Privacy Policy

This policy applies only to the product "Todo Plan" and its related services provided by Jinan Qudong Network Technology Co., Ltd. (hereinafter referred to as "we").

We attach great importance to the security of users' personal information and make every effort to protect their privacy through security measures. When you use Todo Plan, we will collect and use your personal information in accordance with relevant laws, regulations, and technical specifications to help provide you with better products and services. At the same time, we promise to strictly keep your personal information and other data confidential and ensure the security of your personal information.

Please read this Privacy Policy (hereinafter referred to as "this Policy") carefully before using our products and services. By using the "Todo Plan" product and related services, you indicate your agreement to this Policy.

1. How we collect and use your personal information

We will collect and use the personal information you voluntarily provide during the use of our products (or services) based on legitimate, legal, and necessary principles for the following functionalities and services.

(A)Account Registration

When you register and log in to a Todo Plan account, depending on the following registration methods, you need to provide:

• Email registration: email address and password
• Login with third-party accounts (WeChat, QQ, Sina Weibo): third-party account nickname, third-party account avatar

(B)Application Functions

1. Synchronization of Task Data

When you register an account and create lists, tasks, and other data within the account, in order to synchronize data smoothly and completely across your devices, you need to allow us to collect:

• Your lists, tasks, folders
• Information regarding your tasks, including task titles, contents, priorities, deadlines, reminders, and repeat rules.

2. Task Reminders

After setting reminders for tasks in Todo Plan, when the reminder time is reached, we will launch the application to remind you of the task. You need to allow us to collect: task titles, task contents, task deadlines (or time periods), and task reminder time.

3. Habit Formation System

If you enable the 'Habit Formation System' function, in order to ensure the normal use of the habit formation system across your devices, we may collect information including:

• Information regarding your habit-forming creatures, including species, names, forms, fullness values, health values, adoption time, and habit-forming creature coin balances.
• Information regarding your focus, including duration, start time, and end time of your focus.

4. Data Statistics

When you view focus statistics within Todo Plan, we will query your historical data solely for statistical purposes. These data are only for your personal viewing, and we will not actively save or share them.

5. Binding of Third-Party Accounts or Services

If you choose to bind your WeChat account to your Todo Plan account, you need to provide us with your WeChat nickname and WeChat avatar.

If you choose to bind your QQ account to your Todo Plan account, you need to provide us with your QQ nickname and QQ avatar.

6. Others

You can voluntarily provide and allow us to collect the following information by improving your personal profile: avatar and nickname. This information is not necessary for the operation of our various services or system functionalities, and we will not require you to provide this information forcibly. Your refusal will not have any adverse effects on the use of Todo Plan."

(C) Permissions requested within the application

We need to request certain system permissions related to personal privacy to ensure that certain functions within the application can be used properly. We will request your authorization when you use these functions, and only after obtaining your explicit authorization will we access your personal information. If you do not need to use these functions, you can refuse authorization. If you have never used these functions, we will not request permissions from you or access your personal information.

The permissions we will request and the corresponding functions include:

• Allow reading and writing to external storage: This permission enables you to generate images for saving locally and sharing with friends when you need to share. It also allows you to set images from your phone gallery as avatars when you need to customize your avatar.

Our product is developed based on DCloud uni-app (5+ App/Wap2App). During the application runtime, we need to collect your device's unique identifier (IMEI/Android ID/DEVICE_ID/IDFA, SIM card IMSI information, OAID) to provide statistical analysis services. We also use application launch data and exception error logs for performance improvement and user experience enhancement, in order to provide better services to users. For more details, please visit the "DCloud User Service Terms" (Hyperlink to DCloud User Service Terms: https://ask.dcloud.net.cn/protocol.html).

(D) Third-party SDK statistical services

We collect data based on your interactions with us and the choices you make, including your privacy settings, as well as the products and features you use.

