我们将在本政策中依次向您说明我们的产品与/或服务每项功能可能收集的个人信息范围、收集目的、收集方式，以及不提供您的个人信息可能导致的结果。请您知悉，您不提供各项功能实现所必要的对应信息时，仍然可以使用其他功能。
我们会遵循正当、合法、必要的原则，出于本政策所述目的，收集和使用您主动提供或因使用我们的产品和/或服务而产生的个人信息。如果我们将您的个人信息用于本政策未载明的其他用途，或基于特定目的将已收集的信息用于其他目的，我们将以合理方式告知您，并在使用前再次征得您的同意。您可通过《个人信息收集清单》查看详情。
当您注册或者登录 dooo0t 账号时，您需要通过手机号码创建账号并完成注册。手机号码是履行国家法律法规关于网络实名制要求的必要信息，如您不提供手机号码，可能无法使用我们的服务。为帮助您完成注册，我们还将收集您的昵称与头像。此外，为确保账号安全，在我们识别出您注册、登录账号所使用的手机号码存在二次放号风险时，我们会将您的手机号码、账号注册/登录时间提供给通信运营商，以核验是否为二次放号。
2.1 图片编辑：当您使用图片编辑服务时，我们将收集您主动上传的图片信息。
2.2 音乐链接解析：本产品可能读取您的剪贴板内容，用于识别其中是否包含支持的公开音乐链接。解析过程仅处理公开 URL 中的歌曲 ID，并可能向第三方平台发送歌曲 ID 和必要的 UA / Referer，用于获取歌曲公开信息。本功能不会上传您的用户身份信息，不会上传完整剪贴板内容，也不会将原始链接缓存到服务器。
2.3 社区功能：我们会收集您主动发布至社区的照片信息（包括原始图片、编辑后的图片）及您的点击操作记录（点赞、评论、分享及有关行为），以为您提供社区交互服务。如您拒绝我们收集这些信息，可能无法使用本功能，但不影响使用 dooo0t 的其他功能。
2.4 分享功能：您可将相关图片分享至第三方平台。分享行为由您主动发起，分享后的内容将通过您选择的第三方平台传播，请注意第三方平台的隐私保护规则与政策。
2.5 安全运行与风控验证：为保障软件与服务安全运行，防止个人信息被非法获取，更准确地预防欺诈和保护账号安全，并进行故障诊断、性能优化和必要的运营分析，我们会主动收集设备信息【包括：设备/硬件型号、设备名称、设备唯一标识符（IMEI、IMSI、Android ID、IDFA、IDFV、OAID(HarmonyOS)、OAID(Android)、MEID）】，运行中的进程，本应用程序的总体运行情况与频率、崩溃情况、安装使用情况、性能数据、来源，存储（相册、媒体和其他文件）、浏览器类型和设置、语言设置、操作系统、操作系统版本号和应用程序版本、应用列表、网络设备硬件地址（MAC 地址）、WLAN-MAC、WLAN 接入点（如 SSID、BSSID）、IP 地址、蓝牙地址、接入网络的方式、网络质量数据、基站、移动网络信息（包括运营商名称）、软件版本号以及软件使用记录信息，并上传到服务器处理，用于安全风控验证。如您不同意我们收集前述信息，可能无法完成风控验证。为动态检测账号是否存在异常登录，每次您将 dooo0t 切换至后台或重新启动程序时，我们可能会再次读取，并将读取频次控制在合理范围内。
2.6 设备权限调用：当我们提供 dooo0t 产品时，会调用您的主要设备权限汇总如下。您可以在设备设置中关闭部分或全部权限。不同设备的权限显示及关闭方式可能不同，具体请参考设备及系统开发方说明：
| 设备权限 | 对应业务功能 | 功能场景说明 | 是否可关闭 |
|---|---|---|---|
| 网络权限 | 上网功能 | 开启上网功能，实时读取与更新 | 可以，关闭后仅影响对应功能，不影响使用 dooo0t 其他功能 |
| 相机（摄像头） | 拍照功能 | 使用拍摄上传照片功能时进行拍摄 | 可以，关闭后仅影响拍摄上传照片功能，不影响 dooo0t 其他功能 |
| 存储（相册、媒体和其他文件） | 1. 上传照片功能；2. 存储照片功能 | 1. 将照片上传至 dooo0t 平台以编辑、设置头像时；2. 将编辑后的图片保存至本地时 | 可以，关闭后仅影响对应功能，不影响使用 dooo0t 其他功能 |
| 剪贴板 | 音乐链接解析功能 | 识别剪贴板中是否包含支持的公开音乐链接 | 可以，关闭后仅影响对应功能，不影响使用 dooo0t 其他功能 |
根据相关法律法规的规定，在以下情形中，我们可以在不征得您的授权同意的情况下收集、使用一些必要的个人信息：
对于您的个人信息，我们不会与任何公司、组织和个人进行共享，除非存在以下一种或多种情形：
当您使用音乐链接解析功能时，本产品会由客户端直接请求相关第三方公开域名，仅发送公开 URL 中的歌曲 ID 和必要的 UA / Referer，不上传用户身份信息。具体域名请查阅《第三方信息共享清单》。
