HKU Pupu Privacy Policy

中文版本参见 HKU 噗噗隐私政策

Updated: January 25, 2024

Effective Date: January 25, 2024

Welcome to the Internet service HKU Pupu provided by Boat on Land (Tianjin) Internet Co.,Ltd. HKU Pupu is developed and operated by HKUPootal (hereinafter referred to as "we"), a student association of the University of Hong Kong. Ensuring user data security and privacy protection is our top priority. This Privacy Policy sets out the data collected and how it is processed when you visit and use our services.

This Privacy Policy applies to all services of HKU Pupu, including "Pokfulam Pupu" WeChat Mini Program, "Triple Uni" WeChat Mini Program, "HKU ONE" WeChat Official Account, "Triple Uni" website and Application Programming Interface (API), and all other products provided by us that use this Privacy Policy and services (hereinafter referred to as "the Service"). This Privacy Policy does not apply to services provided to you by other third parties. You should fully understand third-party services' product functions and privacy protection policies before choosing to use third-party services and then choose whether to use the corresponding functions or services.

Please be sure to carefully read and confirm that you fully understand all the rules and points of this privacy policy before continuing to use our services. Once you choose to use it, you are deemed to agree to the entire content of this privacy policy and agree to our collection and use of your related information.

1. COLLECTION AND USE OF YOUR PERSONAL INFORMATION

1.1 Registration and Login

To provide you with continuous and stable services and ensure the security of using this service, we need to collect your email address and user identifier.

1.2 Maintain the Regular Operation of Basic Functions

During your use of our services, to provide you with essential functions such as browsing and searching, identify abnormal account status, ensure the network and operation security of this service, and maintain the regular operation of the aforementioned essential functions, we may directly or indirectly Collect, store and correlate information about the services you use and how you use them, including:

a. Weblog information: When you use our services, we may automatically collect your detailed usage of our services and save them as weblogs.

b. Equipment information: We may receive and record information about your equipment. For example, device model, operating system and version, client version, IP address, MAC address, Wi-Fi access point information, etc. To collect the above basic personal device information, we will apply for permission to access your device information. We collect the above information to provide you with our essential services and basic functions. If you refuse to provide the above permissions, you may be unable to use our services.

Please note that individual weblog information and device information cannot identify a specific natural person and are not personal information. For the regular operation of community services, identification of users with abnormal behavior, etc., your log information and device information may be associated with your account.

Suppose we use such non-personal information to identify a specific natural person or use it with personal information. In that case, such non-personal information will be treated as personal information during the use period and processed and protected per this policy.

1.3 Interaction and Release

When you use the interactive and publishing functions (posting, commenting, following, private-messaging, voting, etc.), we will collect the content you upload, publish, or form, including text, pictures, videos, files, etc.

Please note that the information you post publicly may contain your personal information. Please consider carefully before posting. If the information you publish involves the personal information of others, you should obtain the consent of others before publishing.

Please understand that in the following situations, according to laws, regulations, and relevant national standards, we do not need your authorization and consent to collect and use your personal information:

a. Necessary for the performance of statutory duties or obligations;

b. Directly related to national security and national defense security;

c. Directly related to the criminal investigation, prosecution, trial, and execution of judgments;

d. It is necessary to respond to public health emergencies or to protect the life, health, and property safety of natural persons in emergencies;

e. Implement news reports, public opinion supervision, etc., for the public interest, and process personal information within a reasonable range;

f. It is challenging to obtain the consent of the person for the purpose of safeguarding your or other personal life, property, and other significant legal rights and interests;

g. Personal information that you disclose to the public by yourself;

h. Collecting personal information from legally disclosed information, such as legal news reports, government information disclosure, and other channels;

i. It is necessary to carry out statistical or academic research in the public interest, and when the results of academic research or description are provided externally, the information contained in the results is de-identified;

j. Other circumstances stipulated by laws and administrative regulations.

2. USE OF COOKIES AND OTHER TECHNOLOGIES

We do not obtain and use your information through Cookies or similar technologies, but other third-party services may collect such information and store such information as log information. Browsers and third-party services may use this information to remember your identity, analyze your web page visits, etc. You need to obtain more information in this regard through the user policy, privacy policy, and other documents attached to the third-party service, and we are not legally responsible for the collection and use of such data.

3. STORAGE OF YOUR PERSONAL INFORMATION

3.1 Storage Location

In accordance with laws and regulations, we will store your personal information collected and generated during the operation in the mainland area of the People's Republic of China.

At present, we will not transmit the above information overseas. If we transmit it overseas, we will strictly abide by relevant Chinese laws and regulatory policies, follow relevant national regulations, or seek your consent.

3.2 Storage Period

During your use of this service, we will continue to store your personal information, and the storage period will not exceed the period necessary to provide you with services. If we stop operating this service, we will delete or anonymize your personal information held within a reasonable period in accordance with applicable laws. After you terminate the use of this service or close the corresponding authorization, we will delete or anonymize your information, except in the following cases:

a. Comply with the requirements of laws and regulations on information retention (for example, the "Network Security Law of the People's Republic of China" stipulates: adopt technical measures to monitor and record network operation status and network security incidents and retain relevant network logs in accordance with regulations. Not less than six months);

b. Reasonable extension of the time limit is required for financial, auditing, dispute resolution, and other purposes.

4. SHARING, TRANSFER, AND DISCLOSURE OF YOUR PERSONAL INFORMATION

4.1 Sharing

To ensure the realization of relevant functions and the safe and stable operation of applications, we may access codes such as software development kits (SDKs), application programming interfaces (APIs), and application plug-ins provided by partners or through other cooperation methods to achieve related purposes.

