I. Policy Overview

STC Car Audio Co., Ltd. (hereinafter referred to as "us" or "the Company") attaches great importance to the protection of users' personal information and has formulated this privacy policy to clarify the principles and measures of Drive Buddy in collecting, using, sharing, and protecting users' personal information. Before using this application, users must carefully read the entire content of this privacy policy and confirm full understanding and agreement before starting to use it.

II. Information Collection

  1. User Information: When using our app, you need to provide your email address to complete the registration. You can log in to our app using a third-party account (Google account, Apple ID), which requires you to authorize us to access your third-party account to record your login identity. We will simultaneously create a Drive Buddy account for you and link it to your third-party account.
  2. Device Information: When you use Drive Buddy, we may collect device attribute information (such as your hardware serial number, operating system version, device configuration, unique device identifier, International Mobile Equipment Identity (IMEI), ICCID, IMSI, MAC address, Advertising Identifier (IDFA), etc.), device location information (obtained through GPS, Bluetooth, or Wi-Fi signals), device connection information (browser type, telecom operator, language used), and device status information (such as device sensor data, list of installed apps on the device).
  3. Location Information: If you enable location services while using Drive Buddy, we may collect your location information (including IP address, GPS, and other sensors that can provide relevant information, such as nearby devices, Wi-Fi access points, and base station information for Drive Buddy) to provide you with location-based services, such as geofencing alerts and trajectory queries.
  4. Third-Party Services: Drive Buddy may integrate third-party services, such as mapping services and advertising services. When using these services, you may need to provide personal information to these third parties. We recommend that you carefully read their privacy policies to understand how they collect, use, and protect your personal information.
  5. Log Information: When you use Drive Buddy, our servers automatically record certain information, such as your usage of our products and/or services, IP address, URLs of accessed services, browser type and language used, information about downloading, installing, or using mobile apps and software, communication information with communication software, and the date, time, duration, and process information of accessing services.
  6. Camera Permissions: In order to facilitate your binding of in car devices, identity authentication, and changing account images, we provide scanning and photography functions that require the use of your camera permissions. If this permission is not granted, you will not be able to use the relevant functions. Refusing to provide this information will only prevent you from using the above functions, but it will not affect your normal use of other functions of this application.
  7. Resource Purchase/Download: You can purchase paid resources that we provide. When you purchase resources, we may collect your account information, purchased resource details, purchase type, and order information. When you download resources, we may collect information about the resources you wish to download to accurately deliver the resources you have purchased. After you complete the download, you can apply the resource. When you apply a resource, we will collect your device identifier (VAID or IMEI MD5 for Android P and below), operation time, resource ID, and resource name, and issue the authorization license for the resource. The information we collect will be linked to your account.
  8. Resource Redemption: You can use redemption codes to redeem resources. For this purpose, we may collect your redemption code and the redeemed resource information to provide you with the service.

You are fully aware that we do not require your consent to collect and use personal information in the following situations:

According to laws, regulations, and relevant national standards, we do not require your authorization or consent to collect and use your personal information in the following situations:

  1. Related to our obligations under laws and regulations;
  2. Directly related to national security and defense security;
  3. Directly related to public safety, public health, and major public interests;
  4. Directly related to judicial or administrative law enforcement such as criminal investigation, prosecution, trial, and judgment execution;
  5. For the purpose of safeguarding your or other individuals' significant legitimate rights and interests such as life and property, but it is difficult to obtain my consent;
  6. The personal information collected is self disclosed to the public by you;
  7. Collecting personal information from legally disclosed information, such as legitimate news reports, government information disclosure, and other channels;
  8. Necessary for signing and fulfilling the contract with you;
  9. Necessary for maintaining the safe and stable operation of products/services, such as discovering and handling product/service failures;
  10. Other circumstances stipulated by laws and regulations.

III. How We Use Cookies and Similar Technologies

  1. Cookies:
    1. To ensure the normal operation of our website, we store small information files called cookies on your computer or mobile device. Cookies typically contain identifiers, site names, and some numbers and characters. With cookies, websites can store information such as your preferred products.
    2. We will not use cookies for any purpose other than those described in this policy. You can manage or delete cookies according to your preferences. For details, please refer to AboutCookies.org. You can clear all cookies saved on your computer, and most web browsers have a function to block cookies. However, if you do this, you will need to manually change your settings every time you visit our website. Please contact your browser provider for detailed instructions on how to change your browser settings.
  2. Do Not Track (DNT)：
    1. Many web browsers have a Do Not Track feature that sends a DNT request to websites.
    2. Currently, major internet standards organizations have not established policies on how websites should respond to such requests. However, if your browser has DNT enabled, all our websites will respect your choice.