转让是指将个人信息的控制权转让给其他公司、组织或个人。除非获取您的明确同意，否则我们不会将您的个人信息转让给任何公司、组织或个人。但下述情形除外：
公开披露是指向社会或不特定人群发布信息的行为。原则上，我们不会公开披露您的个人信息，但因公布账号中奖、处罚通知而展示必要的脱敏信息，或取得您的明示同意的情形除外。
根据相关法律法规的规定，在以下情形中，我们可能在未事先征得您的授权同意的情况下共享、转让、公开披露您的个人信息：
请您了解，根据现行法律规定及监管要求，共享、转让经匿名化处理的个人信息，且确保数据接收方无法复原并重新识别个人信息主体的，无需另行向您通知并征得您的同意。
存储地点：我们将从运营dooo0t产品中获得的个人信息存放于中华人民共和国境内。以下情形下，我们会确保在履行了法律规定的义务后，向中华人民共和国境外实体提供您的个人信息：
针对以上情形，我们会通过合同等形式确保以不低于本政策规定的程度保护您的个人信息。
存储时间：我们承诺始终按照法律的规定在合理必要期限内存储您个人信息（如有）。超出上述期限后，我们将删除您的个人信息或对您的个人信息进行匿名化处理。
如我们停止运营，我们将及时停止收集您个人信息的活动，会尝试将停止运营的通知以逐一送达或公告的形式通知您，并对所持有的您的个人信息进行删除或匿名化处理。
为了保护您的个人信息安全，我们将努力采取各种符合行业标准的安全措施来保护您的个人信息以最大程度降低您的个人信息被毁损、盗用、泄露、非授权访问、使用、披露和更改的风险。我们将积极建立数据分类分级制度、数据安全管理规范、数据安全开发规范来管理规范个人信息的存储和使用，确保未收集与我们提供的服务无关的个人信息。
您的账号具有安全保护功能，请妥善保管您的手机号码及登录验证码，切勿将验证码告知他人。我们将通过服务器备份及相关安全措施，努力确保您的信息不丢失、不被滥用和变造。
尽管有前述安全措施，但同时也请您注意不存在"完善的信息安全措施"。为协助防止安全事故的发生，我们已按照法律法规的规定，制定了预警机制和应急预案。如确发生安全事件，我们将及时将相关情况按法律要求的相关方式告知您，难以逐一告知个人信息主体时，我们会采取合理、有效的方式发布公告。同时，我们还将按照监管部门要求，主动上报个人信息安全事件的处置情况，紧密配合政府机关的工作。
当我们的产品或服务发生停止运营的情形时，我们会及时停止继续收集个人信息的活动。上述变更，我们将尝试以公告及相关形式通知您，并在合理的期限内删除您的个人信息或进行匿名化处理。
我们非常重视并尽力保障您对自己个人信息的相关权利。
您可以通过以下方式管理您的个人信息：
有下列情形之一的，我们将主动删除您的个人信息，您也有权请求我们删除：
您可以通过设备操作系统变更或撤回对设备权限的授权。我们将根据您的设置收集个人信息；撤回授权后，我们将不再收集与相关权限有关的信息，但这可能导致部分或全部功能不可用。您变更或撤回授权的决定，不影响我们此前基于您的授权进行的个人信息处理。
如您需要将个人信息转移至其他平台、企业或组织，可以通过本政策第九条披露的方式联系我们。我们将审核您的请求，并在符合我国网信部门规定条件的情况下，为您提供转移相应个人信息的途径。
在一些业务功能中，我们可能仅依据信息系统、算法等非人工自动决策机制作出决定。如相关决定显著影响您的合法权益，您有权要求我们作出解释，我们也将提供适当的救济方式。
在符合相关法律要求的情况下，您的近亲属可以对您的相关个人信息行使上述查阅、复制、更正、删除等权利；您另有安排的除外。
出于安全和身份识别的考虑，您可能无法直接通过 dooo0t 的交互界面访问、更正或删除某些信息。如您确有必要访问、修改或依法要求删除该类信息，请按照本政策第九条提供的联系方式发送邮件。我们将在核验您的用户身份后及时处理。
您可以通过【首页-个人页-头像-更多】注销账号，注销申请提交后即时生效。账号注销后，除法律明确规定必须保留的个人信息外，您的个人信息将从 dooo0t 平台移除。
dooo0t 平台中可能包括第三方产品和/或服务，或链接至第三方提供的信息和/或服务。您使用第三方服务（包括向第三方提供任何个人信息）时，须受该第三方的服务条款及隐私政策约束，请仔细阅读相关条款并自行决定是否接受。本政策仅适用于我们收集、保存、使用、共享和披露的信息，不适用于第三方提供的服务或其信息使用规则，第三方使用您信息的行为由其自行负责。
如果您是未成年人，请通知您的监护人共同阅读本政策，并在您使用我们的产品及服务之前，寻求您的监护人的指导。若您未满十四周岁，请在获得您监护人的明确同意后再使用我们的产品及服务。若您是未成年人的监护人，当您对您所监护的未成年人使用我们的服务或其向我们提供的用户信息有任何疑问时，请您根据本政策提供的联系方式及时与我们联系。
