Yiting Compass - Privacy Policy

Privacy Policy

Dear Users: Welcome to use this application (Yiting Compass - Altimeter, hereinafter referred to as "this Application" or "we"). We fully recognize the importance of your personal data to you and will protect the security of your personal data and privacy in accordance with the Personal Information Protection Law of the People's Republic of China and other Chinese laws and regulations, as well as applicable international rules such as the General Data Protection Regulation (GDPR) of the European Union.

Please carefully read and understand all the contents of this Privacy Policy before using this Application. Your continued use of this Application indicates that you have fully read, understood and agreed to our processing of your personal data in accordance with this Policy. If you do not agree to this Policy, please do not use this Application.

Clause 1: Scope of Application and Information of the Data Controller

1.1 This Policy applies to all users of this Application, including users in the European Union (if GDPR applies).

1.2 This Policy applies to all products and services of this Application (including App, website, etc.), but does not apply to products/services independently provided to you by third parties (the privacy policies of third-party services shall be borne by the third parties themselves).

1.3 Information of the Data Controller:

Operating Entity (Data Controller): Chongqing Yiting Technology Co., Ltd.;
Registered Address/Business Address: No. 7, Yusong 1st Branch Road, Longshan Street, Yubei District, Chongqing;
Contact Information: QQ: 1524612830; Email: cq_yiting@163.com.

1.4 If you are a user in regions applicable to GDPR such as the European Economic Area (EEA) and the United Kingdom, this Policy additionally complies with the core requirements of GDPR, including data minimization, purpose limitation, transparency, protection of data subjects' rights, etc.

Clause 2: Collection and Processing of Personal Data

2.1 Collection Principles: We collect personal data only under the principles of "legality, legitimacy, necessity and minimization", and will not collect information unrelated to the services; for users in regions applicable to GDPR, we will process your information based on legal bases such as "consent, performance of contract, legal obligation, legitimate interests, protection of public interests/important interests", and clearly specify the legal basis for corresponding scenarios below.

2.2 Scope of Collected Personal Data (only necessary for achieving service purposes):

(1) Device Information (device model, operating system version, device identifier): used to ensure the normal operation of the Application (Legal Basis: Performance of Contract / Legitimate Interests);
(2) Geolocation Information (latitude and longitude, address name, altitude, device direction/speed, air pressure value): used to realize the core functions of compass and altitude measurement (Legal Basis: Your Express Consent);
(3) Log Information (operation records, access time/duration, error logs): used to optimize services and troubleshoot faults (Legal Basis: Legitimate Interests / Performance of Contract);
(4) Transaction Information (transaction records, payment records): collected only when you conduct transactions, used to complete payment/transaction performance (Legal Basis: Performance of Contract);
(5) Feedback Information (user feedback, complaint information): used to handle your requests (Legal Basis: Performance of Contract / Legitimate Interests);
(6) Other information required to be collected by laws and regulations (Legal Basis: Legal Obligation).

2.3 Collection Methods:

(1) Information actively provided by you (e.g., filled in during registration, feedback);
(2) Information automatically collected during the use of services (e.g., device/log information, only necessary for realizing core functions);
(3) Obtained through legitimate third-party channels (only with your consent or as permitted by laws and regulations, and after confirming that the third party has the legal right to collect).

2.4 Express Consent: For sensitive personal data such as geolocation and personal profiles ("special categories of personal data" under GDPR), we will separately obtain your express consent; you may withdraw your consent at any time (see Clause 7 for withdrawal methods). After withdrawal, we will stop collecting/using the corresponding information, but this will not affect the legitimate processing based on consent before withdrawal.

2.5 Information Not Collected: We will not collect special categories of personal data under GDPR such as your race, religion, political opinions, health status (unless required by laws and regulations and with your explicit authorization).

