QiuYun Sports Privacy Policy

Effective date: 2026-05-05  |  Last updated: 2026-05-12

Nanjing Lingdong Century Media Co., Ltd. ("we", "us", or "our") is the developer and operator of the QiuYun Sports mobile application (the "App"). We take your privacy and personal information protection very seriously and strictly comply with the Personal Information Protection Law (PIPL), Cybersecurity Law, and Data Security Law of the People's Republic of China. This Privacy Policy describes how we collect, use, store, disclose, and protect your information when you use the App. Please read this policy carefully before using the App; by tapping "Agree" or starting to use the App, you consent to the information handling practices described herein.

1. Information We Collect

1.1 Account Information

• Mobile phone number (primary credential for registration, login, and password recovery)
• Login password (stored only as a one-way bcrypt / SHA-256 + salt hash; cannot be reversed)
• User ID (assigned by our server), nickname, avatar, gender, birthday (optional)
• Session credentials (access / refresh token)
• Sign in with Apple credentials (when you tap "Sign in with Apple" on iOS): only the Apple-issued opaque user identifier and, if you actively share them, your name / email (you may use Apple's "Hide My Email" relay, in which case we receive only the @privaterelay.appleid.com address)

1.2 Match & Usage Behavior

• Matches and teams you follow; subscription history
• Usage records of the three AI features (AI Chat / AI Sports analysis tools / AI Live Analysis; collectively referred to as "AI data analysis" below) — queried matches and call count, for quota settlement and abuse prevention; disclosure of the third-party LLM API call is in §3.9
• Virtual currency (Ball-Gems) top-up and consumption records (used only for AI data-analysis services; NOT for tipping or gifts)
• Match-detail chat-room text messages, report and block (mute) actions

1.3 Device Information

To identify your device, prevent malware and fraud, improve service security, and ensure operational quality and efficiency, we and the third-party SDK we integrate (Umeng+ U-APM) collect the following device information only after you tap "Agree" to this Privacy Policy:

• Device hardware: device model, brand, manufacturer, CPU type, memory size, screen size and resolution, OS type and version, system language, time zone
• App & channel info: app version, install channel (store / promotion source), bundle ID / package name
• Network info: current network type (WiFi / cellular), carrier name (no phone number), IP address (transient during requests; not persisted long-term)
• Device identifiers (used for anti-fraud, anti-abuse and statistical deduplication; all are anonymous / de-identified and never linked to your real-world identity):
  • Android ID (Android platform; a 64-bit string generated by the OS on first boot; collected by Umeng+ U-APM SDK for statistical deduplication, crash attribution, and anti-abuse device fingerprinting)
  • OAID (Android 10+, anonymous advertising identifier provided by MSA SDK; resettable by user in system settings)
  • IDFV (iOS only; Apple's vendor-scoped opaque identifier; reset when all apps from the same developer are uninstalled)
  • Umeng device ID (UmengID / UMZID) (a second-level de-identified hash generated locally by the Umeng SDK from the above fields)
• Push tokens: iOS uses Apple APNs (device token may be sent to our servers when you enable notifications). The currently published Android build does not bundle Xiaomi / OPPO / Huawei / Honor vendor push SDKs or Google FCM client libraries, so no Android vendor / FCM push token is registered with our backend.

1.4 Media Files

This version does NOT collect any media files. The match-detail chat-room only supports plain-text messages.

1.5 Payment & Transaction Information

The current version (QiuYun Sports iOS / Android) does NOT open any virtual-currency top-up entry. When iOS top-up is enabled in a future release it will be processed exclusively through Apple In-App Purchase (IAP); when Android top-up is enabled it will go through the corresponding store billing channel (Google Play Billing / Huawei IAP, etc.). The App is currently not integrated with any third-party payment SDK such as WeChat Pay, Alipay, or UnionPay. Free Ball-Gem balance lookups and AI-service consumption ledgers continue to work and are handled as follows:

• Balance change records (claim, consume) — timestamp and amount only, used for billing display and abuse prevention
• The App never touches bank card numbers, CVV / CVC codes, or payment passwords

2. Device Permissions

The App requests the permissions below. You may enable or disable them anytime in system settings; even if you decline all, you can still browse match data, schedules, and news.

