# openKylin Personal Information Protection and Privacy Policy Statement

Dear openKylin users:

Your trust is very important to us. We attach great importance to the protection of personal information and privacy. In order to ensure that your personal privacy information is collected, stored, and used legally, reasonably, and appropriately, it is transmitted and stored in a safe and controllable manner. In view of this, the openKylin community (referred to as "we") has formulated the "openKylin Personal Information Protection and Privacy Policy Statement" (hereinafter referred to as "this statement"). We will provide your personal information in accordance with legal requirements and mature security standards in the industry. Corresponding safety protection measures.

Please read this statement carefully before submitting your personal information to us. If you have any questions about the way we process your personal information, please contact us.

This statement will help you understand the following content:

1.How we collect and use your personal information

2.How we share, transfer, and publicly disclose your personal information

3.How we protect your personal information

4.How we manage your personal information

5.Your rights

6.How we use Cookie and similar technologies

7.Minor user information special agreement

8.How this statement is updated

9.How to contact us

## 1. How we collect and use your personal information
In the process of using openKylin operating system products, we will collect the information that you actively provide when using the service or that is generated due to the service. This information will be collected when you register and use our services, and we will only collect and use your personal information for the following purposes described in this statement. We will explain one by one the types of personal information we collect and use from you and the relevant terms involved in this statement, so that you can better understand the overview of personal information.

1.Collection of personal information
openKylin system (hereinafter referred to as "this system") level:
1) During the installation/update of this system, non-personal identity system information may be collected, as follows:

System update requires collection: error code, installation source, installation package name, installation steps, installation status, error details, transaction id, error information, upload type.

Installation system requires collection: old version number of the installation package, error code, new version number of the installation package, installation package name, installation steps, installation status, error details.

Software package update requires collection: error code, updated package name, update mode, update steps, upgrade status.

2) When using the control panel of this system, when clicking operations, clicking home page operations, clicking left panel operations, setting operations, selection operations, search operations, and no search results, it is necessary to collect: plug-in name, setting name, value information.

3) The daq data collection information of this system is as follows:

Important hardware and software information: city, country, province, cpu model, graphics card model, network type, kernel version, vendor name, product name, data creation timestamp, data reporting timestamp, same machine different public information version, dpkg version, os release id, os version.

Software environment information: libjpeg version, cups version, python2 version, java version, python3 version, libjbig version, libpng version, machine id, gcc version, kernel version, gdb version, glibc version, grub version, daq version, qt4 version, qt5 version

Computer online information: boot time, shutdown time, boot time period, shutdown time period, boot time period (unit, seconds), boot time period (unit, seconds)

4) This system's start menu operation collects information: module name, error output, error level, function count, executed function.

5) This system's sidebar operation collects information: module name, error output, error level, function count, executed function

6) Functions such as this system's camera, mobile assistant, image viewer, printer, calculator, recorder, font previewer, graphics controller, book transfer, service and technical support, network inspection tools, weather, management, scanner, Bluetooth, etc., will collect the corresponding trigger action values, function call numbers and information.

7) In the process of using the software store of this system, the information needs to be collected in the following operations:

- Installation Process

Name of installed software, community ID information (requires logging in to the community ID)

- Uninstall Process

Name of uninstalled software, community ID information (requires logging in to the community ID)

- Store client starts

Start time, system version, store version

- Search Operation

Search keywords, system architecture

- Advertisement Operations (V4 version)

Advertisement name, advertisement exposure

8) The recording function of this system, when using the recording function of this system, will only store the audio content when you use the recording in the local computer, and will not collect or upload it.

Above-mentioned information collected by this system is generally recorded in the log of the server system corresponding to each function, and the specific storage location may vary due to different service scenarios.

openKylin community (hereinafter referred to as "this community") level:

If you only browse the general content of the openKylin community official website, we generally do not require you to provide personal information, but in the following situations, we will collect your personal information accordingly:

1) Account service, this community provides ID authentication service to provide unified community identity and permissions. When you register for this community account, we will collect your email or mobile phone number for identity verification, collect your Gitee account for the authority management of the community code hosting platform, and we will also use your personal information to identify your identity in the community and conduct statistics based on this to enable us to understand the operating status of this community.

