—— Privacy Policy Text ——

BytePower attaches great importance to protecting your personal information and will do its best to protect your personal information. Please read and understand this "TadDiary Privacy Policy" carefully before using the "TadDiary" product and services.

Part 1: Definitions and Glossary

BytePower: Refers to BytePower (Beijing) Information Technology Co., Ltd., which operates the "TadDiary" APP

Personal Information: Various information recorded in electronic or other ways that can identify the identity of a specific natural person alone or in combination with other information, or reflect the activities of a specific natural person. Personal information includes name, ID number, personal biometric information, address, communication contact information, communication records and content, account password, property information, credit information, whereabouts, transaction information.

Personal Sensitive Information: Personal information that, once leaked or illegally used, can easily cause infringement of the dignity of natural persons or harm or discriminatory treatment of personal or property safety. Personal sensitive information includes ID number, personal biometric information, religious belief, specific identity, bank account, communication records and content, property information, credit information, whereabouts, accommodation information, medical health physiological information, transaction information, personal information of children under 14 years old (including).

Unique Device Identifier: Refers to a string of characters compiled by the device manufacturer into the device, which can uniquely identify the corresponding device. Specifically includes: [Umeng] device information (device serial number/Android_ID/IMEI/MAC/ICCID/IDFA/OpenUDID/GUID/SIM card IMSI/gyroscope sensor/accelerometer information), location information, network information, clipboard information, Umeng SDK will read information at a certain frequency, but will not exceed business function requirements

User Profile: The process of collecting, aggregating, and analyzing personal information to make analyses or predictions about the personal characteristics of a specific natural person, such as their occupation, economy, health, education, personal preferences, credit, and behavior, and form a personal characteristic model. Directly using the personal information of a specific natural person to form a characteristic model of that natural person is called a direct user profile. Using personal information from sources other than the specific natural person, such as data from the group to which they belong, to form a characteristic model of that natural person is called an indirect user profile.

De-identification: The process of technically processing personal information so that the personal information subject cannot be identified and the processed information cannot be restored. Information after de-identification processing does not belong to personal information.

Part 2: Privacy Policy

This policy includes the following content:

I. What personal information do we collect

II. How we use your personal information

III. How we share, transfer, and publicly disclose your personal information

IV. How we store and protect your personal information

V. Your rights

VI. How we handle minors' personal information

VII. How your personal information is transferred globally

VIII. How this policy is updated

IX. How to contact us

I. What personal information do we collect

The following products and services provided by BytePower to you need to rely on some information to operate. If you choose to use a certain service, you need to provide or allow us to collect the corresponding necessary information. If you refuse to provide it, it may cause us to be unable to provide that service, but it will not affect your use of other products and services. You can click to view the "TadDiary Personal Information Collection List" for details.

According to the "Regulations on the Scope of Necessary Personal Information for Common Types of Mobile Internet Applications", the TadDiary APP belongs to the electronic book category, and its basic function service is "electronic book search and reading". No personal information is required to use the basic function service.

1. Ensuring the normal operation of "TadDiary"

To ensure the normal operation of "TadDiary", when you use the "TadDiary" service, we will collect information including your terminal user's device attribute information [device serial number, Android_ID, SDK version, operator information, system platform, system version, application package name and version, device unique identifier, network card (MAC) address, international mobile device identification code (IMEI), SIM card IMSI, anonymous device identifier ( OAID), gyroscope sensor/accelerometer, Android system packaged user ID, manufacturer, model], software version number, network access method and type, location information, clipboard information, and operation logs. The above information is the basic information that must be collected for us to provide services to you through "TadDiary".

2. Registration, authentication, and login to "TadDiary" services

(1) When you register and log in to "TadDiary" services, you can use mobile phone verification code to log in.

If you create an account through your mobile phone number, we will send a SMS verification code to verify whether your identity is valid, and you can improve the network identity recognition information (avatar, nickname) according to your own needs.

(2) TadDiary does not support third-party account login, so it does not involve sharing information with third parties.

3. Providing personalized content recommendation services

TadDiary does not provide personalized content recommendation services, will not perform algorithmic recommendations on collected information, and will not make targeted pushes based on your information.

4. Conducting marketing activities

TadDiary will not provide in-app marketing activities.

5. Providing cloud storage upload services

TadDiary supports content upload services.

