Privacy Policy

1. Data Controller

• Company: Beijing Zilolan Technology Co., Ltd. (北京紫洛兰科技有限公司)
• Registered Address: Room 303-514, 3rd Floor, Building 4, No. 9 Life Science Park Road, Changping District, Beijing
• Contact: support@aieverywhere.top

2. Information We Collect

2.1 Account and Verification Information

When you create an account, sign in, or verify your student status, we may collect:

• Email address, including university email address
• User ID and authentication credentials or session tokens
• Verification status and school affiliation information you provide

Purpose: Account creation, security, and student eligibility verification.

Legal Basis: Performance of a contract (PIPL Art. 13(1)(2)).

2.2 Profile Information

To provide profile and social features, we may collect information you choose to add to your profile, such as:

• Display name
• Profile photo or other profile images
• Age or age range
• Gender or gender preference, if you choose to provide it
• University, course, major, year, interests, bio, and other optional profile details

Purpose: Profile display, social matching, and interaction features.

Legal Basis: Your consent (PIPL Art. 13(1)(1)).

2.3 User Content and Communications

When you use social features in the App, we may collect and process:

• Friend requests, matches, likes, swipes, and other in-app interaction records
• Messages, message metadata, and content you send or receive through in-app chat
• Photos, media, or other content you upload or share in the App

Purpose: Providing core functionality including discovery, profile interaction, and messaging.

Legal Basis: Performance of a contract.

2.4 Safety, Trust, and Moderation Information

To help keep the App safe, we may collect and use:

• Reports, blocks, complaints, and feedback submitted by users
• Records related to suspected abuse, spam, harassment, impersonation, fraud, or policy violations
• Content and account information reasonably necessary to investigate and enforce our rules

Purpose: Network security and prevention of illegal activities.

Legal Basis: Compliance with legal obligations (Cybersecurity Law Art. 47).

2.5 Device, Usage, and Diagnostics Data

We may collect limited technical information needed to operate, secure, and improve the App, such as:

• App version, device model, operating system version, language, and time zone
• Crash logs, diagnostics, performance metrics, and error data
• Basic usage events, such as sign-in status, feature usage, and service latency
• IP address or similar network information used for security, fraud prevention, and service operations

2.6 Push Notifications

If you enable notifications, we may use device tokens and related notification data to send you service messages, friend request updates, chat notifications, security alerts, and other app-related notices.

2.7 Sensitive Personal Information

Profile photos may contain facial information, which is considered sensitive personal information under PIPL. We only process this information when you voluntarily upload a profile photo, and solely for displaying your profile. You may change or delete your profile photo at any time. We obtain your separate consent before processing sensitive personal information.

3. How We Collect Information

• Directly from you, when you register, complete a profile, upload content, or contact us
• Automatically, when you use the App
• From service providers or platform tools that support authentication, hosting, notifications, analytics, moderation, or customer support

4. How We Use Information

• Provide and maintain the App and its core social features
• Create, authenticate, and secure accounts
• Verify student eligibility and manage access to selected schools or communities
• Display profiles and enable discovery, friend requests, matching, and messaging
• Moderate content, investigate reports, prevent abuse, and enforce our rules
• Send service-related notifications and account alerts
• Debug, monitor, and improve performance, safety, and reliability
• Comply with legal obligations and protect rights, safety, and security

We will not use your personal information for purposes unrelated to those described above. If we need to change the purpose of processing, we will obtain your consent again.

5. How We Share Information

We do not sell your personal information.

We may share information only in the following limited situations:

• With service providers that help us operate the App, subject to data processing agreements requiring equivalent or higher protection standards
• With other users to the extent your profile information, photos, and content are visible within the App based on your usage and privacy settings
• For safety and legal reasons, including to investigate abuse, enforce our terms, respond to lawful requests, or protect rights, safety, and security
• In connection with a business transaction, such as a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards

Except for the above circumstances, we will not provide your personal information to third parties without your consent.

6. Data Storage and Cross-Border Transfers

6.1 Storage Location

Your personal information is primarily stored within the People's Republic of China. If cross-border transfer is necessary for business purposes, we will comply with PIPL Article 38 by:

• Passing a security assessment organized by the Cyberspace Administration of China (CAC)
• Obtaining personal information protection certification from a recognized institution
• Entering into a standard contract with the overseas recipient as prescribed by the CAC
• Other conditions prescribed by laws, administrative regulations, or the CAC

6.2 Retention Periods

• Account and profile data: While your account remains active and for a limited period afterward where needed for security, dispute resolution, or legal compliance
• Messages and shared content: While needed to provide the service, maintain user experience, and support safety or legal obligations
• Reports, moderation records, and security logs: For as long as needed to investigate abuse, prevent repeat violations, and protect the service
• Diagnostics and crash data: For a limited period necessary for debugging and performance improvement

We will delete or anonymize your personal information after the above periods expire.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Access controls and encryption for stored data
• Regular security assessments and audits
• Data security management systems and operating procedures

In the event of a personal information security incident (leakage, tampering, or loss), we will notify you and the relevant regulatory authorities in accordance with applicable law.

8. Your Rights

Under the PIPL and related laws, you have the following rights regarding your personal information:

• Right to know and decide: You have the right to be informed about how we process your personal information and to restrict or refuse processing
• Right of access and copy: You have the right to access and obtain a copy of your personal information
• Right to rectification: You have the right to correct or supplement inaccurate or incomplete personal information
• Right to deletion: You have the right to request deletion when the processing purpose has been achieved, you withdraw consent, or we process unlawfully
• Right to withdraw consent: You have the right to withdraw your consent at any time; withdrawal does not affect the lawfulness of processing prior to withdrawal
• Right to account deletion: You have the right to request deletion of your account; we will delete or anonymize your personal information within a reasonable period
• Right to refuse automated decision-making: Where we use automated decision-making, you have the right to request an explanation and to refuse decisions made solely by automated means that significantly affect you

To exercise these rights, please contact us using the details in the Contact section. We will respond within 15 business days.

9. Children's Privacy

CrushU is not intended for children under 18. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child under 14 without verifiable parental consent, we will delete such information as soon as possible.

10. In-App Messaging and Content Handling

Messages and uploaded content may be stored and processed as needed to provide the service, deliver messages, maintain conversation history, support trust and safety reviews, investigate reports, and comply with legal obligations. Please avoid sharing highly sensitive personal information through the App.

11. Third-Party Services

The App may use third-party services or infrastructure for functions such as:

• Authentication and account management
• Cloud hosting and data storage
• Push notifications
• Analytics, diagnostics, and crash reporting
• Customer support and abuse prevention tools

We carefully select third-party service providers and require them to implement necessary security measures.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice in the App, through the website, or by other appropriate means, and will obtain your consent again for significant changes.

13. Contact