Under applicable laws and regulations, network service providers must take appropriate security measures to safeguard users’ personal information. Accordingly, Qingdao Hengxing University of Science and Technology (the “University”, “we”, “us” or “our”) has formulated this Hengxing Ability User Service and Privacy Protection Agreement (this “Agreement”).
This Agreement applies only to this product and its services. It does not apply to services provided to you by other third parties, which are governed by the privacy policies those third parties provide to you.
When you use our products and services, we may collect and use your personal information. This Agreement explains how we collect, store, use, process, transmit, provide, disclose and delete your personal information in providing our products and services, the rights you have over your personal information, and how we safeguard its security.
Before using our products or services, please carefully read and understand this Agreement, particularly the provisions highlighted in bold and underlined text. Once you fully understand them, you may make the choices you consider appropriate by following the product’s instructions before you begin using it. By beginning to use our products and services (and selecting the box indicating agreement to the relevant product agreement), or by continuing to use them after we update this Agreement, you confirm that you fully understand and agree to this Agreement, including any updated version, and consent to our processing of your information as described herein.
If you have any questions, comments or suggestions about this Agreement, you may contact us through the contact channels we provide.
Part One · Definitions
Personal information: Any information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding anonymized information.
Sensitive personal information: Personal information that, if disclosed or used unlawfully, could easily infringe a natural person’s dignity or endanger their personal or property security. This includes biometric data, religious beliefs, specific identity information, medical and health information, financial accounts, location and movement records, and the personal information of minors under the age of 14. Specific sensitive personal information covered by this Agreement is prominently highlighted in bold and underlined text.
Deletion of personal information: The removal of personal information from systems involved in day-to-day business functions so that it can no longer be retrieved or accessed.
Children: Minors under the age of 14.
Unless otherwise agreed, terms in this Agreement have the same meanings as those in the User Registration and Use Agreement on the University’s website.
Part Two · Privacy Policy
This Agreement will help you understand the following:
- How we collect and use your personal information
- How we use cookies and similar technologies
- How we share, transfer and publicly disclose your personal information
- How we protect and retain your personal information
- How you can manage your personal information
- Protection of minors’ information
- How your personal information is transferred globally
- How this Agreement is updated
- How to contact the University
1. How we collect and use your personal information
To provide our products and services, we collect and use your personal information in the following ways:
(1) Becoming a registered user
Account registration information: When you first register a University account, you must provide your mobile phone number or email address (for enterprise accounts) and create a login password. This information is required to register an account. Without it, you cannot use our services. After registering successfully, you can sign in using your mobile phone number and account password to access our products and services.
(2) Providing products or services to you
When you use our products and services, we collect the following information and request the relevant permissions to keep our services operating normally, improve and optimize your experience, and protect your account:
1. Device information: Depending on the specific permissions you grant during software installation and use, we receive and record information about your device, including its model, operating system version, IP address, software version, settings, operating environment and other hardware and software characteristics. We also receive device location information, including GPS location you authorize us to access, information from sensors such as WLAN access points and base stations, and accelerometer information.
2. Log information: We collect and retain detailed records of your use of our services, including how you connect to the network, the network type and status, network quality data, operation logs and service logs. Device information and service logs, taken alone, cannot identify a specific natural person. If we combine such non-personal information with other information to identify a natural person, or use it together with personal information, it will be treated as personal information while combined. Unless we obtain your separate consent or laws and regulations provide otherwise, we will anonymize or de-identify such information.
3. Personal information you submit through our customer service, website messages or activities: When you contact us, we may retain records and content of your communications or calls, and contact details you provide, so that we can contact you, help resolve issues, or record how an issue was handled and its outcome.
4. Email address: If you wish to receive service notifications by email, you can link your email address in your personal account center. Providing an email address is optional. Declining to provide it does not affect your use of our services, and you can still receive relevant notifications by SMS.