Our partners and shared information include:

a. WeChat: User identifier, MAC address, IP address, content uploaded, published, or formed by the user

b. WeChat Pay: User identifier, MAC address, IP address

c. OpenAI: Content uploaded, posted, or formed by users

d. Baidu Translate: Content uploaded, posted, or formed by users

4.2 Transfer

With the continuous development of our business, we may transfer assets, and your personal information may be transferred accordingly. When the aforementioned changes occur, we will continue to protect or require the successor of your personal information to continue to protect your personal information in accordance with laws and regulations and the security standards not lower than the requirements of this privacy policy. Otherwise, we will require the successor to re-obtain your authorization.

4.3 Disclosure

We will not disclose your personal information unless we comply with national laws and regulations or obtain your express consent.

Please understand that in the following situations, according to laws, regulations, and national standards, we do not need your authorization to provide or disclose your personal information to partners or third parties:

a. Necessary for the performance of statutory duties or obligations;

b. Directly related to national security and national defense security;

c. Directly related to the criminal investigation, prosecution, trial, and execution of judgments;

d. It is necessary to respond to public health emergencies or to protect the life, health, and property safety of natural persons in emergencies;

e. Implement news reports, public opinion supervision, etc., for the public interest, and process personal information within a reasonable range;

f. It is challenging to obtain the consent of the person for the purpose of safeguarding your or other personal life, property, and other significant legal rights and interests;

g. Personal information that you disclose to the public by yourself;

h. Collecting personal information from legally disclosed information, such as legal news reports, government information disclosure, and other channels;

i. It is necessary to carry out statistical or academic research in the public interest, and when the results of academic research or description are provided externally, the information contained in the results is de-identified;

j. Other circumstances stipulated by laws and administrative regulations.

5. SECURITY PROTECTION OF YOUR PERSONAL INFORMATION

We attach great importance to the security of your personal information. We will strive to take reasonable security measures (including technical and management aspects) to protect your personal information and prevent the personal information you provide from being improperly used or accessed without authorization: public disclosure, use, modification, damage, loss, or disclosure.

We will protect your personal information with encryption technology, anonymization processing, and relevant reasonable and feasible means no lower than those of industry peers and use security protection mechanisms to prevent malicious attacks on your personal information.

We will establish a dedicated security department, security management system, and data security process to ensure the security of your personal information. We adopt a strict data use and access system to ensure that only authorized personnel can access your personal information and conduct security audits on data and technology in due course.

Although the above-mentioned reasonable and practical measures have been taken and the standards required by relevant laws have been complied with, please understand that due to technical limitations and possible malicious means in the Internet industry, even if we do our best to strengthen security measures, It is impossible always to guarantee 100% security of information. We will do our best to ensure the security of the personal information you provide to us.

You know and understand that the system and communication network you use to access our services may have problems due to factors beyond our control. Therefore, we strongly recommend that you take active measures to protect the security of your personal information, including but not limited to using complex passwords for the applications you use, changing passwords regularly, and not disclosing your account password and related personal information to others.

We will formulate emergency response plans, immediately activate emergency plans when user information security incidents occur, and strive to prevent the impact and consequences of these security incidents from expanding. Once a user information security incident (leakage, loss) occurs, we will promptly inform you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, and your protection and advice on risk reduction, remedies for you. We will promptly inform you of the event-related situation through push notifications, emails, letters, text messages, and related forms. When it is difficult to inform you individually, we will take reasonable and effective ways to issue announcements. At the same time, we will also report the handling of user information security incidents in accordance with the requirements of relevant regulatory authorities.

6. MANAGEMENT OF YOUR PERSONAL INFORMATION

We attach great importance to managing your personal information and do our best to protect your rights to review, copy, correct, supplement, delete, withdraw consent, cancel your account, complain and report, and set privacy functions for your personal information—the ability to protect your privacy and information security.

However, please understand that specific business functions and services will require your information to be completed. After you withdraw your consent or authorization, we cannot continue to provide you with the corresponding functions and services, and we will no longer process your corresponding personal information. However, your decision to withdraw your consent or authorization will not affect our previous processing of personal information based on your authorization.

The paths of the management methods we provide in different versions or operating systems may be different, and please refer to the actual situation.

If we stop operating, we will stop collecting your personal information in a timely manner, notify you of the notice of cessation of operation by delivery or announcement one by one, and delete or anonymize your personal information held.

7. AMENDMENT AND NOTICE OF PRIVACY POLICY

In order to provide you with better services, this service will be updated and changed from time to time. We will revise this privacy policy in due course. These revisions constitute a part of this privacy policy and have the same effect as this privacy policy. Without your explicit consent, We will not reduce your rights under this Privacy Policy currently in effect.

After this Privacy Policy is updated, we will issue an updated version and remind you of the updated content appropriately before the updated terms take effect so that you can keep abreast of the latest version of this Privacy Policy. If you continue to use this service after the update of this privacy policy, you will be deemed to accept the updated privacy policy.

In case of any inconsistency between the English version and Chinese version of this privacy policy, the Chinese version will prevail.

8. CONTACT US

For any questions, comments, or requests related to this privacy policy, you can contact us through "Mine"-"Contact Us" in the "Pokfulam Pupu" Wechat Mini Program or "Triple Uni" Wechat Mini Program, or email support@tripleuni.com. Generally, we will reply within fifteen working days after receiving your relevant contact information and verifying your identity.