6. Advertising services

TadDiary does not provide in-app advertising display and will not collect your information for targeted advertising push services.

7. Third-party SDK collection and usage information description

To ensure the stable operation of TadDiary or implement functions, we may access software development kits (SDKs) provided by third parties to achieve the aforementioned purposes. We will fulfill our due diligence obligations and conduct strict security monitoring of the software tool development kits (SDKs) through which partners obtain information to protect data security. We access third-party SDKs mainly to serve your and other users' needs, so when meeting new service demands and business function changes, we may adjust the third-party SDKs we access. We will promptly disclose the latest situation of accessing third-party SDKs to you in this description. You can click to view the "TadDiary Third-Party Personal Information Sharing List" for details.

8. Self-starting services

The application will not start without authorization and will not frequently wake up the device in the background. All background behaviors are authorized by users.

II. How we use your personal information:

1. Providing you with products or services

2. Improving the products or services we provide

We will extract your behavior habits based on your device information and subscription information to improve our content and interactive experience. However, we will not conduct personalized tag algorithms and targeted push functions.

3. Providing you with security guarantees

(1) When we provide services, they are used for identity verification, customer service, security prevention, archiving and backup purposes to ensure the security of the products and services we provide to you;

(2) Software authentication or management software upgrades;

After collecting your personal information, we will use technical means to de-identify the data. De-identified information will not be able to identify the subject. Please understand and agree that in this case we have the right to use de-identified information; and under the premise of complying with relevant laws and regulations, we have the right to analyze and utilize the user database including your personal information as a whole (including commercial utilization);

(3) We collect your terminal user's device attribute information to investigate security incidents, detect and prevent fraudulent activities, and detect and prevent network attacks and abuse to ensure network security and operational security.

4. Customer service

To promptly handle your complaints, suggestions, and other appeals, we need to use the account information you have provided to promptly understand, process, and respond to your needs. If necessary, we may also need to use your mobile phone number or contact you through other communication methods. To help you solve problems as soon as possible or record the solutions and results of related issues, we may save your communication with us, communication/call records and related content (including information related to account communication, other information you provide to prove relevant facts, or contact information you leave).

5. As our business develops, we may adjust the products or services provided. If the type, purpose, method, and scope of personal information processing for adjusted and changed products or services change, we will inform you again and obtain your consent in accordance with the relevant requirements of laws and regulations.

6. When we want to use information for other purposes not stated in this policy, we will seek your consent through pop-up windows on a case-by-case basis.

7. You fully understand that we use personal information without your authorization consent in the following situations:

(1) Directly related to national security and national defense security;

(2) Directly related to public security, public health, and major public interests;

(3) Directly related to criminal investigation, prosecution, trial, and judgment execution;

(4) Maintaining the vital legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain the consent of the individual;

(5) The personal information collected is publicly disclosed by the personal information subject to the public;

(6) Collecting your personal information from legally disclosed information through legitimate news reporting and government information disclosure channels;

(7) Necessary for signing contracts according to your requirements;

(8) Necessary for discovering and handling faults in products and/or services provided to ensure the safe and stable operation of products and/or services;

(9) Necessary for legitimate news reporting;

(10) Academic research institutions conduct statistics or academic research based on public interests. When providing academic research or descriptive results to the outside, the personal information contained in the results is de-identified;

(11) Other circumstances stipulated by laws and regulations.

III. How we share, transfer, and publicly disclose your personal information

(I) Sharing

We will not share your personal information with any company, organization, or individual outside of BytePower, except in the following situations:

1. Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with other parties. The scope of shared personal information is limited to the scope you explicitly agree to;

2. Sharing de-identified information with third parties, where the third party cannot re-identify the natural person subject of such information;

3. We may share your personal information with external parties in accordance with legal requirements or mandatory requirements of government authorities.

4. Sharing with authorized partners: For the purpose of achieving the purposes stated in this policy, some of our services will be provided by authorized partners. We may share some of your personal information with partners to provide better customer service and user experience.

Currently, the situations where we share information with authorized partners may include:

Sharing with business partners for specific functions. When software service providers, smart device providers, or system service providers jointly provide services to you with us, to achieve this function, we may collect your relevant device information (including but not limited to hardware model, operating system version number, IMEI, MAC), and provide it to the aforementioned partners after de-identification processing. You may refuse to provide such information and not use the corresponding services, but it will not affect your use of other services.

