|
DRINKUP

“开喝”隐私政策

发布日期:2025年4月20日 生效日期:2025年4月20日

尊敬的用户:
欢迎使用“开喝”产品及相关服务!请您仔细阅读、理解并遵守《“开喝”隐私政策》。“开喝”指北京柒感商贸有限公司及其关联公司(以下简称“我们”或“公司”)合法拥有并运营的、标注名称为“开喝”的官方网站、开喝小程序、“开喝”APP。在“开喝”中,我们向您提供AI内容生成(文生成、图生成)等服务。

我们作为“开喝”的运营者,深知个人信息对您的重要性,您的信任对我们非常重要,我们将按照法律法规的规定并参照行业最佳实践保护您的个人信息及隐私安全。我们制定本隐私政策并特别提示:希望您在使用“开喝”产品及相关服务(以下统称“本服务”)前仔细阅读并理解本隐私政策,以便做出适当的选择。

本隐私政策将帮助您了解:

下文将帮您详细了解我们如何收集、使用、存储、公开与保护个人信息以及您可以如何管理您的个人信息。本隐私政策与您使用我们的服务关系密切,我们建议您仔细阅读并理解本隐私政策全部内容,作出您认为适当的选择,有关您个人信息权益的条款重要内容我们已用加粗形式提示,请特别关注。

1. 我们如何收集和使用个人信息

1.1 账号服务

1.1.1 账号注册登录

当您选择注册并登陆“开喝”用户账号时,我们可能会收集您的姓名、电话号码、电子邮箱地址等基本信息。如果您仅使用浏览服务,您不需要注册成为“开喝”用户并提供上述信息。

1.1.2 认证

在您使用身份认证的功能或相关服务时,根据相关法律法规,为保障您或其他用户的账号安全,我们可能会收集您的真实身份信息(真实姓名、身份证号码、手机号码等)以完成实名验证。您可以拒绝提供,如果拒绝提供您可能将无法获得相关服务,但不影响其他功能与服务的正常使用。

1.1.3 开喝账号服务

开喝使用统一的开喝账号服务,您注册的开喝账号是您用以登录并使用开喝的凭证。收集手机号码是履行国家法律法规关于网络实名制(真实身份信息认证)要求的必要信息,如果您拒绝提供手机号码用于注册、登录,我们可能无法为您提供信息发布(包括发布酒单、评论等)、生成式人工智能相关功能。

1.2 内容生成服务

1.2.1 服务内容

我们基于生成式人工智能(以下简称“AI”)模型技术,向您提供AI内容(文生成、图生成)生成等服务。

1.2.2 上传、制作、编辑、储存

为了向您提供服务,我们会收集您主动选择或输入的文字、图片、音频、等原始素材内容回传至服务端进行处理。当您自行上传、制作、编辑、发布图片/文字等内容服务时,我们会向您请求授权相机、剪切板、照片、麦克风、相册、媒体库、存储(含SD卡)和震动(用于交互效果)的权限、设备信息(包括设备型号、操作系统版本、设备设置、唯一设备标识符(Android如Android ID、OAID,IOS如IDFV、IDFA;不同的标识符在有效期、是否可由用户重置以及获取方式方面会有所不同)以及个人上网记录(包括浏览记录、软件使用记录、点击记录、互动记录);若您不同意或取消授权,将无法使用相应功能,但不影响您正常使用其他功能。

1.2.3 人脸信息

当您使用我们的服务对含肖像类内容进行识别以和互动AI创作时,我们会分析您上传的原始素材,找出原始素材中的特征点(比如眼睛、鼻子、嘴巴等的矢量点)和轮廓线以进行肖像处理。在此过程中,我们的分析处理过程会采用安全加密措施,除非另有明确说明并征得您的同意,我们不会将您的面部像素信息用于其他任何用途或共享给第三方。为了使您能够追溯及管理您的历史生成内容,您可以在历史生成界面手动删除前述内容,您删除后我们将不再存储。

1.3 内容浏览和信息发布

在您浏览内容或信息发送、发布的过程中,我们会记录您的点击、浏览、关注、点赞、反馈、分享、下载、发布等使用情况。您在智能识别和AI对话功能时,可以选择从相册中上传图片或者拍照,我们将获取您的相册权限,如您拒绝开启相册权限,将无法通过相册上传图片与AI交互,但不影响您正常使用其他功能。基于您的发布/互动需求,人工智能模型系统会将您主动上传的原始肖像信息进行处理,这类信息是提供本服务必须收集的信息,我们会按照法律的要求,对您的该类信息在收集、传输和存储的过程中采取严格的加密措施,以确保您的信息安全。

1.4 意见反馈

当您向“开喝”提起投诉、进行咨询或申诉时,为了方便与您联系或帮助您解决问题,我们可能需要您提供姓名、手机号码、电子邮件及其他有效的联系方式等个人信息。如您拒绝提供上述信息,我们可能无法向您及时反馈相关处理结果。

1.5 运营与安全运行/保障

1.5.1 运营与安全保障

我们致力于为您提供安全、可信的产品与使用环境,提供优质而可靠的服务与信息是我们的核心目标。为了维护我们服务的正常运行,保护您或其他用户或公众的合法利益免受损失,我们会收集用于维护产品或服务安全稳定运行的必要信息。我们可能使用您的设备信息[例如设备标识信息AndroidID、IDFA、IDFV、UAID(中国移动UAID、中国联通UAID及中国电信UAID,仅限安卓设备)、OAID、Openudid、GAID及其他综合设备参数和系统信息形成的设备标识符]、网络相关信息(蓝牙、IP地址、网络运营营商、网络状态、类型、接入方式、网络质量数据)以及设备参数信息(设备名称、设备型号)、软硬件操作系统信息(本应用程序版本、操作系统、语言、分辨率)等用于身份验证、客户服务、安全防范、诈骗监测等,以预防、发现、调查欺诈、危害安全、非法或违反与我们的协议、政策或规则的行为,以保护您、我们的其他参与体验人员、我们及社会公众的合法权益。安卓客户端因在使用过程中如果遇上系统崩溃的情形,需要查看后台日志信息,我们会向您请求手机状态码权限。

