Humhum - Privacy Policy

Humhum app (hereinafter referred to as " Humhum," "we," "the Service," or "our") is governed by our Terms of Service, which you can view here. In this Privacy Policy, we collectively refer to our products and services as the "Service." Please continue reading to learn more about how we process data. We respect your privacy and want you to understand how we collect, use, and share your data. This Privacy Policy covers our data collection practices and explains your rights to access, correct, or restrict our use of your personal data; this policy is written in plain language and avoids legal and technical jargon as much as possible. Your privacy is at the heart of our design and construction of the services and products you know and love so that you can fully trust them and focus on building meaningful connections. Unless we link to other policies or state otherwise, this Privacy Policy applies to your access to or use of the Service. Your use of the Service constitutes your agreement to the terms of this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Service.

1. Controller

• Data processing control: The data processing control entity is Humhum . You can contact us via email (zlilin0903@163.com ).

2. What data do we collect?

This Privacy Policy applies to the websites, applications, and other services we operate. We process personal data that you, as a user of our products, provide to us (e.g., through the use of our products) and personal data that users provide to us (“Data”). If you do not provide certain data, such as basic profile information and the type of people you wish to connect with, we will be unable to help you build meaningful connections. We also collect information generated when you use our services, such as access logs, and information from third parties (e.g., when you access our services through social media accounts ). In addition, we automatically collect some data, such as information about your device, and which parts of our services you have interacted with or in what areas you have spent time.

2.1 The data you provided to us

Account Data: To use certain features (such as registering an account), you need to create a user account. When you create or update your account, we collect and store the data you provide, such as your name, gender, and date of birth, and assign you a unique identification number (“Account Data”).

Personal Profile: You may also choose to provide personal information such as a photo, bio, name, or other details. Your personal profile will be publicly visible to others unless you delete your account . To add certain content (such as pictures or videos), you may need to allow us access to your camera or photo album. In some jurisdictions, certain information you choose to provide to us may be considered “special” or “sensitive,” such as your race or ethnicity, sexual orientation, and religious beliefs. By choosing to provide such information, you consent to our processing of that information.

Data Usage: When you use our services and features, we collect certain data, including messages, audio, photos, videos, gifts, and other user data. Of course, as part of our service operations, we also process your chat history with other users and the content you post.

Shared Content: Some services allow you to interact with other users or publicly share content, including gifts you receive, videos you post, and data you provide in your profile. This shared content may be publicly visible to other users, depending on where it is posted.

Promotional Activities: When you choose to participate in our promotional activities, events, or contests, we will collect your registration or entry information. If you win a prize, we will collect your financial information as a reward.

• Your account data on other services: If your social media or other online accounts are linked to your accounts on our services, we may obtain certain information from those accounts. If you sign in to our services through Google , we may ask for your permission to access certain information from your other accounts. For example, depending on the platform or service, we may collect your name, profile picture, gender, personal information, and date of birth.

These platforms and services provide us with information through their application programming interfaces (APIs). The information we receive depends on what you (through your privacy settings) or the platform or service decides to provide us with.

If you access or use our services through a third-party platform or service, or click on any third-party links, the collection, use, and sharing of your data will also be subject to the third party's privacy policy and other agreements.

Paid Service Data: All our paid services are offered through the iOS or Android platforms. We only accept transaction receipts from these platforms. For security reasons, we do not collect or store sensitive cardholder data, such as complete credit card numbers or card verification data.

• Communication and Support: If you contact us for support or to report a problem or concern (whether you create an account or not), we collect and store your contact information, messages, and other relevant data, such as your name, email address, operating system, IP address, and any other data you provide or that we collect automatically (see below). We will use this data in accordance with this Privacy Policy to respond to you and investigate your questions or concerns. If you request that we communicate with other people or otherwise process their information (for example, if you ask us to send an email to your friend on your behalf), we will collect information you provide about that other person in order to fulfill your request.

Sensitive Information: Please be cautious when posting sensitive information in your profile, such as your religious beliefs and health status. While you may voluntarily provide such information when creating your profile, it is not mandatory. Please note that photos or any video clips you post on our services may reveal such sensitive personal information. By uploading and choosing to inform us of your sensitive information, you expressly consent to our processing of your information and its disclosure to other users.

We may need to use system permissions on your device (excluding third-party calling permissions) to collect relevant personal information. While we briefly mentioned this in the previous section, this section will outline all the system permissions used by Humhum to provide you with a more systematic, complete, and transparent overview. You can choose whether to authorize our use of the corresponding permissions on your device. If you do not authorize our use of the relevant permissions, some services may become unavailable, but this will not affect your use of other features of Humhum.

