MyStory Privacy Policy
Last Updated: 21 May 2019
What information do we collect about you?
We collect
your mobile number and nickname, in order to register you to use our Services.
If you choose, you can provide more information in your profile.
How will we use the information about you?
We use
your information for account verification, password retrieval and to personalize your account .
Who do we share your information with?
You can
use our your account to access certain shared services. We also share your
information with our related group companies and as required by law.
Where do we process your information?
Our
servers are located in the AWS. Our support, engineering and other teams are
located in the PRC.
How long do we keep hold of your information?
We retain
your information until you have not used your account for 12 months, at which
point we delete it. We will also delete your information earlier at your
request. We will retain data where we are required to in accordance with our
legal obligations.
How can I exercise my rights over my information?
You may
have rights to access, receive copy of, or delete, your data or restrict or
object to our processing of, your data.
Dispute Resolution
If you
have any concerns or complaints, please contact us.
How will we notify you of changes?
If there
are any significant changes to this privacy policy, we will send you a
notification before the change becomes effective.
INTRODUCTION
This privacy
policy informs you of your choices and our practices regarding any personal
information you provide to us. Your use of MyStory
involves the collection and use of your personal information. It is important
for you to understand how this happens and how you may control it.
When you
contract to use MyStory, you accept our rules and
policies regarding your personal information and you expressly consent to us
collecting, processing and using and storing your personal information, as described
in this policy.
You acknowledge that you have read and understood this privacy policy.
If you do
not agree with this privacy policy, you must not use the Services. If you
change your mind in the future, you may withdraw your consent to use of your
personal information by contacting us.
The Types of Personal Information We Use
This
section describes the different types of personal information we collect and
how we collect it. We will collect and use the following information about you:
*
Information you give us.
You may
give us information about you, or about your contacts, by using our Services or
by corresponding with us by phone, e-mail or otherwise. This includes
information you provide when you register for our Services, such as your
nickname and mobile number, that helps us register you to use our Services.
*
Information we collect about you.
We
automatically collect certain data from you when you use our Services,
including IP address, and information regarding your use of our Services such
as date and time stamps, and communications with other users. We also collect
and store your data each time you interact with MyStory,
for example, when you communicate with us by telephone, email or in-app support
communications.
*
Information you generate and display in the course of using the
Services.
You
may provide additional information as part of your profile (such as gender or
profession). You may also provide or generate information when you communicate
with other users on the Services (e.g., chat log data, location information,
chat content).
Children
Our
Service is not intended for children. Children must not use the Service for any
purpose. We will not knowingly allow anyone under 16 to provide any personally
identifying information.
How We Use Your Personal Information
We will
use the information in the following ways and in accordance with the following
legal bases:
|
Personal Information |
Use |
Legal Basis for Processing (EU) |
|
Face data |
create 3D Avatar: the Company employs TrueDepth API to collect face blendshape
information through the TrueDepth camera and generate
corresponding face shape and expression: provided, however, that the face blendshape information collected by the Company is solely
used for the performance of the 'create 3D Avatar' function not for storage
in server nor for sharing with a 3rd party. |
This data is necessary for us to
perform our contract with you to set up your account and provide the Services. |
|
Scene data |
create AR scene: the Company employs TrueDepth API to collect real scene images information through
the TrueDepth camera and generate virtual AR scene:
provided, however, that the scene data information collected by the Company
is solely used for the performance of the 'Create AR scene' function not for
storage in server nor for sharing with a 3rd party. |
This data is necessary for us to
perform our contract with you to set up your account and provide the Services. |
|
Mobile Number, Password, Nickname |
We use this information to: *
create
a MyStory account in accordance with your request;
and *
retrieve
passwords for users when requested. |
This data is necessary for us to
perform our contract with you to set up your account and provide the
Services. |
|
Parental/Guardian Consent Data
(Name, Date of Birth) |
We use this information to verify
consent from a parent or guardian of a user under the age of 16. |
This data is necessary for us to
comply with our legal obligations. |
|
IP Address |
We use this information: *
for
security and verification purposes; and *
to
combat users registering for multiple accounts. |
It is in our legitimate interest
to detect multiple registrations in bad faith and to take appropriate actions
including the deletion of accounts. |
|
Generated MyStory
account |
We use this information to create