1.5.2 设备信息与日志信息

1.6 运营活动

我们会不时推出运营活动,以帮助您更了解我们的产品和服务,或增加您使用开喝产品和服务的体验和乐趣。您参加我们的运营活动时,我们可能收集使用您的设备信息(例如设备标识信息(AndroidID、IDFA、IDFV、UAID(中国移动UAID、中国联通UAID及中国电信UAID,仅限安卓设备)、OAID、Openudid、GAID及其他综合设备参数和系统信息形成的设备标识符)、网络相关信息(蓝牙、IP地址、MAC地址、网络运营营商、网络状态、类型、接入方式、网络质量数据)以及设备参数信息(设备名称、设备型号)、软硬件操作系统信息(本应用程序版本、操作系统、语言、分辨率)、开喝账号信息、头像、昵称、姓名、收货地址、位置信息、邮编、身份信息、手机号、银行或支付交易账号信息或其他可能需要您提供相关信息,具体以届时公布的活动规则为准;如您在参与运营活动时与其他人进行分享、互动,我们会收集并展示好友关系、好友头像及昵称、互动人数、互动人头像;您参与部分运营活动时,例如排行榜、榜单类活动,您可能需要公开您的开喝账号、头像和昵称,参与运营活动实际收集使用的信息以您参与具体的运营活动页面展示为准。

1.7 消息通知

请您知悉并同意,对于您在使用产品或服务的过程中提供的您的联系方式(例如:联系电话、联系邮箱),我们在运营中可能会向其中的一种或多种发送多类通知,用于用户消息告知、身份验证、安全验证、用户使用体验调研等用途。

1.8 产品服务内容的变更

请您了解,随着我们业务的发展,可能会对“开喝”的功能和提供的服务有所调整变化。原则上,当新功能或服务与我们当前提供的功能或服务相关时,收集与使用的个人信息将与原处理目的具有直接或合理关联。如调整变化后的产品或服务所处理个人信息的目的、方式和范围发生变化的,我们会再次向您告知,并根据法律法规的相关要求征得您的同意。

1.9 支付服务及开票

为帮助您完成付费服务,您需要向我们提供一些与完成交易相关联的信息,包括姓名、身份证号、银行卡类型及卡号、有效期及手机号码、订单信息、设备信息(OAID、AndroidID、IDFA)、交易的产品及/或服务信息、交易金额、下单时间、订单编号、订单状态、支付方式、支付流水号、支付状态及其他反洗钱法律要求的必要信息,我们收集这些信息是为了帮助您顺利完成交易、保障您的交易安全、查询订单信息、提供客户服务等。身份证号和银行卡相关信息是个人敏感信息,这些信息是支付功能所必需的信息,拒绝提供将导致您无法使用该功能,但不影响其他功能的正常使用。这些信息是支付功能所必需的信息,拒绝提供将导致您无法使用该功能,但不影响其他功能的正常使用。

在您购买我们提供的技术服务后,您可要求我们为您开具和寄送发票。如您选择纸质发票的,您需要向我们提供您的开票信息及发票收件地址,包括收件人姓名、详细地址、邮编、手机号码;如您选择电子发票的,您需要向我们提供您的开票信息及电子邮箱地址。如您拒绝向我们提供前述信息,我们将无法协助您完成发票开具或寄送。

1.10 第三方服务

为了适配在不同手机设备上使用开喝以及第三方平台服务,实现您的手机设备身份认证、手机设备安全、登录第三方平台账号、通过第三方平台分享信息,开喝接入了第三方SDK。上述第三方SDK提供方包括手机设备厂商、社交平台、通讯运营商等。部分第三方SDK可能会调用您的设备权限、获取您的相关信息,以便您在不同的手机设备或第三方平台上正常使用相应功能。不同的第三方SDK所调用的设备权限类型以及所获得的信息可能不同,可能包括获取您的位置信息、读/写您的外部存储卡、读取您的手机状态和身份、查看WLAN连接、检索正在运行的应用/蓝牙。关于第三方SDK具体调用的设备权限类型,以及如何收集、使用您的个人信息,建议您参考第三方SDK的相关服务协议及隐私政策。如果您希望进一步了解我们所接入的第三方SDK情况,请您阅读第三方数据合作清单。

1.11 系统权限申请

如您使用开喝APP提供的服务,在提供服务过程中,为了保证您能正常使用产品功能,我们会向系统申请您设备的以下系统设备权限,申请前我们会征询您的同意,您可以选择“允许”“同意”或“禁止”“不同意”权限申请。经过您的授权后我们会开启相关权限,您可以随时在系统中取消授权,您取消授权会导致您无法使用相关的业务功能,但不会导致您无法使用其他业务功能。

1.14 商务合作

当您申请和我们进行商务合作时,我们需要收集您的联系电话等具体要求以了解您的具体需求,与您联络开展商业合作。我们还可能将为上述信息用于:

1.15 履行我们的法定义务

《网络信息内容生态治理规定》第10条要求我们在发现违法或不良信息时,向主管机关报告相关记录,因此我们将需记录并可能向主管机关提供您的账号、操作时间、操作类型、网络源地址和目标地址、网络源端口、客户端硬件特征等日志信息以及您输入的信息等个人信息。该种情形下对您个人信息的处理将不需要您的同意。