5. Granting relevant permissions: Depending on the products and services you use, we may request certain device permissions. If you do not authorize our application to obtain a relevant permission, your use of the basic products and services that depend on it will be directly affected, except where the operating system permission is not required for the basic function:
1) Camera permission: Used for real-name identity verification and taking photographs in applicable scenarios, only with your authorization and consent.
2) Microphone permission: Used to record audio in specific evidence-collection scenarios, only with your authorization and consent.
3) Photo access permission: Used for OCR recognition of identity documents during real-name verification, assignment submissions, saving images, downloading images and similar operations, only with your authorization and consent.
4) Storage permission: After you enable device storage access, original photo or video files are written to storage when you download materials.
5) Location-sharing permission: Used during evidence collection to obtain device location information, including authorized GPS location, information from sensors such as WLAN access points and base stations, and accelerometer information. This requires your authorization and consent. If you do not grant permission, some functions may be restricted, or the evidence-collection location may not be displayed in information recorded on the blockchain.
6) Device information permission: Used for signing in to your user account.
Please note: The permissions above can be used only after you enable them on your device, allowing the relevant information to be collected and used. You can view their status in your device’s Settings / App Permissions (the location varies by device) and enable or disable them as needed.
Please be aware: Enabling a permission authorizes us to collect or use the related personal information to provide the corresponding products and services. Disabling it withdraws that authorization, and we will stop collecting and using personal information on the basis of that permission. This may prevent us from providing the corresponding products and services, but it does not affect data generated when services were previously provided with your authorization.
(3) Other uses
If we collect your personal information for a specific purpose not stated in this Agreement, we will obtain your authorization in advance. We collect and use the information described above to improve our products and services. We will notify you of updates through means including, but not limited to, website announcements, email, telephone or SMS.
If we permanently discontinue our products or services, we will promptly stop collecting your personal information. We will notify you individually or by public announcement at least 50 days before permanently discontinuing the products or services, and will delete or anonymize the personal information we hold.
(4) Exceptions to authorization and consent
Please understand that, under applicable laws and regulations, we may collect and use your personal information without your authorization or consent in the following circumstances:
1. Where this relates to the personal information controller’s fulfillment of obligations imposed by laws and regulations;
2. Where this directly relates to national security or national defense;
3. Where this directly relates to public security, public health or significant public interests;
4. Where this directly relates to criminal investigation, prosecution, trial or enforcement of judgments;
5. Where this is necessary to protect the life, property or other major lawful interests of the information subject or another person, but obtaining their consent is difficult;
6. Where the personal information has been made public by the information subject;
7. Where this is necessary to enter into or perform a relevant agreement or other written document with the information subject;
8. Where the personal information is collected from lawfully disclosed sources, such as lawful news reports or government information disclosures;
9. Where the personal information controller is a news organization and the processing is necessary for lawful news reporting;
10. Where the personal information controller is an academic research institution, the processing is necessary for statistical or academic research in the public interest, and personal information in any published research findings or descriptions is de-identified.
4. How we protect and store your personal information
Storage of your personal information
(1) Storage location
Information collected and generated through products and services we operate within the People’s Republic of China is stored only within the People’s Republic of China.
(2) Retention period
While you use our products and services, we retain your personal information for the period necessary to fulfill the purposes stated in this Agreement and to comply with mandatory legal retention requirements. Once the retention period expires, we will delete or anonymize your personal information as required by applicable law.
We take the following measures to protect your information:
(1) Data security technology and management measures
1. We use industry-standard safeguards and security technologies to prevent unauthorized access, use or alteration, and to avoid damage, loss or disclosure of your information. Our application services use measures including, but not limited to, SSL encryption for data transmission to protect the confidentiality and integrity of your data in transit.
2. We use encryption to store your information and implement strict access-control procedures governing access to and use of your information.
3. All employees who handle your information sign a Confidentiality Agreement. Employees whose responsibilities involve processing personal information also sign a Personal Information Privacy Protection Responsibility Statement specifying their duties to protect your information.
4. We regularly provide information security and privacy training to raise employees’ awareness of information security and the protection of users’ privacy.