2.1 Background Behavior

3. Third-Party Services and SDKs

To provide stable and rich features, subject to your consent, the App integrates the following third-party SDKs. We require each third-party SDK provider to protect your personal information in accordance with applicable laws and to be independently responsible for its own processing activities.

3.0 Sensitive Personal Information Compliance Table (14 Categories)

In line with China's Personal Information Protection Law and related MIIT regulations, the following is the summary of how the App and its SDKs collect the 14 categories of sensitive personal information:

3.1 SDK Summary Table

The "Platform" column indicates on which OS each SDK is actually packaged and runs. SDKs marked as "Android only" do NOT ship inside the iOS ipa.

3.2 Umeng+ U-APM (Analytics + Application Performance Monitoring)

• SDK name: Umeng+ U-APM (Umeng analytics SDK com.umeng.analytics + Umeng common base library com.umeng.commonsdk + Application Performance Monitoring / crash monitoring)
• Flutter wrapper: fl_umeng + fl_umeng_apm
• Third-party recipient: Beijing Ruixun Lingtong Technology Co., Ltd. (Umeng+) + Umeng+ TongXin (Beijing) Technology Co., Ltd. (Umeng+ Mobile Analytics)
• Purpose:
  1. Identify your device ID to prevent malware and fraud
  2. Improve service security and operational quality
  3. Compute DAU / MAU and page conversion paths
  4. Monitor app crashes (Crash), ANR (application not responding), and freezes
  5. Collect performance and stability data to optimize app quality
• When data is collected: Only after you tap "Agree" in the privacy-policy consent dialog and the App calls FlUMeng().init() to initialize the SDK; afterwards the SDK collects events on each page you visit (match list, match detail, AI analysis, Mine tab, etc.).
• Sharing method: Local collection by the SDK on your device + HTTPS / TLS encrypted upload to Umeng servers. The App does not hold the Umeng-side raw data store and does not re-share with any other third party.
• Information collected / shared (itemized disclosure):
  • Device hardware: device model, brand, manufacturer, CPU type, memory size, screen size and resolution, OS type and version, system language, time zone
  • Network info: network access state, WiFi state, current network type (WiFi / cellular), carrier name
  • Device identifiers: Android ID, OAID (Android 10+), IDFV (iOS), Umeng device ID (UmengID / UMID / UMZID)
  • App info: app package name, app version, install channel (only for our App; NOT the list of other apps on your device)
  • Event info: app launch events, page visit paths and dwell time, custom de-identified business events (login, signup, follow, AI invocation, etc.)
  • Diagnostic info: crash stack, ANR stack, error logs
  • Account linking: login / logout events (only the user_id assigned by our backend; NOT your phone number or password)
• NOT collected / NOT shared:
  • NOT collecting IMEI / IMSI / SUPI / SUCI / ICCID
  • NOT actively reading device MAC (system returns randomized value on iOS / Android 10+; Umeng 9.5.0+ compliant versions no longer read the real MAC)
  • NOT collecting the installed-app list (QUERY_ALL_PACKAGES permission is not declared)
  • NOT collecting GPS location, contacts, SMS, call logs, calendar, photos, clipboard
  • NOT reading your phone number, password, chat-room messages, friend graph
• Compliance integration: Before you tap "Agree" we do NOT call FlUMeng().init(); the SDK is not loaded and no information is read. SdkInitializer._initUmengSdk() is invoked only after SplashViewModel.agreePrivacy() succeeds.
• NOT included: The App does NOT integrate Umeng U-Push (push notifications), U-Link (deep-link / invitation), or U-Share (one-tap share). Android vendor push / FCM is not in the published APK (see §3.3).
• Privacy policy: https://www.umeng.com/page/policy (Umeng+ Privacy Policy)
• SDK personal-information collection list: Umeng SDK Personal Information Collection List
• Data location: Mainland China (Umeng servers located in Beijing)

