Privacy Policy

        欢迎您使用云上祈愿 APP。云上祈愿 APP 是合肥弥散边界科技有限公司旗下的一款产品，合肥弥散边界科技有限公司（以下简称 "我们"）严格依据《中华人民共和国个人信息保护法》《中华人民共和国网络安全法》《移动互联网应用程序信息服务管理规定》《App 违法违规收集使用个人信息行为认定方法》等法律法规，制定本《云上祈愿 APP 用户隐私政策》。本政策旨在清晰、透明地向您说明云上祈愿 APP 的个人信息收集范围、使用场景、权限调用规则、共享方式、存储期限、安全防护及用户合法权利，充分保障用户知情权、选择权、撤回权与删除权。
       您首次启动云上祈愿 APP、点击同意、注册登录或持续使用云上祈愿 APP 服务，即代表您已认真阅读、充分理解并自愿同意本隐私政策全部条款。若您不同意本政策任意内容，请立即停止下载、安装及使用云上祈愿 APP。
一、基本原则
云上祈愿 APP 严格遵循合法、正当、必要、透明、最小化原则，绝不收集、使用、存储、共享与业务功能无关的个人信息；绝不强制授权、静默收集用户隐私信息；绝不超范围、超周期处理用户数据。
二、我们收集的个人信息及收集方式
我们仅通过用户主动提交、用户授权后获取、系统自动非静默采集三种方式收集必要信息，无后台静默私自收集行为，具体范围如下：
2.1 用户主动提交的账号信息
您在注册、登录、完善资料过程中主动填写的信息：手机号、邮箱、昵称、头像、性别、地区等。该类信息仅用于账号创建、登录安全、账号管理与客服支持。
2.2 设备、网络与日志信息（合规留存）
您使用应用过程中自动采集的非敏感设备与运行日志信息：设备型号、系统版本、应用版本、IP 地址、网络状态、设备状态、操作日志、崩溃日志等。用户操作日志、安全日志依法留存 60 日，到期自动清理，仅用于安全风控、故障排查、服务稳定与体验优化，不用于用户画像违规推送。
2.3 用户自主创作内容信息
您主动发布、上传、编辑的文字、图片、视频等原创内容（含其必要元信息），仅用于您自主使用、平台内容展示与功能实现，未经用户授权不会对外公开、共享。
2.4 授权后位置信息
仅在您主动授权定位权限后，获取大致位置、精准位置信息，用于位置相关功能与页面展示，无授权绝不采集位置数据。
2.5 授权后媒体与存储信息
仅在您主动授权相机、相册权限后，使用相机拍摄、读取照片库资源，用于拍照上传、头像设置、内容创作与保存。仅读取您主动选中的媒体资源，不会全盘扫描、读取全部相册内容。
2.6 系统服务状态信息
为保障云上祈愿 APP 稳定运行，经授权后获取网络、设备状态、休眠等系统状态信息，仅用于功能适配与安全风控，不采集用户隐私数据。
2.7 设备 MAC 地址与软件安装列表信息（第三方 SDK 收集）
为实现广告反作弊、广告归因统计及支付安全风控，云上祈愿 APP 嵌入的第三方 SDK（泛连广告 SDK、支付宝支付 SDK 及其内置蓝盾安全组件）会在您同意本隐私政策后收集您设备的 MAC 地址、软件安装列表信息。现就该类信息向您特别明示如下：

（一）收集目的：生成与校验设备唯一标识，用于广告投放的反作弊与防刷量识别、广告归因统计、广告投放效果分析，以及支付环节的设备环境风险识别、交易欺诈防范与账号安全保障；

（二）收集方式：由第三方 SDK 在广告加载、广告请求、广告展示，或您主动发起支付等对应功能实际触发时，通过系统接口自动读取设备网卡 MAC 地址及设备上已安装应用的包名列表。均为对应功能触发时前台读取，无后台静默采集行为；

（三）收集范围：仅读取实现上述功能所必需的 MAC 地址字段与安装应用包名列表，不读取、不推断应用列表内各应用的任何业务数据与使用记录；采集频率与对应功能使用频率一致；该类信息仅传输至对应第三方 SDK 服务器用于反作弊比对与归因统计，不与您在云上祈愿 APP 内的其他个人信息捆绑合并分析，不用于用户画像及任何与上述目的无关的用途；

（四）该类信息由第三方 SDK 依各自隐私政策传输、存储与处理（详见第六条第三方 SDK 清单及对应隐私政策链接），我们已通过合作协议要求其最小必要使用、不得超范围处理。
三、设备权限详细说明
云上祈愿 APP 所有设备权限均已公示如下，均仅在对应业务功能需要时调用，您可随时在手机系统设置或应用内关闭，关闭后仅对应功能失效，不影响应用基础核心服务使用。
3.1 Android 权限说明
网络访问权限（android.permission.INTERNET）：核心基础权限。用于实现数据传输、内容加载、服务交互、消息同步、在线功能使用，无该权限应用无法正常联网使用。
网络状态查看权限（android.permission.ACCESS_NETWORK_STATE）：基础必需权限。用于实时检测设备网络连接状态，适配网络加载、网络异常提醒、优化服务体验，仅获取网络状态，不采集任何用户个人信息。
网络适配权限（android.permission.CHANGE_NETWORK_STATE）：基础必需权限。用于辅助适配网络切换、优化网络传输稳定性，仅服务于云上祈愿 APP 功能适配，不会私自修改用户系统网络配置、无后台联网偷跑行为。
Wi-Fi 适配权限（android.permission.CHANGE_WIFI_STATE）：辅助权限。用于辅助开启、切换 WLAN 网络，优化联网服务体验，需用户授权生效，不会私自操控用户设备网络设置。
