朵朵AI个人信息保护政策
修改日期：2026年06月25日
生效日期：2026年06月25日
厦门快乐小甜智能科技有限公司及其关联方（即“我们”）作为朵朵AI的运营者，以下或称之为“本服务”，会严格按照法律的规定，保护您的个人信息以及隐私安全，本朵朵AI个人信息保护政策(“本政策”)旨在向您说明，在您通过朵朵AI网站（ai.xiaotale.com）使用朵朵AI功能时即“朵朵AI”Web端应用程序（以下称“产品”或 “服务”）时，我们会如何收集、使用、共享、存储和保护您的个人信息以及您可以如何管理您的个人信息，请您在使用我们的服务前仔细阅读并理解本政策，以便您更好地作出适当的选择。
【引言】
我们将通过本政策向您说明您在使用本产品的不同场景下我们将会如何处理您的个人信息。我们会严格按照法律法规要求，在个别情况下征求您的单独同意。除本政策外，我们还可能会在特定场景下通过即时告知（含弹窗、页面提示等）、功能更新说明等方式，向您说明对应的信息收集目的、范围及使用方式，这些即时告知及功能更新说明等构成本政策的一部分，并与本政策具有同等效力。您可以拒绝我们处理您其他个人信息，但这可能导致我们无法为您提供相应的服务。我们将在本政策中详细向您说明，有关您个人信息的类型已经加粗显示，有关您敏感个人信息类型为加粗斜体加下划线标识，您的权益条款加粗加下划线显示，请您特别关注。如对本政策内容有任何疑问、意见或建议，您可通过本政策文末的联系方式与我们联系。
本政策将帮助您了解以下内容：
一、我们如何收集、使用您的个人信息
二、Cookie和同类技术的使用
三、我们如何共享、转让、公开披露您的个人信息
四、我们如何存储、保护您的个人信息
五、您如何管理您的个人信息
六、未成年人保护
七、本政策的更新与修订
八、联系我们
九、附录：权限申请及应用场景清单
我们非常重视对您的个人信息的保护，我们也致力于维持您对我们的信任，我们承诺将按业界普遍适用的安全标准，采取相应的安全保护措施来保护您的个人信息，在您下载、安装、开启、浏览、使用及注销（以下统称“使用”）朵朵AI的全过程，均适用于本政策。“朵朵AI”PC端应用程序，适用于本《朵朵AI个人信息保护政策》，我们承诺对您个人信息收集、使用的最大限度不超过本《朵朵AI个人信息保护政策》的范畴。
一、我们如何收集、使用您的个人信息
1、注册、登录及使用朵朵AI帐号
（1）【注册登录】在您注册、登录本产品及使用相关服务时，我们建议您注册一个朵朵AI帐号，以更加充分地使用本产品和服务的全部功能；如您创建朵朵AI帐号，您需要提供手机号码【手机号码是履行国家法律法规关于网络实名制（真实身份信息认证）要求的必要信息】以创建帐号,同时您可以完善您的网络身份信息，如设置密码、昵称，头像，其中您设置的昵称和头像将公开显示。
（2）若您已经注册朵朵AI帐号，您可通过该第三方帐号（如微信帐号）授权登录朵朵AI，或您可使用第三方平台帐号登录，您使用第三方平台帐号登录的，您将授权朵朵AI获取您在该第三方平台的公开信息（头像、昵称以及您授权的其他信息）。
在您使用本产品并进行登录的过程中，我们可能会获取您的设备信息：如设备平台，设备厂商，设备品牌，设备型号及系统版本，本政策中所指的“设备信息”均同本定义。我们可能会按照实现登录认证需求的一定频率收集您的上述设备信息，这类信息是为提供服务必须收集的信息，收集后即作去标识化处理，不会用于识别任何特定的用户。
（3）关于朵朵AI帐号
朵朵AI帐号可登录、使用快乐小甜公司旗下各APP、Web、PC端应用程序，为满足您一致的服务体验，您在登录快乐小甜公司旗下其他产品且自主选择使用已注册的朵朵AI帐号的，该朵朵AI帐号将会同步您的昵称、头像、地区、性别等您自主填写的公开信息。如您不希望上述内容被同步，请您在登录快乐小甜公司旗下其他产品时选择其他注册、登录方式。
2、为您提供安全保障
为保障您的帐号、网络、运营及系统安全，预防钓鱼网站欺诈及木马病毒，在您使用本产品的过程中，我们可能会按照实现安全保障需求的一定频率收集您的设备信息【包括设备型号、操作系统版本、设备标识信息包括不可变更的设备标识信息（指由设备制造商编入到设备以对其进行标识的一串字符，本政策中所指的“设备标识信息”均同本定义）】、登录IP地址、MAC地址、网络运营商及种类、网络类型、操作日志信息。
3、向您提供其他相关产品功能和/或服务
为实现以下各项产品功能和/或服务，我们可能需要向您收集相对应的个人信息，若您拒绝提供，则无法使用该等特定服务。
1）客户服务。当您向朵朵AI提起投诉、进行咨询或申诉时，为了方便与您联系或帮助您解决问题，我们可能需要您提供姓名、手机号码、电子邮件及其他有效的联系方式等个人信息。如您拒绝提供上述信息，我们可能无法及时与您联系，向您及时反馈相关处理结果。
2）我们可能检测您的网络状态，在无网络环境下，将无法正常提供服务，我们将予以界面提示。
3）维护产品安全及时排除故障。为维护我们服务的正常运行，以及保障您的帐号安全、排查产品故障、改进及优化我们的服务，我们会收集您的设备标识信息、设备型号信息及登录IP地址、操作日志信息、设备品牌、系统版本。这类信息是为提供服务必须收集的信息，收集后即作去标识化处理，不会用于识别任何特定的用户。
4）保障帐号安全。当您在使用修改密码、安全验证、申诉行为，且操作行为存在异常时，我们可能会要求您提供有效身份信息，以确保上述操作行为的安全性。
5）当您使用云处理相关功能【如AI消除、无损放大、变清晰、朵朵AI抠图】时，我们会收集不识别任何特定个人的画像特征（如：风景、美食、人像等）并通过算法进行图像特征分析，用以帮助您获得更好的云处理效果，您需要将您的图像信息上传至后台服务器用于制作，生成的内容将返回至您的设备终端，该信息的上传和处理为提供本功能所必须，我们会按照法律的要求，对您的该类信息在传输和存储的过程中采取严格的加密措施，以确保您信息的安全，对该信息的使用仅限于为您提供本功能服务，我们仅提供图像处理服务，服务完成后，系统将自动删除上述信息，不予留存。