3.9 Baidu ERNIE Bot API (Wenxin Yiyan LLM · powering the AI data-analysis feature)

• Integration mode: The client does NOT bundle any Baidu SDK. User input from the AI data-analysis feature is forwarded by our backend over HTTPS to Baidu Qianfan (aip.baidubce.com / qianfan.baidubce.com); the client never communicates directly with Baidu servers.
• Provider: Beijing Baidu Netcom Science Technology Co., Ltd. (Baidu AI Cloud)
• Data forwarded to Baidu:
  • Conversation text you actively type into the AI data-analysis feature
  • Public match identifiers you query (match IDs, league IDs, team IDs)
  • Prompts our backend assembles from public match statistics (with a query timestamp)
• Never forwarded: The App will never forward to Baidu your phone number, password, login token, device identifiers (IDFV / OAID / UmengID), IP address, location, chat-room messages, follow lists, friend graph, order / top-up records, or any account / social data.
• Use case: LLM inference for the following three AI features. Outputs from each feature are for fan reference only and do NOT constitute betting, gambling, investment, medical, legal, or any form of decision-making advice:
  1. AI Chat (conversational Q&A): open-domain Q&A about sports events, players, tactics, and rules. Every reply is rendered with a persistent banner saying "AI-generated content. For reference only."
  2. AI Sports analysis tools (data prediction): neutral reference outputs (handicap / win-draw-loss / score / total goals / parlay, etc.) derived from public match statistics for a given match. Each result page carries a persistent banner saying "Data analysis is reference only · not a basis for decision-making."
  3. AI Live Analysis (match-detail streaming): on the match-detail page, neutral reference analysis (strength comparison, data trends, risk hints, etc.) generated from public match statistics. The page header always shows "AI analysis is based on public data and is for reference only — not advice", and a one-time disclaimer dialog is enforced on first entry; the user must explicitly tap "Agree" to continue.
• Transport: HTTPS / TLS 1.2+ between our backend and Baidu Qianfan API. Baidu processes the request text and generated outputs under its ERNIE Bot User Agreement and Baidu AI Cloud Terms.
• Content moderation: Both inbound user input and outbound model output go through dual content-safety review (our backend keyword filter + Baidu's official moderation: politics, pornography, gambling, terrorism, violence, minors-protection, etc.). Non-compliant content is replaced with a safety notice.
• Data residency: Baidu AI Cloud Mainland China data centers (Beijing / Baoding); no cross-border data transfer.
• Retention: Baidu retains API call logs per its platform default (typically 30–90 days for observability and compliance audit). Our server retains AI invocation records for 90 days, then anonymized aggregated.
• Your rights: Wipe local AI history at "Me → Settings → AI History → Clear". To request deletion of historical conversation text from log records, email postmaster@nanjingld.top.
• Baidu official documents:
  • ERNIE Bot User Agreement
  • ERNIE Bot Privacy Policy
  • Baidu AI Cloud Service Terms

4. How We Use Your Information

• Core service: registration / login, match data, the three AI features (AI Chat (conversational Q&A), AI Sports analysis tools (data prediction), AI Live Analysis (match-detail streaming)), match-detail text chat-room, virtual-currency (Ball-Gems) top-up and AI service settlement (see §3.9 for the third-party LLM API disclosure)
• Match and schedule information: show public fixtures and matches for teams or leagues you actively follow in the App (NOT for cross-app targeted advertising).
• Account security: detect suspicious login, prevent account takeover
• Customer support: respond to inquiries, handle refund requests, process abuse reports
• App improvement: analyze crashes and performance (via Umeng U-APM)
• Legal obligations: cooperate with lawful requests from regulators / judicial authorities

5. Data Storage & Security

5.1 On-device

• Login tokens are encrypted in iOS Keychain / Android Keystore
• Match cache and images live in the App sandbox; clear from "Me → Settings → Clear Cache"
• RongCloud IM cache is stored locally and wiped on logout

5.2 Server-side

• Account, profile, orders, follows are stored in our Mainland China cloud infrastructure
• Protected by WAF, DDoS mitigation, DB encryption, access auditing
• Chat messages are hosted on RongCloud with its default retention policy