a MyStory account in accordance with your request. |
This data is necessary for us to
perform our contract with you to set up your account and provide the Services. |
|
OpenID |
We use this information to: *
to
create a MyStory account in accordance with your
request; and *
link
your MyStory account to other services, if you
request that we link your MyStory account to such
services |
This data is necessary for us to
perform our contract with you to set up your account and provide the Services
and where you request, to provide access to other services. |
|
Photograph, Gender, Occupation,
Status |
You may provide this information
to personalise your account. You choose what to
upload and share with MyStory and the general
public. |
This data is displayed where you
have consented to the upload of such data and is displayed until you delete
it. |
|
Data Communication between Users
(User Content) |
We use this information to
facilitate communication between users. |
This data is necessary for us to
perform our contract with you to provide the Services. |
|
Log Data (comprising account
actions such as adding a friend or accessing the Services), Metadata, IP
Address, Access Date and Time Stamps |
We use this information to
maintain log data that is linked to your identifiers. |
It is in our legitimate interests
to process such data so that we can ensure the proper and secure operation of
the Services. |
|
Location (GPS) Data |
We use this information to: *
if
you request it using the application, share your location with other users;
and *
if
you request it using the application, activate the "Look Around" function so
that other users can find you. |
*
We
only process this data where you have requested to share your location as
part of the Services. |
|
MyStory Contact List |
We use this information to: *
make
requests to add contacts; and *
enable
you to communicate with such contacts. |
This data is necessary for us to
perform our contract with you to allow you to contact other users. |
How We Store and Share Your Personal Information
In order
to perform our contract with you, your personal information will be accessible
from and will be processed on our servers. We are committed to maintaining the
privacy and integrity of your personal information no matter where it is
stored. Our group companies have information security and access policies that
limit access to our systems and technology. Your personal information will
remain subject to our technical and organisational
controls and our policies and procedures (including this Privacy Policy).
We share
your personal information with selected third parties in and outside your
country, including:
*
third parties where you have requested that we share your data
to allow you to use third party services;
*
related group companies with whom we
share all of your personal information to operate the Services. The transfers
contemplated above are made pursuant to our contract with you;
*
third party service providers with whom
provides services on our behalf to support our Services. These services may
include: fulfilling orders, payment processing, providing customer service,
sending marketing communications, fulfilling subscription services, conducting
research and analysis, and providing cloud computing infrastructure. These
companies are authorized to use your personal information only as necessary to
provide these services to us.
*
law enforcement agencies, public authorities or other judicial
bodies and organisations. We disclose
information if we are legally required to do so, or if we have a good faith belief
that such use is reasonably necessary to:
o
comply with a legal obligation, process or request;
o
enforce our terms of service and other agreements, policies, and
standards, including investigation of any potential violation thereof;
o
detect, prevent or otherwise address security, fraud or
technical issues; or
o
protect the rights, property or safety of us, our users, a third
party or the public as required or permitted by law (including exchanging information
with other companies and organisations for the purposes
of fraud protection); and
*
a third party that acquires all or substantially all of us or
our business. We will disclose information to a third party in the event
that we sell or buy any business or undergo a merger, in which case we will
disclose your data to the prospective buyer of such business. We will also
disclose information to a third party if we sell, buy, merge or partner with
other companies or businesses, or sell some or all of our assets. In such
transactions, user information may be among the transferred assets.
The Security of Your Personal Information
We strive to
protect our users' information against loss of information, improper use,
unauthorized access or disclosure. However, the transmission of information via
the internet is not completely secure and the security of transmission cannot
be guaranteed -- any transmission of your information is at your own risk.
Below please see the steps we have taken to protect your personal information
to the best extent we can.
*
We will work within the reasonable security standards and use a
variety of security measures to protect the security of information.
*
We have established a specialized management system, process and
organization to ensure information security. For example, we strictly restrict
the scope of personnel who can access information, and require them to comply
with their confidentiality obligations and conduct audits.
*
In the event of a breach of security incident of personal
information leakage or others, we will activate emergency response plan to
prevent the expansion of such security incident and inform you in the form of
push notifications, public announcements,etc.
