Tinker SDK Personal Information Protection Rules

Updated: April 18, 2022

Effective date: April 18, 2022

 

introduction

[Tinker] (hereinafter referred to as "SDK Product") was developed by [Shenzhen Tencent Computer System Co., Ltd.] (hereinafter referred to as "we"), and its registered address is [35/F, Tencent Building, Keji Middle 1st Road, Maling Community, Yuehai Street, Nanshan District, Shenzhen].

The Tinker SDK Personal Information Protection Rules (hereinafter referred to as "the Rules") mainly inform developers and their end users ("end users") about the collection, use and processing of end users' personal information by the SDK product in order to realize the relevant functions of the SDK product.

Developers and end users are requested to read this rule carefully. If you are a developer, please confirm that you fully understand and agree to this rule before integrating the SDK product. If you do not agree to this rule and perform the corresponding user personal information protection obligations according to this rule, you should immediately stop accessing and using the SDK product; At the same time, you should only integrate the SDK product and process the personal information of the end user with the consent of the end user.

 

Special instructions:

If you are a developer, you should:

  1. Comply with laws and regulations to collect, use and process personal information of end users, including but not limited to formulating and publishing privacy policies on personal information protection;

  2. Before integrating the SDK product, inform the end user of the collection, use and processing of the end user's personal information by the SDK product, and obtain the end user's consent according to law;

  3. Unless otherwise specified by laws and regulations, personal information of any end user shall not be collected before obtaining the consent of the end user;

  4. Provide the end user with a user rights realization mechanism that is easy to operate and meets the requirements of laws and regulations, and inform the end user how to view, copy, modify, delete personal information, withdraw consent, and restrict personal information processing, transfer personal information, obtain copies of personal information, and cancel the account;

  5. Comply with the requirements of this rule.

If developers and end users have any questions or suggestions about the content of this rule, they can contact us at any time through the means provided in Article 7 of this rule.

 

1、 The information we collect and how we use it

(1) Personal information collected to realize SDK product functions

In order to realize the corresponding functions of the SDK product, we will collect the following personal information from end users or developers when they use the functions related to the SDK product:

Personal information type

Processing purpose

Handling method

Operating system compilation fingerprint

Perceive whether the mobile phone has upgraded the system, so as to trigger patches on demand before the application is accessed Dex File optimization.

Local saving and processing

Operating system version

Select different patch synthesis and loading logic according to the operating system version to be compatible with each version of the operating system.

Read only, do not save to local, and do not upload to remote

Name of mobile phone manufacturer

Handle the compatibility problems specific to some manufacturers when synthesizing and loading patches according to the name of the mobile phone manufacturer.

Read only, do not save to local, and do not upload to remote

Apply the currently running process name and PID

Judge whether the current process is app Main process or tinker own patch Process to determine the logic of the patch synthesis and loading process. And all processes used to terminate the application when the restart operation is executed.

Read only, do not save to local, and do not upload to remote

 

In order to realize the corresponding functions of the SDK product, we will embed a third-party SDK in the SDK product. The information of the third-party SDK is as follows:

Third party SDK name

Third party SDK Provider's company name

Type of personal information processed

Purpose

Third party SDK Personal Information Protection Rules

Dexlib2

personal

nothing

Resolve in class view Dex File to calculate two Dex Differences in the class structure view of files.

None

apk-parser-lib

personal

nothing

analysis APK In file Resources.arsc and AndroidManifest.xml To calculate resource differences and injection Tinker Version identification information of.

None

AOSP in Dx Part of the source code of

Google

nothing

Parse in binary structure Dex File to calculate two Dex The difference in binary content of the file.

None

BSDiff/BSPatch

personal

nothing

Calculate the addition of Dex The differential information of files other than the file, and the new file is recovered through the old file and differential information when the patch is synthesized.

