Pinzhi Technology (hereinafter referred to as "we", "us", or "our") deeply understands the importance of personal information to you and is committed to protecting the security and privacy of your personal information. We strictly adhere to the following principles to protect your personal information: principle of accountability, principle of clear purpose, principle of consent, principle of data minimization, principle of security, principle of user participation, and principle of transparency. Meanwhile, we commit to taking appropriate security measures in accordance with mature industry security standards to safeguard your information. Please read and understand this Privacy Policy carefully before using our products (or services).
How We Collect and Use Your Personal Information
Personal information refers to various types of information recorded electronically or otherwise that can identify a specific natural person individually or in combination with other information, or reflect the activities of a specific natural person.
We collect and use your personal information only for the following purposes specified in this policy:
Registering as a User
To complete account creation, you need to provide the following information: an email address, a created username, and password information. The above information provided by you will continuously authorize us to use it during your period of using this service. Upon account deletion/cancellation, we will cease using and immediately delete the aforementioned information.
In accordance with legal regulations, we store user information collected domestically within the territory of the People's Republic of China. Currently, we do not transfer or store your personal information cross-border. If cross-border transmission and storage are required in the future, we will inform you via email regarding the purpose, receiver, security assurance measures, and potential risks, and seek your explicit consent.
Face Data and Facial Information Processing Rules (Key Notice)
In order to provide you with core functions such as portrait editing, image restoration, and AI filters, our application needs to process face data within the photos you select. Our collection, processing, and protection of face data strictly adhere to the following rules:
1. Types of Face Data Collected: We only process facial pixel information and image features in the photos you voluntarily select or upload. We ABSOLUTELY DO NOT collect, extract, or generate biometric identifiers that can uniquely identify an individual (such as Face ID data or irreversible facial biometric unique signatures).
2. Transmission and Processing Methods: When you initiate an image editing request, your selected photos will be securely transmitted to our self-owned server via a TLS/HTTPS encrypted channel adhering to the highest industry security standards. The AI image model then performs real-time photo editing, enhancement, and restoration within the server's memory. The processing is completely automated with zero human intervention and will NEVER be used for any other commercial purpose.
3. Storage and Retention Period: Face data and uploaded photos reside temporarily in the server's Random Access Memory (RAM) only to complete instant AI model inference calculations (the processing typically takes only a few seconds). We NEVER persist, store on disk, or write any face data or original images into databases. Upon completion of image processing and returning the results to your client app, the temporary data on the server is immediately, automatically, and completely erased and destroyed by the system.
4. Third-Party Sharing and Disclosure: We WILL NOT share, sell, rent, or transfer any of your face data or photos with any third party (including any third-party SDK providers, advertising service providers, analytics partners, or external entities).
Internal Data Analysis & Research, Third-Party SDK Analytics, and Product/Service Improvement
We collect data based on your interaction with us and the choices you make, including your privacy settings as well as the products and features you use. The data we collect may include SDK/API/JS code versions, timestamps, application identifiers, application versions, distribution channels, unique device identifiers, iOS Identifier for Advertisers (IDFA), Android Advertiser Identifier, Network Interface Card MAC address, International Mobile Equipment Identity (IMEI), device model, hardware manufacturer, operating system version, and session start/stop times.
Our product integrates the Umeng+ SDK and Digital Paradise SDK. These SDKs collect your device MAC address and unique device identifier (IMEI/androidID/IDFA/OPENUDID/GUID, SIM card IMSI information) to provide statistical analytics services, calibrate report accuracy via geographical location, and offer basic anti-fraud capabilities. SPECIAL STATEMENT: All third-party SDKs have NO access to and CANNOT obtain any of your photos or face data.
1. Device Information: Device identifiers will be used to generate a unique push notification target ID (CID). Device platform, hardware manufacturer, device brand, and related information help us assist developers in delivering better push notification services and experiences to you.
2. Installed Application List Information: We utilize combined link technology for technical push notifications. When multiple apps on a device have active push links simultaneously, we randomly combine them into a single link to save battery and data traffic for you, which requires obtaining the application list. Additionally, we provide smart push notifications to recommend content that better meets your needs and reduce disturbance from irrelevant notifications.
Mobile Smart Terminal Supplementary Device Identification System SDK
1. Personal Information Types Involved: Open Anonymous Device Identifier (OAID), device information (model/brand/manufacturer), network operator name, and current application information (package name/signature).
2. Purpose of Use: To obtain device identification compliant with national privacy protection regulations. The SDK itself does not store any data; it retrieves data only when called by the APP for local judgment without conducting any network transmission.
