Privacy Policy

This Privacy Policy describes how Breath of the Wild (Chengdu) Technology Co., Ltd ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our mobile application TripMeet (the "App"), available on Google Play Store、Apple Store.

By downloading, installing, or using TripMeet, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our App.

1. Information We Collect

We collect the following types of information to provide and improve our services:

Data Type	What We Collect	Purpose	Collection Method
Account Information	Email address, password (encrypted), username, profile photo	User registration, authentication, account management	Directly provided by you
Location Data Sensitive	Precise GPS location (latitude and longitude)	Match nearby users, location-based social features, show users on map	Device GPS, Wi-Fi, and cellular network
Photos & Media	Photos and videos you upload to your profile or share in the App	Profile display, content sharing, social interaction	Camera access, photo library access
Device Information	Device model, OS version, unique device identifiers, IP address	App optimization, security, analytics, crash reporting	Automatically collected
Usage Data	App interactions, feature usage, session duration	Improve user experience, analytics, product development	Automatically collected
Push Notification Token	FCM (Firebase Cloud Messaging) token	Send push notifications for messages and updates	Automatically collected
Purchase Data	Transaction history, subscription status, purchase receipts	Process in-app purchases, restore purchases, customer support	Google Play Billing / Apple App Store
Face Recognition	Comparison of Temporary Facial Data Scanning	Used to compare whether the avatar uploaded by the user is a real person avatar (note: we do not save or upload, collect user facial data, and facial scanning is only temporarily used to compare the user's avatar with a real person avatar)	Camera Access Permissions
Certified Local Player Verification Voluntary	Front and back images of your government-issued ID document; optional industry qualification certificate images; related file identifiers	Review and verify your identity and application qualifications for the Certified Local Player program; ensure authenticity and improve the trust system. These materials are not displayed as public profile content in the App.	Provided by you when you voluntarily submit an application

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide Core Services: Enable user registration, authentication, profile creation, and social matching features.
• Location-Based Features: Display your location on maps and match you with nearby users based on proximity.
• Communication: Send push notifications for messages, friend requests, and app updates.
• Content Sharing: Allow you to upload and share photos and videos with other users.
• In-App Purchases: Process payments for premium features, subscriptions, and virtual goods through Google Play Billing and Apple App Store.
• Analytics & Improvement: Analyze app usage patterns to improve features, fix bugs, and enhance user experience.
• Security & Fraud Prevention: Detect and prevent unauthorized access, abuse, and fraudulent activities.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

3. Third-Party Services & Data Sharing

We use the following third-party services to enhance the functionality of TripMeet. These services may collect and process your data according to their own privacy policies:

3.1 Data Sharing Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information in the following limited circumstances:

• With Service Providers: We share data with the third-party services listed above to operate and improve the App.
• With Other Users: Your profile information (username, profile photo, location) is visible to other TripMeet users as part of the social experience.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

3.2 Certified Local Player Application Materials

Applying to become a Certified Local Player is voluntary. When you submit an application, TripMeet collects and uploads the front and back images of the identity document you provide. You may also optionally submit images of industry qualification certificates. The images are uploaded to Tencent Cloud Object Storage, which we use, and the file identifiers are submitted to TripMeet's servers so our staff can review your identity and application qualifications. These application materials will not be displayed as public profile information in the App.

You may contact us via Settings > Help & Feedback or system@tripmeet.cn to ask about how these materials are processed or to request deletion.

4. Data Storage & Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between the App and our servers is encrypted using TLS/SSL. Passwords are hashed using bcrypt.
• Access Controls: Only authorized personnel have access to user data, and access is restricted on a need-to-know basis.
• Secure Infrastructure: Our servers are hosted on secure cloud platforms with regular security audits and monitoring.
• Data Minimization: We only collect data that is necessary for the App's functionality.