2) CLA signing, when you participate in code contributions through the CLA (Contributor License Agreement) signing system, you need to submit your relevant personal information to the CLA signing system. We obtain this personal information to verify whether you have signed the CLA and use it for contribution statistics and analysis to generate community digital dashboards. When you complete the CLA signing and send the completed CLA in pdf format to the email address contact@openkylin.top, we will archive the CLA containing your personal information as your voucher for granting license to the content you contributed in this community. If you are an individual or corporate employee, we collect your Gitee ID, name, email address from the CLA you send by email to verify your Gitee account and contact you; if you sign the CLA on behalf of a company, we collect your name, position, company name, email address from the CLA you send by email, which is used by your company to verify your identity and contact you, etc.

3) Forum service, the forum service provides you with the following business functions. In the process of using the relevant business functions, we will process the following information necessary to provide the functions. If you do not provide relevant information, it will affect your use of the relevant functions of the forum service.

Login and identity authentication: You can use this community account to log in to the forum service. We will use your username, nickname, email, WeChat scan account in this community to authenticate your identity and manage your data.
Personal Center: After logging in, we will display your account username in this community on the "Personal Center" page. You can also set the nickname, avatar, signature used in the community forum on the "Personal Center" page, and we will store and display it in the "Personal Center".

Information release and interaction: "Forum Service" provides you with information release and interaction services. For this purpose, we will collect and process the content, images, audio, video, documents, as well as comments, likes, collections, report information you publish, and at the same time use and display your nickname and avatar. To enhance communication and interaction, we will count and display your post volume, number of likes, number of fans, number of followees, collections (collections are visible only to you by default) on the "Personal Center" page. In order to update and display the above information to you in real time, we will collect and use your posts, comments, likes, collections, follow list, fan list and other information.

Product operation and maintenance: In order to provide you with a richer product experience, improve product operation strategies, ensure stable product operation, and guarantee network security in accordance with laws and regulations, we will collect your login account information, device hardware information, operating system settings information, network information (such as IP address), carrier information, your browsing or click records in this forum, and forum error information.

4) Community internship/employment education program, this community's internship/employment education task platform will collect, use and manage personal information in a transparent, secure and compliant manner, aiming to provide a high-quality task cooperation experience while safeguarding your privacy rights. You should carefully read and understand the platform's privacy policy when using the platform, and contact the platform for more information when necessary. If you do not provide relevant information, it will affect your relevant functional permissions when claiming various tasks:

Task Release: If you are in a corporate identity, you have the right to post tasks on the task platform, requiring you to provide some corporate and personal information, such as username, contact information and task details. This information is used for task posting and management, to communicate and cooperate with interns or enthusiasts.

University student/enthusiast/employment education information review: If you apply to be an intern, the platform will require you to submit your resume, contact information and relevant supporting materials. This information will be used to review internship applications to ensure applicants' qualifications and suitability.

Task claim information review: When you apply to participate in a specific task, the platform will require you to provide personal information and the relevant background, understanding degree, solution ideas, time plan of the task application. This information is used to assess applicants' suitability and capability.

Task result information review: After you complete the task, you need to upload relevant results and reports. This information may contain your work results and creativity, and is used to review the completion of the task.

Reward and cash distribution: The platform may reward you based on task completion, including cash. When distributing rewards and cash, the platform needs to collect your payment information, such as bank account, bank branch, etc., to smoothly complete the reward distribution process.
        
5) Email subscription, when you use our email subscription service, we will collect your email address. We will provide you with email subscription services through this email to facilitate your participation in community discussions.

6) Content publishing, when you participate in this community meetings, live streaming, blogs, events, developer open source community contributions, your username and the information you publish will be visible to this community and the public; if you are a SIG member of this community: we will require you to submit Gitee information to publish on our website.

7) Quick submission of issue, when you submit an issue through the community mini program or directly on the Gitee platform, we will collect your account, username, WeChat authorization information, after the issue is successfully created, we will display your user information in the description information of the issue page.

8) "Kylin Cup" National Open Source Application Software Development Competition, when you apply to participate in the "Kylin Cup" competition, through the application form you actively fill in, your Gitee information, Hongshan Open Source Account, community ID, name, mobile phone number, email, your work information will be collected. Name, mobile phone number, email are used to notify the selection results and contact you; if you achieve good results in the competition, your name will be announced on the official website.

9) Service optimization, to continuously understand the operating status of this community so that we can better serve you, when you visit our website, we will collect and record your IP address, access source, number of visits to the community, duration of stay, access timestamp, browser type, server type version used to access the community to identify your visitor activity on the website. We may use third-party web analytics tools (Baidu Analytics), to capture information about our website usage and perform statistics on this basis, so that we can understand the operational status of this community. Web analytics tool providers capture data about your activities on our site through cookies and other technologies and provide this information to us in anonymous form. This information cannot be identified by any website user.

