Hangzhou Julin Network Technology Co., Ltd. - Privacy Policy

Welcome to Field Ethos (原野志), operated and owned by Hangzhou Julin Network Technology Co., Ltd. ("we", "us", or "our"). We strictly protect your privacy and personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our services, and outlines your statutory privacy rights.

1. Information We Collect and How We Use It

We adhere to the principles of lawfulness, fairness, and necessity in collecting your personal data:

1.1 Account Registration & Login

• Mobile Phone Number & Verification Code: Collected during sign-up to authenticate identity and prevent fraudulent account activities.
• Profile Customization: Optional information including nickname, avatar, gender, birthday, and bio. Uploading avatars requires Camera/Photos access.

1.2 AI Species Recognition

• Photos Taken or Uploaded: Analyzed by deep-learning vision models to provide biological identification, confidence scores, and taxonomy records.

1.3 Location & Field Discovery Map

• GPS Location Data: Used to pinpoint field observation coordinates and render nearby ecological discovery markers on the interactive map.
• 200m Grid Privacy Blur: All public coordinates undergo a 200-meter grid privacy blur algorithm to protect wildlife habitats and safeguard your exact private location.

2. Third-Party SDK Directory & Data Sharing

To ensure system stability and provide map rendering and GPS positioning services, we integrate compliant third-party SDKs. We strictly guarantee that no third-party SDK is initialized or allowed to collect data before your explicit consent.

3. Device Permission Requests

4. Personal Information Security Capabilities & Protection Measures

In strict compliance with China's Personal Information Protection Law and the national standard GB/T35273-2020 Information Security Technology - Personal Information Security Specification, we have established a comprehensive network security and privacy protection management system:

• 1. Identity Authentication: We enforce Multi-Factor Authentication (MFA), strict password complexity policies, and dynamic security tokens for system administration; regular users are authenticated via mobile SMS OTP and secure JWT tokens to prevent unauthorized account access.
• 2. Data Encryption: All data communications between client apps and backend servers are strictly encrypted using TLS/SSL 1.3 protocols. Sensitive credentials are cryptographically stored using Salted SHA-256 password hashing. User specimen photos are stored in private Alibaba Cloud OSS buckets protected by dynamic HMAC-SHA1 presigned signatures.
• 3. Access Control: We enforce Role-Based Access Control (RBAC) following the principle of least privilege and separation of duties. Production databases are logically and physically isolated from corporate networks, and data access requires strict authorization.
• 4. Malicious Code Prevention: Enterprise Web Application Firewall (WAF), DDoS traffic scrubbing, and Host Intrusion Detection Systems (HIDS) are deployed to actively monitor, detect, and intercept malware, viruses, webshells, SQL injection, and XSS attacks.
• 5. Security Audit: We implement end-to-end security auditing. All operations involving collection, query, correction, deletion, and account cancellation are comprehensively logged. Audit logs are stored in a tamper-resistant format and retained for no less than 6 months.

5. Your Privacy Rights & Operational Paths

Under applicable regulations and GB/T35273-2020 standards, you have the following rights and clear operational paths:

• (1) Access & Query: Open App -> Tap bottom navigation [Profile] -> View your nickname, avatar, User ID, level, XP, specimen cards, footprints, and achievements.
• (2) Rectification & Modification: Open App -> Tap [Profile] -> Tap [Edit Profile] -> Modify avatar, nickname, bio, gender, or birthday -> Tap [Save Changes] to take effect immediately.
• (3) Deletion:
  • Single record: Open App -> [Profile] -> [My Collection] / [My Footprints] -> Tap a specimen card -> Tap top-right menu -> Select [Delete Card].
  • Full data deletion: Submit an account deletion request below to wipe all historical records permanently.
• (4) Revoke Permissions: Go to phone [Settings] -> [Apps] / [App Management] -> Select [Field Ethos / 原野志] -> [Permissions] -> Toggle off Camera, Photos, or GPS permissions.
• (5) Account Cancellation & Permanent Data Wipe: Open App -> Tap [Profile] -> [Settings] -> Tap [Delete Account]. We guarantee completion of verification and permanent deletion/anonymization of all data within 15 business days (typically within 48 hours).
• (6) Complaints & Data Subject Requests: If you encounter any difficulties or have privacy complaints, contact us at zywcczzq@163.com. We will verify and respond within 15 business days.

6. Protection of Minors

We attach great importance to the protection of minors' personal information. Minors under the age of 14 should use this application under the guidance and consent of their legal guardians.

7. Contact Us & Privacy Inquiries

If you have any questions, comments, inquiries, or complaints regarding this Privacy Policy, please contact us at:

• Company Name: Hangzhou Julin Network Technology Co., Ltd. (杭州炬林科技有限公司)
• Official Email: zywcczzq@163.com (Response within 15 business days)
• MIIT License Number: 浙ICP备2024094708号