1.16 其他用途

1.17 征得授权同意的例外

请您理解,在下列情形中,根据法律法规,我们收集和使用您的个人信息不必征得您的授权同意:

特别提示您注意,如信息无法单独或结合其他信息识别到您的个人身份,其不属于法律意义上您的个人信息;当您的信息可以单独或结合其他信息识别到您的个人身份时或我们将无法与任何特定个人信息建立联系的数据与其它您的个人信息结合使用时,这些信息在结合使用期间,将作为您的个人信息按照本隐私政策处理与保护。

2. 我们如何使用cookie等同类技术

Cookie和同类设备信息标识技术是互联网中普遍使用的技术。当您使用我们的服务时,我们可能会使用相关技术向您的设备发送一个或多个Cookie或匿名标识符(下称“Cookie”),以收集、标识和储存您使用本服务时的信息。

Cookie的使用主要是为了保障产品功能与服务的安全、高效运转,使我们确认您的账户与交易的安全状态,排查崩溃、延迟的相关异常情况;帮助您省去重复填写表单、输入搜索内容的步骤和流程,以获得更轻松的使用体验。我们承诺,不会将Cookie用于本隐私政策所述目的之外的任何其他用途。

您可根据自己的偏好管理或删除Cookie。大多数浏览器均为用户提供了清除浏览器缓存数据的功能,您可以在浏览器设置中操作清除Cookie数据。但清除后可能无法使用由我们提供的、依赖于Cookie的功能或服务。

3. 我们如何共享、转移、公开您的个人信息

3.1 共享

3.1.1 原则

3.1.2 委托处理

对于委托处理个人信息的场景,我们会与受托合作方根据法律规定签署相关处理协议,并对其个人信息使用活动进行监督。

3.1.3 共同处理

对于共同处理个人信息的场景,我们会与合作方根据法律规定签署相关协议并约定各自的权利和义务,确保在使用相关个人信息的过程中遵守法律的相关规定、保护数据安全。

3.1.4 合作场景

若具体功能和场景中涉及由我们的关联方、第三方提供服务,则合作方范围包括我们的关联方与第三方。

3.1.4.1 实现功能或服务

支付服务:为保障交易安全,完成商品/服务支付,我们合作的第三方机构可能需要处理您的姓名、身份证号、银行卡类型及卡号、有效期及手机号码、订单信息、设备信息(OAID、AndroidID、IDFA)。身份证号和银行卡相关信息是个人敏感信息,这些信息是支付功能所必需的信息,拒绝提供将导致您无法使用该功能,但不影响其他功能的正常使用。这些信息是支付功能所必需的信息,拒绝提供将导致您无法使用该功能,但不影响其他功能的正常使用。

3.1.4.2 实现安全与分析统计的数据使用

保障使用安全:我们非常重视账号、服务及内容安全,为保障您和其他用户的账号与财产安全,使您和我们的正当合法权益免受不法侵害,我们的合作方可能会使用必要的设备、账号及日志信息。

3.2 转移

如我们因合并、分立、资产转让、解散、被宣告破产等原因需要转移个人信息的,会向您告知接收方的名称或者姓名和联系方式。我们会要求接收方继续履行本隐私政策约定义务。接收方变更原先的处理目的、处理方式的,其将重新向您征求同意。

3.3 公开

我们不会主动公开您未自行公开的信息,除非遵循国家法律法规规定或者获得您的同意。

3.4 共享、转移、公开个人信息的例外

根据法律法规规定,在下列情形中,共享、转移或公开您的个人信息无需征得您的同意:

4. 我们如何存储个人信息

4.1 存储地点

我们会按照法律法规的规定,将在中国境内运营过程中收集和产生的个人信息存储于中国境内。如您的个人信息存储地点从中国境内转移到境外,我们将严格依照法律规定执行或获得您的单独同意。

4.2 存储期限

4.3 储存地域

您的个人信息均储存于中华人民共和国境内,不会向境外任何第三方或个人提供。

5. 我们如何保护个人信息的安全

5.1

我们非常重视您个人信息的安全,将努力采取合理的安全措施(包括技术方面和管理方面)来保护您的个人信息,防止您提供的个人信息被不当使用或未经授权的情况下被访问、公开披露、使用、修改、损坏、丢失或泄漏。

5.2

我们会使用不低于行业同行的加密技术、匿名化处理及相关合理可行的手段保护您的个人信息,并使用安全保护机制防止您的个人信息遭到恶意攻击。

5.3

我们会建立专门的安全部门、安全管理制度、数据安全流程保障您的个人信息安全。我们采取严格的数据使用和访问制度,确保只有授权人员才可访问您的个人信息,并适时对数据和技术进行安全审计。

5.4

尽管已经采取了上述合理有效措施,并已经遵守了相关法律规定要求的标准,但请您理解,由于技术的限制以及可能存在的各种恶意手段,在互联网行业,即便竭尽所能加强安全措施,也不可能始终保证信息百分之百的安全,我们将尽力确保您提供给我们的个人信息的安全性。

5.5

您知悉并理解,您接入我们的服务所用的系统和通讯网络,有可能因我们可控范围外的因素而出现问题。因此,我们强烈建议您采取积极措施保护个人信息的安全,包括但不限于使用复杂密码、定期修改密码、不将自己的账号密码及相关个人信息透露给他人。

5.6

您一旦离开“开喝”及相关服务,浏览或使用其他网站、应用、服务及内容资源,我们将没有能力和直接义务保护您在“开喝”及相关服务之外的软件、网站提交的任何个人信息,无论您登录、浏览或使用上述软件、网站是否基于“开喝”的链接或引导。