2.Use of personal information

We strictly abide by legal and regulatory provisions and agreements with you, and use the collected information for the following purposes. If we exceed the following purposes, we will explain to you again and obtain your consent again.

1) Involves the need for system software store use, system update maintenance, biometric recognition, online services, etc.;

2) We will use relevant information to help improve the security, reliability and sustainable services of the system and community;

3) We will use the collected information (such as the email address, phone number, etc. you provide) to communicate with you directly. For example, business contact, technical support or service follow-up;

4) We will use the collected data to improve the current usability of the product, enhance the product user experience (such as personalized recommendations in the software store) and fix product defects;

5) We will use the collected user behavior data for big data analysis. For example, we will analyze the collected information to form city heat maps or industry insight reports that do not contain any personal information. We may publicly disclose and share with our partners the statistically processed information that does not contain identity-identifiable content to understand how users use our services or let the public understand the overall usage trends of our services;

6) To comply with the relevant requirements of laws and regulations, departmental regulations, and government orders.

## 2. How we share, transfer, and publicly disclose your personal information
We will not share or transfer your personal information to third parties, except in the following cases:

1.After obtaining your separate explicit consent, we will share your personal information with third parties;

2.To achieve the purpose of external processing, we may share your personal information with related companies or other third-party partners (third-party service providers, contractors, agents, application developers, etc.). We will obtain your explicit consent and use encryption, anonymization and other means to protect the security of your information;

3.We will not publicly disclose the personal information we collect. If public disclosure is necessary, we will inform you of the purpose of this public disclosure, the type of information disclosed and the possible sensitive information involved, and obtain your explicit consent;

4.With the continuous development of our business, we may carry out merger, acquisition, asset transfer and other transactions. We will inform you of the relevant situation, obtain your explicit consent, and continue to protect or require new controllers to continue to protect your personal information in accordance with laws and regulations and not lower than the standards required by this statement;

5.If we use your personal information beyond the purpose stated at the time of collection and the scope that is directly or reasonably related, we will inform you again before using your personal information and obtain your explicit consent.

6.Sharing with business partners. We may share your information with third-party partners. However, we will only share your personal information for legal, proper, necessary, specific, clear purposes, and we will only share the personal information necessary to provide services. Our partners include:

1) Developers, platforms and social media: Some products or services are provided directly by third parties to you, and we need to share transaction-related information with third parties to achieve your needs. For example, if you activate or associate the services or products we provide with a third-party platform or social media (such as direct login, virtual login or associated login through a third-party website), we may disclose your personal information according to your authorization. We do not control third parties' use of your personal information.

2) Service providers or professional service providers: We may share your personal information with third parties who provide services or products according to our instructions or support the operation of our website, including third parties who supply or provide infrastructure technical services, hosting, customer support, marketing and analysis, information processing services for us. We share this information only for the purposes disclosed in this statement or within the scope of your permission, such as Baidu. We may share your personal information with relevant professionals for professional services such as audit, insurance, finance or law. When we share information with related companies or partners based on the above content, we will stipulate their responsibilities and obligations through contracts and other means, and require them to take necessary measures to protect the security of the personal information they process.

7. Exception to obtaining authorization consent

According to relevant laws and regulations and national standards, under the following circumstances, we may collect and use your personal information without obtaining your authorization consent:

1) Directly related to national security, national defense security and other national interests;

2) Directly related to major social public interests such as public safety, public health, public awareness;

3) Related to activities such as criminal investigation, prosecution, trial and judgment execution;

4) To protect your or others' lives, property and other major legitimate rights and interests but necessary under emergency circumstances;

5) The personal information collected is information you have voluntarily made public to society;

6) Personal information collected from legally public information disclosure channels, such as legal news reports, government information disclosure and other channels;

7) Necessary for signing and performing contracts according to your requirements;

8) Necessary for maintaining the safe and stable operation of the products or services provided. Such as discovering and handling product or service failures;

9) For public welfare statistics or academic research needs, and when providing the research results or descriptions to the outside world, the personal information contained in the results is de-identified;

10) Other circumstances stipulated by laws and regulations.