Album and storage permissions

Once you agree to enable this permission, we will use the photo album read and storage function on your device. This function will be used to upload text, images, videos, and other content on your device, and may cache text, images, and videos generated while using the Humhum service. Please note that we will not automatically read the stored content of your local photo album. We will only obtain image/video data after you agree to enable this permission and actively select the corresponding images from your album. If you refuse this authorization, the above function will not work properly.

Microphone permissions

Once you agree to enable this permission, we will use your device's microphone and recognize the voice information you upload. This permission will be used to implement the voice input function and to collect and recognize the voice information you input in the process. If you refuse this authorization, the above functions will not be available.

Message push permissions

Once you agree to enable this permission, we will send you push notifications so you can receive and understand our notifications in a timely manner. If you refuse this authorization, you will not be able to receive our push notifications.

Camera permissions

Once you agree to enable this permission, we will use the camera functionality on your device. This functionality will be used to take photos and record videos, and to collect and identify images and videos taken or recorded during the performance of these functions. If you refuse this permission, the above functionality will not be available.

Floating window permissions

In order to make the content of the "Party Room" float above other content, we will request your floating window permission. If you refuse to grant permission, the above function will not be available.

Device information access permissions

By granting this permission, you agree that we will collect your device information to protect your account and login security. This information will be used for optimizing user experience, security checks, identifying frequently used devices, and tracking device binding status. If you are an Android user, refusing this permission will prevent you from using this product and/or service normally. If you are an iOS user, due to iOS system limitations, you may not be able to directly refuse or disable the above permission. However, for certain device information (such as IDFA information, which is updated from time to time according to iOS system policies), you can choose whether to authorize us to collect it. If you refuse authorization, we may not be able to provide you with the corresponding functions or services (for example, if you refuse our collection of your IDFA information, we will not be able to provide you with personalized displays based on the IDFA tracking identifier).

Access the network and obtain network status permissions

Our app can only connect to the internet after you grant this permission. Additionally, for risk control and service provision, we will monitor network changes and alert users to the current network environment. If you refuse this authorization, you will not be able to use this product and/or service properly.

2.2. Data from other sources

In addition to the information you provide to us directly, we may also obtain information about you through other means or automated methods, including:

System data: Technical data about your computer or device, such as your IP address, device type, operating system type and version, unique device identifier, device language, browser, browser language and other system data and platform type (“System Data”).

• Data usage: We collect information about your activities on our services, such as how you use them (e.g., your login date and time, features you use, search preferences, number of clicks, pages shown to you, referral URLs, ads you click) and how you interact with other users (e.g., users you connect with and interact with, the time and date of communication, the number of messages you send and receive, the amount of content you post).

Device Information: We will collect information about the device you use to access our services, including:

Hardware and software information, such as IP address, device type, device-specific settings and application settings and characteristics, application crashes, advertising IDs (such as Google's AAID and Apple's IDFA, which are randomly generated numbers that you can reset by going into your device settings), browser type, version and language, operating system, time zone, and identifiers associated with cookies or other technologies that may uniquely identify your device or browser.

o Other information with your consent: If you authorize us, we may collect your precise geolocation information (latitude and longitude) in various ways, depending on the services and devices you use, including Wi-Fi connections. If you consent, we may collect your photos and videos (for example, if you want to post photos, videos, or streams on the service).

• Approximate geographic location data: The approximate geographic location calculated based on your IP address, including information such as country/region, city, and geographic coordinates.

• Other partners: We may receive information about you from our partners, for example, when our ads are published on a partner’s website and platform (in which case they may pass on details about the success of the campaign).

3. How do we obtain your data?

We use tools such as analytics services and advertising providers to collect the data listed below. Some of these tools allow you to opt out of data collection.

3.1 Analysis

Our primary purpose in using your information is to provide and improve our services. We also use your information to ensure your safety. Please read on for a detailed explanation of the various reasons why we use your information, along with real-world examples.

Third-party usage analysis tools:

SDK: Rongyun

Manufacturer: Rongyun

Purpose: To provide real-time messaging functionality and services.

Information collected: Device brand, device model, ANDROID_ID, operating system version, CPU information, memory usage, IP address, network access method and type, user ID under the application key, application package name, time zone, language, application version number, application key, user token, RongCloud SDK version number, carrier code, API call error code, link failure error code.

Privacy Policy: https://doc.rongcloud.cn/rcloud/-/-/privacy#%E4%B8%80-imlib-sdk

SDK: Agora

Manufacturer: Agora

Purpose: Voice calls

Information collected: Network type, user's local IP address, Wi-Fi and cellular network signal status, operating system, device model, CPU, memory, device power supply, audio stream data, Bluetooth, network latency, packet loss rate, bit rate, resolution, audio bit rate, sampling rate.

