The "Privacy Agreement" is an agreement signed between you (hereinafter referred to as the "User") and Shanghai Yuxuan Information Technology Co., Ltd. (hereinafter referred to as "Shanghai Yuxuan") before using the software developed by Shanghai Yuxuan. Shanghai Yuxuan attaches great importance to your privacy. It is committed to protecting your privacy, and this privacy policy explains in detail our specific practices regarding the collection, use, and disclosure of information. This policy covers the following aspects: Important information and introduction about us; Personal data we collect; The ways and reasons for us to collect and use your personal data; The reasons for us to access your personal data; Your rights and choices regarding personal data; The reasons for us to use Cookies; The steps we take to protect the security and confidentiality of your information; The period for which we retain your information; Your legal rights. 1.Important Information and Introduction About Us Shanghai Yuxuan provides you with services ("Services") in accordance with this "SuperCampus Service Usage Agreement" and the following "User Privacy Agreement". We may update this "User Privacy Agreement" from time to time. Your continued use of our services after any changes to the relevant terms and policies constitutes your acceptance of the new "User Privacy Agreement". 2.Information We Collect and Receive When the APP is in Foreground State/Background State/Silent State SuperCampus accounts are uniformly assigned by schools or institutions, and you can only obtain login accounts and passwords through your affiliated school or institution. SuperCampus automatically collects and generates various types of usage information, including: service metadata, log data, IP addresses, third-party data, Cookie information, and device information (device name, device model, hardware serial number, operating system and application version and type, language settings, resolution, random storage memory of mobile terminals, network access methods, network quality data, mobile network information). We also collect, use, and share various aggregated data, such as statistical data or audience characteristic data for any purpose. Aggregated data may be derived from your personal data, but in accordance with the law, such data shall not be regarded as personal data because they do not directly or indirectly disclose your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing specific website functions. However, if we combine or associate aggregated data with your personal data such that it can directly or indirectly identify you, we will treat the combined data as personal data and use it in accordance with this "User Privacy Agreement". We do not collect any special categories of personal data related to you (including details related to your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, health information, genetic and biometric data). We also do not collect any information related to criminal convictions and offences. When using our services, you can set up personal profiles, establish relationships, send and receive messages, conduct searches and inquiries, register for various courses, and transmit information through various channels. There is no legal or contractual obligation for you to provide such data, but if you do not provide it, we will be unable to provide the corresponding services. To enhance the user experience of SuperCampus products, SuperCampus may collect your personal information by invoking device permissions. If you do not agree to provide such personal information, you may not be able to use functions related to improving the user experience. • If you wish to upload your avatar and/or other image information to SuperCampus, you can choose to authorize SuperCampus to invoke the camera or album permissions of your device. •If you agree to upload your recording materials to SuperCampus, you can choose to authorize SuperCampus to invoke the microphone permission of your device. • If you agree to allow SuperCampus to invoke your location permission to push more appropriate learning content to users in different regions, you can choose to authorize SuperCampus to invoke the location permission of your device. • If you agree to download course data (questions, audio, video content) to the local device for an offline course experience, you can choose to authorize SuperCampus to invoke the storage permission of your device. Third-party advertising push and other service providers collect relevant personal information Shanghai Yuxuan may cooperate with third-party service providers to integrate third-party services (such as placing advertisements, links, or other forms of promotional content) into SuperCampus products and/or services. Except for the third parties explicitly mentioned below, SuperCampus will not share your personal information provided to SuperCampus or collected by SuperCampus (such as mobile phone numbers, nicknames, avatars, friend lists, etc.) with third-party service providers, nor will it collect your personal information on behalf of third-party service providers. Third-party service providers accessed through SuperCampus products and/or services may have their own privacy policies, which are not bound by this "Privacy Policy". Third-party service providers may collect personal information necessary to provide services to you in accordance with their own privacy policies. SuperCampus will make reasonable efforts to require third-party service providers to comply with relevant laws and regulations when processing your personal information and strive to require them to take relevant confidentiality and security measures, but SuperCampus cannot guarantee that they will take corresponding measures as we require. We share personal information with affiliated and non-affiliated service providers to assist us in conducting business, such as integrating with our services through Application Programming Interfaces (APIs) to provide or support some services. These service providers need to access and read your necessary personal information to perform these tasks and are obligated to protect your personal information. Some components of our services may be linked to third-party services that we do not own or control, such as third-party Software Development Kits (SDKs) or third-party APIs integrated into our services to provide specific services or achieve specific functions. Some of these third-party services may also require your personal information, such as your location or device information, to provide their services to you. When you use such third-party services, you must comply with their service terms, and their privacy policies will also apply. We will conduct technical inspections and behavioural audits on the SDKs or APIs provided by these partners or service providers from time to time and require them to comply with applicable laws, regulations, and