6）当您使用AI相关功能【如AI Logo、AI商品设计、AI商品图、AI模特试衣】时，我们需要上传您的原始图片至服务器以便通过人工智能模型为您生成新的内容，供您保存至本地。该信息的上传和处理为提供本功能所必须，如您拒绝将无法使用本功能；如您同意我们会按照法律的要求，对您上传的内容在传输和存储的过程中采取严格的加密措施，以确保内容的安全，对该内容的使用仅限于为您提供本功能服务，我们仅提供图像处理服务，服务完成后，系统将自动删除上述内容，不予留存。
7）图像分类服务。当您使用朵朵AI抠图、AI商品图功能时，我们会不识别任何特定个人的粗略间接画像特征（如大类别：风景、美食、人像等），并通过算法进行图片特征分析，用以帮助您进行图片处理。
8）身体轮廓识别服务。当您使用朵朵AI抠图、AI模特试衣功能时，我们会用实例分割技术识别您的头部和身体轮廓参数完成抠图。这类信息是为提供本服务必须收集的信息，收集后即作去标识化处理，不会用于识别任何特定的用户。
4、我们可能从第三方间接获取您的个人信息
1）您使用第三方帐号（微博、微信、QQ）登录朵朵AI时，可选择授权朵朵AI在符合相关法律法规要求的前提下读取并获得您在该第三方平台上登记、公布、记录的公开信息（包括昵称、头像）。
2）朵朵AI需要您授权从第三方获取上述信息是为了记住您作为朵朵AI用户的登录身份，以向您提供更优质的产品和/或服务。我们仅会在您的授权同意的范围内收集并使用您的个人信息。在您使用第三方帐号注册或登录后，您的第三方帐号将会与朵朵AI帐号进行绑定，但您可以在页面右上角【点击头像—帐号与安全—帐号信息—绑定第三方帐号】中选择“解除绑定”，进行取消帐号绑定。
前述我们从第三方间接获取的您的个人信息，我们仅会在您的授权同意的范围内收集并使用。
5、朵朵AI基于其它特别情况对您的个人信息的使用
如果您认为您的相关权利遭受侵犯，您可依据我们的侵权投诉流程、通过我们对外公布的联系方式提起投诉、举报。在此过程中，我们将要求您提供个人有效身份信息以核实投诉、举报的真实性。与此同时，如果您申请解除您的朵朵AI帐号异常状态的，我们也可能要求您提供有效身份信息进行核实。此为个人敏感信息，我们将采取严格的保密措施，并不会向第三方进行共享。
6、依法不经授权处理个人信息的情形
根据相关法律法规及国家标准，以下情形中，我们可能会处理您的相关个人信息而无需征求您的授权同意：
a）为订立、履行您作为一方当事人的合同所必需；
b）为个人信息处理者履行法定职责或者法定义务所必需；
c）为应对突发公共卫生事件，或者紧急情况下为保护自然人的生命健康和财产安全所必需；
d）为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理个人信息；
e）依照相关法律规定在合理的范围内处理您个人自行公开或者其他已经合法公开的个人信息；
f）法律、行政法规规定的其他情形。
二、我们如何使用Cookie
Cookie和同类设备信息标识技术是互联网中普遍使用的技术。当您使用我们的服务时，我们可能会使用相关技术向您的设备发送一个或多个Cookie 或匿名标识符（下称“Cookie），以收集、标识和存储您使用本产品服务时的信息。
Cookie的使用主要是为了保障产品功能与服务的安全、高效运转，使我们确认您帐户的安全状态，排查崩溃、延迟的相关异常情况；帮助您省去重复填写个人信息、输入搜索内容的步骤和流程，以获得更轻松的使用体验；同时，我们还可能利用上述技术为您发送、展示、推送我们为您服务的内容。我们承诺，不会将Cookie用于本政策所述目的之外的任何其他用途。
您可根据自己的偏好管理或删除Cookie，大多数浏览器均为用户提供了清除浏览器缓存数据的功能，您可以在浏览器设置中操作清除Cookie数据，但清除后可能无法使用由我们提供的、依赖于Cookie的功能或服务。
三、我们如何共享、转让、公开披露您的个人信息
1、信息共享
1）委托处理
对于委托处理个人信息的场景，我们会与受托合作方根据法律规定签署相关处理协议，并对其个人信息使用活动进行监督。
2）共同处理
对于共同处理个人信息的场景，我们会与合作方根据法律规定签署相关协议并约定各自的权利和义务，确保在使用相关个人信息的过程中遵守法律的相关规定、保护数据安全。
3）共享场景
我们不会与任何公司、组织、个人分享您的个人信息，但以下情况除外：
a）为订立、履行您作为一方当事人的合同所必需；
b）为个人信息处理者履行法定职责或者法定义务所必需；
c）为应对突发公共卫生事件，或者紧急情况下为保护自然人的生命健康和财产安全所必需；
d）为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理个人信息；
e）依照相关法律规定在合理的范围内处理您个人自行公开或者其他已经合法公开的个人信息；
f）法律、行政法规规定的其他情形。
A.与我们的关联公司共享：我们为您所提供的产品/服务大多是无法单独完成的，因此您的个人信息可能会与我司（厦门快乐小甜智能科技有限公司）的关联公司进行共享，我们只会在为实现向您提供本产品相关功能和服务的目的下共享必要的个人信息且受本政策所声明目的的约束。关联公司若要改变个人信息的处理目的，将再次征求您的同意。
B.向合作方共享个人信息
仅为实现本政策中声明的目的，我们的某些服务将由授权合作伙伴提供，如技术支持服务、产品分析服务。我们可能会与合作伙伴共享您的某些个人信息，以保障为您提供的服务得以顺利完成，并帮助我们提供更好的客户服务和用户体验。我们仅会出于合法、正当、必要和诚信原则提供您的个人信息，并且只会共享提供服务所必要的个人信息；同时，对接收个人信息的公司、组织和个人，我们会与其签署严格的保密协议，或要求其按照我们的朵朵AI个人信息保护政策以及其他任何相关的保密和安全措施来处理个人信息。我们的合作伙伴无权将接收的个人信息用于任何其他用途。我们的合作伙伴包括以下类型：