5.3 Security Practices

• All network traffic uses HTTPS / TLS 1.2+
• Passwords are one-way hashed; not recoverable by anyone
• Sensitive APIs use signature + timestamp anti-replay
• Regular penetration testing, code audits, third-party compliance reviews
• Operated in accordance with China's Multi-Level Protection Scheme

6. Data Retention

7. Data Sharing, Transfer, and Disclosure

We do not sell your personal information. After you tap "Agree" to this Privacy Policy, in accordance with Article 23 of the PRC PIPL, we share your information with the third parties below only within the necessary, minimum, and explicit scope. Each sharing relationship is itemized in §3 with the recipient, fields shared, purpose, and the third party's own privacy policy link.

• SDK partners (data recipients):
  • Umeng+ U-APM (Beijing Ruixun Lingtong Technology Co., Ltd. + Umeng+ TongXin (Beijing) Technology Co., Ltd.) — shared: device model / brand / manufacturer, network type and carrier, Android ID, OAID, IDFV, Umeng device ID (UmengID), app package / version / channel, crash stack, ANR, page paths, app launch / login / signup de-identified events — used for device-ID-based anti-fraud, DAU / MAU statistics, crash / ANR monitoring, performance data (see §3.2)
  • RongCloud IM (Beijing RongCloud Network Technology Co., Ltd.) — shared: chat-room text messages, room ID, RongCloud userId, message timestamps — used solely for match-detail text chat (see §3.4)
  • Baidu AI Cloud Qianfan API (ERNIE Bot LLM) (Beijing Baidu Netcom Science Technology Co., Ltd.) — forwarded by our backend; the client does not share directly — shared: text you actively type into AI features and public match IDs you query (see §3.9)
  • Apple Inc. (iOS only) — shared: APNs device token (for push), Apple Sign In opaque user identifier (for login) — see §3.5 / §3.6
• Payment providers: the current version does NOT integrate any third-party payment SDK; when iOS top-up is enabled in a future release, only Apple In-App Purchase (IAP) is used and only order ID / amount will be exchanged with Apple (no card credentials)
• SMS providers: your phone number (for verification codes only)
• Cloud / CDN vendors as data processors acting on our instructions
• Regulators and judicial authorities upon lawful request
• Successors in interest with notice and obligation to honor this policy

8. Cross-Border Data Transfer

Core services are hosted in Mainland China. Cross-border scenarios:

• Apple APNs — push tokens transit Apple's global infrastructure (iOS only)
• Android push (vendor SDKs / FCM): the shipping Android app does not bundle these client SDKs for remote delivery, therefore this channel does not move push tokens/payload to Google/vendor clouds from the client.
• Overseas usage — accessing the App outside China involves cross-border traffic

Transfers comply with PRC PIPL Chapter III; where required we sign Standard Contractual Clauses or complete regulatory filings.

9. Your Rights

• Access / review in "Me → Account Settings"
• Correction of profile fields
• Deletion / account closure in "Me → Settings → Delete Account"
• Withdraw consent: turn off notifications in system settings; manage notification categories under "Me → Settings → Notifications (push)"
• Data portability: email postmaster@nanjingld.top; we respond within 15 business days
• Lodge a complaint with CAC (cac.gov.cn), MIIT, or local regulator

9.1 How to Delete Your Account

1. Open QiuYun Sports
2. Go to "Me → Settings → Account & Security → Delete Account"
3. Complete SMS verification and confirm
4. Profile, follows, and AI data-analysis call records purged within 7 days; completed orders retained 3–5 years per law

10. Children's Privacy

The App does not include any tipping, gift, or anchor live-streaming features; the virtual currency (Ball-Gems) is used only for in-app purchase of AI data-analysis services. We do not push payment prompts or upsells to accounts identified as minors. If a minor has made unauthorized purchases, the guardian may apply for a refund via postmaster@nanjingld.top.

11. Cookies & Similar Technologies

As a native app we do not use browser cookies. Our in-app H5 campaigns may use localStorage for login tokens and campaign progress, released when the page is closed.

