Privacy Policy – Call Your Panda

Last Updated: May 15, 2026

This Privacy Policy applies to the mobile application Call Your Panda (hereinafter referred to as the "App"), operated by us. It explains how we collect, use, store, disclose, and protect your personal information when you use our services, including account login, content browsing, panda interaction, ranking display, and other core functions.

This policy complies with global mainstream privacy regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Children's Online Privacy Protection Act (COPPA), and other applicable regional data protection laws. By accessing and using our App, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please stop using our App immediately.

1. Information We Collect

We only collect information necessary to support the normal operation of the App. We do not collect user browsing data for personalized recommendations. All article content and panda profile information are uniformly uploaded and managed by our backend system without algorithm-based personalized content delivery.

1.1 Login and Account Information

You can use the App through Sign in with Apple and Google Sign-In. We collect and process the following basic account information that you authorize:

• Unique user identification ID provided by Apple or Google
• Public profile information authorized for public access (such as nickname and avatar)
• Basic login authentication data to complete account registration and identity verification

Sign in with Apple: When you use Sign in with Apple, Apple processes your authorization code, nickname, and avatar. We receive a unique identifier from Apple to create and authenticate your account. Apple's processing of your data is governed by the Apple Privacy Policy.

Google Sign-In: When you use Google Sign-In, Google processes your ID token, nickname, and avatar. We receive a unique identifier from Google to create and authenticate your account. Google's processing of your data is governed by the Google Privacy Policy.

We will not obtain your private information such as email address, contact list, or location without your explicit authorization.

1.2 Interactive Behavior Data

To support the core interactive functions of the App, we record in-app behavioral data generated through your voluntary actions:

• Daily check-in records: used to issue virtual bamboo rewards for check-in behavior
• Panda feeding records: records your feeding actions using virtual bamboo obtained from check-ins
• Ranking-related data: associates your feeding volume with regional and panda popularity rankings

1.3 Public Display Data

The App displays two public ranking lists. The relevant data is limited to public interactive data:

• National Feeding Ranking: counts and displays the total feeding volume of users in your registered country/region
• Panda Popularity Ranking: calculates and displays each panda's popularity based on total user feeding volume

All ranking data displays only public statistical results and does not disclose any user's private personal information.

1.4 Device Identifiers and Non-Personal Anonymous Data

We may automatically collect device identifiers and anonymous usage data to support core service functions, security, and operational maintenance:

• Device identifier (Device ID): We generate a deterministic device fingerprint based on device hardware and system characteristics (on Android devices, including Android_ID obtained via Settings.Secure.ANDROID_ID). This identifier is hashed and persisted locally.
• Device information: Includes device model, manufacturer, system version, and hardware specifications, collected via the device_info_plus SDK.
• Usage data: Includes app access time, page view records, and feature usage statistics.

Uses of Device ID: Device ID is used for (1) device identification and anti-fraud to maintain service security; (2) request tracing for server-side debugging and troubleshooting; (3) statistical analysis to improve service quality. Device ID is sent as a device identification header field in each HTTP request.

This device and usage data cannot directly identify individual users and is used only for app operation and maintenance, troubleshooting, security protection, and service optimization.

2. How We Use Your Information

We strictly use collected information only for the following legitimate purposes and will not use your data for unauthorized commercial marketing or personalized content recommendations:

• Complete user identity authentication and maintain normal account login status
• Provide core App functions, including article feed display, panda homepage browsing, check-in rewards, and panda feeding interaction
• Calculate, update, and display national feeding rankings and panda popularity rankings in real time
• Maintain normal App operation, fix system vulnerabilities, and optimize user experience
• Detect and prevent fraud, abuse, or illegal activity through device fingerprint verification
• Comply with legal obligations and regulatory requirements

Special Statement: The App does not offer personalized recommendations. All articles and panda content displayed are fixed content uniformly published by the backend. We do not analyze user browsing habits to deliver personalized content.

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party for commercial purposes. We share your information only in the following limited circumstances:

• Authorized third-party login services: When you choose to sign in with Apple or Google, the respective platform processes your login credentials and public profile information only for identity verification and account creation. For details on data shared with each platform and links to their privacy policies, see Section 1.1. We do not share any additional user personal information with third-party login providers beyond what is necessary for authentication.
• Legal requirements: We may disclose user information when required by laws, regulations, judicial process, or government regulatory authorities
• Service providers: We may engage professional technical service providers to maintain App operation. They are prohibited from using user data for other purposes and are bound by strict data confidentiality agreements

4. Data Storage and Security

4.1 Data Storage

Your personal data is stored on secure cloud servers. We retain user data only for as long as necessary to fulfill service purposes or comply with legal requirements. When data is no longer needed, we delete it completely or anonymize it.