如：技术支持类合作伙伴。为我们提供技术支持的合作伙伴，会向我们的用户收集相关个人信息用于实现其所支持的服务。同时，还有提供分析服务的合作伙伴，会向我们的用户收集基于其信息安全规则完成去标识化处理的少量个人信息，以帮助我们统计产品用户分布、评估产品推广效果。
2、转让
我们不会将您的个人信息转让给任何公司、组织和个人，但以下情况除外：
1）在明确获得您的授权和同意的前提下，我们会向其他方转让您的个人信息；
2）满足法律法规、法律程序的要求或强制性的政府要求或司法裁定；
3）在涉及合并、收购或破产清算时，如涉及到个人信息转让，我们会在要求新的持有您个人信息的公司、组织等主体继续接受此朵朵AI个人信息保护政策的约束，如果本政策约定的个人信息的收集、处理方式、使用目的等发生改变，我们将要求该公司、组织等主体重新向您征求授权同意。
3、公开披露
我们仅会在以下情况下，收集或公开披露您的个人信息：
1）获得您单独的同意后；
2）基于法律法规、司法机关或行政主管部门的强制性要求，我们可能会披露您的个人信息。
四、我们如何存储、保护您的个人信息
1、信息的存储
1）存储地点
我们会按照法律法规规定，将境内收集的用户个人信息存储于中国境内。如果您的个人信息存储地点从中国境内转移到境外的，我们将严格依照法律的规定执行。
2）存储期限：
我们只会在达成本政策所述目的所必需的期限内及法律、行政法规所规定的保留期限内保留您的个人信息。例如《中华人民共和国电子商务法》要求商品和服务信息、交易信息保存时间自交易完成之日起不少于三年；《网络安全法》要求按照规定留存相关的网络日志不少于六个月。
我们判断个人信息的存储期限主要参考以下标准并以其中较长者为准：
a）完成与您相关的服务所需保留的必要期限；
b)应对您可能的查询或投诉；
c)保证我们为您提供服务的安全和质量；
d)您是否同意更长的留存期间；
e)是否存在关于保留期限的其他特别约定或法律法规规定。
对于超出期限的个人信息，我们会立即删除或做匿名化处理。
2、我们如何保护您的信息安全
1)安全技术措施和管理制度
我们已使用符合业界标准的安全防护措施保护您提供的个人信息，防止数据遭到未经授权访问、公开披露、使用、修改、损坏或丢失。我们通过不断提升的技术手段采取一切合理可行的措施，保护您的个人信息。例如，在您的浏览器与“服务”之间交换数据时受SSL加密保护；我们对产品提供的配套Web服务提供HTTPS安全访问方式；我们会使用加密技术确保数据的保密性；我们会使用受信赖的保护机制防止数据遭到恶意攻击；我们会部署访问控制机制，确保只有授权人员才可访问个人信息，并要求他们严格遵守保密义务；以及我们会举办安全和隐私保护培训课程，加强员工对于保护个人信息重要性的认识。
2)个人信息安全事件的响应
如果我们的物理、技术或管理防护设施遭到破坏，导致信息被非授权访问、公开披露、篡改或毁坏，导致您的合法权益受损的，我们会及时启动应急预案，采取合理必要的措施，以尽可能降低对您个人的影响。如在不幸发生个人信息安全事件后，我们将按照法律法规的要求，及时向您告知：安全事件的基本情况和可能的影响、我们已采取或将要采取的处置措施、您可自主防范和降低风险的建议、对您的补救措施等。我们将及时将事件相关情况以短信、邮件、信函、电话、推送通知及其他合理渠道等方式告知您，难以逐一告知个人信息主体时，我们会采取合理、有效的方式发布公告。同时，我们还将按照监管部门要求，主动上报个人信息安全事件的处置情况。
3)安全提示
互联网并非绝对安全的环境，请您妥善保护自己的个人信息，仅在必要的情形下向他人提供，以免信息被窃取甚至遭遇电信网络诈骗，同时电子邮件、即时通讯、及与其他用户的交流方式并未加密，我们强烈建议您不要通过此类方式发送个人信息。请使用复杂密码，协助我们保证您的帐号安全。
互联网环境并非百分之百安全，我们将尽力确保或担保您发送给我们的任何信息的安全性。
五.您如何管理您的个人信息
按照中国相关的法律、法规、标准，在您使用朵朵AI及其服务期间，为了您可以更加便捷地查阅、复制、更正、删除您的个人信息，同时保障您撤回对个人信息处理的同意及注销帐号的权利，我们在产品设计中为您提供了相应的管理操作路径，供您参考：
1、查阅、复制、更正、删除您的个人信息
1）个人信息查阅和更正——您可以通过页面右上角【点击头像】-【帐号与安全】-【个人资料】，来对您朵朵AI帐号中的昵称、性别、头像、地区、生日等进行查阅和更正。
2）帐号信息访问与更正——您可在页面右上角【点击头像】-【帐号与安全】-【帐号信息】中查阅或更换您绑定的手机号、查阅登录记录、管理您的地址、第三方帐号绑定等信息。
3）修改登录密码——您可在您可在页面右上角【点击头像】-【帐号与安全】-【修改密码】中修改登录密码。
4）撤回您的授权
如果您希望撤销同意我们收集、使用和披露您的其他个人信息或者希望我们更正、更新或删除您的个人信息，可通过本政策中的联系方式与我们联系。我们将会在收到您的电子邮件或者挂号信后的合理时间内处理您的请求并停止收集、使用和披露您的个人信息。
但请您理解并同意，当您撤回某些授权时，将导致与之相关的产品功能不可用，我们无法继续为您提供撤回同意或授权所对应的特定功能和/或服务，并且您撤回授权的决定不会影响此前基于您的授权而开展的个人信息处理。
5）删除您的个人信息
在以下情形中，您可以向我们提出删除个人信息的请求：
A.处理目的已实现、无法实现或者为实现处理目的不再必要；
B.我们停止提供产品或者服务，或者保存期限已届满；
C.您撤回同意的；