Privacy Policy: https://www.shengwang.cn/SDK-privacy-policy/

SDK: Facebook

Manufacturer: Meta

Purpose: Facebook Activity Manager

Information collected: Please see https://www.facebook.com/privacy/policy/?section_id=1-WhatInformationDoWe

Privacy Policy: https://www.facebook.com/privacy/policy/?section_id=0-WhatIsThePrivacy

SDK: Adjustments

Manufacturer: Adjust

Application: Installation data attribution analysis

Information collected: application activity, device or other identifiers

Privacy Policy: https://help.adjust.com/en/article/google-play-data-safety#data-collection-by-adjusts-sdk

We are committed to providing robust security measures for users' personal information to prevent its unauthorized use, access, disclosure, leakage, damage, and loss. We will take all reasonable security measures to ensure information security. For example, we will use encryption technologies (such as SSL), anonymization, and encrypted storage to protect your personal information; we will establish reliable protection mechanisms to prevent malicious attacks on personal information; we will establish access control mechanisms and adhere to the principle of least privilege to ensure that only authorized personnel can access personal information; and we will conduct training courses on security and personal information protection to raise employees' awareness of personal information protection.

If you discover that your personal information, especially your account or password, has been compromised, please contact us immediately so that we can take appropriate measures based on your request.

3.2 Online Advertising

We use third-party advertising services, such as Google's advertising services (DFP, AdMob, AdX) and Facebook Audience Network, to serve online ads to our end users across our services, including mobile apps and websites. Ads may be based on information we have about you (see Section 2.2, “Data from Other Parties”) and information these advertising service providers have about you based on their tracking data. Ads may be based on your recent activity or your activity on other services over a period of time and may be personalized based on your preferences and interests. You may also receive personalized online ads while using other services. We work with marketing service providers such as Facebook (“Marketing Service Providers”) to help us promote and advertise our apps and services on third-party websites and apps and to measure the effectiveness of our advertising campaigns. We may use data to add you to a “Custom Audience” that receives Humhum ad content (a Custom Audience is essentially a list of people we believe are most likely to be interested in a particular ad).

Depending on the type of advertising services we use, we may place cookies or other tracking technologies on your device to collect data on your use of our services, and may access these tracking technologies to provide you with personalized advertising. To help provide personalized advertising, we may provide these service providers with hashed, anonymized versions of your personal information, as well as content you publicly share on the service, in a non-human-readable form.

If you access or use our services through a third-party platform or service, or click on any third-party links, the collection, use, and sharing of your data will also be subject to the privacy policies and other agreements of that third party.

All third-party tools comply with GDPR regulations.

• If your region is protected by CCPA and GDPR, you can change your personalized advertising preferences in your settings.

4. Purpose of using your data

Our primary purpose in using your information is to provide and improve our services. We also use your information to ensure your safety. Please read on for a detailed explanation of the various reasons why we use your information, along with real-world examples.

To manage your account and provide you with our services

Create and manage your account

• Provide customer support and respond to your requests

Complete the transaction

We will communicate with you about our services, including order management and billing.

Helping you connect with other users

We analyze your profile and those of other users to recommend meaningful connections.

• Show each other user profiles

Improve our services and develop new services

• Organize focus group interviews and surveys

• We study and analyze user behavior to improve our services and content (for example, we may decide to change the look or even make significant changes to a feature based on user behavior).

Develop new features and services (for example, we might build new interest-based features based on user requests).

Preventing, detecting, and combating fraud or other illegal or unauthorized activities

• Handling persistent or suspected misconduct both inside and outside the platform.

• Conduct data analysis to better understand these activities and develop responses.

• Retain data related to fraudulent activities to prevent recurrence.

Ensure compliance with the law

Comply with legal requirements

Assist law enforcement agencies

• In order to enforce or exercise our rights, such as our terms and conditions

In order to process your information in accordance with the above methods, we do so based on the following legal grounds:

Providing you with services: We typically process your information to fulfill the contracts between you and us. For example, when you use our services to build meaningful connections, we use your information to maintain your account and profile, make it visible to other users, and recommend other users to you.

Legitimate Rights: We may use your information where we have legitimate rights. For example, we may analyze user behavior on our services to continuously improve them; we may recommend offers that we think may be of interest to you; and we may process your information for administrative, fraud detection, and other legal purposes.

marketing:

• Push notification marketing: With your explicit consent, we will send you marketing push messages.