6. 管理您的个人信息

我们非常重视您对个人信息的管理,并尽全力保护您对于您个人信息的查阅、复制、更正、补充、删除、撤回同意授权、注销账号、投诉举报以及设置隐私功能等权利,以使您有能力保障您的隐私和信息安全。

请您理解,特定的业务功能和服务将需要您的信息才能得以完成,当您撤回同意或授权后,我们无法继续为您提供撤回同意或授权所对应的功能和服务,也不再处理您相应的个人信息。但您撤回同意或授权的决定,不会影响我们此前基于您的授权而开展的个人信息处理。

6.1 您的个人信息权利

如果您或其他有权主体对相关法律法规赋予的个人信息权利的行使,有任何主张、要求或者疑问,您可以通过发送邮件至 official@drinkup.diy 与我们联系,我们将尽快审核所涉问题,并在验证您的用户身份后的15个工作日内回复。

6.2 系统权限管理

您可以直接进入设备系统的设置功能对位置、通讯录、麦克风、相机、相册、日历、储存、电话状态等权限(不同设备的系统权限的名称有所不同,以您所使用设备的系统权限名称为准)进行管理,以改变授权范围或撤回您的授权。

6.3 注销账号

您可以通过“开喝”我的-账号注销申请注销您本人的账号,您知悉并理解,注销账号是不可逆的行为,当您注销账号后,我们将删除有关您的相关信息或进行匿名化处理,但法律法规另有规定的除外。

账号注销后,您将无法使用该账号登录“开喝”,也无法找回账号相关的任何内容或信息。账号注销后,您仍应对您在注销账号前使用“开喝”的行为承担相应责任。

6.4 意见反馈和投诉举报

您可以按照我们公示的制度进行投诉或举报。如果您有任何意见或您认为您的个人信息权利可能受到侵害,或者发现侵害个人信息权利的线索,您可以在“开喝”用户反馈页面提交线索,或主动通过邮箱联系本平台,邮箱地址为 official@drinkup.diy。

6.5 访问隐私政策

您可通过进入:开喝 -- 我的 -- 隐私政策的方式查看隐私政策内容。

请您了解,本隐私政策中所述的“开喝”及相关服务可能会根据您所使用的设备型号、系统版本、应用程序版本等因素而有所不同。最终的产品和服务以您所使用的“开喝”及相关服务为准。

6.6 停止运营并向您告知

如我们停止运营,我们将及时停止收集您个人信息的活动,将停止运营的通知以逐一送达或公告的形式通知您,并对我们所持有的与已关停的产品或服务相关的您的个人信息进行删除或匿名化处理。

7. 未成年人条款

我们非常重视对未成年个人信息的保护。

8.1

若您是未满18周岁的未成年人,在使用“开喝”及相关服务前,应在您的父母或其他监护人的监护、指导下共同阅读并同意本隐私政策。

8.2

若您是未满14周岁的未成年人的监护人,在使用“开喝”及相关服务前,应为您的被监护人阅读并同意本隐私政策。

8.3

我们根据国家相关法律法规的规定保护未成年人的个人信息,只会在法律允许、父母或其他监护人明确同意或保护未成年人所必要的情况下收集、使用或披露未成年人的个人信息;如果我们发现在未事先获得可证实的父母或其他监护人同意的情况下收集了未成年人的个人信息,则会设法尽快删除相关信息。

8.4

若您是未成年人的监护人,当您对您所监护的未成年人的个人信息有相关疑问时,请通过本隐私政策公示的联系方式与我们联系。

8. 隐私政策的修订和通知

9.1

为了给您提供更好的服务,“开喝”及相关服务将不时更新与变化,我们会适时对本隐私政策进行修订,未经您明确同意,我们不会削减您依据当前生效的本隐私政策所应享受的权利。

9.2

本隐私政策更新后,我们会在“开喝”网站发出更新版本,或在更新后的条款生效前通过【“开喝”APP】-【wod】-【隐私政策】公告或其他适当的方式提醒您更新的内容,以便您及时了解本隐私政策的最新版本。

9.3

我们也可能通过功能更新,帮助您更好地管理您的个人信息,请您留意相关的功能说明。

9. 联系我们

如您对个人信息保护相关事宜及AI生成服务有任何疑问、投诉、意见或建议,您可以通过以下任一方式与我们联系:

如您对我们的回复不满意,特别是您认为我们的个人信息处理行为损害了您的合法权益,您还可以通过向北京市顺义区管辖权的法院提起诉讼来寻求解决方案。

10. 附录:第三方信息共享清单 SDK

SDK名称服务类型收集的个人信息类型
极光推送 - JPush SDK - Android推送类应用信息、设备信息(AndroidID、AAID、设备标识符、硬件信息、系统信息等)
小米推送推送类应用信息、设备信息(AAID、标识符、硬件、系统等)
OPPO推送服务推送类应用信息、设备信息(AAID、标识符、硬件、系统等)
vivo推送推送类应用信息、设备信息(AAID、标识符、硬件、系统等)
华为推送推送类应用信息、设备信息(AAID、标识符、硬件、系统等)
魅族推送推送类应用信息、设备信息(AAID、标识符、硬件、系统等)
个推SDK统计分析,推送服务设备信息(IMEI、MAC、Android ID、IDFA、IP等)
友盟+移动统计SDK统计分析设备信息(IMEI、MAC、IDFA、OpenUDID、IMSI 等)
阿里云OSS图片存储,文件上传设备信息(IMEI、MAC、IDFA、IP 等)
APP支付客户端SDK快捷支付设备信息(IMEI、MAC、IDFA、IMSI 等)
Bugly Android错误分析设备信息(IMEI、MAC、IDFA、IMSI 等)
微信OpenSDK Android社交分享、登录设备信息(IMEI、MAC、IDFA、IMSI 等)

DrinkUp Privacy Policy

Date of Publication: April 20, 2025 Effective Date: April 20, 2025

Dear User,
Welcome to DrinkUp and its related services! Please read, understand, and comply with this DrinkUp Privacy Policy carefully. "DrinkUp" refers to the official website, DrinkUp mini-program, and DrinkUp app labeled "DrinkUp" (开喝) that are lawfully owned and operated by Lensflow LTD and its affiliates (hereinafter "we," "us," or the "Company"). Through DrinkUp, we provide you with AI content generation services (text generation and image generation), among others.