agreements to ensure that they collect and use data in accordance with laws, regulations, and agreements. The specific situations of our services accessing third-party SDKs/APIs are as follows. Please note that third-party SDKs/APIs may have certain changes in data processing types due to version upgrades, policy adjustments, etc. You can check their official websites for specific details: 1).SDKs for push notifications, such as JPushSDK, FCM Google Push Service, Huawei Push The push notification service enables the APP to have the ability to push messages and notifications. After integrating the JPush SDK, the push SDK will collect the personal information necessary for implementing the service and push messages and notifications to users through encrypted channels. The personal information collected and used by the push SDK includes: ① Device information: used to identify unique users, ensure the accurate delivery of messages; optimize push channel resources. We will integrate message push channel resources according to the activity of different APPs on the device to improve message delivery rates; ② Network information and location information: optimize network connection requests between the SDK and the push server to ensure the stability and continuity of the service; realize the function of regional push. To enable you to receive information push functions, we push preferential activities, learning reminders, and information serving our application business to users through the integrated push SDK. Push-related SDKs may read your device information (which may include the MAC of connected wireless network devices, wireless network list, IMEI, device MAC address, network type, mobile phone model, mobile phone serial number, wireless network name) and location information. The Android permissions that may be invoked to collect personal information include: READ_PHONE_STATE; WRITE_EXTERNAL_STORAGE; ACCESS_NETWORK_STATE; ACCESS_WIFI_STATE; ACCESS_COARSE_LOCATION; ACCESS_FINE_LOCATION; GET_TASKS; READ_EXTERNAL_STORAGE; The above-collected information and permissions are used to implement message push. Please note that for push-type SDKs, they will only be initialized and take effect when you use mobile devices of the corresponding brand. 2).SDKs for mobile crash logs and statistical page visits and click events, such as Firebase, AppsFlyer Firebase is mainly used to count users' usage in our application to help us improve services. We will collect common device information (such as IMEI/IMSI, SIM card serial number/MAC address, android_id, device model, operating system version), network information. This information helps us develop learning content more suitable for local users and helps us find and handle crash problems. AppsFlyer is mainly used for application attribution analysis to help applications make better marketing decisions. It will collect common device information, such as IMEI/IMSI, SIM card serial number/MAC address, android_id, device model, operating system version, network information, etc. 3).SDKs for uniquely identifying devices, Alipay Device Identification SDK, which will collect device information (including IMEI/IMSI, SIM card serial number/MAC address, Android ID) and network information, used for security risk control during user login and payment processes. 4).SDKs for uploading pictures, such as avatars, screenshots of user feedback problems. 5).In regions where Talk is available, an instant messaging SDK is used for online Chinese oral chat practice. 6).SDKs for human-machine verification in core operations such as login. 7).SDKs for online real-time Chinese oral evaluation. 3.Information Use Shanghai Yuxuan will use your personal data for the following general purposes to promote our legitimate interests: (i) Provide, update, maintain, and protect our services, websites, applications, and business (ii) Comply with the requirements of relevant laws, judicial procedures, or regulations (iii) Respond to your questions and comments (iv) Send marketing and transactional information about the service, including but not limited to emails, push notifications, text messages, and in-app messages (v) For statistical purposes (vi) Settlement, account management, and other administrative matters (vii) Investigate and help prevent security issues and abuse (viii) Other purposes introduced to you at the time of collection Shanghai Yuxuan uses such information to meet your product and service requirements and improve the services we provide to you. 4.Retention Shanghai Yuxuan will retain your personal data for as long as necessary to meet legitimate business interests, conduct audits, comply with (and prove compliance with) legal obligations, resolve disputes, and enforce our agreements. To determine a reasonable retention period for personal data, we will consider the quantity, nature, and sensitivity of personal data, the risk of harm caused by unauthorized use or disclosure of personal data, the purposes for which we process personal data, whether we can achieve the same purposes through other means, and relevant legal requirements. You have the right to delete your personal data by sending an email to hello@superchinese.com to request deletion. Please note that in this case, we will retain relevant financial information in accordance with local laws. 5.COOKIES (Login Record Buffer Files) COOKIES (digital stubs) are small pieces of data, usually containing an anonymous identification code sent from a website's computer to your browser and stored on your computer's hard drive. You can set your browser to accept, reject, or set cookie notifications. If you want to delete cookies already on your computer, please follow your browser's instructions to find the cookie files or storage locations. If you choose to reject all digital stubs, you may not be able to use some functions of the website. 6.Disclosure of Personal Information We display your profile information (except your email address and password) to people browsing the website to find friends. Shanghai Yuxuan will rent, sell, or share your personal information with third parties only with your permission, to provide products and services according to your requirements, or in the following situations: • When Shanghai Yuxuan responds to subpoenas, court orders, legal procedures, or establishes, exercises our legal rights, or defends against legal claims; • When Shanghai Yuxuan believes it is necessary to provide information that helps investigate, prevent, or take actions in cases involving illegal acts, fraud, potential threats to others' personal safety, violations of website service terms, or other legal requirements. • If Shanghai Yuxuan is acquired or merged, your relevant information will be transferred. In this case, Shanghai Yuxuan will inform you in advance that the transfer and use of information will be subject to the new privacy policy. We may share your data (including email addresses) with other data processors such as Facebook and Google to provide targeted advertising. We require all third parties to respect the security of personal data and handle personal data in accordance with the law. We do not allow third-party providers to use your personal data for their own purposes and only allow them to process your personal data for specified purposes in accordance with our instructions. Please remember that any personal information you actively disclose online may be collected and used by others. If you post personal information on the public internet, you may receive unsolicited responses. 