设备状态读取权限（android.permission.READ_PHONE_STATE）：安全风控权限。用于识别设备状态、核验登录设备安全、防范风险登录与账号异常，仅读取设备状态数据，不采集、留存通话记录、通讯录等隐私信息，无隐私窃取行为。
设备振动权限（android.permission.VIBRATE）：按需调用。用于消息提醒、操作反馈、功能提示等交互场景，提升用户使用体验，无后台无故振动、骚扰用户行为，用户可自主关闭权限。
摄像头权限（android.permission.CAMERA）：用于拍照上传、头像设置、内容创作与保存等功能。仅用户主动触发功能时调用，用户可随时管理权限，关闭后相机相关功能无法使用，无静默拍照、录像、后台抓拍行为。
精确位置权限（android.permission.ACCESS_FINE_LOCATION）：用于精准位置相关功能与页面展示。仅授权后使用，用户可自主管理权限，关闭后精准定位相关功能无法使用，无后台持续采集位置行为。
粗略位置权限（android.permission.ACCESS_COARSE_LOCATION）：用于位置相关基础功能与页面展示。需用户主动授权后方可获取，用户可随时查看、修改或关闭权限，关闭后基于位置的服务功能失效，无授权绝不采集位置信息。
设备休眠控制权限（android.permission.WAKE_LOCK）：按需临时调用。仅在用户主动使用视频、音频播放、实时交互等关键场景时临时防止设备休眠，避免功能中断，功能结束后立即释放权限，无后台长期保活、静默驻留行为。
3.2 自启动与关联启动说明
（一）自启动说明：开机自启动服务（消息推送与提醒服务恢复）使用目的 : 设备开机完成后恢复云上祈愿APP 的消息推送、消息提醒等必要服务，确保您能够及时接收互动消息、服务通知与功能提醒，保障消息触达的及时性与服务连续性
（二）关联启动说明：云上祈愿 APP 不存在后台私自关联启动其他应用的行为。仅在用户主动操作的必要场景下，经用户确认后执行关联拉起：用户扫描分享二维码、通过二维码登录账号时，拉起云上祈愿 APP 完成登录与页面跳转；用户点击分享内容操作时，可选择拉起其他应用完成内容分享。所有关联拉起行为均由用户主动点击或扫码触发，需用户确认后才执行。您可以在手机系统设置中关闭本应用的相关启动权限，关闭后将无法使用扫码登录、分享跳转功能，但不影响 APP 其余基础功能正常使用。
3.3 iOS 权限使用说明
相册读取 / 新增权限：用于您在 App 内选择、上传、保存图片内容，仅读取您主动选中的资源，可随时在系统设置关闭。
相机权限：用于拍照上传、头像设置、内容创作，仅在您主动使用时调用。
定位权限：用于位置相关功能与页面展示，仅授权后使用。
追踪权限（广告标识符 IDFA，追踪描述符）：用于广告投放与效果统计等业务场景，仅在您主动授权（App 跟踪透明度弹窗）后获取，拒绝授权不影响基础功能使用。
音频后台运行（UIBackgroundModes = audio）：用于音频类交互链路的运行场景，仅在您主动使用音频相关功能时保持运行，功能结束后停止，无后台静默录音、采集行为。
我们不会主动要求的常见敏感权限：不采集联系人、短信、麦克风、蓝牙扫描、强制后台常驻等与业务无关权限。实际应用中若因第三方 SDK 版本变更产生权限新增 / 调整，新增前会通过版本说明或授权流程告知。
四、我们如何使用您的个人信息
我们收集的所有个人信息，仅用于以下合法、必要的运营服务场景，不会用于无关用途、商业营销及违规用户画像采集：
账号服务与安全保障：用于账号注册、登录、身份核验、账号绑定、密码找回、设备安全校验、反欺诈、风控审计，防范盗号、恶意登录、违规操作等安全风险，保障账号使用安全。
产品功能与服务优化：实现内容发布、浏览、搜索、个性化内容推荐、功能排序、媒体编辑、位置服务等核心功能，同时基于设备日志、操作数据优化云上祈愿 APP 产品体验、修复故障、适配设备机型。
Message notification and interactive services: Push function notifications, service reminders, interactive messages, and system announcements to ensure that the service reaches users in real time through notification permissions.
Order and customer service: If it involves payment services, it is used for payment verification, order management, and transaction security verification; it is also used for customer service consultation, problem feedback, troubleshooting, user Q & A, and after-sales follow-up.