As the operator of DrinkUp, we fully understand the importance of your personal information, and your trust matters greatly to us. We will protect your personal information and privacy in accordance with applicable laws and regulations and with reference to industry best practices. We have formulated this Privacy Policy and specifically remind you: please read and understand this Privacy Policy carefully before using DrinkUp and its related services (collectively, the "Services") so that you can make appropriate choices.

This Privacy Policy will help you understand the following:

The sections below will help you understand in detail how we collect, use, store, disclose, and protect personal information, and how you can manage your personal information. This Privacy Policy is closely related to your use of our Services. We recommend that you read and understand this Privacy Policy in its entirety and make the choices you consider appropriate. Important provisions concerning your personal information rights and interests have been highlighted in bold; please pay particular attention to them.

1. How We Collect and Use Personal Information

1.1 Account Services

1.1.1 Account Registration and Login

When you choose to register and log in to a DrinkUp user account, we may collect basic information such as your name, telephone number, and email address. If you only use the browsing service, you do not need to register as a DrinkUp user or provide the above information.

1.1.2 Verification

When you use identity verification features or related services, in accordance with applicable laws and regulations and to protect the account security of you or other users, we may collect your real identity information (real name, ID card number, mobile phone number, etc.) to complete real-name verification. You may refuse to provide this information; if you do, you may be unable to access the relevant services, but this will not affect the normal use of other features and services.

1.1.3 DrinkUp Account Service

DrinkUp uses a unified DrinkUp account service, and the DrinkUp account you register is your credential for logging in to and using DrinkUp. Collecting your mobile phone number is necessary to comply with national laws and regulations on the real-name system for the internet (authentication of real identity information). If you refuse to provide your mobile phone number for registration and login, we may be unable to provide you with content publishing features (including publishing drink lists and comments) or generative AI-related features.

1.2 Content Generation Services

1.2.1 Scope of Services

Based on generative artificial intelligence (hereinafter "AI") model technology, we provide you with AI content generation services (text generation and image generation), among others.

1.2.2 Upload, Creation, Editing, and Storage

To provide you with the Services, we will collect the original material you actively select or input, such as text, images, and audio, and transmit it to our servers for processing. When you upload, create, edit, or publish images/text or other content, we will request your authorization for the following permissions: camera, clipboard, photos, microphone, photo album, media library, storage (including SD card), and vibration (for interaction effects); device information (including device model, operating system version, device settings, and unique device identifiers (on Android, such as Android ID and OAID; on iOS, such as IDFV and IDFA; different identifiers vary in validity period, whether they can be reset by the user, and how they are obtained)); and your internet usage records (including browsing records, software usage records, click records, and interaction records). If you do not consent or you revoke your authorization, you will be unable to use the corresponding features, but this will not affect your normal use of other features.

1.2.3 Facial Information

When you use our Services to recognize content containing portraits for interactive AI creation, we will analyze the original material you upload and identify feature points (such as vector points of the eyes, nose, and mouth) and contour lines in the original material for portrait processing. During this process, our analysis and processing employ secure encryption measures. Unless otherwise expressly stated and with your consent, we will not use your facial pixel information for any other purpose or share it with third parties. To enable you to review and manage your previously generated content, you may manually delete such content in the generation history interface; once deleted, we will no longer store it.

1.3 Content Browsing and Information Publishing

While you browse content or send and publish information, we will record your usage activity such as clicks, browsing, follows, likes, feedback, shares, downloads, and posts. When using the smart recognition and AI chat features, you may choose to upload images from your photo album or take photos, for which we will request your photo album permission. If you refuse to grant the photo album permission, you will be unable to upload images from your album to interact with the AI, but this will not affect your normal use of other features. Based on your publishing/interaction needs, the AI model system will process the original portrait information you actively upload. Such information is necessary for providing the Services, and in accordance with legal requirements we will apply strict encryption measures during its collection, transmission, and storage to ensure the security of your information.

1.4 Feedback

When you file a complaint with, make an inquiry to, or lodge an appeal with DrinkUp, in order to contact you conveniently or help you resolve the issue, we may need you to provide personal information such as your name, mobile phone number, email address, and other valid contact details. If you refuse to provide the above information, we may be unable to respond to you with the relevant handling results in a timely manner.

1.5 Operations and Safe/Secure Operation

1.5.1 Operations and Security Assurance

We are committed to providing you with a safe and trustworthy product and usage environment, and delivering high-quality and reliable services and information is our core goal. In order to maintain the normal operation of our Services and protect the legitimate interests of you, other users, or the public from harm, we will collect the information necessary to maintain the safe and stable operation of our products or services. We may use your device information (for example, device identifiers such as AndroidID, IDFA, IDFV, UAID (China Mobile UAID, China Unicom UAID, and China Telecom UAID, Android devices only), OAID, Openudid, GAID, and other device identifiers formed from combined device parameters and system information), network-related information (Bluetooth, IP address, network carrier, network status, type, access method, and network quality data), device parameter information (device name, device model), and software/hardware operating system information (this application's version, operating system, language, resolution) for identity verification, customer service, security protection, and fraud monitoring, in order to prevent, detect, and investigate fraud, security hazards, illegal activities, or violations of our agreements, policies, or rules, and to protect the legitimate rights and interests of you, our other participants, us, and the public. On the Android client, if a system crash occurs during use and we need to review background log information, we will request the phone state permission from you.