• Email Marketing: With your explicit consent, we may send you marketing emails.

• SMS: With your explicit consent, we may send you an SMS message.

Consent: We may ask for your consent from time to time to use your information for certain specific reasons. You can withdraw your consent at any time by contacting us at the address provided at the end of this Privacy Policy.

5. How do we share information?

5.1 With other users:

When you voluntarily disclose information (including your public profile) on the service, you are sharing information with other users. Please handle your information with care and ensure that what you share is what you wish to make public, because once you share information, neither you nor we can control how others use that information.

5.2 With our service providers and partners:

We use third-party services to help us operate and improve our services. These third-party service providers assist us with a variety of tasks, including data hosting and maintenance, data analytics, customer service, marketing, advertising, payment processing, and security operations. These service providers may need access to your personal data and must use that data only as directed by us to provide the services we request.

We may also share information with distributors and partners who help us promote our services. For example, we may share limited information about you with advertising partners in a hashed, unreadable form.

We conduct a rigorous vetting process before partnering with any service provider or partner. All service providers and partners must agree to adhere to strict confidentiality obligations.

5.3 Where required by law:

We may disclose your information where reasonably necessary in order to: (i) comply with legal processes, such as court orders, subpoenas or search warrants, government/law enforcement investigations or other legal requirements; (ii) assist in the prevention or detection of crime (in each case, subject to applicable law); or (iii) protect the safety of any person.

5.4 Exercising legal rights:

We may also share information in the following circumstances: (i) if disclosure can mitigate our liability in actual or potential litigation; (ii) when it is necessary to protect our legitimate interests and the legitimate interests of our users, business partners or other relevant parties; (iii) to enforce the agreement between us and you; or (iv) to investigate, prevent or take other measures to deal with illegal activities, suspected fraud or other misconduct.

5.5 Monitoring:

Moderators are responsible for monitoring activity on the website/application and reviewing content. Anti-fraud and anti-spam service providers are responsible for protecting the service from criminal activity.

5.6 Change of Control:

If our services or any of our affiliates undergo business transformation or change of ownership, such as merger, acquisition by another company, restructuring or sale of all or part of its assets, or bankruptcy or bankruptcy administration, we may be required to disclose your personal data.

6. Your rights

You have specific rights regarding the use of your data, including the option to opt out of cookies and to prevent certain analytics service providers from collecting your data. You can update or terminate your account on our services, or contact us with a request for your personal data. We want you to have control over your information, so we provide you with the following tools:

• Access/Update Tools in the Service: Tools and account settings that help you directly access, correct, or delete information you provide to us that is associated with your service account.

Device Permissions: Mobile platforms have a permission system for certain types of device data and notifications (such as contacts, location services, and push notifications). You can change device settings to consent to or refuse the collection of such information or the display of such notifications. Of course, if you do so, some services may not function properly.

• Deletion: You can use the corresponding function in the service to delete your account directly.

We want you to understand your privacy rights. Here are some key points to note:

• View your information: Applicable privacy laws may grant you the right to view the personal information we hold about you (this may be referred to as the right of access, the right of data portability, or variations of these terms, depending on the jurisdiction). You can request a copy of your personal information by emailing us at zlilin0903@163.com.

• Update your information: If you believe that the information we hold about you is inaccurate, or that we no longer have the right to use it, and you wish to request its correction, deletion, or object to its processing, please contact us via zlilin0903@163.com.

To protect your safety and the safety of all our users, we may require you to provide proof of identity before you can respond to the above request.

Please note that we may refuse your request for various reasons, such as if the request is illegal or may infringe on trade secrets, intellectual property rights, or the privacy of other users. If you wish to obtain information about other users, such as copies of any messages you receive from that user through our services, that user must contact our privacy officer and obtain written consent before disclosing that information.

Furthermore, we may be unable to fulfill certain requests you make to object to the processing of your personal information, especially if such requests would prevent us from continuing to provide services to you. For example, if we do not have your date of birth, we will be unable to provide services to you.

Uninstall: You can uninstall the app through your device's standard uninstall process, thus stopping the collection of all information. If you uninstall the app from your mobile device, the unique identifier associated with your device will continue to be stored. If you reinstall the app on the same mobile device, we will be able to re-associate this identifier with your previous transactions and activities.

Accountability: In some countries, including the European Union, if you have any questions about how we handle your personal information, you have the right to file a complaint with the appropriate data protection authority. The data protection authority you can typically file a complaint with is the one located in your place of residence, workplace, or where our company is located.

If you wish to exercise any of the above rights, please visit our feedback form or send an email to zlilin0903@163.com .