Panda profile information and article content are uniformly uploaded, updated, and managed by the backend. Users may not independently upload or modify official content.

4.2 Data Security Measures

We adopt comprehensive technical and administrative measures to protect your personal information from unauthorized access, disclosure, alteration, loss, or misuse:

• Data transmission security: All network communication between the App and our servers is encrypted using TLS 1.2/1.3 to ensure integrity and confidentiality in transit.
• Authentication and access control: We implement token-based authentication and session management to verify the identity of each request. Database access is protected by strict role-based access control (RBAC) so that only authorized personnel can access user data.
• Sensitive data encryption: Sensitive fields stored in databases are encrypted at rest. For data that does not require reversible retrieval, we use industry-standard hashing algorithms (such as SHA-256).
• Access permission control: Backend services implement fine-grained access control, limiting data access to what is necessary for each service component. Employee access to user data requires explicit authorization and is subject to audit logging.
• Regular security audits: We conduct periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential risks in a timely manner.

However, no method of network transmission or electronic storage is 100% secure. We will use commercially reasonable efforts to protect data security. In the unlikely event of a data breach, we will notify affected users and relevant regulators as required by applicable law.

5. User Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: You have the right to inquire about the personal data we store about you
• Right to rectification: You may request that we correct inaccurate or incomplete personal information
• Right to erasure (account deletion): You may request deletion of your account and associated personal data. You may initiate account deletion through in-app settings or by contacting us by email. We will process your request within 15 business days and permanently delete your personal data from our systems unless retention is required by law. Please note that account deletion is irreversible; all related data (including feeding records, check-in records, and ranking data) will be permanently deleted.
• Right to restrict processing: Under legal conditions, you may request suspension of processing of your personal data
• Right to data portability: You may obtain your personal data in a readable format
• Right to withdraw consent: You may withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal

To exercise the above rights, please contact us using the contact information in this policy. We will respond to your legitimate request within the time limit required by law.

6. Third-Party SDKs and Services

The App integrates the following third-party SDKs and services to support its features. Below is a complete list of integrated SDKs, including their providers, data that may be collected, and purposes of use:

Important notes:

• SDKs marked as "does not collect personal data" are UI or utility libraries that process data locally on your device and do not transmit personal information to external servers.
• Cover HTTP and Cover Permission are internal libraries developed by our team. Their operation follows the data protection standards set out in this Privacy Policy.
• Unless expressly stated in this policy, we do not share personal data collected by one SDK with another SDK or third party.

7. Children's Privacy

The App is suitable for users of all ages. However, it is not specifically directed at children under 13. We comply with COPPA and other applicable laws protecting children's privacy.

7.1 Our Commitments

• No intentional collection: We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete it as soon as possible.
• Data minimization for children: If we know a user is under 13, we limit data collection to what is necessary for core functions and do not transmit device identifiers (such as Android_ID) for such users.
• Parental rights: Parents or legal guardians may review, request deletion of, or refuse further collection of their child's personal information. To exercise these rights, contact us using the information in Section 9.

7.2 Parental Guidance

We encourage parents and guardians to supervise children's online activity and teach them not to provide personal information through this App or any other online service without permission. If you believe your child has provided us with personal information without your consent, please contact us immediately.

7.3 Age Verification

Login services (Sign in with Apple and Google Sign-In) may provide age-related information based on the account holder's registered age. We use this information only to determine whether additional privacy protections should apply and do not independently store a user's exact age or date of birth.

8. Policy Updates

We reserve the right to update this Privacy Policy from time to time based on service upgrades and legal changes. When updated, we will publish the latest version in the App and revise the "Last Updated" date. For material changes, we will notify you through in-app notices or other reasonable means. The revised policy takes effect upon publication. Your continued use of the App after an update constitutes acceptance of the new terms.

9. Contact Us

If you have any questions, suggestions, or complaints about this Privacy Policy or our data processing practices, or wish to exercise any data protection rights described in Section 5, please contact us by email:

Contact email: lovesichuan2021@gmail.com

We will respond to your inquiry within the time limit required by applicable data protection law. If you are in the European Economic Area (EEA) or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.