D.我们违反法律、行政法规或者违反约定处理个人信息；
E.法律、行政法规规定的其他情形。
以上删除请求一旦被响应，我们还将同时尽可能通知从朵朵AI获得您个人信息的主体，要求其及时删除相应信息，除非法律法规另有规定，或者这些主体获得您的独立授权。当您从我们的服务中删除信息后，我们可能不会立即从备份系统中删除相应的信息，我们将会在备份更新时删除这些信息或者实现匿名化处理。
2、逝者近亲属的权利
如朵朵AI产品及其服务的用户不幸逝世，其近亲属可通过本政策公布的联系方式联系我们，以获取相关指引来行使法律规定的合法、正当权益。
3、对于您管理个人信息要求的响应
为保障安全，在您提出上述权利主张时，您可能需要提供书面请求，或以其他方式证明您的身份。我们将在验证您的身份后再处理您的请求。一般情况下，我们将在【15】天内做出答复。对于您合理的请求，我们原则上不收取费用，但对多次重复、超出合理限度的请求，我们将酌情收取一定费用。对于与您的身份不直接关联的信息、无端重复信息，或者需要过多技术手段（例如，需要开发新系统或从根本上改变现行惯例）、给他人合法权益带来风险或者不切实际的请求，我们可能会予以拒绝。
在以下情形中，按照法律法规要求，我们将无法响应您的请求：
1）与国家安全、国防安全有关的；
2）与公共安全、公共卫生、重大公共利益有关的；
3）与犯罪侦查、起诉、审判和执行判决等有关的；
4）有充分证据表明个人信息主体存在主观恶意或滥用权利的；
5）响应您的请求将导致您或其他个人、组织的合法权益受到严重损害的；
6）涉及商业秘密的。
六、未成年人保护
1、受限于本产品特性，我司并未开发识别您真实年龄的产品功能，我们的产品主要面向成人。如果没有父母或监护人的同意，未成年人不应创建自己的个人信息主体帐户。如果您的年龄在14周岁以下，在使用我们的产品和/或服务前，请您务必在您的监护人的陪同下阅读本政策，并确保已征得您的监护人明确同意后，再使用我们的服务。
2、对于经监护人同意使用我们的产品或服务而收集未成年人个人信息的情况，我们只会在法律法规允许、监护人明确同意或者保护未成年人所必要的情况下处理此信息。
3、如果您的监护人不同意您按照本政策使用我们的服务或向我们提供个人信息，请您立即终止使用我们的服务并及时通知我们。
4、如果您是父母或监护人，对您所监护的儿童使用我们的产品/服务或其向我们提供的用户信息有任何疑问时，请您及时与我们联系。
5、如果我们发现在未获得监护人同意的情况下收集了未成年的个人信息，则会设法尽快删除相关未成年人个人信息。
七、本政策的更新与修订
本政策可能会根据业务的调整、更新、法律法规或政策的变化而适时变更。未经您明确同意，我们不会削减您按照本政策当前版本所应享有的权利。本政策更新后，我们会发出更新版本，并在更新后的条款生效前通过私信、通知、公告、弹窗或其他适当的方式提醒您更新的内容，以便您及时了解本政策的最新版本。
如本政策变更的类型涉及个人信息的处理目的、处理方式和处理的个人信息种类发生变更的，我司将重新取得您的同意。
若您不同意修改后的朵朵AI个人信息保护政策，您有权并应立即停止使用我们的产品和/或服务。如果对本政策的更新存在疑义，请您及时通过本政策公示的联系方式与我方联系。
八、联系我们
1、我公司为在中华人民共和国境内成立的【厦门快乐小甜智能科技有限公司】，为朵朵AI唯一运营主体，注册地址：厦门火炬高新区（翔安）产业区同龙二路942号423-26。
2、如果您对本政策内容有任何疑问、意见、建议或进行申诉，您可通过以下任一方式联系我们：
1）请您发送电子邮件至个人信息保护专员邮箱：xiaotianzhineng@163.com
2）您也可以挂号信方式寄送至：中华人民共和国厦门火炬高新区（翔安）产业区同龙二路942号423-26。
我们将尽快审核您提出的问题或建议，并在验证您的用户身份后的十五天内回复。
DuoDuo AI Personal Information Protection Policy | Vidow.ai
Updated: June 25, 2026
Effective: June 25, 2026
Xiamen Happy Xiaotian Intelligent Technology Co., Ltd. and its affiliates (i.e., "we"), as the operator of DuoDuo AI (hereinafter also referred to as "this Service"), will strictly protect your personal information and privacy in accordance with the law. This DuoDuo AI Personal Information Protection Policy ("this Policy") explains how we collect, use, share, store, and protect your personal information when you use DuoDuo AI features through the DuoDuo AI website (ai.xiaotale.com), i.e., the DuoDuo AI web application (hereinafter the "Product" or "Service"), and how you can manage your personal information. Please carefully read and understand this Policy before using our services so that you can make appropriate choices.