12. Policy Changes

• Non-material changes: updated "Last updated" date at the top
• Material changes: in-app banner / push / email 7 days in advance; we will ask you to re-consent

13. Governing Law

This policy is governed by the laws of the Mainland of the People's Republic of China (excluding Hong Kong SAR, Macau SAR, and Taiwan region). Disputes are submitted to the competent people's court of Nanjing, Jiangsu Province.

球雲體育隱私政策

生效日期：2026-05-05  |  最後更新：2026-05-12

南京領動世紀傳媒有限公司（以下簡稱「我們」）是球雲體育行動應用（以下簡稱「本應用」或「球雲體育」）的開發者和營運者。我們高度重視使用者隱私與個人資訊保護，嚴格遵守《中華人民共和國個人資訊保護法》《中華人民共和國網路安全法》《中華人民共和國資料安全法》及相關法規。請在使用本應用前仔細閱讀並充分理解本政策的全部內容；您勾選「同意」或開始使用本應用，即視為您已同意本政策所述之資訊處理方式。

1. 我們收集的資訊

1.1 帳號資訊

• 手機號碼（用於註冊、登入、找回密碼）
• 登入密碼（使用 bcrypt / SHA-256 + salt 單向雜湊儲存，不可還原）
• 使用者 ID、暱稱、頭像、性別、生日（可選）
• 登入會話憑證（access token / refresh token）
• Apple Sign In 憑證（去標識化的 user identifier；您主動同意分享的姓名 / email；可使用 Apple 的「隱藏郵箱」中繼地址）

1.2 賽事與使用行為

• 您關注的比賽與球隊及訂閱／取消訂閱紀錄
• 三類 AI 功能（AI 聊球 / AI 體育分析工具 / AI 即時分析，下文統稱「AI 數據分析」）的使用紀錄（查詢的賽事、調用次數，僅用於額度結算與防刷；第三方大模型 API 調用之合規披露詳見 §3.9）
• 虛擬幣（球鑽）的購買與消費紀錄（僅用於 AI 數據分析服務結算，不用於打賞）
• 賽事詳情聊球室文字訊息、檢舉與封鎖（拉黑）操作

1.3 裝置資訊

為識別您的裝置身分、預防惡意程式與作弊、提升服務安全性與營運效率，我們及所整合的第三方 SDK（友盟+ U-APM）會在您同意本隱私政策後收集以下裝置資訊：

• 裝置硬體資訊：裝置型號、品牌、製造商、CPU 型號、記憶體大小、螢幕尺寸與解析度、作業系統及版本、系統語言、時區
• 應用與通路資訊：應用版本號、安裝通路（商店名 / 推廣來源）、套件名 / Bundle ID
• 網路資訊：目前網路類型（WiFi / 行動網路）、電信業者名稱（不含手機號碼）、IP 位址（僅請求過程中暫存，不長期留存）
• 裝置識別碼（用於反作弊、防刷、統計去重，均為匿名 / 去標識化，不與您的真實身分綁定）：
  • Android ID（Android 平台，由系統首次啟動時產生的 64 位字串；由友盟+ U-APM SDK採集，用於統計去重、崩潰歸因、防刷裝置識別）
  • OAID（Android 10+，透過移動安全聯盟 MSA SDK 取得；用戶可在系統設定中重置）
  • IDFV（僅 iOS，Apple 提供的 Vendor 級匿名識別碼，卸載同一開發者全部應用後即重置）
  • 友盟裝置 ID（UmengID / UMZID）（友盟 SDK 在客戶端基於上述欄位產生的二次去標識化雜湊值）
• 推播權杖：iOS 為 Apple APNs；當前正式發布的 Android 安裝包未整合小米 / OPPO / 華為 HMS / 榮耀推播 SDK 及 Google FCM客戶端函式庫，不向伺服器上報對應之 Android 遠端推播令牌。

1.4 媒體檔案

本版本不收集任何媒體檔案。賽事詳情聊球室僅支援純文字訊息。

1.5 儲值與交易資訊

本版本（球雲體育 iOS / Android 當前版本）暫未開放虛擬幣儲值功能。如有上線計劃，將透過新版本發布並更新本政策提前告知。已發放的免費虛擬幣（球鑽）餘額查詢與 AI 數據分析服務消費流水仍可使用，並按以下原則處理：