3. Third-Party Entity: China Academy of Information and Communications Technology (CAICT).
4. Official SDK Privacy Policy Link: http://www.msa-alliance.cn/col.jsp?id=122
How We Share, Transfer, and Publicly Disclose Your Personal Information
1. Sharing
We will not share your personal information with any company, organization, or individual, except in the following circumstances:
1.1 Sharing with explicit consent: We will share your personal information with other parties after obtaining your explicit consent.
1.2 Sharing under legal requirements: We may share your personal information externally in accordance with laws and regulations, or mandatory requirements from governmental authorities.
1.3 Sharing with affiliated companies: Your personal information may be shared with our affiliates. We only share necessary personal information subject to the purposes stated in this Privacy Policy. If affiliates wish to change the processing purpose of personal information, they will seek your authorization again.
1.4 Sharing with authorized partners: Solely to achieve the purposes declared in this Privacy Policy, certain services of ours will be provided by authorized partners. We may share certain personal information with partners to provide better customer service and user experience. For example, companies hired to perform data statistical and analytical services may collect and access personal data. In such cases, these companies must comply with our data privacy and security requirements. We share personal information only for lawful, legitimate, necessary, specific, and explicit purposes, and only share information necessary for providing the service. (Reiterated clarification: Face data is strictly excluded from any third-party sharing scope).
1.5 For companies, organizations, and individuals with whom we share personal information, we enter into strict confidentiality agreements requiring them to handle personal information in accordance with our instructions, this Privacy Policy, and any other relevant confidentiality and security measures.
2. Transfer
We will not transfer your personal information to any company, organization, or individual, except under the following circumstances:
2.1 Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;
2.2 In cases involving mergers, acquisitions, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy; otherwise, we will require them to re-seek authorization and consent from you.
3. Public Disclosure
We will publicly disclose your personal information only under the following circumstances:
3.1 After obtaining your explicit consent;
3.2 Legal-based disclosure: We may publicly disclose your personal information when required by law, legal process, litigation, or mandatory government authority demands.
Storage Method and Retention Period
We store your information securely. Generally, we only store your personal information for the duration necessary to fulfill the service purpose or within the time limits prescribed by law. For example:
Camera and Photo Library Permissions: When you use image processing and download services, we access your camera or photo library after obtaining your explicit consent. For sensitive face data transmitted to the server for processing, we adhere to the principle of instant destruction: upon completion of processing, the system automatically and completely erases the data immediately without permanent disk storage. Upon account deletion/cancellation, we will terminate services for you and immediately delete corresponding information.
In the event that our products or services terminate operations, we will notify you via push notifications or announcements, and delete or anonymize your personal information within the designated timeframe.
How We Protect Your Personal Information
1. We have implemented industry-standard security protection measures (including HTTPS network transmission encryption, server isolation, and access controls) to protect the personal information you provide against unauthorized access, public disclosure, use, modification, damage, or loss.
2. We take all reasonable and practicable measures to ensure that irrelevant personal information is not collected. We retain your personal information only for the period required to achieve the purposes stated in this policy, unless an extended retention period is required or permitted by law.
3. The internet is not an absolutely secure environment. Email, instant messaging, and other communication methods with users are unencrypted; we strongly advise against sending sensitive personal information via these channels. Please use complex passwords to help us maintain your account security.
4. In the unfortunate event of a personal information security incident, we will inform you in a timely manner as required by laws and regulations regarding: the basic situation and potential impact of the security incident, measures we have taken or will take, recommendations for you to independently prevent and reduce risks, and remedial measures for you.
Your Rights
In accordance with relevant laws, regulations, and standards in China, as well as prevailing practices in other countries and regions, we guarantee your exercise of the following rights regarding your personal information:
1. Access your personal information
2. Correct your personal information
3. Delete your personal information (You can submit a request to delete personal information when requesting account cancellation via the application)
Account Cancellation / Deletion
You can proactively contact us via email to request account cancellation. Upon account cancellation, we will cease providing services to you, and anonymize or delete your personal information according to the retention periods agreed upon in this policy. Identity verification will be required during the cancellation process before responding to or processing your request.
How This Privacy Policy Is Updated
We may adjust or update this Privacy Policy from time to time. Any updates to this Privacy Policy will be published on our platform with an updated effective date. Unless mandatory legal or regulatory provisions dictate otherwise, adjusted or modified content will take effect 7 days after notification or announcement. If you continue using any service provided by us or visit our related websites after adjustments to the Privacy Policy, we deem that you have fully read, understood, and accepted the modified Privacy Policy and agree to be bound by it.
How to Contact Us
If you have any questions, comments, or suggestions regarding this Privacy Policy, please contact us via:
Email: service@elqb.cn