1.5.2 Device Information and Log Information

1.6 Promotional Activities

From time to time we will launch promotional activities to help you better understand our products and services, or to enhance your experience and enjoyment of using DrinkUp's products and services. When you participate in our promotional activities, we may collect and use your device information (for example, device identifiers such as AndroidID, IDFA, IDFV, UAID (China Mobile UAID, China Unicom UAID, and China Telecom UAID, Android devices only), OAID, Openudid, GAID, and other device identifiers formed from combined device parameters and system information), network-related information (Bluetooth, IP address, MAC address, network carrier, network status, type, access method, and network quality data), device parameter information (device name, device model), software/hardware operating system information (this application's version, operating system, language, resolution), DrinkUp account information, avatar, nickname, name, shipping address, location information, postal code, identity information, mobile phone number, bank or payment transaction account information, or other information you may be asked to provide, subject to the activity rules published at the time. If you share or interact with other people while participating in a promotional activity, we will collect and display friend relationships, friends' avatars and nicknames, the number of interacting participants, and interacting participants' avatars. When you participate in certain promotional activities, such as leaderboards and ranking activities, you may need to make your DrinkUp account, avatar, and nickname public. The information actually collected and used for a promotional activity is subject to what is displayed on the specific activity page you participate in.

1.7 Notifications

Please be aware and agree that, for the contact details you provide in the course of using our products or services (for example, contact telephone number and contact email), we may in the course of our operations send various types of notices to one or more of them, for purposes such as user notifications, identity verification, security verification, and user experience surveys.

1.8 Changes to Products and Services

Please understand that as our business develops, the features and services provided by DrinkUp may be adjusted and changed. In principle, when a new feature or service is related to the features or services we currently provide, the personal information collected and used will be directly or reasonably related to the original processing purpose. If the purpose, method, or scope of the personal information processed by the adjusted products or services changes, we will notify you again and obtain your consent in accordance with applicable laws and regulations.

1.9 Payment Services and Invoicing

To help you complete paid services, you need to provide us with certain information related to completing the transaction, including your name, ID card number, bank card type and number, expiry date and mobile phone number, order information, device information (OAID, AndroidID, IDFA), the products and/or services transacted, transaction amount, order time, order number, order status, payment method, payment serial number, payment status, and other information required by anti-money-laundering laws. We collect this information to help you complete transactions smoothly, safeguard your transaction security, allow order lookups, and provide customer service. ID card numbers and bank card information are sensitive personal information. This information is necessary for the payment function; refusal to provide it will prevent you from using this function, but will not affect the normal use of other functions. This information is necessary for the payment function; refusal to provide it will prevent you from using this function, but will not affect the normal use of other functions.

After you purchase the technical services we provide, you may ask us to issue and deliver an invoice. If you choose a paper invoice, you need to provide us with your invoicing information and the invoice delivery address, including the recipient's name, detailed address, postal code, and mobile phone number. If you choose an electronic invoice, you need to provide us with your invoicing information and email address. If you refuse to provide the foregoing information, we will be unable to assist you in issuing or delivering the invoice.

1.10 Third-Party Services

To adapt DrinkUp for use on different mobile devices and with third-party platform services, and to enable device identity authentication, device security, logging in with third-party platform accounts, and sharing information via third-party platforms, DrinkUp integrates third-party SDKs. The providers of these third-party SDKs include mobile device manufacturers, social platforms, and telecom carriers. Some third-party SDKs may invoke your device permissions and obtain related information so that you can use the corresponding features normally on different mobile devices or third-party platforms. Different third-party SDKs invoke different types of device permissions and obtain different information, which may include obtaining your location information, reading/writing your external storage card, reading your phone state and identity, viewing WLAN connections, and retrieving running applications/Bluetooth. Regarding the specific device permissions invoked by third-party SDKs and how they collect and use your personal information, we recommend that you refer to the relevant service agreements and privacy policies of those third-party SDKs. If you wish to learn more about the third-party SDKs we integrate, please read the third-party data cooperation list.

1.11 System Permission Requests

When you use the services provided by the DrinkUp app, in the course of providing the services and to ensure that you can use the product features normally, we will request the following system device permissions from your device's system. Before requesting them, we will ask for your consent, and you may choose "Allow"/"Agree" or "Deny"/"Disagree." After your authorization, we will enable the relevant permissions. You may revoke your authorization at any time in the system settings. Revoking authorization will prevent you from using the related business features, but will not prevent you from using other business features.

1.14 Business Cooperation

When you apply to enter into a business cooperation with us, we need to collect your contact telephone number and other specific details to understand your specific needs and contact you to pursue the cooperation. We may also use the above information to:

1.15 Fulfilling Our Legal Obligations

Article 10 of the Provisions on the Governance of the Online Information Content Ecosystem requires us to report relevant records to the competent authorities upon discovering illegal or harmful information. Accordingly, we will need to record and may provide to the competent authorities log information such as your account, operation time, operation type, network source and destination addresses, network source port, and client hardware characteristics, as well as personal information such as the content you input. In such circumstances, the processing of your personal information does not require your consent.