IV. Information Use

  1. Providing Services: The personal information we collect will be primarily used to provide you with Drive Buddy services, including vehicle location tracking, geofencing alerts, vehicle trajectory recording, and sharing.
  2. Product Optimization: We will analyze the collected information to understand user behavior, optimize product features, and enhance user experience.
  3. Advertising Push: We may push personalized advertising information to you based on your interests and behavior. You can disable personalized advertising pushes through the settings options in Drive Buddy.
  4. Safety Assurance: We will use user information to prevent, detect, and investigate fraudulent activities, security threats, and other illegal actions, protecting the legitimate rights and interests of users and our company.

V. How We Share, Transfer, and Disclose Your Information

5.1 Sharing

We will not share your personal information with any third party outside of Drive Buddy, except in the following circumstances:

  1. Sharing under legal circumstances: We may share or disclose your personal information in accordance with laws and regulations, litigation, dispute resolution needs, or as required by administrative or judicial authorities.
  2. Sharing with explicit consent: With your explicit consent, we may share your personal information with other parties.
  3. Sharing necessary for product/service functionality: When you use functions provided by third parties in our products, we will share the information necessary to implement the business functions with these third parties.
  4. Sharing among affiliated companies: To integrate resources and provide efficient and high-quality services, we will share your information among affiliated companies under unified management and control, subject to the purposes stated in this privacy policy. If our affiliated companies change the purpose of processing personal information, we will seek your authorization again.
  5. Sharing with partners: We may entrust partners to provide certain services or perform certain functions on our behalf. We will share the information necessary to achieve the cooperation purpose with partners under the principles of legitimacy, justification, and minimum necessity. We will require them through agreements not to use this information for any other purpose and to take sufficient security measures to handle the information we share.

5.2 Transfer

Except in the following circumstances, we will not transfer your personal information to any company, organization, or individual:

  1. Transfer with explicit consent: With your explicit consent, we will transfer your personal information to other parties.
  2. In the event of mergers, acquisitions, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this policy, or we will require the company or organization to seek your authorization again.

5.3 Disclosure

We will only disclose your personal information in the following circumstances:

  1. With your explicit consent;
  2. Disclosure based on law: We may publicly disclose your personal information in accordance with laws, legal procedures, litigation, or mandatory requirements of government authorities.

5.4 Exceptions to Obtaining Authorization for Sharing, Transferring, and Disclosing Personal Information

In the following circumstances, we do not need to obtain your authorization to share, transfer, or publicly disclose your personal information:

  1. Related to fulfilling our obligations under laws and regulations;
  2. Directly related to national security and defense security;
  3. Directly related to public safety, public health, and significant public interests;
  4. Directly related to criminal investigation, prosecution, trial, and judgment enforcement, among other judicial or administrative law enforcement activities;
  5. Necessary to safeguard the significant legitimate rights and interests of you or other individuals, but difficult to obtain your consent;
  6. Personal information that you have publicly disclosed to the public;
  7. Personal information collected from legally and publicly disclosed sources, such as legitimate news reports and government information disclosure channels.

VI. How We Store and Protect Your Personal Information

6.1 Information Storage

  1. In accordance with laws and regulations, we store your personal information collected and generated during our operations within the territory of the People's Republic of China. If we need to transfer data overseas, we will strictly comply with relevant laws, regulations, and policy requirements or seek your separate authorization and consent.
  2. We will retain your personal information only for the period necessary to achieve the purposes outlined in this policy, unless otherwise stipulated by laws and regulations or with separate authorization and consent from the data subject. After the retention period, we will delete or anonymize your personal information.

6.2 Information Protection

  1. We adopt industry-standard and reasonably feasible security measures to protect your personal information, preventing unauthorized access, disclosure, use, modification, damage, loss, or leakage of data. For example, we use encryption technology to ensure the security of personal information storage and transmission; we employ trusted protection mechanisms to prevent data from malicious attacks.
  2. We enhance the security of personal information through organizational development, system and process design, personnel management, product technology, and other multi-dimensional aspects. We have strict data use and access policies, allowing only personnel with a need to know to access personal information, and we have set up access control and monitoring mechanisms. We conduct information security and privacy protection training programs to strengthen employees' awareness of the importance of protecting personal information.
  3. We will make every effort to safeguard your personal information security. However, please understand that no security measures can be 100% secure. If you have reason to believe that our services pose information security risks, please inform us promptly using the contact information provided in the "How to Contact Us" section of this policy.
  4. In the不幸 event of a personal information security incident, we will activate emergency response plans and take reasonable remedial measures to minimize the impact on your personal information and other rights. We will also inform you, as required by laws and regulations, of the basic situation and possible impact of the security incident, the measures we have taken or will take to address it, suggestions for you to independently prevent and mitigate risks, and remedial measures for you. We will notify you via push notifications, emails, letters, SMS, or other means. When it is difficult to notify individuals one by one, we will use reasonable and effective methods to issue public announcements. At the same time, we will report the handling of personal information security incidents to regulatory authorities as required.

