隐私政策

1. Operator and scope

Zhizhu is operated by Beijing Huo Du Du Technology Co., Ltd. (北京火嘟嘟科技有限公司). This policy covers our app and website. App filing: 京ICP备19007960号-4A. Email: dodofun@126.com; phone: +86 18519271144. Address: Room 102-1706, Floor 1, Building 26, No. 17 Huanke Middle Road, Beijing Economic-Technological Development Area (Tongzhou), Beijing, China (cluster registration). Effective September 12, 2026. We request affirmative consent; continued use is not consent.

2. Data and purposes

Account access uses your phone number, verification result, internal account ID and session tokens to authenticate and synchronize learning. Real names are not required. Nicknames and avatars are optional. Verification codes and review passwords are stored as hashes. We process bookmarks, reading position, notes, goals, action plans, check-ins, reflections and messages you submit to save learning state and provide requested functions. Feedback is linked to your account for troubleshooting. Operational data includes app version, platform, a random installation identifier, page and feature events, and server logs containing IP address, request time and status. These support security, troubleshooting and product analytics. Optional crash diagnostics contain aggregate error categories, version, route and device class, not message bodies, phone numbers or full stack traces. Where purchasing is available, product, order, receipt, amount and entitlement data support validation and restoration. Payment platforms handle payment accounts and card details.

3. AI processing and separate permission

Before AI coaching, action suggestions, the app asks separately for cloud AI permission. With permission, our server sends submitted questions, necessary conversation context, relevant notes, goals, action progress to Alibaba Cloud DashScope to generate replies. We do not deliberately include phone numbers or sign-in credentials as AI inputs. You may decline and continue non-AI features such as reading. Withdraw permission in Me → Settings → AI data permission; new AI requests then require permission again. Completed processing cannot be undone. Do not submit passwords, identity or bank numbers, other people’s private data, or unnecessary sensitive information. AI can be inaccurate and is not professional medical, legal or investment advice.

4. Providers and sharing

Alibaba Cloud hosting, databases and object storage process service data. The SMS provider receives your sign-in phone number and message-template parameters for verification delivery. Alibaba Cloud DashScope receives the necessary inputs described above only for permitted AI functions. Alibaba Cloud policy: https://terms.alicdn.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112141102_37574.html . Apple processes its account and transaction information where Apple purchasing is enabled: https://www.apple.com/legal/privacy/ . We require processors to protect information and use it for the delegated purpose. We do not sell personal information, use advertising tracking or advertising identifiers, or combine your activity with other companies’ apps or websites for advertising. Disclosure is limited to your chosen sharing, necessary service processing, legal requirements or additional permission.

5. Device permissions and sharing

Avatar selection uses photos you select. Camera and notification permissions are requested by the system when needed and can be disabled in device settings without affecting unrelated features. Learning does not require contacts or precise location. Notifications primarily support your learning reminders. Sharing a card or link is your choice. Recipients may see its learning results, content title and selected information; review it before sending. Account deletion removes your server-side personal sharing cards but cannot recall screenshots or copies others already saved.

6. Retention, security and deletion

Our service is hosted in mainland China. We use HTTPS, access controls, password hashing and least privilege. Account and learning records are retained while needed for service and removed from the active database on deletion. Avatars enter a durable cleanup queue, normally processed after several minutes; failures are retried. Aggregate crash diagnostics follow a 30-day retention policy. A random internal deletion marker, containing no phone number or learning content, prevents stale credentials from recreating an account. Necessary security logs, legally required records and isolated recovery backups are not used for everyday personal services. Backups that cannot be individually edited are restricted to secure storage and recovery until rotation deletes them; restoration must reapply prior deletion requests. Contact support for deletion status or additional requests.

7. Your rights and account deletion

View and correct profile information and manage learning data in the relevant screens. Disable optional diagnostics or withdraw AI permission in Settings, and manage device permissions in system settings. Email dodofun@126.com for access, correction, export, deletion or other privacy requests. After verifying account ownership we will process the request and respond within 15 working days. Do not email passwords or complete identity or bank documents. Go to Me → Settings → Delete account, read the consequences and confirm. The account, associated learning records, notes, check-ins, feedback and entitlements are removed; you are signed out and old sessions cannot access it. Uninstalling or signing out does not delete an account. Deletion is irreversible. If you hold an Apple auto-renewing subscription, cancel it separately in Apple subscription settings; deletion does not request a refund or cancel platform subscriptions.

8. Minors and changes

Zhizhu is a general learning app, not a children-only service. Users under 14 should use it with guardian consent and guidance. Guardians may contact us to remove children’s information submitted without permission. Material changes are announced in the app or website; new purposes, data types or recipients require renewed permission where applicable.