熊猫熊猫Panda

隐私政策

版本更新日期：2026-10-17
版本生效日期：2026-10-17

本隐私政策仅适用于熊猫科技的《熊猫》产品或服务。

本政策将帮助您了解以下内容

  1. 信息收集与使用
  2. Cookie 和同类技术
  3. 信息共享与披露
  4. 信息保护措施
  5. 您的权利
  6. 信息存储与全球转移
  7. 未成年人保护
  8. 政策更新机制

1. 信息收集与使用

账号信息：用户名、昵称、密码（服务端仅保存不可逆的加盐哈希）、头像、性别、生日、邮箱、地区、个性签名。用于注册登录与资料展示。

外部账号审核信息：手机号、真实姓名、证件类型与号码、证件照片、开户行、银行卡号、预留手机号。仅用于人工身份审核；手机号、证件号、银行卡号与姓名以 AES-256-GCM 加密存储，证件照片加密落盘，仅审核人员可见且查看留痕。

通讯内容：您发送的文字、图片、语音、视频、文件，以及朋友圈动态、点赞与评论。用于投递、多设备同步、离线补发与云端漫游。消息默认保存 365 天，媒体文件默认保存 90 天。

积分与兑换信息：积分余额与积分明细、红包收发与领取记录、支付密码（服务端仅保存不可逆的加盐哈希）、兑换申请（兑换的积分数、状态、客服备注）。用于积分记账、红包领取、每日对账与客服处理兑换；处理兑换申请时，客服可看到您的账号、昵称和已绑定的手机号以便联系您，每次查看留痕。2026-10-16 之前提交的礼品订单中的收件信息仍以 AES-256-GCM 加密保存，仅运营人员可见。积分明细只增不改，注销生效后余额作废，明细按法律要求保留。

设备与日志信息：设备标识、设备类型与系统、应用版本、登录 IP 与时间、推送令牌、界面语言。用于会话管理、多设备登录控制、安全风控、推送与故障排查。

位置信息：只有当运营方开启位置消息、且您在聊天中主动选择「发送位置」时，应用才在该页面使用期间读取一次您的当前位置（经纬度与精度），并在设备上把它转换为地点名与地址供您确认和修改；您点「发送」后，坐标、地点名与地址作为消息内容发给对方并按通讯内容的规则保存。我们不会在后台定位，也不会持续记录您的位置轨迹。

权限：相机（拍摄、扫码、视频通话）、麦克风（语音消息、通话）、相册与文件（发送图片与文件、上传证件照片）、位置（仅「发送位置」时，只在使用期间）、通知（新消息提醒）。不使用的能力不会申请，您可以在系统设置中随时关闭。

我们不会读取您的通讯录。

2. Cookie 和同类技术

应用不使用 Cookie 跟踪您。内置网页仅加载 https 地址，网页本身可能使用其站点的 Cookie，受该站点政策约束。

3. 信息共享与披露

除下列情形外，我们不会与第三方共享您的个人信息：

  • 为向您发送离线通知，推送令牌与通知文案会发送至 Apple、Google 或手机厂商推送服务；通知内容不包含消息正文。
  • 法律法规要求或有权机关依法要求。
  • 获得您的明确同意。

4. 信息保护措施

  • 客户端与服务器之间使用 TLS 1.2 或以上加密通信，客户端校验服务器证书与签名名册，防止连接仿冒服务器。
  • 敏感字段加密存储，令牌只保存哈希，本机令牌由系统安全存储保护。
  • 管理后台独立部署与登录，按角色授权，所有处置操作写入不可删除的审计日志。
  • 登录失败锁定、加好友与发消息限流、IP 黑名单等措施防止滥用。

5. 您的权利

  • 在「我 → 个人信息」查看与更正资料。
  • 在「设置」中管理通知、隐私（加我的方式、验证、已读回执）、语言。
  • 删除本机聊天记录、删除消息、清空会话。
  • 在「我 → 注销账号」注销账号：15 天冷静期内可撤销，期满后账号与关联个人信息删除或匿名化（法律要求保留的除外）。
  • 通过「在线客服」联系我们行使上述权利。

6. 信息存储与全球转移

您的信息存储在熊猫科技部署的服务器上，账号按归属地区存储。如需跨地区转发消息，仅在您的通讯对象所在地区的服务器间传输必要数据。

7. 未成年人保护

本服务面向企业员工与受控社区成员，不面向未满 14 周岁的未成年人提供。若发现误收集未成年人信息，我们将及时删除。

8. 政策更新机制

本政策更新时，我们将在应用内显著位置提示，并更新上方的版本日期。重大变更将在生效前通知您。

Privacy Policy

Version updated: 2026-10-17
Version effective: 2026-10-17

This Privacy Policy applies only to the Panda products and services of Panda Technology.