We will sign corresponding confidentiality agreements with companies, organizations, and individuals with whom we share information, requiring them to process personal information in accordance with our instructions, this Personal Information Protection Policy, and any other related confidentiality and security measures.

(II) Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following situations:

1. Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;

2. In the case of mergers, acquisitions, or bankruptcy liquidation, if personal information transfer is involved, we will inform you of the name or name and contact information of the recipient and require the new company or organization holding your personal information to continue to be bound by this Personal Information Protection Policy, otherwise we will require the company or organization to re-solicit your authorization and consent.

(III) Public Disclosure

We will only publicly disclose your personal information in the following situations:

1. After obtaining your explicit consent;

2. Disclosure based on law: We may publicly disclose your personal information to entities holding mandatory documents in cases of law, legal procedures, litigation, or mandatory requirements of government authorities. Including name, nickname, avatar, communication contact information, account password, transaction information content obtained by us.

(IV) Cessation of Operations

If we cease operations of products or services, we will promptly stop continuing to collect your personal information. We will send notifications to you one by one or send cessation of operation notices to you in the form of announcements, and delete or anonymize the personal information related to the closed products or services we hold, except as otherwise provided by laws and regulations.

IV. How we store and protect your personal information

(I) Retention Period

We will only retain your personal information for the period necessary to achieve the purposes described in this policy, unless the retention period is extended with your consent or permitted by law. If you cancel your account or actively delete the above information, we will retain your existing personal information for the shortest period stipulated by laws and regulations. Within the shortest retention period stipulated by laws and regulations, except as otherwise provided by laws and regulations, we will stop processing/using your personal information except for storage and necessary security protection measures. When your personal information exceeds the above retention period, we will delete or anonymize it.

(II) Security Protection Measures

1. We will collect, use, store, and transmit user information with the "minimization" principle, and inform you of the purpose and scope of using the relevant information through user agreements and privacy policies. We will strictly abide by the relevant requirements of laws and regulations such as the "Cybersecurity Law", "Decision of the Standing Committee of the National People's Congress on Strengthening Network Information Protection", "Telecommunications and Internet User Personal Information Protection Regulations" (Order No. 24 of the Ministry of Industry and Information Technology), and "Regulations on Registration of Real Identity Information of Telephone Users" (Order No. 25 of the Ministry of Industry and Information Technology) to establish an information security guarantee system and take technical measures and other necessary measures to protect your personal information security.

2. BytePower will use various security technologies and procedures to establish a complete management system to protect your personal information, so as to avoid unauthorized access, use, or disclosure. For example: using encryption technology to ensure data confidentiality; using trusted protection mechanisms to prevent data from malicious attacks; authorizing relevant access; regular data security special inspections and security protection and detection measures; conducting data security awareness training for employees and capability training to strengthen employees' awareness of the importance of protecting personal information.

3. Please understand: The Internet environment is not 100% secure. We will do our best to ensure the security of any information you send to us, but due to technical limitations and possible various malicious means, even if we have strengthened security measures as required by relevant laws and regulations, it is impossible to always guarantee 100% information security.

4. In the unfortunate event of a personal information security incident, we will inform you in a timely manner in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, your suggestions for autonomous prevention and risk reduction, and remedial measures for you. We will inform you of the incident through email, letter, telephone, push notification, etc. When it is difficult to inform the personal information subject one by one, we will adopt reasonable and effective methods to issue announcements. At the same time, we will also actively report the handling of personal information security incidents to regulatory authorities in accordance with their requirements.

V. Your Rights

(I) Query, correct, and supplement your personal information

1. If you want to access or edit personal information in your account, change your password, you can log in to your personal account at any time and complete the above operations through "Settings".

2. If you want to query personal upload content and order information, you can log in to the "TadDiary" APP personal account at any time and complete the above operations through "My".

3. After passing user identity verification, and if the correction does not affect the objectivity and accuracy of the information, you have the right to correct, update, and supplement incorrect or incomplete information. You can perform the aforementioned operations in the "TadDiary" product, or contact customer service through the contact information stated in Article 9 "How to Contact Us" in this policy and submit correction, update, and supplement applications to us.