7. Data Retention

We retain your personal information only for legitimate business purposes and to the extent permitted by applicable law. To ensure user security both within and outside our services, we retain security information for six months after account deletion, unless technical issues arise. During this period, we will retain some of your account information, but your account will naturally no longer appear in the service. In fact, we will delete or anonymize your information after you delete your account (after the security information retention period ends) or after the account has not been used for five consecutive years. If a member's application does not establish a connection with Humhum 's servers (including due to the deactivation of geolocation information) and the member does not use the application, the account will be considered an inactive account. In any case, premium member accounts are not considered inactive accounts.

unless:

• We must retain this data to comply with applicable laws (for example, certain "traffic data" will be retained for one year to comply with statutory data retention obligations) and to prevent the bot system from abusing the system;

• We must retain it to prove that we comply with applicable laws (for example, records of consent to our terms, privacy policy and other similar consents will be retained for five years);

• There are unresolved issues, claims, or disputes that require us to retain information until the issues are resolved; or

• We must retain this information for our legitimate business interests, such as preventing fraud and improving user security. For example, we may need to retain information to prevent users who have been banned due to unsafe behavior or security incidents from opening new accounts.

To handle any follow-up questions you may have, we will retain your communications with the customer support team for an extended period, but these records are typically deleted after 6 years if you do not raise any questions.

We will retain anonymous information about users’ activities on our services for longer periods of time for statistical and product research purposes, but once the personal data is deleted, this information will no longer be associated with the individual.

Please note that while our system is designed to perform the data deletion process according to the guidelines above, due to technical limitations, we cannot guarantee that all data will be deleted within a specific timeframe.

8. Data Protection and Security

We are committed to protecting your personal information from unauthorized access, alteration, disclosure, or destruction. Like all technology companies, while we take steps to protect your information, we cannot guarantee that your personal information will always be secure, nor should you expect it to be. Your password is an important part of our security system, and it is your responsibility to protect it. Do not share your password with any third party. If you believe your password or account has been compromised, please change your password immediately. If you have any questions, please contact zlilin0903@163.com .

We regularly monitor our systems for potential vulnerabilities and attacks, and periodically review our information collection, storage, and processing procedures to update our physical, technical, and organizational security measures.

If we suspect or discover any security vulnerabilities, we may suspend your use of all or part of the service without prior notice. If you believe your account or information is no longer secure, please notify us immediately. We are not responsible for virus protection outside of our service network. We are also not responsible for damage to or loss of user data. We will pursue all discovered hacking and other attacks in accordance with civil law, and may even resort to legal action if necessary.

In the event of a data breach, we will notify our EU representative, our Data Protection Officer (DPO), and potentially affected users within 72 hours of the attack. We will also post a notice on our website.

9. Children's privacy

Our services are only available to users aged 18 and over. We do not allow users under the age of 18 to access our platform, nor do we knowingly collect any personal information from users under the age of 18. If you suspect that a user is under the age of 18, please use the reporting mechanism provided by the service. If we discover that a child, minor, or any person under the age of 18 has registered and provided us with personal data, we will take steps to terminate that user's registration and delete their profile information from our services. If we delete your profile because you violated our "No Children Registering" policy, we may retain your basic account and profile information to ensure that you do not attempt to circumvent our policy by creating a new profile.

10. International Money Transfer Policy

In order to provide you with services, we must transfer your data to our servers for processing. By accessing or using our services, you consent to the storage of your data on our servers. If you use our services, you consent to the transfer, storage, and processing of your data. Specifically, personal data collected in Switzerland and the European Economic Area (“EEA”) will be transferred to and stored outside of these regions.

Humhum or our service providers may process data outside of Switzerland and the European Economic Area, including processing transactions, facilitating payments, and providing the support services described in Sections 4 and 5. We have entered into data processing agreements with our service providers to limit and regulate their processing of your data on our behalf. By submitting your data or using our services, you consent to Humhum and its processors' handling of such transmissions, storage, and processing. We operate a global network of servers located in Germany, the Netherlands, Turkey, and Canada. We ensure the adequate protection of your data through effective legal mechanisms. If you would like to learn more about the security measures we have taken, please email zlilin0903@163.com. .

11. Changes to the Privacy Policy

We are constantly looking for innovative ways to help you build meaningful relationships, so this policy may be updated from time to time. We will notify you of any significant changes before they take effect so you have time to review them.

12. Contact Us

If you have any questions about this privacy statement or the processing of your personal data, please contact us directly. We are also happy to assist you with any information, requests, or complaints you may have.

Email: zlilin0903@163.com