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your data.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Account Data: Retained until you delete your account or request deletion.
• Location Data: Retained for the duration of your active session and stored for up to 90 days for feature optimization.
• Photos & Media: Retained until you delete them or delete your account.
• Analytics Data: Retained for up to 26 months for product improvement purposes.
• Transaction Data: Retained for 7 years to comply with tax and accounting regulations.
• Certified Local Player Application Materials: Retained only as long as necessary for identity and qualification review, dispute resolution, legal compliance, or until you request deletion. Uploaded images are stored in Tencent Cloud Object Storage; file identifiers are stored on TripMeet servers.

After the retention period expires, your data will be securely deleted or anonymized.

6. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information in your profile.
• Deletion: Request deletion of your account and associated data. You can do this through the App settings or by contacting us.
• Restriction: Request that we limit the processing of your data.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: Revoke previously granted permissions (e.g., location access, camera access) through your device settings.
• Opt-Out of Marketing: You can opt out of promotional push notifications through the App settings.

6.1 Account Deletion

You can delete your TripMeet account at any time by navigating to Settings > Account > Delete Account in the App. Upon deletion:

• Your profile, photos, messages, and personal data will be permanently removed from our active systems within 30 days.
• Some data may be retained in backup systems for up to 90 days before being permanently deleted.
• Anonymized analytics data may be retained for statistical purposes.
• Transaction records may be retained as required by law.

6.2 Location Permissions

You can manage location permissions at any time through your device settings:

• Android: Settings > Apps > TripMeet > Permissions > Location
• iOS: Settings > Privacy & Security > Location Services > TripMeet

Disabling location access will prevent location-based features from functioning.

6.3 Certified Local Player Application Materials

You may contact us via Settings > Help & Feedback or system@tripmeet.cn to inquire about the processing of your Certified Local Player application materials or to request deletion. We will process your request in accordance with applicable law and our retention obligations.

7. Children's Privacy

TripMeet is not intended for users under the age of 18+. We do not knowingly collect personal information from children under 18. If we discover that a child under 18 has provided us with personal information, we will promptly delete such information from our systems.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at system@tripmeet.cn.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from your country of residence.

We rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure that your personal data receives an adequate level of protection when transferred internationally.

9. Push Notifications

With your consent, we may send you push notifications to inform you about:

• New messages and friend requests
• Nearby user alerts
• App updates and new features
• Promotional offers (only if you have opted in)

You can disable push notifications at any time through your device settings or the App's notification preferences.

10. In-App Purchases

TripMeet offers in-app purchases and subscriptions. All payment transactions are processed through:

• Google Play Billing (for Android users)
• Apple App Store In-App Purchase (for iOS users)

We do not collect or store your credit card or bank account information. Payment processing is handled entirely by Google and Apple according to their respective privacy policies and terms of service.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the App or via email
• Obtain renewed consent where required by law

We encourage you to review this Privacy Policy periodically. Your continued use of TripMeet after any changes constitutes acceptance of the updated policy.

12. Contact Us

13. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, our legal basis for processing your personal data under the General Data Protection Regulation (GDPR) is as follows:

Purpose	Legal Basis
Account registration and authentication	Performance of a contract (Article 6(1)(b))
Location-based social features	Consent (Article 6(1)(a)) — you can withdraw consent at any time
Push notifications	Consent (Article 6(1)(a))
Analytics and app improvement	Legitimate interest (Article 6(1)(f))
In-app purchases	Performance of a contract (Article 6(1)(b))
Legal compliance	Legal obligation (Article 6(1)(c))
Certified Local Player identity and qualification review	Consent (Article 6(1)(a)) — you submit the application voluntarily and may withdraw consent or request deletion at any time

If you are in the EEA, you have the right to lodge a complaint with your local data protection authority.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: Opt out of the sale or sharing of your personal information. Note: We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: Request correction of inaccurate personal information.

To exercise these rights, please contact us at system@tripmeet.cn.

15. Consent

By using TripMeet, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. For sensitive data such as precise location and camera access, we will request your explicit consent before collecting such data. You can withdraw your consent at any time through your device settings or by contacting us.

For Certified Local Player verification, you voluntarily provide ID document images and optional qualification certificate images, and consent to their upload to Tencent Cloud Object Storage and review by our staff. You may withdraw this consent or request deletion by contacting us via Settings > Help & Feedback or system@tripmeet.cn.