Clause 3: Purpose and Restrictions of Use of Personal Data

3.1 Purpose of Use (limited to the following scope; if it is necessary to exceed this scope, your express consent will be obtained again):

(1) Provide and optimize the core functions of this Application (compass, altitude measurement, etc.);
(2) Perform transaction/payment obligations and handle your feedback/complaints;
(3) Ensure service security and prevent risks such as fraud and cyber attacks;
(4) Use for data analysis and service optimization after anonymization/de-identification (not associated with personal identity);
(5) Comply with laws and regulations and legitimate requirements of judicial/administrative authorities;
(6) Push personalized recommendations to you (only after obtaining your express consent).

3.2 Restrictions on Use:

(1) Personal data will not be used for scenarios unrelated to the collection purpose;
(2) Users in regions applicable to GDPR: if your information is processed based on "legitimate interests", we have completed a balancing test of interests, and you have the right to object (see Clause 7);
(3) Personal data will not be used for automated decision-making (e.g., user profiling, precision marketing) unless your express consent is obtained and an option to refuse is provided.

Clause 4: Sharing, Transfer and Public Disclosure of Personal Data

4.1 Principles of Sharing/Transfer:

(1) Your personal data will not be shared/transferred to third parties without your express consent;
(2) Users in regions applicable to GDPR: sharing/transfer shall comply with the requirements of Articles 6 and 44 of GDPR. If the recipient is in a third country/region, it shall be ensured that the recipient has an adequate level of data protection (e.g., EU adequacy decision, standard contractual clauses, binding corporate rules, etc.).

4.2 Exceptional Circumstances (no separate consent required, but obligation to inform shall be fulfilled):

(1) Mandatory requirements of laws and regulations/judicial/administrative authorities;
(2) To protect the vital legitimate rights and interests such as life and property of you or others;
(3) Sharing with affiliated companies (only for achieving service purposes, and data protection obligations have been imposed on affiliated companies);
(4) Sharing with partners (only for realizing core services, and data protection agreements have been signed, requiring them to use only within the authorized scope and comply with GDPR/Chinese legal requirements).

4.3 Public Disclosure: Personal data will be publicly disclosed only with your express consent or as required by laws and regulations, and the scope of disclosure is limited to the necessary minimum.

Clause 5: Storage and Protection of Personal Data

5.1 Storage Period: Personal data will be stored only for the shortest period necessary to achieve the collection/use purpose, and will be anonymized/deleted after the expiration of the period;
Examples: Account information will be retained for 1 year after account cancellation; transaction information will be retained for 3 years after transaction completion (in line with regulatory requirements); geolocation information will be temporarily stored only during the use of functions.

5.2 Security Protection Measures:

(1) Technical Measures: Adopt encryption (e.g., HTTPS, data desensitization), access control, intrusion detection, vulnerability scanning and other technologies;
(2) Management Measures: Formulate data security management systems, conduct permission control and security training for access personnel;
(3) Emergency Response: In the event of personal data leakage, loss and other security incidents, we will inform you (if feasible) and the regulatory authorities within 72 hours (required by GDPR) and take remedial measures;
(4) GDPR Supplement: For data leakage, records will be kept and reported to the regulatory authorities in accordance with GDPR requirements (if the leakage may lead to high risks).

5.3 Disclaimer: Despite the adoption of adequate security measures, due to the openness of the Internet environment and technical limitations, we cannot guarantee the absolute security of information; in the event of information security incidents caused by force majeure, third-party attacks and other non-fault factors on our part, we will make every effort to cooperate with the handling.

Clause 6: Protection of Minors' Personal Data

We attach great importance to the protection of minors' personal data. If you are a minor under the legal age of majority, you shall obtain the consent of your legal guardian in advance during the use of this Application.

If your guardian does not agree to your use of this Application or provision of personal data, we will stop collecting and using your personal data and delete the relevant personal data as soon as possible.

Guardians' Rights: Guardians may contact us to inquire, correct and delete minors' personal data, and we will handle it in a timely manner after verifying their identities.

Clause 7: Your Rights (Including GDPR Rights)

7.1 Rights under Chinese Law: You have the right to inquire about, correct, delete your personal data, withdraw consent, request an explanation of this Policy, request data portability (when eligible), and file complaints and reports.