The data we collect may include SDK/API code versions, internet service providers, IP addresses, platforms, timestamps, application identifiers, application versions, application distribution channels, unique device identifiers, Android advertising identifiers, MAC addresses, International Mobile Equipment Identity (IMEI) codes, device models, terminal manufacturers, terminal device operating system versions, session start/stop times, language location, time zone, network status (WiFi, etc.), disk, CPU, and battery usage.

Integration instructions for third-party SDKs in the advertising module

(E) Explanation of Other Uses

When we need to use your information for purposes other than those outlined in this policy, we will seek your prior consent. When we need to use information collected for a specific purpose for other purposes, we will seek your prior consent.

2. How We Share, Transfer, and Publicly Disclose Your Personal Information

(1) Sharing

Without your consent, we will not share your personal information with any other company, organization, or individual, except in the following cases:

• Obtained your explicit consent or authorization: After obtaining your explicit authorization, we will share your personal information with other parties.
• Sharing in statutory circumstances: In accordance with laws and regulations, due to the need for litigation dispute resolution, or as required by the competent government authorities or court rulings, we must share your personal information externally.
• Within the scope required or permitted by law, it is necessary to provide your personal information to third parties to protect the interests, property or safety of the Todo plan and its users or the public from harm.

(2) Transfer

Without your consent, we will not transfer your personal information to any company, organization or individual, except in the following cases:

• Obtained your explicit consent or authorization.
• In the event of a merger, acquisition or bankruptcy liquidation, personal information transfer may be involved. In such cases, we will require the new company or organization holding your personal information to continue to be bound by this policy. If there are any changes to the collection and processing of personal information as stipulated in this policy, the company or organization will re-seek your authorization and consent.

(3) Public Disclosure

Without your consent, we will not publicly disclose your personal information, except in the following cases:

• Obtained your explicit consent or authorization.
• Under legal, legal proceedings, litigation or mandatory requirements of the competent government authorities, we may disclose your personal information to the competent authorities. However, we guarantee that in the above situations, we will require the requesting party to provide the corresponding valid legal documents, and we will adopt security protection measures that comply with laws and industry standards for the disclosed information.

3. How we store your personal information

(1) Retention period

During your use of this platform, we will continue to store your personal information, and the retention period will be based on the principle of not exceeding the period necessary to provide you with the service. After you terminate the use of this platform or close the corresponding authorization, except where laws and regulations have other provisions on the retention period of specific information, we will delete or anonymize your information.

If we cease operations due to business failure or other reasons, we will immediately stop collecting your personal information and delete the personal information already collected. We will post an announcement on the website or convey this situation to each user through in-site notifications, emails, or other reasonable means.

(2) Storage location

We will store the information obtained from within the territory of the People's Republic of China within the territory of the People's Republic of China. If some products or services involve cross-border activities, we need to transmit your personal information overseas. We will strictly follow the provisions of laws and regulations and ensure the security of your personal information.

4. How We Protect Your Personal Information

The security of your personal information is of utmost importance to us. We will strictly abide by relevant laws and regulations, and adopt industry-recognized reasonable and feasible measures to protect your personal information. This is to prevent unauthorized access, disclosure, use, and modification, as well as to avoid data damage or loss.

(1) Technical Measures and Data Security Measures

We have used security protection measures that meet industry standards to protect the personal information you provide, preventing unauthorized access, public disclosure, use, and modification, as well as preventing data damage or loss. We will take all reasonable and feasible measures to protect your personal information. For example, the data exchange between your browser and the Todo plan is protected by SSL encryption; we will use encryption technology to ensure the confidentiality of data; we will use trusted protection mechanisms to prevent data from being maliciously attacked; we have deployed access control mechanisms to ensure that only authorized personnel can access personal information; and we will organize security and privacy protection training courses to enhance our employees' awareness of the importance of protecting personal information.

The Internet is not an absolutely secure environment, and email, instant messaging, and other communication methods with our other users are not encrypted. We strongly recommend that you do not send personal information through such channels. Please use complex passwords to help us ensure the security of your account.