7.Confidentiality and Security We will take measures to use reasonable industry-standard security safeguards to protect personal data from loss, theft, unauthorized access, disclosure, copying, improper use, or modification. Your personal data is protected by a password, and unless otherwise stated in the privacy policy, only you and we can see it. You agree to keep your password confidential and not disclose it to others or allow others to obtain it. Shanghai Yuxuan restricts employees' access to your personal information, and our employees will only access such information when there is sufficient reason, such as to provide you with products or services or to complete their tasks. Shanghai Yuxuan is equipped with physical, electronic, and procedural protective measures that comply with the regulations for protecting your personal information. However, information transmission over the internet cannot be 100% secure. Therefore, Shanghai Yuxuan cannot guarantee the security of the information you transmit to the website. In particular, you bear the risk when logging in and using website services. You need to restrict others' use of your computer and ensure that the computer can prevent various malicious codes, spyware, viruses, Trojans, and other software tools that can track the information you enter (including email addresses, payment-related information). SuperCampus complies with Google's Privacy Policy and Terms of Service. 8.Third-Party Websites The websites linked to this website are not within the scope of this privacy policy. It is recommended that you carefully read the privacy statements of those websites to understand their procedures for collecting, using, and disclosing personal information. 9.Your Legal Rights You have the right to: • Request access to your personal data (usually referred to as a "data subject access request"). Through this request, you can obtain a copy of the personal data we retain about you and check whether our processing of such data is legal. • Request correction of the personal data we retain about you. Through this request, you can correct any incomplete or inaccurate data we retain about you, but we may need to verify the accuracy of the new data you provide to us. •Request erasure of your personal data. Through this request, you can ask us to delete or remove personal data when we have no reasonable reason to continue processing your personal data. You also have the right to ask us to delete or remove your personal data in the following cases: you have successfully exercised your right to object to our processing of your personal data (see below); we may have processed your information illegally; or we must erase your personal data to comply with local laws. However, please note that when you submit a request, we may not be able to comply with your erasure request for specific legal reasons (we will inform you of the specific reasons). •Object to the processing of your personal data, provided that we rely on our legitimate interests (or the legitimate interests of third parties), but events related to your specific situation cause you to object to our processing of your personal data on this basis because you believe it will affect your fundamental rights and freedoms. You also have the right to object when we process your personal data for direct marketing purposes. In some cases, we will prove that we have compelling legitimate reasons to process your information that override your rights and freedoms. • Request restriction of the processing of your personal data. Through this request, you can ask us to suspend the processing of your personal data in the following situations: (a) You want us to confirm the accuracy of the data; (b) Our use of the data is illegal, but you do not want us to erase the relevant data; (c) You need us to retain the data even if we no longer need it because you need to use the relevant data to establish, exercise, or defend legal claims; or (d) You have objected to our use of your data, but we need to verify whether we have legitimate reasons to override your objection to use the relevant data. • Request the transfer of your personal data to you or a third party. We will provide your personal data to you or a third party of your choice in a structured, commonly used, and machine-readable format. Please note that this right only applies to automated information that you initially provided and agreed to our use, or that we can use for the purpose of reaching an agreement with you. • Withdraw consent at any time (we process your personal data based on this consent). However, this will not affect any legal processing conducted before you withdraw your consent. If you withdraw your consent, we may not be able to provide you with specific products or services. If this happens when you withdraw your consent, we will notify you accordingly. If you wish to exercise any of the above rights, please contact us as described below. • You do not need to pay to access your personal data (or exercise any other rights). However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee. In such cases, we may also refuse to comply with your request. We may need to ask you for specific information to help us confirm your identity and protect your right to access your personal data (or exercise any other rights). This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to access it. We may also contact you to request detailed information related to the request to respond more quickly. We will try to respond to all legitimate requests within 1 month. Sometimes, if your request is particularly complex or you have submitted multiple requests, it may take more than 1 month. In this case, we will notify you of the situation and provide you with updates in a timely manner. 10.Contact Us SuperCampus is managed by Shanghai Yuxuan Information Technology Co., Ltd. Address: 3rd Floor, Building 1, No. 400 Fangchun Road, China (Shanghai) Pilot Free Trade Zone Phone: +86-21-36696690 You can obtain a copy of the personal data related to you provided through our website, or request Shanghai Yuxuan to update, change, or delete your personal information by sending an email to hello@superchinese.com. If you have any questions or suggestions about our "User Privacy Agreement", please contact Shanghai Yuxuan by sending an email to hello@superchinese.com.