Bumou App Privacy Policy

Effective Date: June 1, 2025 - Last Updated: December 31, 2026

Thank you for using Bumou App. This Privacy Policy describes how we collect, use, store, and protect users' personal information, as well as users' rights regarding data privacy.

Developer and Company Information

Application Name: Bumou
Name: Yang Jing
Company: Shanghai Xuxiu Information Technology Co., Ltd.
Email: 273219010@qq.com
Phone: 18201840625
Address: Room 147, Building 37, No. 4399 Wusi Road, Haiwan Town, Fengxian District, Shanghai
Postal Code: 221100

1. Collection and Use of Information

We may collect the following types of information (Sensor List):
1.1 Identity data: full name, email address, username, date of birth, etc.
1.2 Contact information: mobile phone number, communication records, SMS, etc.
1.3 Content data: images, videos, and audio content uploaded by users, software installation lists, etc.
1.4 Device data: Android ID, IMEI, device MAC identifier, IP address, etc.
1.5 Usage data: App chat interaction records, emotion tracking data, etc.

2. Purpose of Data Processing

The personal information we collect is used for the following purposes:
2.1 To create and manage user accounts.
2.2 To facilitate social connections and communication.
2.3 To provide emotion tracking features.
2.4 To operate emergency help services to ensure user safety.
2.5 To improve app functionality and optimize user experience.
2.6 With your prior consent, we may collect sensor data (e.g., accelerometer, gyroscope, orientation sensor) from your device to provide motion detection and improve your experience. Only data directly related to the services will be collected and not used for other undisclosed purposes.

3. Data Sharing and Disclosure

3.1 We do not sell your personal information or use it for advertising.
3.2 Data may be disclosed under the following circumstances:
To comply with Chinese laws or government requirements.
When necessary to protect user or public safety.

4. Data Storage and Transfer

4.1 All data is stored securely in AWS China data centers.
4.2 No cross-border data transfers will occur, in compliance with China's data sovereignty regulations.

5. Integrated Third-Party SDKs

To provide stable push services and other features, our app integrates the following third-party SDKs:

Aliyun Push

Provider: Alibaba Cloud Computing Co., Ltd.
Data Collected: Device identifiers (e.g., IMEI, MAC address), location data (if applicable).
Purpose: To provide real-time push notifications and ensure timely delivery.

OPPO Push (OPush)

Provider: Guangdong OPPO Mobile Telecommunications Corp., Ltd.
Data Collected: Device identifiers (e.g., IMEI).
Purpose: To ensure OPPO device users can receive push notifications.

Mi Push

Provider: Xiaomi Corporation
Data Collected: Device identifiers (e.g., IMEI).
Purpose: To provide push notification services for Xiaomi device users and improve message delivery efficiency.

MePushy

Data Collected: Android ID, IMEI, IMSI, device MAC address, software installation list, location, contacts, call logs, calendar, SMS, phone number, images, videos, and audio.
Purpose: Describes how personal information is collected, processed, and used through SDK calls.

GeoTMT Indoor Positioning SDK

Provider: Beijing GeoTMT Technology Co., Ltd.
Purpose: Provides indoor positioning services, including location calculation, navigation guidance, and regional behavior analysis.
Collection Method: Uses SDK to access Bluetooth, Wi-Fi scanning, and sensor fusion to gather location data and device identifiers (e.g., Android ID, MAC address).
Scope of Collection: Location data, Bluetooth data, device identifiers, etc.
Retention Period: No longer than 180 days after user account deletion.
Before processing personal data, we clearly inform users in a prominent and understandable way of the SDK's data collection scope, processing purpose, and retention policy. We provide the following user rights channels:
Users may request to correct or delete their personal data, or delete their accounts via [personal profile].

Careland Map SDK

Provider: Careland Information Technology Co., Ltd.
Purpose: To provide map positioning, route planning, and navigation services.
Collection Method: SDK accesses the device's location module and navigation interface.
Scope of Collection: GPS location, device identifiers, and navigation tracks.
Note: We have listed the SDK's data collection purpose, method, and scope in this policy. No unrelated use is allowed without the user's informed consent.

6. User Rights

Users have the following rights regarding their personal information:
6.1 Access a copy of their personal data.
6.2 Modify, update, or correct personal information.
6.3 Request deletion of their account and associated data.

7. Data Security Measures

We use industry-standard technical measures, including encryption and access control, to protect your information. Nevertheless, network security risks still exist.

8. Use of Data for Specific Features

8.1 Auto-Start: To support background push notifications, the app may activate services via system broadcasts.
8.2 Push Notifications: With user consent, push notifications may be sent for chat messages or help requests.
8.3 Broadcast Listener Auto-Start Disclosure
In compliance with MIIT regulation (信管函〔2020〕164号), we explicitly inform users that the App may listen to specific system broadcasts to trigger necessary auto-start behaviors solely for providing core functions such as push notifications and emergency-related services. This behavior will only occur after obtaining your explicit consent, will not be used for any unrelated purposes, and will not operate without a justified scenario. We do not engage in unauthorized or hidden auto-start activities.

8.4 Purpose Disclosure for Permission Requests
When you first enter the app or use related functions, we will clearly inform you through pop-ups or on-screen notices about the sensitive permissions we request and their specific purposes. These explanations will not disappear automatically and will remain visible until you confirm.
This includes but is not limited to:
(1) Storage Permission: Used to save images, videos, and chat files that you actively download or cache;
(2) Photos/Media Permission: Used to upload images and videos that you voluntarily select;
(3) Device Information Permission: Used to protect account security and prevent abnormal logins.
We will not request or use these permissions in scenarios unrelated to the services provided.

9. Children's Privacy Protection

9.1 We take measures to protect minors' privacy:
Age verification is required during registration.
Users under 14 must obtain parental or guardian consent before use.

10. Policy Updates

We may revise this policy at any time. Users will be notified in advance via in-app notices. Significant changes will require renewed consent.

11. Contact Us

If you have any questions or complaints about this privacy policy, please contact us at:
Email: 273219010@qq.com
Phone: +8618201840625