[Introduction]
Through this Policy, we will explain how we process your personal information in different scenarios when you use this Product. We will strictly follow legal requirements and seek your separate consent in specific cases.In addition to this Policy, we may also explain the corresponding purpose, scope, and manner of information collection in specific scenarios through instant notices (including pop-ups, page prompts, etc.), feature update descriptions, and the like. Such instant notices and feature update descriptions form part of this Policy and have the same effect. You may refuse our processing of other personal information, but this may result in our inability to provide corresponding services. We will detail in this Policy that types of your personal information are already shown in bold, types of your sensitive personal information are marked in bold italic with underline, and your rights clauses are shown in bold with underline, please pay special attention. If you have any questions, comments, or suggestions regarding this Policy, you may contact us via the contact methods at the end of this Policy.
This Policy will help you understand the following:
I. How We Collect and Use Your Personal Information
II. Use of Cookies and Similar Technologies
III. How We Share, Transfer, and Publicly Disclose Your Personal Information
IV. How We Store and Protect Your Personal Information
V. How You Manage Your Personal Information
VI. Protection of Minors
VII. Updates and Revisions to This Policy
VIII. Contact Us
IX. Appendix: Permission Application and Application Scenario List
We highly value the protection of your personal information and are committed to maintaining your trust. We promise to take corresponding security protection measures in accordance with generally applicable industry security standards to protect your personal information. This Policy applies throughout the entire process of your downloading, installing, opening, browsing, using, and canceling (collectively "using") DuoDuo AI. The DuoDuo AI PC application is subject to this DuoDuo AI Personal Information Protection Policy. We promise that the maximum extent of our collection and use of your personal information will not exceed the scope of this Policy.
I. How We Collect and Use Your Personal Information
1. Registering, Logging In, and Using a DuoDuo AI Account
(1) [Registration and Login] When you register, log in to this Product, and use related services, we recommend that you register a DuoDuo AI account to more fully use all features of this Product and services. If you create a DuoDuo AI account, you need to provide a mobile phone number [a mobile phone number is necessary information to fulfill national legal requirements on real-name network authentication] to create an account. You may also complete your online identity information, such as setting a password, nickname, and avatar, of which the nickname and avatar you set will be publicly displayed.
(2) If you have already registered a DuoDuo AI account, you may authorize login via a third-party account (such as a WeChat account), or log in with a third-party platform account. When you log in with a third-party platform account, you authorize DuoDuo AI to obtain your public information on that third-party platform (avatar, nickname, and other information you authorize).
During login to this Product, we may obtain your device information: such as device platform, device manufacturer, device brand, device model, and system version. "Device information" in this Policy has the same meaning as this definition. We may collect the above device information at a frequency necessary for login authentication. Such information is necessary to provide the service and will be de-identified after collection and will not be used to identify any specific user.
(3) About DuoDuo AI Accounts
A DuoDuo AI account may be used to log in to and use Happy Xiaotian's apps, web, and PC applications. To provide a consistent service experience, when you log in to other Happy Xiaotian products and choose to use your registered DuoDuo AI account, that account will sync nickname, avatar, region, gender, and other public information you voluntarily filled in. If you do not wish such content to be synced, please choose other registration or login methods when logging into other Happy Xiaotian products.
2. Providing Security Assurance for You
To protect your account, network, operations, and system security, and to prevent phishing and Trojans, during your use of this Product we may collect at a frequency necessary for security assurance your device information [including device model, operating system version, device identifiers including immutable device identifiers (a string assigned by the device manufacturer to identify the device; "device identifier information" in this Policy has the same meaning)], login IP address, MAC address, network operator and type, network type, and operation log information.
3. Providing Other Related Product Features and/or Services
To implement the following product features and/or services, we may need to collect corresponding personal information. If you refuse to provide it, you will be unable to use such specific services.
1) Customer service. When you file a complaint, make an inquiry, or appeal to DuoDuo AI, to contact you or help solve your problem, we may need your name, mobile phone number, email, and other valid contact methods. If you refuse to provide the above information, we may be unable to contact you in time or provide timely feedback on handling results.