7.2 Additional Rights under GDPR (for users in applicable regions):

(1) Right of Access: Request us to provide a copy of your personal data (in a portable format);
(2) Right to Rectification: Request correction of inaccurate/incomplete personal data;
(3) Right to Erasure (Right to be Forgotten): Request deletion of your personal data when eligible;
(4) Right to Restriction of Processing: Request suspension of processing your personal data (e.g., if there is an objection to the accuracy of the information);
(5) Right to Data Portability: Request to obtain your personal data in a structured, commonly used format and transmit it to another controller;
(6) Right to Object: Object to processing based on "legitimate interests" (e.g., personalized recommendations) and object to automated decision-making;
(7) Right not to be Subject to a Decision Based Solely on Automated Processing: Refuse decisions with legal effect made solely by automated means.

7.3 Ways to Exercise Rights:

(1) Self-service operation through "Settings - Privacy Settings" in the Application;
(2) Contact us via QQ: 1524612830, Email: cq_yiting@163.com;
(3) GDPR Users: May file a complaint with the local data protection authority (DPA).

7.4 Restrictions on Exercising Rights:

(1) Involving national security, national defense security, public interests, and judicial proceedings;
(2) There is evidence that you abuse your rights (e.g., repeatedly requesting access/deletion without reasonable grounds);
(3) Restrictions under GDPR: if processing is necessary for performing legal obligations or protecting public interests.

Clause 8: Description of Third-Party SDKs (Including GDPR Requirements)

8.1 Tencent Youlianghui SDK:

Data Type	Purpose of Use	Legal Basis (GDPR)	Data Protection Measures
Location Coarse Location	Ad delivery and monitoring attribution	Your Express Consent	Encrypted transmission, only used for ad attribution
Identifiers User ID Device ID	Ad delivery and monitoring attribution	Your Express Consent	De-identification processing, restricted access
Usage Data Product Interaction Advertising Data	Statistical results of ad delivery	Legitimate Interests / Your Express Consent	Anonymous statistics, not associated with personal identity
Diagnostics Crash Data Performance Data	Ensure stable operation of App functions	Performance of Contract / Legitimate Interests	Only used for troubleshooting, regular cleanup
Other Data System language, screen parameters, etc.	Technical adaptation	Legitimate Interests	De-identification processing

8.2 Compliance Requirements for Third-Party SDKs: We have required SDK providers to comply with GDPR/Chinese personal data protection laws, signed data protection agreements, and clarified their data processing obligations; you may contact us to obtain the privacy policy/data protection instructions of SDK providers.

8.3 You may turn off SDK-related permissions (e.g., ad tracking) through application settings, and turning them off will not affect the use of core functions.

Clause 9: Update and Notification of Privacy Policy

9.1 Triggers for Update: Changes in laws and regulations, adjustment of service functions, changes in data processing methods, etc.

9.2 Notification Methods:

(1) Major Changes (e.g., expansion of collection scope, change of sharing methods): Notify you through in-App pop-ups, push notifications, emails, etc., and obtain your express consent;
(2) General Changes: Publicly announced in the Application, which you may review regularly.

9.3 GDPR Requirements: The updated Policy will not be retroactive, and historical versions will be retained for your review; if the update affects your rights under GDPR, additional notification will be made through prominent means.

Clause 10: Contact Us

If you have any questions, opinions or complaints about this Privacy Policy or the processing of personal data, please contact our customer service department, and we will reply to and handle your request as soon as possible. Contact Information of the Customer Service Department:

QQ: 1524612830

Email: cq_yiting@163.com

Clause 11: Dispute Resolution and Supervision

11.1 Applicability of Chinese Law: This Policy is governed by Chinese law. In the event of any dispute related to this Policy, you and we shall first resolve it through friendly negotiation; if negotiation fails, either party shall file a lawsuit with the People's Court of Liangjiang New Area, Chongqing Municipality.

11.2 Users in regions applicable to GDPR:

(1) You may file a complaint with the local data protection authority (DPA);
(2) The applicable law for dispute resolution may be selected as the law of your region (if compliant with GDPR requirements);
(3) We commit to cooperating with the investigation and collaboration of EU data protection authorities.

Update Date: 2026/04/15
Effective Date: 2026/04/15