(II) Delete personal information

You can directly clear or delete information in our product and/or service pages, including favorite information. For ways and methods to delete personal information, please see the description of withdrawing authorization in the content section of each application product and service under this policy.

In the following situations, you can submit a request to delete personal information to us through the methods stated in Article 9 "How to Contact Us" of this Privacy Policy:

1. If our processing of personal information violates laws and regulations;

2. If we collect and use your personal information without your consent;

3. If our processing of personal information violates our agreement with you;

4. If you no longer use our products or services, or you have canceled your account;

5. If we no longer provide you with products or services, or the retention period has expired.

After you delete information from our services, we may not immediately delete the corresponding information from the backup system, but we will delete this information when updating the backup.

If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal information from us as soon as possible and require them to delete it in a timely manner (unless otherwise provided by laws and regulations, or these entities have obtained your authorization independently).

(III) Withdraw consent

Each business function requires some basic personal information to be completed. For the collection and use of additional personal information, you can give or withdraw your authorization consent at any time.

1. You can change the scope of our continued collection of personal information or withdraw your authorization by deleting information, turning off device functions, or making privacy settings in the "TadDiary" APP.

Withdraw authorization for collecting personal information from the "TadDiary" APP through your personal device.

2. When you withdraw your consent or authorization, we will not be able to continue to provide you with the services corresponding to the withdrawal of your consent or authorization, and we will no longer process your corresponding personal information. However, your decision to withdraw consent or authorization will not affect the personal information processing previously conducted based on your consent or authorization.

(IV) Account cancellation

After you cancel your account, we will stop providing you with products or services, and delete your personal information in accordance with your requirements, except as otherwise provided by laws and regulations. If you want to cancel your TadDiary account, you can cancel it through the "TadDiary" APP. The specific way to cancel the account (My->Settings->Cancel TadDiary Account;

(V) Personal information copy acquisition

If you need a copy of your personal information, you can contact us through the feedback channels listed in "9. How to Contact Us" in this policy. After verifying your identity, we will provide you with a copy of your personal information in "TadDiary" (including basic information, identity information), except as otherwise provided by laws and regulations or otherwise agreed in this policy.

VI. How we handle minors' personal information

(I) We attach great importance to the protection of minors' personal information. If you are a minor under 14 years of age, please have your guardian read this Privacy Policy carefully before using our services, and obtain the consent of your guardian in advance. We will protect minors' personal information in accordance with relevant national laws and regulations. Some of our services may require you to provide specific personal sensitive information to achieve specific functions (including functional sections specifically for children, or products or services that require users to input birthday and age information that can identify user age). If you choose not to provide such information, you may not be able to use specific functions in the service normally, but it will not affect your use of other functions in the service. If you actively provide your personal sensitive information, it means that you agree that we will process your personal sensitive information as described in this policy.

(II) For the collection of minors' personal information with the consent of guardians, we will only use or publicly disclose this information under circumstances permitted by law, with explicit consent of guardians, or when necessary to protect minors.

(III) If we find that we have collected minors' personal information without obtaining verifiable prior consent from guardians, we will try to delete the relevant data as soon as possible.

VII. How this policy is updated

(I) Our personal information protection policy may be changed. Without your explicit consent, we will not reduce the rights you should enjoy under this Personal Information Protection Policy.

(II) We will publish any changes we make to this policy on our website and APP. After the updated terms take effect, when you log in to the website or start the APP next time, we will remind you of the updates in a prominent pop-up form so that you can timely understand the latest version of this Privacy Policy and confirm whether you agree. If the updated content requires your authorization to collect audio and video, obtain address book, contact information, and geographical location permissions, which will cause actual reductions or major changes in your rights under this Privacy Policy (such as changes in the type, purpose, and method of personal information processing), we will still seek your consent in a prominent manner again.

(III) Unless otherwise specified, the revised privacy policy shall take effect from the date of publication.

VIII. How to Contact Us

If you have any questions, comments or suggestions about this Personal Information Protection Policy, you can contact us through online customer service or Personal Information Protection Commissioner [bytepower@aliyun.com]. We will review the issues as soon as possible and reply within 15 days after verifying your real identity.

If you are not satisfied with our reply, you can also seek resolution by filing a lawsuit with a court having jurisdiction over the location of BytePower (Beijing) Information Technology Co., Ltd.