuously enhance the security capabilities of the software installed on your device through evolving technical measures to prevent the leakage of your personal information. For example, we may perform partial information encryption locally on your device for secure transmission. To prevent viruses, trojans, or other malicious programs and websites, we may collect information about applications installed on your device, running processes, or data residing in device memory. To prevent fraud, account theft, impersonation, and other unlawful activities, and to conduct security checks, we may analyze and use data such as unique device identifiers, login IP addresses, operation logs, and geographic location information, so as to take security measures or provide security alerts to users.

· We have established dedicated management systems, procedures, and organizational structures to ensure information security. For example, we strictly limit the scope of personnel who may access information, require them to comply with confidentiality obligations, and conduct audits.

· In the event of a security incident such as a personal information breach, we will activate emergency response plans to contain the incident and will notify you through push notifications, announcements, or other means.

· We will do our best to protect your personal information. However, please understand that no security measures are completely impenetrable.

We may use information collected through certain features for our other services. For example, we may use information collected when you use one feature or service to provide specific content to you or your contacts in another feature or service, including but not limited to displaying advertisements, providing security alerts based on content you have viewed, creating indirect user profiles based on characteristic tags, and offering more precise and personalized services and content.

To ensure service security and help us better understand how our application operates, we may record relevant information, such as your frequency of use, crash data, overall usage patterns, performance data, and the source of the application. We do not combine information stored in our analytics software with any personally identifiable information you provide within the application.

If we use your personal information beyond the scope of the purposes stated at the time of collection or beyond what is directly or reasonably related to such purposes, we will inform you again and obtain your explicit consent before using your personal information.

Currently, we do not actively share or transfer your personal information to third parties. If circumstances arise where sharing or transferring your personal information becomes necessary, or if you request that we share or transfer your personal information to a third party, we will obtain your explicit consent directly or ensure the third party obtains your explicit consent.

We do not publicly disclose the personal information we collect. If public disclosure becomes necessary, we will inform you of the purpose of such disclosure, the types of information to be disclosed, and any sensitive information that may be involved, and will obtain your explicit consent.

As our business continues to develop, we may engage in transactions such as mergers, acquisitions, or asset transfers. We will inform you of such circumstances and will continue to protect your personal information or require the new controller to continue protecting your personal information in accordance with applicable laws and regulations and to standards no less stringent than those required by this policy.

In addition, in accordance with relevant laws, regulations, and national standards, we may share, transfer, or publicly disclose personal information without obtaining prior consent from the personal information subject in the following circumstances:

1. Where it is related to the performance of obligations imposed by laws and regulations.

2. Where it is directly related to national security or national defense.

3. Where it is directly related to public safety, public health, or significant public interests.

4. Where it is directly related to criminal investigation, prosecution, trial, or enforcement of judgments.

6. Where the personal information has been voluntarily disclosed to the public by the personal information subject.

7. Where personal information is collected from legally and publicly disclosed information, such as lawful news reports, government information disclosure, and other channels.

During your use of this app, to enable you to more conveniently access, correct, and delete your personal information, as well as to safeguard your right to withdraw consent for the use of your personal information and to cancel your account, we provide corresponding operational settings in our product design. You may refer to the guidance below for instructions. In addition, we have established complaint and reporting channels, and your feedback will be addressed in a timely manner.

Please note that operational settings may vary between different operating systems and software versions. Additionally, to optimize your user experience, we may adjust the operational settings. Therefore, the following guidance is for reference only.

We may revise this policy from time to time. When the terms of this policy are changed, we will present the revised policy to you through push notifications, pop-up windows, or other appropriate means when you log in or update the app.

Please contact us at support@sandstory.cn. We will review the relevant issues as soon as possible and respond within fifteen days after verifying your user identity.