• 餘額變動紀錄（領取、消費）的時間戳與數量，僅用於帳單查詢與防刷
• 本應用不接觸銀行卡號、CVV / CVC、支付密碼等支付要素

2. 裝置權限

本應用僅請求網路存取（必要）、通知（可選）、安裝未知來源 APK（僅 Android 非應用市集通路，可選）三項權限。本版本未申請相機、麥克風、相簿（讀／寫）、區域網路（Bonjour / mDNS）掃描、子母畫面、懸浮視窗、背景音訊播放、喚醒鎖（保持螢幕常亮）等權限；本應用不包含任何視訊串流、主播直播間、子母畫面、DLNA / AirPlay 投放、懸浮視窗等視音訊播放或擷取功能。背景／靜默狀態下不採集 GPS、不讀取相簿／通訊錄／簡訊、不取得硬體識別碼、不做跨 App 追蹤、不錄音、不開啟相機、不進行任何背景音視訊解碼／播放。

3. 第三方服務和 SDK

為提供穩定豐富的功能，本應用整合：友盟+ U-APM（用戶行為統計 + 應用效能監控，不包含 U-Push / U-Link / U-Share）、融雲 IM SDK（僅用於賽事詳情聊球室文字訊息收發）、百度文心一言 API（ERNIE Bot 大模型 · 為 AI 數據分析功能提供推理能力，由我方伺服器轉發呼叫，客戶端不直接整合任何百度 SDK）、Sign in with Apple（iOS Apple 登入）、APNs、Dio、cached_network_image、本地儲存組件、device_info_plus、share_plus、install_plugin。當前正式 Android 發行包不包含小米 / OPPO / 華為 / 榮耀推播及 Google FCM 客戶端（詳細說明見簡體中文版 §3.3）。各 SDK 詳情、收集資訊、用途與隱私政策連結請參見簡體中文版 §3.1–§3.9。

3.2 友盟+ U-APM（重點明示）

• 第三方名稱：北京銳訊靈通科技有限公司（友盟+）+ 友盟同欣（北京）科技有限公司
• 使用目的：識別您的裝置 ID 並預防惡意程式及作弊、提升服務安全性、統計日活月活、崩潰 / ANR 監控、效能與穩定性資料採集
• 使用場景：應用啟動並在隱私政策彈窗點擊「同意」後，由本應用呼叫 FlUMeng().init() 完成 SDK 初始化；後續您在使用本應用任意頁面時 SDK 會按上述目的採集對應事件
• 共享方式：SDK 本機採集 + HTTPS / TLS 加密上傳至友盟伺服器（中國大陸機房）
• 收集 / 共享資訊：裝置型號 / 品牌 / 製造商 / CPU 型號 / 記憶體大小 / 螢幕尺寸 / 作業系統與版本 / 系統語言 / 時區、網路類型與電信業者、應用包名 / 版本 / 渠道號、Android ID、OAID（Android 10+）、IDFV（iOS）、友盟裝置 ID（UmengID / UMID / UMZID）、應用啟動 / 頁面訪問路徑與停留時長 / 自訂業務事件（如登入、註冊）、崩潰堆疊、ANR 資訊
• 不收集 / 不傳遞：IMEI / IMSI / SUPI / SUCI / ICCID（未宣告 READ_PHONE_STATE）、裝置 MAC 位址（系統返回隨機值，且本應用未呼叫讀取 API）、軟體安裝清單（未宣告 QUERY_ALL_PACKAGES）、GPS 位置、通訊錄、簡訊、通話紀錄、日曆、相簿、剪貼簿、手機號碼、登入密碼、聊球室文字訊息、好友關係
• 處理時機：使用者未同意隱私政策前，不呼叫 FlUMeng().init()，SDK 不載入、不讀取任何資訊；僅在您點擊「同意並繼續」後才會觸發 SdkInitializer._initUmengSdk()
• 隱私政策：友盟+ 隱私權政策 | 友盟 SDK 個人資訊收集清單
• 資料存儲地：中國大陸（友盟伺服器位於北京）