None

 

(2) According to the provisions of laws and regulations, the following exceptions are approved by users:

1. Necessary for the conclusion and performance of the contract with the end user;

2. Necessary for fulfilling our legal obligations;

3. It is necessary to respond to public health emergencies or protect the life, health and property safety of end users in emergencies;

4. Implement news reporting, public opinion supervision and other behaviors for the public interest, and process the personal information of the end user within a reasonable range;

5. Handle the personal information disclosed by the end user or other legally disclosed personal information within a reasonable range in accordance with the provisions of this Law;

6. Other circumstances stipulated by laws and administrative regulations.

Special note: If the information we collect cannot identify the personal identity of the end user alone or in combination with other information, it does not belong to personal information in the legal sense.

 

2、 How end users manage their own information

We attach great importance to the right of end users to manage their personal information, and try our best to help end users manage their personal information, including viewing, copying, deleting, canceling accounts and setting privacy functions, to protect the rights of end users. If you are a developer, you should provide end users with ways to view, copy, modify, delete personal information, withdraw consent, and cancel accounts.

For personal information processing activities based on the consent of the end user, the end user has the right to withdraw the consent. We have provided developers with the ability to close this SDK product. Please click here View the operation instructions. Since we have no direct interactive dialogue interface with the end user, the end user can directly contact the developer to stop using the SDK product, or contact us through the method provided in Article 7 of this rule. If you are an end user, please understand that specific business functions or services can be completed only when you provide the information required for the service. After you withdraw your consent, we cannot continue to provide you with the corresponding functions or services, nor will we process your corresponding personal information. Your decision to withdraw your consent will not affect our previous personal information processing based on your authorization.

 

3、 Storage of information

(1) Where information is stored

We comply with laws and regulations and store personal information collected and generated in the People's Republic of China.

(2) Period for storing information

Generally speaking, we only retain the personal information of the end user for the shortest time necessary to achieve the purpose, except for the following circumstances:

·To comply with applicable laws and regulations;

·To comply with the provisions of court judgments, rulings or other legal procedures;

·To comply with the law enforcement requirements of relevant government agencies.

 

4、 Information security

We provide appropriate security protection for the personal information of end users to prevent the loss, improper use, unauthorized access or disclosure of information.

We strictly abide by laws and regulations to protect the personal information of end users.

We will use various security measures within a reasonable security level to ensure the security of information. For example, we use encryption technology, anonymous processing and other means to protect the personal information of end users.

We have established rigorous management systems, processes and organizations to ensure information security. For example, we strictly restrict the scope of people who access information, require them to comply with confidentiality obligations, and conduct reviews.

In case of security incidents such as personal information disclosure, we will launch emergency plans to prevent the expansion of security incidents, and notify developers in the form of push notifications, announcements, etc.

 

5、 Protection of minors

This SDK product is mainly for adults.

If you are a developer and the end user is a minor under the age of 14 ("child"), you should inform the parents or other guardians of the children of these rules, and process the children's personal information with the consent of the parents or other guardians of the children. If we find that developers provide us with personal information of children without the consent of the child guardian, we will take measures to delete it as soon as possible.

If you are the guardian of a child, you can contact the developer or contact us through the means provided in Article 7 of the Rules when you have questions or claims about the protection of the personal information of the child under your guardianship.

 

6、 Change

We will revise the content of this rule in due course.

If the revision of this rule will result in substantial impairment of the rights of the end user under this rule, we will inform it through website announcement and other means before the change takes effect. If you are a developer, when the updated rules have changed the processing of personal information of end users, you should update the privacy policy in a timely manner, and notify the end users in the form of a pop-up box and obtain their consent. If the end users do not agree to accept the rules, please stop integrating SDK products.

 

7、 Contact us

We have set up a special personal information protection team and personal information protection leader. If the developer and/or end user have any questions, complaints or suggestions about these rules or matters related to personal information protection, they can contact us through the following ways: (i) https://kf.qq.com/ Contact us; (ii) Send questions to Dataprivacy@tencent.com (iii) Mail the letter to the Data Privacy Protection Department of Tencent Binhai Building, No. 33, Haitian Second Road, Nanshan District, Shenzhen City, Guangdong Province, China. Postcode: 518054. We will review the issues involved as soon as possible and give feedback within 15 working days or the period specified by laws and regulations.