This policy explains

  1. Information we collect and how we use it
  2. Cookies and similar technologies
  3. Sharing and disclosure
  4. How we protect information
  5. Your rights
  6. Storage and international transfer
  7. Protection of minors
  8. Policy updates

1. Information we collect and how we use it

Account information: username, nickname, password (the server keeps only a salted one-way hash), avatar, gender, birthday, email, region and bio. Used for sign-in and your profile.

External account review information: phone number, real name, ID type and number, ID photos, bank name, bank card number and the bank's reserved phone number. Used only for manual identity review. Phone, ID number, card number and name are stored encrypted with AES-256-GCM, ID photos are encrypted on disk, and only reviewers can view them; every view is logged.

Communications: the text, images, voice, video and files you send, and your Moments posts, likes and comments. Used for delivery, multi-device sync, offline delivery and cloud history. Messages are kept for 365 days and media for 90 days by default.

Points and redemption information: points balance and history, red packets sent, received and opened, your payment PIN (the server keeps only a salted one-way hash), and redemption requests (points amount, status, support notes). Used for points bookkeeping, opening red packets, daily reconciliation and handling redemptions; while handling a request, support staff can see your account, nickname and bound phone number to contact you, and every view is logged. Recipient details in gift orders placed before 2026-10-16 stay encrypted with AES-256-GCM and visible only to operators. Points history is append-only; when an account cancellation takes effect the balance is void and the history is kept as the law requires.

Device and log information: device identifier, device type and OS, app version, sign-in IP and time, push token and interface language. Used for session management, multi-device control, security, push notifications and troubleshooting.

Location: only when the operator has turned location messages on and you choose "Send location" in a chat, the app reads your current position (coordinates and accuracy) once while that page is open, and turns it into a place name and address on your device for you to check and edit. When you tap "Send", the coordinates, place name and address are sent as message content and kept under the rules for communications. We never locate you in the background and do not keep a history of where you have been.

Permissions: camera (photos, QR scanning, video calls), microphone (voice messages, calls), photos and files (sending images and files, uploading ID photos), location (only for "Send location", while in use) and notifications. Capabilities we do not use are never requested, and you can turn permissions off in system settings at any time.

We do not read your address book.

2. Cookies and similar technologies

The app does not use cookies to track you. The built-in browser opens https pages only; those sites may use their own cookies under their own policies.

3. Sharing and disclosure

We do not share your personal information with third parties except:

  • To deliver offline notifications, push tokens and notification text are sent to Apple, Google or phone-maker push services; notifications never contain message text.
  • When required by law or by a competent authority.
  • With your explicit consent.

4. How we protect information

  • The app and servers communicate over TLS 1.2 or later, and the app verifies server certificates and the signed server roster so it cannot be tricked into connecting to a fake server.
  • Sensitive fields are encrypted at rest, tokens are stored only as hashes, and tokens on your device are protected by the system's secure storage.
  • The admin console is deployed and signed into separately, uses role-based permissions, and every action is written to an audit log that cannot be deleted.
  • Sign-in lockout, friend-request and message rate limits, and IP blacklisting prevent abuse.

5. Your rights

  • View and correct your profile in Me → Profile.
  • Manage notifications, privacy (how people can add you, verification, read receipts) and language in Settings.
  • Delete chats on this device, delete messages and clear conversations.
  • Delete your account in Me → Delete account. You can undo within the 15-day cooling-off period; afterwards the account and related personal information are deleted or anonymized, except where the law requires retention.
  • Contact Online Support to exercise these rights.

6. Storage and international transfer

Your information is stored on servers operated by Panda Technology; accounts are stored in their home region. When messages must cross regions, only the data needed for delivery is transferred between the servers of the regions involved.

7. Protection of minors

The Service is for employees and members of controlled communities and is not offered to children under 14. If we learn that we have collected a child's information by mistake, we will delete it promptly.

8. Policy updates

When this policy changes we will show a notice in the app and update the version dates above. Material changes will be announced before they take effect.