如您对个人信息保护问题有任何投诉、建议、疑问，或您对本政策有任何疑问，您可以通过以下方式联系我们，我们将尽快审核所涉问题，并在验证您的用户身份后的十五个工作日内予以答复：Support@dooo0t.com
In this Policy, we will explain in turn the scope of personal information that each feature of our products and/or services may collect, the purposes and methods of collection, and the consequences of not providing your personal information. Please note that even if you choose not to provide the information necessary for a particular feature, you may still use other features of the product.
We process personal information in accordance with the principles of lawfulness, legitimacy, and necessity for the purposes described in this Policy. If we intend to use your personal information for a purpose not described here, or reuse information collected for a specific purpose for another purpose, we will notify you in an appropriate manner and obtain your consent before doing so. For details, please see our Personal Information Collection List.
When you register or sign in to a dooo0t account, you must use a mobile phone number to create the account and complete registration. The mobile phone number is required to comply with applicable real-name registration requirements. If you do not provide it, you may be unable to use our services. We also collect your display name and profile photo to complete registration. If we identify a risk that the phone number used for registration or login has been reassigned, we may provide the number and the registration or login time to the telecommunications carrier to verify whether reassignment has occurred.
2.1 Image editing: When you use image editing services, we collect the images you choose to upload.
2.2 Music link parsing: The product may read your clipboard to identify supported public music links. Parsing is limited to the song ID contained in a public URL. We may send that song ID and the required UA / Referer to a third-party platform to retrieve publicly available song information. We do not upload your identity information or the full clipboard contents, and we do not cache the original link on our servers.