2) We may detect your network status. Without a network environment, services cannot be provided normally, and we will display an on-screen prompt.
3) Maintaining product security and promptly troubleshooting. To maintain normal operation of our services, protect your account security, troubleshoot product faults, and improve and optimize our services, we will collect your device identifier information, device model information, login IP address, operation log information, device brand, and system version. Such information is necessary to provide the service and will be de-identified after collection and will not be used to identify any specific user.
4) Protecting account security. When you change passwords, undergo security verification, or appeal, and the operation is abnormal, we may require you to provide valid identity information to ensure the security of such operations.
5) When you use cloud processing related features [such as AI erase, lossless upscale, enhance clarity, DuoDuo AI cutout], we will collect image features that do not identify any specific individual (e.g., scenery, food, portrait) and analyze them via algorithms to help you obtain better cloud processing effects. You need to upload your image information to backend servers for processing; generated content will be returned to your device. Such upload and processing are necessary to provide this feature. We will take strict encryption measures during transmission and storage as required by law to ensure your information security. Use of such information is limited to providing this feature. We only provide image processing services; after completion, the system will automatically delete the above information and will not retain it.
6) When you use AI-related features [such as AI Logo, AI product design, AI product images, AI model try-on], we need to upload your original images to servers so that AI models can generate new content for you to save locally. Such upload and processing are necessary to provide this feature; if you refuse, you cannot use this feature. If you agree, we will take strict encryption measures during transmission and storage as required by law. Use of such content is limited to providing this feature. We only provide image processing services; after completion, the system will automatically delete the above content and will not retain it.
7) Image classification service. When you use DuoDuo AI cutout or AI product image features, we will use coarse indirect image features that do not identify any specific individual (e.g., broad categories: scenery, food, portrait) and analyze image features via algorithms to help you process images.
8) Body contour recognition service. When you use DuoDuo AI cutout or AI model try-on features, we use instance segmentation to recognize head and body contour parameters to complete cutout. Such information is necessary to provide this service and will be de-identified after collection and will not be used to identify any specific user.
4. We May Indirectly Obtain Your Personal Information from Third Parties
1) When you log in to DuoDuo AI with a third-party account (Weibo, WeChat, QQ), you may choose to authorize DuoDuo AI to read and obtain, in compliance with applicable laws, public information registered, published, or recorded on that third-party platform (including nickname and avatar).
2) DuoDuo AI needs your authorization to obtain the above information from third parties in order to remember your login identity as a DuoDuo AI user and to provide better products and/or services. We will only collect and use your personal information within the scope of your authorized consent. After you register or log in with a third-party account, your third-party account will be bound to your DuoDuo AI account, but you may cancel the binding by choosing "Unbind" in [Click avatar — Account & Security — Account Information — Bind Third-Party Account] at the upper right of the page.
For the personal information we indirectly obtain from third parties as described above, we will only collect and use it within the scope of your authorized consent.
5. DuoDuo AI's Use of Your Personal Information in Other Special Circumstances
If you believe your related rights have been infringed, you may file a complaint or report in accordance with our infringement complaint process via our publicly announced contact methods. In this process, we will require you to provide valid personal identity information to verify the authenticity of the complaint or report. Meanwhile, if you apply to lift an abnormal status of your DuoDuo AI account, we may also require you to provide valid identity information for verification. This is sensitive personal information; we will take strict confidentiality measures and will not share it with third parties.
6. Circumstances in Which Personal Information May Be Processed Without Authorization as Permitted by Law
According to relevant laws, regulations, and national standards, we may process your related personal information without seeking your authorized consent in the following circumstances:
a) Necessary for concluding or performing a contract to which you are a party;
b) Necessary for the personal information processor to perform statutory duties or obligations;
c) Necessary to respond to a public health emergency, or to protect the life, health, and property safety of a natural person in an emergency;
d) Processing personal information within a reasonable scope for news reporting, public opinion supervision, and other acts carried out for the public interest;
e) Processing within a reasonable scope personal information that you have made public yourself or that has otherwise been lawfully disclosed, in accordance with relevant legal provisions;
f) Other circumstances stipulated by laws and administrative regulations.
II. How We Use Cookies
Cookies and similar device information identification technologies are commonly used on the Internet. When you use our services, we may use related technologies to send one or more Cookies or anonymous identifiers (hereinafter "Cookies") to your device to collect, identify, and store information about your use of this Product's services.
Cookies are mainly used to ensure the secure and efficient operation of product features and services, confirm the security status of your account, troubleshoot crashes and latency; help you avoid repeatedly filling in personal information or search content for a smoother experience; and we may also use the above technologies to send, display, and push content for our services. We promise not to use Cookies for any purpose other than those stated in this Policy.
You may manage or delete Cookies according to your preferences. Most browsers provide a function to clear browser cache data. You may clear Cookie data in browser settings, but after clearing you may be unable to use features or services we provide that depend on Cookies.
III. How We Share, Transfer, and Publicly Disclose Your Personal Information
1. Information Sharing
1) Entrusted Processing
For scenarios of entrusted processing of personal information, we will sign related processing agreements with entrusted partners in accordance with the law and supervise their personal information use activities.
2) Joint Processing
For scenarios of joint processing of personal information, we will sign related agreements with partners in accordance with the law, agree on respective rights and obligations, and ensure compliance with legal requirements and data security when using related personal information.