Compliance operation and risk prevention and control: abide by laws and regulations and platform rules, carry out security audits, risk prevention and control, and investigation of violations to ensure the compliance, safety and stable operation of the Cloud Prayer APP platform.
V. Information sharing and disclosure
We strictly abide by the principle of user information confidentiality, and will never sell, rent, or resell any of your personal information. Only share your information within the minimum necessary scope under the following legal circumstances: information sharing with your express and active authorization and consent; in accordance with laws and regulations, judicial organs, and administrative organs' legal instructions, investigations, and penalties, disclose relevant information in accordance with laws and regulations; in order to ensure the normal operation of the Cloud Prayer APP service, share the minimum necessary information with cooperative legal service providers (payment, cloud storage, push notification, data statistics, advertising, login, etc.), and we have signed a non-disclosure agreement with our partners, requiring them to strictly abide by privacy protection rules, only for agreed services, and not to use or disclose user information twice.
Sixth, third-party SDK and service description
In order to realize basic functions such as login, payment, push notification, data statistics, device adaptation, and advertising compliance display, the Cloud Prayer APP may embed third-party SDK service components with legal compliance, including but not limited to: WeChat, Alipay, Apple, Facebook, Google and other third-party login and payment capabilities, push notification services, advertising-related services, etc. We have strictly screened cooperative third parties and required them to comply with national privacy protection laws and regulations, process user data only within the minimum scope required to realize functions, and at the same time undertake corresponding information security and confidentiality obligations. We will not allow third parties to collect, use, or disclose your personal information beyond the scope, and the data obtained by third parties will not be used for other purposes other than the Cloud Prayer APP service.