## 3. How we protect your personal information

1.Location of information storage

We will store the personal information collected and generated in our operations within the territory of the People's Republic of China in accordance with laws and regulations. If it is necessary to transfer the personal information collected within the territory to overseas institutions in the future to handle cross-border business, we will obtain your separate consent, execute in accordance with legal, administrative regulations and relevant regulatory department regulations, and require overseas institutions to take relevant protective measures for the obtained personal information through effective measures such as signing agreements and audits.

2.Information storage period

Generally, we only retain your personal information for the time necessary to achieve the purpose or the minimum retention period stipulated by laws and regulations. The information recorded in the log will be retained for a certain period of time according to the configuration and automatically deleted.

When our systems or services stop operating, we will notify you in the form of notifications, announcements, etc., delete or anonymize your personal information within a reasonable period of time, and immediately stop collecting personal information activities.
When you actively cancel your account, we will process the data in accordance with the requirements of laws and regulations.

3.How we protect this information

We will take all reasonably feasible measures to ensure that we do not collect personal information unrelated to the services we provide. We are committed to providing user information security to prevent loss, improper use, unauthorized access or disclosure of information.

We will use security protection measures within a reasonable security level to protect information security. For example, we will use encryption technology and other means to protect your system-level account password.

We have established special management systems, processes and organizations to protect information security. For example, we strictly limit the scope of personnel who can access information and require them to comply with confidentiality obligations.

4.Emergency plan

In case of security incidents such as personal information leakage, we will legally activate the emergency plan to prevent the expansion of security incidents, and inform you of the situation of security incidents, the possible impact on you, and the remedial measures we will take in the form of push notifications, announcements, etc. We will also report the handling of personal information security incidents in accordance with laws and regulations and regulatory department requirements.

## 4. How we manage your personal information
We will comply with the laws and regulations of various regions and take all reasonable and feasible measures to ensure that personal information unrelated to us is not collected.

Your basic system and community account information, including but not limited to your personal mobile phone number, will be encrypted and transmitted and stored on the server until the account is canceled. We will only retain your personal information for the shortest period necessary to achieve the purpose stated in this statement. If the storage time exceeds the scope permitted by law, we will delete or anonymize it. If it is technically difficult to delete the relevant personal information, we will stop processing other than storage and take necessary security protection measures. However, under the following circumstances, we may change the information storage time to meet legal requirements:

To comply with court judgments, rulings or other legal procedures;

To comply with the requirements of relevant government agencies or legally authorized organizations;

We have reasonable grounds to believe that it is necessary to comply with laws and regulations and other relevant regulations.

When this service stops operating, we will promptly stop collecting your personal information, notify you of the cessation of operations in the form of individual notifications or announcements, and delete or anonymize your personal information within a reasonable period of time.

We provide you with channels that you can access, obtain, correct and delete relevant personal information by yourself through the design of the interactive interface, and you can set up as follows:

If you are concerned about the leakage of personal information due to using the system and accessing services, you can consider pausing or not using related functions involving personal information according to personal and business needs, such as system software stores, system updates and upgrades, biometric recognition, etc.

When using third-party software/services on the system, please pay attention to personal privacy protection.

In some business functions, we may make decisions based solely on non-human automated decision-making mechanisms such as information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to request us to provide an explanation, and we will also provide appropriate solutions.

If you indeed need to access, modify or delete the information in accordance with the law, please send your questions via email to the designated contact email address (see the end of the document), and we will quickly review the issues involved and reply to you in a timely manner after verifying your user identity.

You can submit an account cancellation application through the designated contact email address (see the end of the document); after you actively cancel your account, your personal information and related content will be hidden, removed or anonymized, except as otherwise provided by laws and regulations.

## 5. Your Rights
According to the relevant laws, regulations, standards, and common practices in various regions, we will try our best to adopt appropriate technical means to ensure that you can exercise the following rights regarding your personal information:

If you want to view, copy, correct the basic personal information of your account (such as username, nickname, etc.) or withdraw your consent to the use of personal information, you can log in to your account on the community account registration website (id.openkylin.top), and perform the above operations through the "Personal Center".

You have the right to request us to provide a copy of your personal information by sending a written request to the contact method published in this privacy policy. Under the condition that it meets the requirements of the national cyberspace administration and is technically feasible, such as data interface matching, we can also directly transmit a copy of your personal information to the third party designated by you according to your request and existing general technology. If the transmission fails due to the refusal of such third party to receive your personal information copy, you should coordinate with the third party to resolve the issue, and we do not bear any responsibility for this.

