Privacy Policy

1. Scope and definitions

This policy applies when you use the Ruhali mini program, website and related services. “Personal information” means information, recorded electronically or otherwise, relating to an identified or identifiable natural person, excluding information that has been anonymized. Information about the operating entity is as published on the product pages in accordance with applicable law.

2. Information we collect and process

Account and identity information: when you register, log in, link or use an account, we may process the WeChat OpenID, nickname, avatar, user ID, registration and login status that you authorize us to receive, together with the information necessary for account security, customer support and benefit synchronization.

Photos, generations and artwork information: when you use upload, generation, storage, display or download features, we process the photos, images, prompts, style selections, generation parameters, generated results, artwork information and related operation records that you actively submit, in order to fulfil the service request you initiate.

Order and benefit information: when you purchase, recharge, claim or consume credits, generation counts, allowances or other virtual benefits, we may process order numbers, product type, payment channel, payment status, amount actually paid, discount information, benefit issuance and consumption records, and information needed for refunds or after-sales support.

Device, log and security information: to keep the service secure, stable and auditable, we may collect device model, operating system, app version, network information, IP address, user agent, access time, request logs, error logs, operation logs and risk-identification records.

Feedback and support information: when you report a problem, make a complaint, request after-sales support or ask a question, we may process the contact details, problem description, screenshots, order evidence, communication records and other information you provide, to the extent necessary to handle the matter.

3. How we use information

We use information within a lawful, proper and necessary scope for account login and identity verification, photo upload and AI generation, artwork storage and download, order settlement, benefit issuance and consumption, customer support, troubleshooting, service security, risk control, content moderation and product improvement.

When you initiate a generation request, we need to process the photos, prompts, style selections and related information you submit to the extent necessary to fulfil that request, and to generate, return or store the corresponding result. To improve stability and identify anomalies, we may analyse usage logs, feature operations, error records and statistics that have been de-identified or anonymized.

Except where you have given express authorization, where it is necessary to provide a feature you actively use, or where applicable law provides otherwise, we will not use your non-public photos or non-public artworks for public display to unrelated third parties, for sale, or for resale to others.

4. Third-party services and sharing

To provide login, payment, cloud storage, content delivery, AI model invocation, notifications, error monitoring or statistical analysis, we may integrate necessary third-party services. We will provide information to, or allow it to be processed by, third parties only to the extent necessary to provide the relevant feature, and we require them to process it in accordance with applicable law and our agreements.

We do not sell your personal information to unrelated third parties. Except with your separate consent, to perform legal obligations, to respond to lawful requests from competent authorities, to protect national and public security, to protect the material lawful rights of you or others, or in statutory or necessary cases such as mergers, spin-offs or acquisitions, we will not share, transfer or publicly disclose your personal information.

5. Cookies and similar technologies

To keep you logged in, remember necessary settings, complete security checks, identify sources of access, measure service performance and prevent abnormal access, we may use cookies, local storage, session storage or other similar technologies. You can clear or restrict these technologies through your browser or device settings, but doing so may prevent login, payment confirmation or some features from working properly.

6. Retention, deletion and storage

We retain your information for the reasonable period necessary to fulfil the purposes described in this policy. Account, photo and artwork information is generally retained for the life of the account or for the period you choose to keep it; order, payment, credit, refund, risk control, audit and dispute records may be retained for longer where required by law or by tax, accounting and compliance obligations.

When you delete content, close your account, or the purpose of processing has been achieved and continued retention is no longer necessary, we will delete, anonymize or otherwise reasonably handle the information in accordance with applicable law and technical feasibility. Transaction, payment, complaint, risk control, security audit and backup records that must be retained by law are excepted.

7. Security

We adopt reasonably practicable security measures to protect your information, including access control, permission management, transmission protection, log auditing, backup and internal management policies. The internet is not absolutely secure, so please keep your account and devices safe and do not disclose verification codes, login credentials or artwork access permissions to others.

If a personal information security incident occurs, we will take remedial measures in accordance with applicable law and, where necessary, notify affected users and the competent authorities by in-product notice, SMS, email, public announcement or other reasonable means.

8. Your rights

Within the features the product provides, you can access, correct or delete your account details, artworks and other editable information. You may also use the feedback entry in the product to request closure of your account, deletion of your personal information, withdrawal of authorization, a copy of your personal information, or an explanation of our processing rules. To protect account security, we may ask you to complete identity verification before we act on a request.

We may be unable to delete immediately transaction, payment, invoice, risk control, audit, complaint-handling or dispute records that must be retained by law, but we will restrict their further use for day-to-day business unrelated to the original purpose to the extent permitted by law.

9. Protection of minors

The service is primarily intended for users with the relevant legal capacity. Minors should use the service with the consent and guidance of a guardian, and guardians should carefully decide whether to allow a minor to upload photos showing their own likeness or that of others, submit personal information, or make recharges. If a guardian discovers that a minor has used the service or submitted personal information without consent, they may contact us through the feedback entry in the product.

10. Changes to this policy and contacting us

We may update this policy in response to changes in applicable law, regulatory requirements, product features, business model or the way we process information. The updated policy will be published on the relevant pages; if an update has a material impact on your personal information rights, we will notify you in a more prominent manner as required by law.

If you have any question about this policy, the protection of your personal information, account closure, complaints or the processing of information, you can contact us through the feedback entry in the product or through the customer service channel we publish in accordance with law.