1.16 Other Uses

1.17 Exceptions to Obtaining Authorization and Consent

Please understand that, in the following circumstances, in accordance with laws and regulations, we may collect and use your personal information without obtaining your authorization or consent:

Please note in particular that if information cannot identify you either alone or in combination with other information, it does not constitute your personal information in the legal sense. When your information can identify you either alone or in combination with other information, or when we use data that cannot be linked to any specific individual in combination with other personal information of yours, such information will, during the period of combined use, be treated and protected as your personal information in accordance with this Privacy Policy.

2. How We Use Cookies and Similar Technologies

Cookies and similar device information identification technologies are commonly used on the internet. When you use our Services, we may use such technologies to send one or more cookies or anonymous identifiers (hereinafter "Cookies") to your device in order to collect, identify, and store information about your use of the Services.

Cookies are used mainly to ensure the secure and efficient operation of product features and services, allowing us to confirm the security status of your account and transactions and to troubleshoot anomalies such as crashes and delays; and to spare you the steps of repeatedly filling in forms and entering search queries, for a smoother experience. We undertake not to use Cookies for any purpose other than those stated in this Privacy Policy.

You may manage or delete Cookies according to your preferences. Most browsers provide users with a function to clear browser cache data, and you can clear Cookie data in your browser settings. However, after clearing, you may be unable to use the features or services we provide that rely on Cookies.

3. How We Share, Transfer, and Disclose Your Personal Information

3.1 Sharing

3.1.1 Principles

3.1.2 Entrusted Processing

In scenarios involving the entrusted processing of personal information, we will sign the relevant processing agreements with the entrusted partners in accordance with the law and supervise their use of personal information.

3.1.3 Joint Processing

In scenarios involving the joint processing of personal information, we will sign the relevant agreements with our partners in accordance with the law and stipulate the respective rights and obligations, to ensure that the use of the relevant personal information complies with applicable legal provisions and that data security is protected.

3.1.4 Cooperation Scenarios

Where specific features or scenarios involve services provided by our affiliates or third parties, the scope of partners includes our affiliates and third parties.

3.1.4.1 Enabling Features or Services

Payment services: to safeguard transaction security and complete payment for goods/services, the third-party institutions we cooperate with may need to process your name, ID card number, bank card type and number, expiry date and mobile phone number, order information, and device information (OAID, AndroidID, IDFA). ID card numbers and bank card information are sensitive personal information. This information is necessary for the payment function; refusal to provide it will prevent you from using this function, but will not affect the normal use of other functions. This information is necessary for the payment function; refusal to provide it will prevent you from using this function, but will not affect the normal use of other functions.

3.1.4.2 Data Use for Security, Analytics, and Statistics

Ensuring safe use: we attach great importance to the security of accounts, services, and content. To protect the account and property security of you and other users, and to keep the legitimate rights and interests of you and us free from unlawful infringement, our partners may use necessary device, account, and log information.

3.2 Transfer

If we need to transfer personal information due to a merger, division, transfer of assets, dissolution, or declaration of bankruptcy, we will inform you of the name and contact details of the recipient. We will require the recipient to continue to perform the obligations under this Privacy Policy. If the recipient changes the original processing purpose or processing method, it will seek your consent again.

3.3 Disclosure

We will not proactively disclose information that you have not disclosed yourself, unless required by national laws and regulations or with your consent.

3.4 Exceptions to Sharing, Transferring, and Disclosing Personal Information

In accordance with laws and regulations, your consent is not required for the sharing, transfer, or disclosure of your personal information in the following circumstances:

4. How We Store Personal Information

4.1 Storage Location

In accordance with laws and regulations, we will store personal information collected and generated in the course of our operations within the territory of China inside China. If the storage location of your personal information is transferred from within China to outside China, we will strictly comply with legal requirements or obtain your separate consent.

4.2 Retention Period

4.3 Storage Territory

Your personal information is stored within the territory of the People's Republic of China and will not be provided to any third party or individual outside China.

5. How We Protect the Security of Personal Information

5.1

We attach great importance to the security of your personal information and will strive to take reasonable security measures (both technical and administrative) to protect your personal information and prevent the personal information you provide from being improperly used or, without authorization, accessed, publicly disclosed, used, modified, damaged, lost, or leaked.

5.2

We will use encryption technologies no less robust than those of our industry peers, anonymization, and other reasonable and feasible means to protect your personal information, and will use security protection mechanisms to prevent your personal information from malicious attacks.

5.3

We will establish a dedicated security department, security management systems, and data security processes to safeguard your personal information. We adopt strict data use and access policies to ensure that only authorized personnel can access your personal information, and we conduct security audits of data and technology in due course.

5.4

Although the above reasonable and effective measures have been taken and the standards required by relevant laws have been complied with, please understand that due to technical limitations and the possible existence of various malicious means, in the internet industry it is impossible to always guarantee 100% information security even with the utmost effort to strengthen security measures. We will do our best to ensure the security of the personal information you provide to us.

5.5

You acknowledge and understand that the systems and communication networks you use to access our Services may encounter problems due to factors beyond our control. Therefore, we strongly recommend that you take active measures to protect the security of your personal information, including but not limited to using complex passwords, changing your password regularly, and not disclosing your account password and related personal information to others.

5.6

Once you leave DrinkUp and its related services and browse or use other websites, applications, services, and content resources, we will have neither the ability nor the direct obligation to protect any personal information you submit to software and websites outside of DrinkUp and its related services, regardless of whether your login, browsing, or use of such software or websites originated from a link or referral within DrinkUp.

6. Managing Your Personal Information

We attach great importance to your ability to manage your personal information and make every effort to protect your rights to access, copy, correct, supplement, and delete your personal information, to withdraw consent or authorization, to deactivate your account, to lodge complaints and reports, and to configure privacy settings, so that you have the ability to safeguard your privacy and information security.

