appproduce Privacy Policy

appproduce Privacy Policy

Effective date: July 2, 2026

Welcome to the appproduce platform. We understand that the security of personal information is the cornerstone of user trust, and we recognize how important your data is to you. Yangzhou Huijian Network Security Information Technology Co., Ltd. (hereinafter "Huijian", "we", or "the Company") will strictly comply with laws and regulations and follow industry-leading practices to build a robust line of defense for the security of your information.

This Privacy Policy (hereinafter "this Policy") is intended to help you fully understand how we collect, store, use, share, and protect your personal information when you use appproduce products and services, and also explains the rights you have over your own information.

Please proceed only after you have confirmed that you fully understand and agree. If you have any questions, you may contact us using the contact details at the end of this document.

Scope of this Policy

This Policy applies to all products and services provided by the appproduce platform operated by Yangzhou Huijian Network Security Information Technology Co., Ltd.

Definition of our roles

• Personal information handler: In the vast majority of scenarios, Huijian determines "why" and "how" your personal information is processed, in which case we act as the "personal information handler".
• Entrusted party for personal information: To provide certain services (such as payment or cloud storage), we may engage third-party partners. Under our strict oversight, these partners process data on our behalf, acting as an "entrusted party" and are required to comply with our data security standards.
• Independent controller: Please note that some third-party services (such as social media login or advertising plugins) have their own independent privacy policies. When they independently determine the purpose and means of data processing, they are the independent controllers of that data, their processing is governed by their own policies, and Huijian bears no related responsibility.

Part One: Core Definitions

1. Huijian/appproduce: refers to Yangzhou Huijian Network Security Information Technology Co., Ltd. that provides the service and its affiliated organizations.
2. Personal information: refers to information recorded electronically or by other means that can, alone or in combination with other information, identify a specific natural person or reflect their activities.
3. Sensitive personal information: refers to personal information that, once leaked or used unlawfully, could easily lead to harm to a natural person's dignity or endanger their personal or property safety (such as an email address).
4. De-identification/anonymization: refers to the process of technically processing personal information so that, without the aid of additional information, a specific natural person cannot be identified and the process cannot be reversed.

Part Two: Privacy Policy Details

I. Collection and use of personal information

We only collect the minimum scope of personal information necessary to realize product functions. The specific collection scenarios and purposes are as follows:

1. Information you actively provide

2. Information we automatically collect during your registration and use of the service

To safeguard account and system security, perform anti-fraud and risk control checks, and comply with the requirements for retaining registration information under laws and regulations such as the Cybersecurity Law of the People's Republic of China, we automatically record the following basic registration information when you register:

Due to browser security mechanisms, the web client cannot and will not obtain the unique hardware identifiers of your device (such as IMEI or MAC address). The above information is used only for the aforementioned purposes and retained for the period described in the "Retention period and location" section of this Policy.

3. Information we obtain from third parties

• Legitimate public channels: Within the scope permitted by law, we may collect personal information you have published through public channels, for anti-fraud or risk control checks.

3. Exceptions to obtaining consent

According to relevant laws and regulations, processing personal information in the following circumstances does not require your personal consent:

• Matters involving major public interests such as national security, national defense, public safety, or public health;
• Directly related to judicial activities such as criminal investigation, prosecution, and trial;
• Necessary to protect the life, property, or other major legitimate interests of you or others when it is difficult to obtain your own consent;
• Personal information has already been lawfully made public and the processing does not harm your major interests;
• Other statutory circumstances provided by laws and regulations.

4. Rules for using personal information

• De-identified analysis: We de-identify the collected information for building databases, conducting commercial analysis, or algorithm training, but such data cannot be reversed to identify you.
• Continuous service improvement: We use log information (IP addresses, operation logs) for troubleshooting, security defense, and internal policy-making.
• Purpose limitation: If we need to use your information for purposes not stated in this Policy, we will seek your explicit consent again.

II. Sharing of personal information

1. Sharing

We promise not to unlawfully sell your personal information. We only share it in the following circumstances:

• With your explicit consent: for example, when you actively choose to share a project with others.
• Mandatory legal requirements: in response to lawful requests from courts, regulators, or public security authorities.
• Affiliates and partners: with your consent, sharing with affiliates to enable unified login or customer support. For suppliers (such as cloud services), we sign strict data protection agreements limiting the scope of their data processing.
• Corporate transactions: in mergers, restructurings, or asset sales, we will require the recipient to continue to fulfill the obligations of this Policy; otherwise we will require your authorization to be obtained again.

2. Transfer and public disclosure

• Transfer: We will not transfer your information unless we obtain your consent or it is required by laws and regulations.
• Public disclosure: Only when you actively choose to make it public (such as community display) or when required by law.

3. Exception for anonymized data

For data that has been de-identified and cannot be reversed, we do not treat it as personal information, and its sharing, transfer, or public disclosure does not require your consent again.

IV. Protection of personal information

1. Technical and management measures

• Transmission encryption: HTTPS (SSL/TLS 1.3) is enabled site-wide to ensure the security of data in transit.
• Storage encryption: High-strength encryption algorithms are used to store sensitive data.
• Security certification: We regularly conduct code audits, penetration testing, and employee privacy compliance training.

2. Security incident response

In the unfortunate event of a data breach, we will immediately activate our emergency plan, take loss-mitigation measures, report to the regulator within 72 hours as required by law, and notify you by email, in-site message, or announcement.

3. Retention period and location

• Storage location: Your personal information is primarily stored within the territory of the People's Republic of China.
• Retention time: We keep it only for the shortest time necessary to achieve the processing purpose. For example, account information is retained until the statutory period after you deactivate your account expires. After the period expires, we will anonymize it.

V. Managing your personal information

You enjoy full statutory rights over your own personal information, including:

1. Access and correction: You can log in to the console to view and modify your basic profile. If you need assistance, you can contact support.
2. Right to deletion: You may request that we delete your information in the following cases: (1) the processing purpose has been achieved; (2) you withdraw consent; (3) we processed information in violation of rules; (4) you deactivate your account.
3. Withdrawal of consent: You can withdraw authorization for non-essential features through device management or by contacting us; withdrawal does not affect the validity of processing carried out before the withdrawal.
4. Account deactivation: You can apply for deactivation via the official email. After deactivation, we will delete or anonymize your information (except as otherwise required by laws and regulations).
5. Objection to automated decision-making: If you believe an algorithmic decision seriously affects your rights, you may request human review.
6. Obtaining a copy: You have the right to request that we export your personal data in a structured, commonly used format.

Response time: We will respond within 15 business days of receiving your request. We reserve the right to refuse requests that are unreasonably repetitive, technically infeasible, or that may infringe the rights of others.

VI. Protection of minors' personal information

We attach great importance to the protection of minors. Children under the age of 14 should not use this service on their own. If we discover that we have collected a child's personal information without the guardian's consent, we will delete it immediately.

VII. Notice and revisions

As our business develops and laws and regulations are updated, this Policy may be adjusted from time to time. Major changes (such as changes to the processing purpose or the controller) will be announced via website announcement or email. If you continue to use the service after this Policy is updated, you are deemed to accept the update.

VIII. How to contact us

If you have any questions, complaints, or need to exercise your data subject rights, please contact our person in charge of personal information protection through the following:

• Official email: support@appproduce.com

If you are not satisfied with the outcome of our handling, you have the right to complain to the local cyberspace administration authority or to file a lawsuit with the people's court at the plaintiff's place of domicile.