2.3 Community features: We collect photos you choose to publish to the community, including original and edited images, as well as interaction records such as likes, comments, shares, and related activity, in order to provide community features. If you decline, you may be unable to use these features, but other dooo0t features will remain available.
2.4 Sharing: You may share images to third-party platforms. Sharing is initiated by you, and the content will be distributed through the platform you select. Please review that platform's privacy rules and policies.
2.5 Secure operation and risk-control verification: To keep the software and services secure, prevent unauthorized access to personal information, prevent fraud, protect accounts, diagnose faults, optimize performance, and conduct necessary operational analytics, we may collect device information, including device or hardware model, device name, unique device identifiers (IMEI, IMSI, Android ID, IDFA, IDFV, OAID for HarmonyOS, OAID for Android, and MEID); running processes; overall app operation and frequency; crashes; installation and usage; performance data; source; storage information (photos, media, and other files); browser type and settings; language settings; operating system and version; app version; app list; network device hardware address (MAC address); WLAN-MAC; WLAN access points (such as SSID and BSSID); IP address; Bluetooth address; network access method; network quality data; base station information; mobile network information (including carrier name); software version; and software usage records. This information may be uploaded to our servers for security and risk-control verification. If you decline, the verification may not be completed. To detect abnormal logins dynamically, we may read the relevant information again when dooo0t is moved to the background or restarted, while keeping the frequency within a reasonable range.
2.6 Device permissions: The primary permissions used by dooo0t are listed below. You may disable some or all of them in your device settings. Permission names and controls may vary by device and operating system.
| Device Permission | Corresponding Business Function | Functional Scenario Description | Whether it Can Be Disabled |
|---|---|---|---|
| Network Access | Internet functionality | Enables internet access and real-time data retrieval and updates | Yes. Disabling affects only the corresponding feature and does not affect other dooo0t features. |
| Camera | Photo capture | Used to take photos when using the photo capture and upload feature | Yes. Disabling affects only photo capture and upload and does not affect other dooo0t features. |
| Storage (Photos, Media, and Other Files) | 1. Photo upload; 2. Photo saving | 1. Uploading photos to dooo0t for editing or profile photo setup; 2. Saving edited images locally | Yes. Disabling affects only the corresponding feature and does not affect other dooo0t features. |
| Clipboard | Music link parsing | Identifies whether the clipboard contains a supported public music link | Yes. Disabling affects only this feature and does not affect other dooo0t features. |
Pursuant to applicable laws and regulations, we may collect and use certain necessary personal information without your authorization in the following circumstances:
We will not share your personal information with any company, organization, or individual, except in one or more of the following circumstances:
When you use music link parsing, this product directly requests the relevant third-party public domains from the client, and only sends the song ID in the public URL and required UA / Referer. User identity information is not uploaded. For the specific domains, please see the Third-Party Information Sharing List.
Transfer refers to the transfer of control over personal information to another company, organization, or individual. We will not transfer your personal information to any company, organization, or individual without your explicit consent, except in the following circumstances:
Public disclosure means making information available to the public or an unspecified audience. As a general rule, we do not publicly disclose your personal information, except where necessary to publish appropriately de-identified information in connection with prize announcements or account enforcement notices, or where we have obtained your explicit consent.
Pursuant to applicable laws and regulations, we may share, transfer, or publicly disclose your personal information without your prior authorization in the following circumstances:
Please note that, pursuant to current laws and regulatory requirements, the sharing or transfer of anonymized personal information where the data recipient cannot restore or re-identify the data subject does not require separate notification to, or consent from, you.
Location: We store personal information obtained through the operation of the dooo0t product within the territory of the People's Republic of China. In the following circumstances, we will ensure that we provide your personal information to entities outside the PRC only after fulfilling the obligations required by law:
In such cases, we will ensure through contractual or other means that your personal information is protected to a standard no less stringent than that set forth in this Policy.