Please understand that certain business features and services require your information to be completed. When you withdraw your consent or authorization, we will be unable to continue to provide you with the features and services corresponding to the withdrawn consent or authorization, and we will no longer process your corresponding personal information. However, your decision to withdraw consent or authorization will not affect any personal information processing previously carried out on the basis of your authorization.

6.1 Your Personal Information Rights

If you or another entitled party has any claim, request, or question regarding the exercise of the personal information rights conferred by relevant laws and regulations, you may contact us by email at official@drinkup.diy. We will review the issue as soon as possible and respond within 15 business days after verifying your user identity.

6.2 System Permission Management

You may go directly to your device system's settings to manage permissions such as location, contacts, microphone, camera, photo album, calendar, storage, and phone state (the names of system permissions vary across devices; the names used by your device's system prevail), in order to change the scope of authorization or withdraw your authorization.

6.3 Account Deactivation

You may apply to deactivate your own account through DrinkUp: Me - Account Deactivation. You acknowledge and understand that account deactivation is irreversible. After you deactivate your account, we will delete your relevant information or anonymize it, except as otherwise provided by laws and regulations.

After the account is deactivated, you will be unable to log in to DrinkUp with that account, and you will be unable to retrieve any content or information associated with the account. After deactivation, you shall remain responsible for your use of DrinkUp prior to the deactivation.

6.4 Feedback, Complaints, and Reports

You may file complaints or reports in accordance with our published procedures. If you have any comments, or if you believe your personal information rights may have been infringed, or you discover leads indicating an infringement of personal information rights, you may submit leads via the DrinkUp user feedback page, or contact the platform proactively by email at official@drinkup.diy.

6.5 Accessing this Privacy Policy

You may view the contents of this Privacy Policy via: DrinkUp -- Me -- Privacy Policy.

Please understand that "DrinkUp" and its related services described in this Privacy Policy may vary depending on factors such as the device model, system version, and application version you use. The final products and services are subject to the DrinkUp and related services you actually use.

6.6 Cessation of Operations and Notification

If we cease operations, we will promptly stop collecting your personal information, notify you of the cessation of operations by individual delivery or public announcement, and delete or anonymize the personal information we hold in connection with the discontinued products or services.

7. Provisions on Minors

We attach great importance to the protection of minors' personal information.

8.1

If you are a minor under the age of 18, before using DrinkUp and its related services you should read and agree to this Privacy Policy together with, and under the supervision and guidance of, your parents or other guardians.

8.2

If you are the guardian of a minor under the age of 14, before the minor uses DrinkUp and its related services you should read and agree to this Privacy Policy on behalf of your ward.

8.3

We protect minors' personal information in accordance with relevant national laws and regulations, and will only collect, use, or disclose minors' personal information where permitted by law, with the explicit consent of parents or other guardians, or where necessary to protect minors. If we find that we have collected a minor's personal information without prior verifiable consent from a parent or other guardian, we will endeavor to delete the relevant information as soon as possible.

8.4

If you are a minor's guardian and have any questions about the personal information of the minor under your guardianship, please contact us via the contact details published in this Privacy Policy.

8. Revisions to and Notification of this Privacy Policy

9.1

In order to provide you with better services, DrinkUp and its related services will be updated and changed from time to time, and we will revise this Privacy Policy as appropriate. Without your explicit consent, we will not curtail the rights you are entitled to under the currently effective version of this Privacy Policy.

9.2

After this Privacy Policy is updated, we will publish the updated version on the DrinkUp website, or, before the updated terms take effect, remind you of the updated content via an announcement in [DrinkUp app] - [wod] - [Privacy Policy] or other appropriate means, so that you can stay informed of the latest version of this Privacy Policy.

9.3

We may also help you better manage your personal information through feature updates; please pay attention to the relevant feature descriptions.

9. Contact Us

If you have any questions, complaints, comments, or suggestions regarding personal information protection or the AI generation services, you may contact us through any of the following channels:

If you are not satisfied with our response, and in particular if you believe that our personal information processing has harmed your legitimate rights and interests, you may also seek a resolution before the courts of England and Wales.

10. Appendix: Third-Party Information Sharing List (SDKs)

SDK NameService TypeTypes of Personal Information Collected
Jiguang Push (Aurora) - JPush SDK - AndroidPush notificationsApp information, device information (AndroidID, AAID, device identifiers, hardware information, system information, etc.)
Xiaomi PushPush notificationsApp information, device information (AAID, identifiers, hardware, system, etc.)
OPPO Push ServicePush notificationsApp information, device information (AAID, identifiers, hardware, system, etc.)
vivo PushPush notificationsApp information, device information (AAID, identifiers, hardware, system, etc.)
Huawei PushPush notificationsApp information, device information (AAID, identifiers, hardware, system, etc.)
Meizu PushPush notificationsApp information, device information (AAID, identifiers, hardware, system, etc.)
Getui SDKAnalytics, push serviceDevice information (IMEI, MAC, Android ID, IDFA, IP, etc.)
Umeng+ Mobile Analytics SDKAnalyticsDevice information (IMEI, MAC, IDFA, OpenUDID, IMSI, etc.)
Alibaba Cloud OSSImage storage, file uploadDevice information (IMEI, MAC, IDFA, IP, etc.)
App Payment Client SDKQuick paymentDevice information (IMEI, MAC, IDFA, IMSI, etc.)
Bugly AndroidCrash analyticsDevice information (IMEI, MAC, IDFA, IMSI, etc.)
WeChat OpenSDK AndroidSocial sharing, loginDevice information (IMEI, MAC, IDFA, IMSI, etc.)

This English translation is provided for convenience only. In case of any discrepancy, the Chinese version shall prevail.