(2) Collecting only what is necessary
We take all reasonable and practicable measures to avoid collecting irrelevant personal information. We retain your personal information only for as long as necessary to achieve the purposes stated in this Agreement, unless a longer retention period is required or permitted by law.
(3) Important reminders
We have a duty to remind you that the internet is not completely secure. Please use complex passwords as required, do not disclose your passwords or verification codes, and do not casually lend your account or devices to others. Take care to protect your devices and personal information. If you sign in on a public device, do not allow it to remember your password, and sign out promptly after use to prevent unauthorized access. If you notice unusual activity or unauthorized use of your account, change your password promptly and contact us through the channels stated in this Agreement if you need assistance.
(4) Responding to personal information breaches
If a personal information breach occurs, we will promptly inform you, as required by applicable laws and regulations, of its basic circumstances and possible effects, the measures we have taken or intend to take, steps you can take to prevent or reduce risk, and remedies available to you. We will notify you promptly by email, letter, telephone, push notification or other means. Where individual notification is difficult, we will issue a reasonable and effective public announcement. We will also proactively report our handling of the breach to the relevant regulators as required.
5. How you can manage your personal information
We protect your rights to access, correct and delete your personal information so that you can safeguard your privacy and security. Your rights include:
(1) Access and correction
We encourage you to update and amend your information promptly to keep it accurate and effective. Except as otherwise provided by law, you have the right to access your information and, depending on how that information is managed, to amend or supplement it yourself or ask us to do so.
(2) Deletion
You may request deletion of your personal information by contacting our customer service team at 0532-8666-7063 in the following circumstances:
1. If our processing of personal information violates laws or regulations;
2. If we collect or use your personal information without your authorization or consent;
3. If our processing of personal information breaches our agreement with you;
4. If you no longer use our products or services, or you have closed your account;
5. If we permanently discontinue our products or services.
After you delete information yourself, or we help you delete it, applicable laws and security technologies may prevent its immediate removal from backup systems. We will store it securely, stop other processing activities and isolate it until the backup can be cleared or the information anonymized.
(3) Changing the scope of your authorization and consent
Each product or service function requires certain basic personal information. You may grant or withdraw your authorization and consent at any time. To withdraw authorization, contact our customer service team at 0532-8666-7063. We will respond and process your request within 15 working days. After withdrawal, we will stop processing the corresponding personal information on the basis of that authorization. Withdrawal does not affect the validity of processing previously carried out with your consent.
(4) Raising an objection
If you believe our processing of your personal information violates this Agreement or applicable laws or regulations, you may raise an objection with our customer service team at 0532-8666-7063. We will respond and process your objection within 15 working days.
(5) Account closure
If you wish to stop using our products and services, you may request closure of your account by contacting our customer service team at 0532-8666-7063. We will verify and process your request within 15 working days.
Please note: Closing your account prevents further use of the University’s related products and services. We will delete or anonymize your personal information as required by applicable laws and regulations. After account closure, your personal information will no longer be retrievable or accessible, and we will no longer use or provide personal information associated with that account to others. However, information you provide or generate through our electronic signature services must be retained for more than five years in accordance with the Electronic Signature Law of the People’s Republic of China. During that period, we must cooperate with lawful inquiries from competent authorities.
(6) Responding to your requests
For security reasons, we may require a written request and identity verification before processing your request.
In principle, we do not charge for reasonable requests. We may, however, charge an appropriate fee for repeated requests that exceed reasonable limits. We may refuse requests that concern information not directly associated with your identity, are unjustifiably repetitive, require excessive technical measures (such as developing a new system or fundamentally changing existing practices), put others’ lawful rights and interests at risk, or are impracticable.
Under applicable laws and regulations, we cannot respond to your request in the following circumstances:
1. Where it relates to national security or national defense;
2. Where it relates to public security, public health or significant public interests;
3. Where it relates to criminal investigation, prosecution, trial or enforcement of judgments;
4. Where sufficient evidence indicates that the information subject is acting in bad faith or abusing their rights;
5. Where responding would seriously harm the lawful rights and interests of you or another individual or organization;
6. Where trade secrets are involved.
6. Protection of minors’ information
We presume that you have the corresponding capacity for civil conduct.