Retention Period: We commit to retaining your personal information (if any) only for as long as is reasonably necessary under applicable law. Upon expiration of that period, we will delete your personal information or anonymize it.
If we cease operations, we will promptly cease collecting your personal information, will endeavor to notify you individually or by public announcement of the cessation, and will delete or anonymize the personal information we hold about you.
To protect the security of your personal information, we will endeavor to implement various industry-standard security measures designed to minimize the risk of destruction, misappropriation, leakage, unauthorized access, use, disclosure, or alteration of your personal information. We will proactively establish data classification and grading systems, data security management standards, and data security development standards to regulate the storage and use of personal information, and to ensure that we do not collect personal information unrelated to the services we provide.
Your account includes security protections. Please safeguard your mobile phone number and login verification codes, and never disclose a verification code to another person. We use server backups and related safeguards to help prevent loss, misuse, and unauthorized alteration of your information.
Notwithstanding the foregoing security measures, please be aware that there is no such thing as "perfect information security." To help prevent security incidents, we have established early-warning mechanisms and emergency response plans in accordance with applicable laws and regulations. In the event of a security incident, we will promptly notify you in the manner required by law. When individual notification is not practicable, we will issue a public announcement through reasonable and effective means. We will also, in accordance with regulatory requirements, proactively report the handling of personal information security incidents to the competent authorities and cooperate closely with governmental bodies.
Upon any cessation of operations of our products or services, we will promptly cease all further collection of personal information. We will endeavor to notify you of such changes by public announcement or other appropriate means, and will delete or anonymize your personal information within a reasonable period.
We place great importance on your rights in relation to your personal information and endeavor to protect those rights.
You can manage your personal information as follows:
We will delete your personal information on our own initiative, and you may also request deletion, where:
You may change or withdraw device permissions through your operating system. We will process personal information in accordance with your settings. After authorization is withdrawn, we will stop collecting information associated with that permission, although some or all related features may become unavailable. Withdrawal does not affect processing already carried out on the basis of your prior authorization.
If you need to transfer your personal information to another platform, enterprise, or organization, contact us as described in Section IX. We will review the request and, where the conditions prescribed by the competent cyberspace authority are met, provide an appropriate transfer method.
Some features may rely solely on automated decision-making mechanisms, including information systems and algorithms. If a decision materially affects your lawful rights and interests, you may request an explanation and we will provide an appropriate remedy.
Where permitted by applicable law, your close relatives may exercise the rights described above in relation to your personal information, unless you have made other arrangements.
For security and identity-verification reasons, some information may not be directly accessible, correctable, or deletable through the dooo0t interface. Where necessary, contact us by email using the details in Section IX. We will process your request after verifying your identity.
You can deactivate your account by going to Home - Profile - Profile Photo - More. Deactivation takes effect immediately after the request is submitted. After deactivation, your personal information will be removed from the dooo0t platform, except where retention is expressly required by law.
The dooo0t platform may include third-party products or services, or links to information or services provided by third parties. Your use of a third-party service, including any personal information you provide to that third party, is governed by the third party's own terms of service and privacy policy. Please review those terms carefully and decide whether to accept them. This Policy applies only to information that we collect, retain, use, share, or disclose; it does not apply to third-party services or their information-handling practices. Each third party is responsible for its own processing activities.
If you are a minor, please ask your guardian to read this Policy together with you and seek your guardian's guidance before using our products and services. If you are under the age of fourteen, please obtain your guardian's explicit consent before using our products and services. If you are the guardian of a minor and have any questions regarding the minor's use of our services or the user information provided by the minor to us, please contact us promptly using the contact information provided in this Policy.
If you have any complaints, suggestions, or questions regarding personal information protection, or any questions about this Policy, you may contact us using the information below. We will review the matter as soon as practicable and respond within fifteen (15) business days of verifying your user identity: Support@dooo0t.com
In the event of any inconsistency between the English version and the Chinese version of this Agreement, the Chinese version shall prevail.