VII. Your Rights

In accordance with relevant Chinese laws, regulations, standards, and common practices in other countries and regions, we ensure that you can exercise the following rights regarding your personal information:

7.1 Access to Your Personal Information

  1. You have the right to access and collect your personal information, except in cases where laws and regulations provide exceptions. If you wish to exercise your right to access information, you can contact us using the methods outlined in the "How to Contact Us" section.
  2. For other personal information generated during your use of our products or services, we will provide it to you as long as it does not require excessive investment on our part.

7.2 Correction of Your Personal Information

When you find that the personal information we process about you is incorrect, you can contact us using the methods outlined in the "How to Contact Us" section.

7.3 Deletion of Your Personal Information

You can request the deletion of your personal information if you find any of the following circumstances:

  1. If our processing of personal information violates laws and regulations;
  2. If we collect and use your personal information without your consent;
  3. If our processing of personal information violates our agreement with you;
  4. If you no longer use our products or services, or you have deactivated your account;
  5. If we no longer provide you with products or services.

If we decide to respond to your deletion request, we will also notify entities that have obtained your personal information from us to require them to delete it promptly, unless otherwise stipulated by laws and regulations or these entities have obtained independent authorization from you.

When you delete information from our services, we may not immediately delete the corresponding information from our backup systems, but we will delete it when the backups are updated.

7.4 Changing the Scope of Your Authorized Consent or Withdrawing Your Authorization

  1. You can contact us using the methods outlined in the "How to Contact Us" section to change the scope of your authorization for us to continue collecting personal information or to withdraw your authorization.
  2. If you withdraw your consent to this policy, we will no longer collect the corresponding personal information. However, your decision to withdraw consent will not affect the personal information collected based on your previous authorization.

7.5 Account Deactivation for Data Subjects

We provide account deactivation services. You can submit an account deactivation request within the application, and we will complete your account deactivation request within 15 working days from the date of submission. If you have any concerns about deactivating your account, you can contact us using the methods outlined in the "How to Contact Us" section.

7.6 Restricting Automated Decision-Making in Information Systems

In certain business functions, we may make decisions solely based on non-human automated decision-making mechanisms, including information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to request an explanation from us, and we will provide appropriate remedies.

7.7 In the Following Circumstances, We Will Be Unable to Respond to Your Requests as Required by Laws and Regulations:

  1. Directly related to national security and defense security;
  2. Directly related to public safety, public health, and significant public interests;
  3. Directly related to criminal investigation, prosecution, trial, and judgment enforcement;
  4. There is sufficient evidence to indicate that you have subjective malice or are abusing your rights;
  5. Responding to your request will cause serious harm to the legitimate rights and interests of you or other individuals and organizations.
  6. Involving commercial secrets.

VIII. Protection of Minors

  1. Our products and services are primarily intended for adults. Except as required by applicable law, we do not knowingly collect personal information from minors (under the age of 14). Minors should not create their own user accounts or provide us with personal information without the consent of their guardians.
  2. For cases where we collect personal information from minors with parental consent, we will only use or disclose this information when permitted by law, with explicit consent from parents or guardians, or when necessary to protect the child.
  3. If we discover that we have collected personal information from minors without prior verifiable parental consent, we will endeavor to delete the relevant data as soon as possible.
  4. If you are the parent or guardian of a minor and have questions about the processing of your minor's information, please contact us using the contact information provided below.
    IX. How to Contact Us

If you have any questions, comments, or suggestions about this policy, or if you have any privacy complaints or rights requests, you can contact us using the following methods:

  1. Customer Service Hotline: 0750-3908960
  2. Contact Email: drivebuddy.system@gmail.com
  3. Contact Address: 6th Floor, Building 3, 438 Wuyi Road, Jiangmen City, Guangdong Province, China
    Under normal circumstances, we will respond within 15 working days. If you are dissatisfied with our response, especially if you believe that our processing of personal information has harmed your legitimate rights and interests, you can also file a complaint or report to the cybersecurity authorities or initiate legal proceedings in court.

X. Revision of the Privacy Policy

We may revise this privacy policy from time to time, and such revisions will form part of this privacy policy. We will publish any changes to this privacy policy on this page or through other methods that we deem appropriate (including sending you an email or notifying you in other ways). If you continue to use our products and/or services, it means that you agree to be bound by the revised privacy policy.

December 27, 2024