If you are a minor, we recommend that your parent or legal guardian read this Privacy Policy carefully. You should use our services or provide information to us only with their consent. Where we collect a minor’s personal information through use of our products or services with parental or guardian consent, we use, share, transfer or disclose it only where permitted by law, expressly agreed to by the parent or guardian, or necessary to protect the minor. We protect minors’ personal information in accordance with applicable national laws and regulations and this Agreement. Once we identify a user as a minor, we will notify their guardian and require the guardian’s consent to the rules for collecting and using the minor’s personal information. For information collected when a minor uses our products or services with the consent of a parent or other guardian, we use, share, transfer or disclose it only where permitted by law, expressly agreed to by that parent or guardian, or necessary to protect the minor.
If you are a minor’s parent or other guardian, please check whether the minor in your care uses our products and services with your authorization and consent.
If you have questions about a minor user’s personal information, or that of a minor in your care, please contact us at 0532-8666-7063.
7. How your information is transferred globally
Personal information collected and generated through our operations within the People’s Republic of China is stored in China, except in the following circumstances:
(1) Where applicable law expressly provides otherwise;
(2) Where we have obtained your explicit authorization;
(3) Where you use our products or services over the internet from outside the People’s Republic of China, following lawful procedures and in accordance with your authorization or an agreement;
In these circumstances, we will ensure that your personal information receives adequate protection in accordance with laws and regulations and this Agreement.
8. How this Agreement is updated
(1) To improve our services, we may revise and update this Agreement as circumstances and needs change or in response to your suggestions. Revisions and updates take effect on the published effective date. We will publish updated versions on our website and mobile platforms and, before they take effect, notify you of the changes through website announcements or other appropriate means. Please also visit our website to stay informed about the updated Agreement.
(2) For significant changes, we will provide a more prominent notice, including, but not limited to, email, SMS or special notices on the pages you browse, explaining the specific changes. Significant changes under this Agreement include, but are not limited to:
1. Significant changes to our products or service model, such as the purposes for processing personal information, the types of personal information processed or how personal information is used;
2. Significant changes to our ownership or organizational structure, including a change of information controller resulting from business restructuring, bankruptcy, mergers or acquisitions;
3. Changes to the main recipients with whom personal information is shared, transferred or publicly disclosed;
4. Changes in cooperation with third-party suppliers;
5. Changes to the department responsible for personal information security, contact details or complaint channels;
6. A personal information security impact assessment indicating a high risk.
Third-party SDK information
To support the stable operation of this application and its core features, we integrate the following third-party SDKs. Their details are listed below.
| SDK name | Developer | Information collected | Purpose | Privacy policy |
|---|---|---|---|---|
| Tencent Cloud Live Streaming SDKLiteAVSDK | Shenzhen Tencent Computer Systems Co., Ltd. | Images captured by the camera (processed locally only; not uploaded through live streaming), and device information. | Local camera preview, photographing and image capture for face capture and facial recognition. | Tencent Cloud privacy policy |
| Tencent Short Video UGSV SDKcom.tencent.ugc | Shenzhen Tencent Computer Systems Co., Ltd. | Same as above; this SDK is part of the live streaming component and is used to capture camera images. | Camera image capture and preview. | Tencent Cloud privacy policy |
| uni-app Runtime SDK | DCloud (Digital Paradise) | Device identifiers, network status and system information. | Application framework operation and compatibility across platforms. | DCloud privacy policy |
9. How to contact the University
If you have any questions, comments or suggestions about this Agreement, or wish to make a complaint concerning personal information security, you may contact us through the following channels. We will respond to your request within 15 working days:
(1) Through the contact channels for suggestions and feedback provided in the product;
(2) By calling our customer service team at 0532-8666-7063;
If you are not satisfied with our response, particularly if our processing of your personal information harms your lawful rights and interests, you may also seek a remedy through the people’s court at the domicile of Qingdao Hengxing University of Science and Technology Co., Ltd.