It is also noted that when you use the AI conversation function of this application, in order to realize AI content generation, the conversation text and question content you enter will be transmitted to the Volcano Ark bean bag large model service provided by Beijing Volcano Engine Technology Co., Ltd. for inference calculation. We only entrust Volcano Engine bean bag large model to complete the AI generation ability, and we will not use your conversation data for large model training. Volcano Engine will process the received information in accordance with the "Volcano Engine Privacy Policy" (https://www.volcengine.com/docs/6256/64902). We will transmit relevant content through encryption and require Volcano Engine to ensure data security. If you do not want the content to be transmitted to the Volcano Ark bean bag large model service, please do not use the AI-related functions of this application.
VII. Information storage and security protection
7.1 Information storage and retention cycle
We only retain your personal information for the duration required by laws and regulations and the period necessary for business services. Among them, device logs, operation records, security logs and other data will be retained for 60 days uniformly, and will be automatically cleaned when they expire; basic account information and user-created content will be retained normally during the existence of the user account; after the user cancels the account, we will complete data desensitization and removal within the legal time limit. When the information does not need to continue to be retained, we will deal with it through desensitization, deletion, destruction, etc. compliance.
7.2 Security measures
We use multiple security measures such as encrypted transmission, authority control, log desensitization, access audit and risk monitoring to protect your personal information in an all-round way and prevent security risks such as information leakage, loss, tampering and abuse. In the event of a personal information security incident, we will activate an emergency plan as soon as possible, take remedial measures, and report to you and the regulatory authorities in a timely manner according to law.
VIII. User's personal rights
You have complete legal rights to your personal information, and you can exercise the following rights independently through the settings in the Cloud Prayer APP and customer service channels:
Access rights: You can access your account information, authorization rights, personal data, and usage records at any time.
Right of correction: You can modify your personal data such as nickname, avatar, region, etc., and correct wrong information;
Right to delete: You can apply to delete personal works, local cached data, and some personal information.
Withdraw the authorization right: You can withdraw the authorization of all device permissions such as camera, positioning, notification, storage, etc. at any time. After withdrawal, the corresponding functions will not be able to be used normally;
Account cancellation right: You can apply to cancel your account on your own. After the account cancellation, we will clean up your account data and personal information according to law;
The right to complain: If you believe that our information processing practices violate your privacy rights, you can complain or appeal through the official customer service channels, and we will check and reply in a timely manner.
IX. Protection of minors
The Cloud Wish APP is not recommended for minors. We will not actively collect personal information of minors. If minors are found to be using the Cloud Wish APP, we will take necessary measures to deal with it (including but not limited to restricting relevant functions, canceling accounts and deleting relevant personal information). If the guardian finds that minors submit personal information or use this APP in violation of regulations, please contact us for timely processing.
Privacy Authorization and Service Exit Instructions
The Cloud Wish APP will apply to you for the corresponding device permissions and privacy authorization item by item when it is first started and the core functions are used for the first time. All authorizations are voluntarily selected. If you refuse to authorize some permissions, the corresponding associated functions will not be able to be used normally, but it will not affect the use of basic permissionless services. You can terminate the use of the service at any time by logging out of your account and uninstalling the Cloud Wish APP. At the same time, you can turn off all permissions and authorizations in the mobile phone system settings, and completely terminate the collection and processing of personal information.
Policy updates and notifications
We will revise and update this Privacy Policy from time to time according to the update of laws and regulations, business function iteration, and service optimization needs. After the policy is updated, we will inform you of announcements, pop-ups, page prompts, etc. in the Cloud Wish APP. If you continue to use the Cloud Wish APP service after the policy is updated, you are deemed to agree to all the terms of the updated Privacy Policy.
Twelve, contact us
If you have any questions, suggestions or complaints about the terms of this Privacy Policy, information processing methods, permission to use, privacy protection and other related issues, you can contact us through the following official channels:
Subject name: Hefei Dispersion Boundary Technology Co., Ltd.
Customer service email: manage@mshub.cn
We will verify, process, and respond to your feedback as soon as we receive it.