3) Sharing Scenarios
We will not share your personal information with any company, organization, or individual, except in the following circumstances:
a) Necessary for concluding or performing a contract to which you are a party;
b) Necessary for the personal information processor to perform statutory duties or obligations;
c) Necessary to respond to a public health emergency, or to protect the life, health, and property safety of a natural person in an emergency;
d) Processing personal information within a reasonable scope for news reporting, public opinion supervision, and other acts carried out for the public interest;
e) Processing within a reasonable scope personal information that you have made public yourself or that has otherwise been lawfully disclosed, in accordance with relevant legal provisions;
f) Other circumstances stipulated by laws and administrative regulations.
A. Sharing with our affiliates: Most products/services we provide cannot be completed alone; therefore your personal information may be shared with affiliates of our company (Xiamen Happy Xiaotian Intelligent Technology Co., Ltd.). We will only share necessary personal information for the purpose of providing related features and services of this Product and subject to the purposes stated in this Policy. If an affiliate changes the purpose of processing personal information, it will seek your consent again.
B. Sharing Personal Information with Partners
Solely to achieve the purposes stated in this Policy, some of our services will be provided by authorized partners, such as technical support and product analysis services. We may share certain of your personal information with partners to ensure smooth completion of services provided to you and to help us provide better customer service and user experience. We will only provide your personal information based on lawful, legitimate, necessary, and good-faith principles, and will only share personal information necessary to provide services. Meanwhile, for companies, organizations, and individuals that receive personal information, we will sign strict confidentiality agreements or require them to process personal information in accordance with our DuoDuo AI Personal Information Protection Policy and any other related confidentiality and security measures. Our partners have no right to use the received personal information for any other purpose. Our partners include the following types:
For example: Technical support partners. Partners that provide us with technical support may collect related personal information from our users to implement the services they support. Partners that provide analysis services may also collect a small amount of personal information that has been de-identified under their information security rules to help us statistically analyze user distribution and evaluate product promotion effectiveness.
2. Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:
1) We will transfer your personal information to other parties with your explicit authorization and consent;
2) To meet requirements of laws and regulations, legal procedures, mandatory government requirements, or judicial rulings;
3) In the event of merger, acquisition, or bankruptcy liquidation involving personal information transfer, we will require the new company or organization holding your personal information to continue to be bound by this DuoDuo AI Personal Information Protection Policy. If the collection, processing methods, or purposes of personal information stipulated in this Policy change, we will require that company or organization to seek your authorization and consent again.
3. Public Disclosure
We will only collect or publicly disclose your personal information in the following circumstances:
1) After obtaining your separate consent;
2) Based on mandatory requirements of laws and regulations, judicial authorities, or administrative authorities, we may disclose your personal information.
IV. How We Store and Protect Your Personal Information
1. Storage of Information
1) Storage Location
In accordance with laws and regulations, we will store user personal information collected within China in China. If your personal information storage location is transferred from within China to outside China, we will strictly comply with legal provisions.
2) Storage Period:
We will only retain your personal information for the period necessary to achieve the purposes stated in this Policy and for retention periods required by laws and administrative regulations. For example, the E-Commerce Law of the People's Republic of China requires that product and service information and transaction information be retained for no less than three years from the date of transaction completion; the Cybersecurity Law requires that related network logs be retained for no less than six months as required.
We mainly refer to the following standards in determining the storage period of personal information and take the longer one:
a) The necessary period to complete services related to you;
b) Responding to your possible inquiries or complaints;
c) Ensuring the security and quality of services we provide to you;
d) Whether you agree to a longer retention period;
e) Whether there are other special agreements or legal provisions on retention periods.
For personal information beyond the period, we will immediately delete it or anonymize it.
2. How We Protect Your Information Security
1) Security Technical Measures and Management Systems
We have used industry-standard security protection measures to protect the personal information you provide and prevent unauthorized access, public disclosure, use, modification, damage, or loss of data. We take all reasonably practicable measures through continuously improving technical means to protect your personal information. For example, data exchanged between your browser and the "Service" is protected by SSL encryption; we provide HTTPS secure access for supporting web services of the product; we use encryption technology to ensure data confidentiality; we use trusted protection mechanisms to prevent malicious attacks on data; we deploy access control mechanisms to ensure only authorized personnel can access personal information and require them to strictly comply with confidentiality obligations; and we hold security and privacy protection training to strengthen employees' awareness of the importance of protecting personal information.
2) Response to Personal Information Security Incidents
If our physical, technical, or management protection facilities are damaged, resulting in unauthorized access, public disclosure, alteration, or destruction of information and damage to your lawful rights and interests, we will promptly activate emergency plans and take reasonably necessary measures to minimize the impact on you. After an unfortunate personal information security incident, we will, as required by laws and regulations, promptly inform you of: the basic situation and possible impact of the security incident, disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, remedial measures for you, etc. We will promptly inform you of related circumstances via SMS, email, letter, phone, push notification, and other reasonable channels. When it is difficult to notify personal information subjects one by one, we will issue an announcement in a reasonable and effective manner. Meanwhile, we will also proactively report the disposal of personal information security incidents as required by regulatory authorities.
3) Security Tips
The Internet is not an absolutely secure environment. Please properly protect your personal information and provide it to others only when necessary to avoid information theft or even telecommunications network fraud. Meanwhile, email, instant messaging, and communications with other users are not encrypted. We strongly recommend that you do not send personal information through such means. Please use complex passwords to help us ensure your account security.
The Internet environment is not 100% secure. We will do our best to ensure or guarantee the security of any information you send to us.