14 類個人敏感資訊收集情況總表（與簡體中文版 §3.0 一致）：除「本機電話號碼」（用戶主動輸入用於發送驗證碼）、「Android ID / OAID / IDFV」（由友盟+ U-APM SDK 在您同意隱私政策後採集，用於反作弊、統計去重）外，IMEI / IMSI / SUPI / SUCI / MAC 位址 / 軟體安裝清單 / GPS 位置 / 通訊錄 / 通話紀錄 / 日曆 / 簡訊 / 圖片 / 音視訊全部「不收集」。

4. 我們如何使用您的資訊

• 提供核心服務：帳號註冊登入、賽事資料展示、AI 聊球（AI 問答 / 對話式）、AI 體育分析工具（數據預測）、AI 即時分析（賽事詳情串流）三類 AI 功能、賽事詳情聊球室文字互動、虛擬幣（球鑽）儲值與 AI 服務消費（關於第三方大模型 API 的接入聲明詳見 §3.9）
• 賽事資訊：於首頁、賽程等介面顯示公開賽事及您主動關注之球隊／聯賽相關資訊（不構成廣告定向）。
• 帳號安全、客服、應用改進、法律義務

5. 資料儲存與安全

• 登入 token 加密儲存於 iOS Keychain / Android Keystore
• 伺服器位於中國大陸，部署 WAF、防 DDoS、資料庫加密、存取稽核
• 全部網路通信使用 HTTPS / TLS 1.2+；密碼單向雜湊
• 依《網路安全法》等保要求營運並接受監管檢查

6. 資料保留

帳號資訊至您登出；session token 30 日；儲值／訂單 3–5 年；聊天訊息 7–30 日；AI 數據分析調用紀錄 90 日；崩潰日誌 30 日。

7. 資料分享

我們不出售您的個人資訊。您勾選「同意」本隱私政策後，依《個人資訊保護法》第二十三條，於必要、最小、明示範圍內與下列第三方共享：

• 友盟+ U-APM（北京銳訊靈通科技有限公司 + 友盟同欣（北京）科技有限公司）— 共享：裝置硬體與網路資訊、Android ID / OAID / IDFV / 友盟裝置 ID、應用包名 / 版本 / 通路、崩潰堆疊、ANR、頁面訪問路徑、應用啟動 / 登入 / 註冊等去標識化事件 — 用途見 §3.2
• 融雲 IM（北京雲中融信網路科技有限公司）— 共享：聊球室文字訊息、房間 ID、融雲 userId — 用途見簡體版 §3.4
• 百度智能雲千帆 API（ERNIE Bot 大模型）（北京百度網訊科技有限公司）— 由我方伺服器轉發 — 共享：您主動輸入的 AI 對話文字、所查詢的公開賽事 ID — 用途見簡體版 §3.9
• Apple Inc.（僅 iOS）— 共享：APNs 設備令牌、Apple Sign In 去標識化 user identifier — 用途見簡體版 §3.5 / §3.6
• 支付機構（暫未開放，僅 Apple IAP / Google Play Billing / 華為 IAP，不整合微信支付 / 支付寶 / 銀聯）、簡訊供應商、雲端服務商、監管機關依法協查

8. 跨境資料傳輸

核心服務託管於中國大陸。以下場景可能涉及資料跨境：Apple APNs（推播權杖，限 iOS）、您在中國大陸境外使用本 App 所產生之網路流量。當前正式 Android 發行包未打包 FCM／廠商推播客戶端，故不依該通道向境外傳輸推送令牌／通知載荷。

9. 您的權利

您可隨時：查閱資料、更正資訊、登出／刪除帳號、撤回同意、申請資料可攜性、向主管機關投訴。註銷流程：我的 → 設定 → 帳號與安全 → 註銷帳號。

10. 未成年人保護

11. Cookie 與同類技術

本應用作為原生 App 不使用瀏覽器 Cookie。

12. 政策變更

重大變更將提前 7 日以站內彈窗、推播或電郵通知並要求重新同意。

13. 管轄與法律適用

本政策適用中華人民共和國大陸地區法律；管轄法院為江蘇省南京市有管轄權的人民法院。