If you cannot realize your personal information rights through the above methods, or the exercise of personal rights for certain special information may not be operated by yourself, you can contact us at any time through the contact method published in this privacy policy or on the relevant product or service page. We will reply to your request within fifteen working days. To protect your personal information security, we may require you to perform identity verification.

Please note, please verify the authenticity, timeliness, completeness and accuracy of the personal information you submit, otherwise it will lead to us being unable to effectively contact you and provide you with part of the services. If we have reasonable reasons to suspect that the information you provide is wrong, incomplete or false, we have the right to ask you or notify you to correct it, or even suspend or terminate part of the services to you.

Please note that when we decide to respond to your request to withdraw consent or delete personal information, we will no longer process the corresponding personal information, and we will also notify the third party who obtained your personal information from us as much as possible and request that third party to delete your personal information in a timely manner, unless otherwise stipulated by laws and regulations, or that third party has obtained your independent authorization. However, your withdrawal of consent decision will not affect the legitimacy of the personal information processing carried out based on your authorization before. If the retention period stipulated by laws and administrative regulations has not expired, or if it is technically difficult to delete personal information, we will stop processing other than storage and taking necessary security protection measures.

In principle, we do not charge for your reasonable requests, but for repeated requests that exceed reasonable limits, we will charge a certain cost as appropriate. For those that are groundless repetition, require excessive technical means (for example, require the development of new systems or fundamentally change existing practices), pose risks to the legitimate rights and interests of others, or are very unrealistic (for example, involving backup disk information), we may refuse.

In the following situations, we will not be able to respond to your requests in accordance with legal and regulatory requirements:

Related to our fulfillment of obligations stipulated by laws and regulations;

Directly related to national security, national defense security; directly related to public security, public health, major public interests;

Directly related to criminal investigation, prosecution, trial and judgment execution;

There is sufficient evidence that you have subjective malice or abuse of rights;

Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals, organizations;
Involving commercial secrets;

To protect your or other individuals' lives, property and other major legitimate rights and interests but it is difficult to obtain your own consent;

Other circumstances stipulated by applicable laws.

## 6. How we use Cookie and similar technologies
To help us better understand and serve users, our websites, online services and applications may use "Cookie" technology. These Cookies are used to store incoming and outgoing network traffic of the system and traffic generated due to error detection, so they must be set. We use these Cookies to understand how you interact with our websites and online services.

If you want to disable Cookies and are using the Firefox browser, you can set it in the Firefox Privacy & Security Center. If you are using other browsers, please consult the relevant suppliers for specific solutions.

According to Article 76, paragraph 5 of the "Cybersecurity Law of the People's Republic of China", personal information refers to various information recorded in electronic or other ways that can separately or in combination with other information identify the personal identity of natural persons, including but not limited to natural persons' names, dates of birth, ID card numbers, personal biometric information, addresses, phone numbers, etc. If Cookies contain the above information, or there is information that combines non-personal information with personal information collected through Cookies, for the purposes of this privacy policy, we will regard the combined information as personal privacy information and refer to the "openKylin Personal Information Protection and Privacy Policy Statement" to provide corresponding security protection measures for your personal information.


## 7. Minor User Information Special Agreement
If you are a minor, according to the relevant laws and regulations:

1.Minors are not allowed to create their own user accounts to use openKylin operating system series products without the consent of parents or guardians. If you are a minor, it is recommended that you ask your parents or guardians to read this policy carefully, and use our services or provide information to us after obtaining the consent of your parents or guardians.

2.For the collection of minor personal information through the use of our products or services with the consent of parents or guardians, we will only use, share, transfer or disclose this information under the circumstances permitted by laws and regulations, with the explicit consent of parents or guardians, or when necessary to protect minors.

3.Guardians should also take appropriate preventive measures to protect minors and supervise their use of this product.

## 8. How this statement is updated and its scope of application
We may update this statement at any time, and will display the updated statement to you during system installation or on the company website. After these changes take effect, using the services or any software licensed under these terms indicates your agreement to the new terms. If you do not agree to the new terms, you must stop using this system and close the account you created on this system; if you are a guardian, please help your minor child close the account they created on this product.

All our services are subject to this statement. However, some services have their own specific personal information and privacy policies, which more specifically describe how we handle your information in that service. If there is any inconsistency between this statement and the specific service's personal information and privacy policy, the specific policy shall prevail.

## 9. How to contact us
If you want to contact us or exercise your relevant rights, please contact us via: contact@openkylin.top