V. How You Manage Your Personal Information
In accordance with relevant Chinese laws, regulations, and standards, during your use of DuoDuo AI and its services, to make it more convenient for you to access, copy, correct, and delete your personal information, and to safeguard your rights to withdraw consent to personal information processing and to cancel your account, we have provided corresponding management operation paths in product design for your reference:
1. Access, Copy, Correct, and Delete Your Personal Information
1) Access and correction of personal information — You may access and correct the nickname, gender, avatar, region, birthday, etc. in your DuoDuo AI account via [Click avatar] — [Account & Security] — [Personal Profile] at the upper right of the page.
2) Access and correction of account information — You may access or change your bound mobile number, view login records, and manage your address and third-party account bindings in [Click avatar] — [Account & Security] — [Account Information] at the upper right of the page.
3) Change login password — You may change your login password in [Click avatar] — [Account & Security] — [Change Password] at the upper right of the page.
4) Withdraw Your Authorization
If you wish to withdraw consent for us to collect, use, and disclose your other personal information, or wish us to correct, update, or delete your personal information, you may contact us via the contact methods in this Policy. We will process your request within a reasonable time after receiving your email or registered letter and stop collecting, using, and disclosing your personal information.
However, please understand and agree that when you withdraw certain authorizations, related product features will become unavailable, we will be unable to continue providing the specific features and/or services corresponding to the withdrawn consent or authorization, and your decision to withdraw authorization will not affect personal information processing previously conducted based on your authorization.
5) Delete Your Personal Information
In the following circumstances, you may request us to delete personal information:
A. The processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose;
B. We stop providing products or services, or the retention period has expired;
C. You withdraw consent;
D. We process personal information in violation of laws, administrative regulations, or agreements;
E. Other circumstances stipulated by laws and administrative regulations.
Once the above deletion requests are responded to, we will also, to the extent possible, notify entities that obtained your personal information from DuoDuo AI and require them to delete corresponding information in a timely manner, unless otherwise provided by laws and regulations or such entities have obtained your independent authorization. After you delete information from our services, we may not immediately delete corresponding information from backup systems; we will delete such information or anonymize it when backups are updated.
2. Rights of Close Relatives of the Deceased
If a user of DuoDuo AI products and services passes away, their close relatives may contact us via the contact methods published in this Policy to obtain related guidance to exercise lawful and legitimate rights provided by law.
3. Response to Your Requests to Manage Personal Information
For security, when you assert the above rights, you may need to provide a written request or otherwise prove your identity. We will process your request after verifying your identity. Generally, we will reply within [15] days. For your reasonable requests, we principally do not charge fees, but for repeated requests beyond a reasonable limit, we may charge a reasonable fee. We may refuse requests that are not directly related to your identity, baselessly repetitive, or that require excessive technical means (e.g., developing new systems or fundamentally changing current practices), bring risks to others' lawful rights and interests, or are impractical.
In the following circumstances, we will be unable to respond to your request as required by laws and regulations:
1) Related to national security or national defense security;
2) Related to public security, public health, or major public interests;
3) Related to criminal investigation, prosecution, trial, and enforcement of judgments;
4) There is sufficient evidence that the personal information subject has subjective malice or abuses rights;
5) Responding to your request will cause serious damage to the lawful rights and interests of you or other individuals or organizations;
6) Involving trade secrets.
VI. Protection of Minors
1. Limited by the nature of this Product, our company has not developed product features to identify your true age. Our products are mainly for adults. Without parental or guardian consent, minors should not create their own personal information subject accounts. If you are under 14 years of age, before using our products and/or services, please read this Policy accompanied by your guardian and ensure you have obtained explicit guardian consent before using our services.
2. For circumstances where minors' personal information is collected with guardian consent to use our products or services, we will only process such information when permitted by laws and regulations, with explicit guardian consent, or as necessary to protect minors.
3. If your guardian does not agree that you use our services or provide personal information to us in accordance with this Policy, please immediately stop using our services and notify us promptly.
4. If you are a parent or guardian and have any questions about the use of our products/services by children under your guardianship or the user information they provide to us, please contact us promptly.
5. If we find that we have collected minors' personal information without guardian consent, we will try to delete related minors' personal information as soon as possible.
VII. Updates and Revisions to This Policy
This Policy may be changed from time to time based on business adjustments and updates, and changes in laws, regulations, or policies. Without your explicit consent, we will not reduce the rights you should enjoy under the current version of this Policy. After this Policy is updated, we will issue an updated version and remind you of the updated content via private message, notice, announcement, pop-up, or other appropriate means before the updated terms take effect, so that you can timely understand the latest version of this Policy.
If changes to this Policy involve changes in the purpose, method, or types of personal information processed, our company will seek your consent again.
If you disagree with the modified DuoDuo AI Personal Information Protection Policy, you have the right and should immediately stop using our products and/or services. If you have questions about updates to this Policy, please promptly contact us via the contact methods published in this Policy.
VIII. Contact Us
1. Our company is Xiamen Happy Xiaotian Intelligent Technology Co., Ltd., established in the People's Republic of China, and is the sole operating entity of DuoDuo AI. Registered address: Room 423-26, No. 942 Tonglong 2nd Road, Torch High-tech Zone (Xiang'an) Industrial Zone, Xiamen.
2. If you have any questions, comments, suggestions, or appeals regarding this Policy, you may contact us in any of the following ways:
1) Please send an email to the Personal Information Protection Officer: xiaotianzhineng@163.com
2) You may also send a registered letter to: Room 423-26, No. 942 Tonglong 2nd Road, Torch High-tech Zone (Xiang'an) Industrial Zone, Xiamen, People's Republic of China.
We will review the questions or suggestions you raise as soon as possible and reply within fifteen days after verifying your user identity.