Data Retention
We will retain
your personal information as described below (except if otherwise required to
be retained by applicable law).
|
Information |
Retention Period |
|
Generated MyStory
Account, Mobile Number, Password, Nickname, IP Address, Photograph, Gender,
Occupation, Status, MyStory Contact List |
Until the earlier of: *
you
do not use your account for 12 months (in which case your account will be
deleted); or *
you
request deletion of your account, in which case your account will be
deactivated and suspended immediately for a period of up to 3 months, and this data is deleted within
30 daysthereafter. |
|
Parental/Guardian Consent Data
(Name, Date of Birth) |
This data is retained for 6 months
following receipt of the consent form. |
|
Data Communication between Users
(User Content) |
Chat data is retained for: *
for
chats of two (2) user: up to 14 days, to ensure delivery of messages and
thereafter until each user that has the message on their device permanently
deletes such message; *
for
chats of more than two (2) users: up to 4 months, to ensure availability of messages
to users on different devices. |
|
Log Data, Metadata, IP Address,
Date and Time Stamps, Location (GPS) Data |
MyStory deletes such data in
accordance with the retention policies outlined above for other data, except
where we are required to retain such data in order to comply with our legal
obligations. |
|
Face
data and Scene data |
The face data and scene data
information collected by the Company through the truedepth
camera is solely used for the performance of the 'Create AR scene' function
and 'Create 3D Avatar' function, not for storage in server nor for sharing
with a 3rd party. |
When
destroying personal information, measures will be taken to make the personal
information irrecoverable or irreproducible:
*
electronic files which contain personal information will be
deleted permanently using a technical method which makes the files
irreproducible; and
*
any other records, print-outs, documents or any other recording
media will be shredded or incinerated.
In the
event that the processing and retention period have terminated, but personal
information is required to be retained continuously for other reasons including
for the purposes as prescribed under applicable laws, the relevant personal
information will be stored and maintained separately from other types of personal
information.
Your Rights
You have
certain rights in relation to the personal information we hold about you. Some
of these only apply in certain circumstances as set out in more detail below.
We also set out how to exercise those rights. To exercise any of your rights,
please contact us.
Access & Correction
You have
the right to know whether we process personal information about you, and if we
do, to access personal information we hold about you and certain information
about how we use it and who we share it with. You also have the right to
correct information which is incorrect. Your right of access can be exercised
by accessing your account profile. If you believe there is any other
information we hold about you, or which needs to be correct, please contact us.
Portability
ou have the right to receive a subset of certain personal
information we collect from you in a structured, commonly used and
machine-readable format and a right to request that we transfer such personal
information to another party. The relevant subset of personal information is
information you provided to us with your consent, or for the purposes of us f
performing our contract with you (e.g., Mobile Number, Nickname). Please contact
us if you would like to obtain such information in accordance with your legal
rights.
Erasure
You can
delete your profile information and other data by logging into your account. If
you believe there is other data that we hold about you that you cannot access
and erase, you can request that we erase such data in certain circumstances
(for example, you believe that it is no longer necessary for us to hold such
personal information; or you believe the personal information we hold about you
is being unlawfully processed by us). You can exercise your right to restrict
our processing of your personal information (as described below) whilst we
consider your request. You can make such a request by contacting us.
Restriction & Objection
You have a
right to require us to stop processing the personal information we hold about
you other than for storage purposes in certain circumstances. Please note,
however, that if we stop processing the personal information, we may use it
again if there are valid grounds under data protection laws for us to do so
(e.g., for the defense of legal claims or for another's protection).
You also
have the right to object to our processing of personal information in certain
circumstances by contacting us.
Service-related Announcements
We may
from time to time send you service-related announcements when we consider it
necessary to do so (such as when we temporarily suspend MyStory
for maintenance, or security, privacy or administrative-related
communications). You may not opt-out of these service-related announcements,
which are not promotional in nature.
Changes
If we make
any material changes to this policy, we will post the updated policy here and
notify our users. Please check this page frequently to see any updates or
changes to this policy.
Contact us
If you
have any other complaints, suggestions, or querries
regarding personal information of minors, please contact us at penggangzhao@163.com.
We will review your queries as soon as possible
and respond within thirty days after verifying your identity.