Privacy Policy

Last Updated Date: February 2025
Effective Date: February 2025
Policy Version: 1.0



I. Information We Collect

1. Information Provided by Users Voluntarily

• Registration and Login: When you create an account, we collect your name, email address, phone number, username, and password.
• Payment Information: When you make a transaction, we collect payment information through third-party payment processors (such as Stripe, Alipay, etc.), including your bank card number, expiration date, security code (CVC), and billing address. We do not directly store your complete payment information.
• Identity Verification: As required by law, some services may require you to provide identity verification documents (such as scanned copies of your ID card or passport).

2. Automatically Collected Information

• Device Information: This includes device model, operating system version, unique device identifier (such as IMEI), and IP address.
• Usage Data: Your operation logs, access times, frequency of feature usage, error reports, and cookie information.
• Location Information (Optional): If you enable location permission, we will collect rough location to provide regionalized services.

II. How We Use Information

| Information Type | Purpose of Use |
|------------------|--------------------------------------------------------------------------|
| Account Information | Creating and managing accounts, verifying identities, sending service notifications (such as password resets) |
| Payment Information | Processing transactions, issuing invoices, handling refunds, and conducting fraud detection |
| Device and Usage Data | Optimizing product performance, analyzing user behavior, improving features, and ensuring system security |
| Location Information | Providing localized content (such as language and currency settings) |



III. Data Sharing and Disclosure

We will share your information only in the following circumstances:
- Third-party service providers: payment processors, cloud service providers, customer service platforms, etc. (strictly bound by contract).
- Legal requirements: responding to court subpoenas, government investigations, or other legal procedures.
- Business transfer: in the event of a merger, acquisition, or asset sale, your data may be transferred as part of the transaction.
- De-identified data: sharing statistical analysis results with partners (which cannot be linked to individual identities).



IV. Your Rights

You have the right to:
1. Access and Correct: View or modify your personal information through account settings.
2. Delete Account: Contact customer service to apply for account deletion (except for information required by law to be retained).
3. Withdraw Consent: Disable permissions such as location and notifications in device settings.
4. Data Portability: Request a copy of your personal data in a common format (such as CSV).
5. Complaint: File a complaint with the local data protection authority (for example, EU users can contact their country's DPA).



V. Data Security Measures

• Encrypted Transmission: All data transmissions are encrypted using SSL/TLS.
• Storage Protection: Sensitive information (such as passwords) is hashed, and payment data is handled by PCI DSS-compliant service providers.
• Access Control: Only authorized employees have access to data within the necessary scope.
• Regular Audits: Annual security vulnerability scans and penetration tests are conducted.

VI. Policy Updates

Updates will be notified through in-app announcements or website postings. Major changes will offer a 30-day transition period. Continued use of the service indicates acceptance of the revised terms.



VII. Contact Us

Data Protection Officer: zhaokuangyin
Email: g3501779669@163.com
WeChat Official Accounts: Code4Coffee



If the service is targeted at EU users, the legal basis required by GDPR (such as contract performance or user consent) should be supplemented. If personalized advertising is included, it should be separately stated and users should be allowed to turn it off. It is recommended to pop up a summary version when users register for the first time and provide a "consent" button.

Please complete it based on the actual business scenario and then publish it at the bottom of the website and the application settings page.