(2) Handling of Security Incidents

The Internet environment is not 100% secure, and we will do our best to ensure or guarantee the security of any information you send us. If our physical, technical, or management protection facilities are compromised, resulting in unauthorized access, public disclosure, tampering, or destruction of information, and causing damage to your legitimate rights and interests, we will bear the corresponding legal liability.

In the unfortunate event of a personal information security incident, we will, in accordance with the requirements of laws and regulations, promptly notify you of: the basic situation of the security incident and its potential impact, the mitigation measures we have taken or will take, your recommendations for self-protection and risk reduction, and remedial measures for you. We will promptly inform you of the relevant circumstances of the incident through email, letter, phone, push notifications, etc. When it is difficult to notify individual personal information subjects one by one, we will adopt reasonable and effective means to issue a public announcement.

At the same time, we will also proactively report the handling of personal information security incidents to the regulatory authorities as required.

5. Your Rights to Manage Your Personal Information

(1) Access and Correct Your Personal Information

You have the right to access your personal information, except for the exceptions stipulated by laws and regulations. If you want to exercise the right of data access, you can access and correct it yourself through the following methods:

Personal information: You can access or modify your avatar, nickname, email account, and login password by entering the "My" tab at the bottom - "Avatar" - "Personal Center".

(2) Delete Your Personal Information

In the following circumstances, you can request us to delete your personal information:

• If our processing of personal information violates laws and regulations;
• If we collect and use your personal information without your consent;
• If our processing of personal information violates the agreement with you;
• If you no longer use our products or services, or have canceled your account;
• If we no longer provide you with products or services.

If we decide to respond to your request for deletion, we will also notify the entities that have obtained your personal information from us, and request them to delete the information in a timely manner, unless otherwise provided by laws and regulations, or these entities have obtained your independent authorization. After you delete information from our services, we may not immediately back up the corresponding information deleted from the system, but will delete the information when the backup is updated.

After you delete your account, we will also notify the entities that have obtained your personal information from us, and request them to delete the information in a timely manner, unless otherwise provided by laws and regulations, or these entities have obtained your independent authorization. After you delete information from our services, we may not immediately back up the corresponding information deleted from the system, but will delete the information when the backup is updated.

(3) Change the scope of your authorized consent or withdraw your authorization

You can change the scope of your authorization for us to continue collecting your personal information or withdraw your authorization by deleting information, uninstalling software, changing permission granting methods in system settings, or setting privacy settings in the software. You can also withdraw your authorization for us to continue collecting your personal information by canceling your account.

(4) Cancel your account

You can delete your account by entering the last "Me" tab in the bottom menu, clicking on your avatar, entering the "Personal Center", clicking the "More" button in the top right, and then clicking "Cancel Account".

(5) Responding to your requests

To ensure security, you may need to provide a written request or prove your identity in other ways. We may first require you to verify your identity before processing your request. We will respond to your request within 15 days.

For your reasonable requests, we generally do not charge a fee, but for multiple repeated requests that exceed reasonable limits, we may charge a certain cost fee. For requests that are unreasonably repeated, require too much technical means (such as needing to develop new systems or fundamentally change current practices), pose risks to the legitimate rights and interests of others, or are highly impractical (such as involving information stored on backup tapes), we may refuse to respond.

In the following cases, in accordance with laws and regulations, we will be unable to respond to your request:

• Related to our fulfillment of legal and regulatory obligations;
• Related to national security or national defense security;
• Related to public security, public health, or major public interests;
• Related to criminal investigation, prosecution, and trial;
• We have sufficient evidence that you have subjective malice or abuse of rights;
• For the purpose of protecting the vital interests of the personal information subject or other individuals, such as life and property, but it is difficult to obtain the consent of the person concerned;
• Responding to your request will seriously harm the legitimate rights and interests of you or other individuals or organizations;
• Involving trade secrets.

6. How do we handle the personal information of minors?

Our products, websites, and services are mainly aimed at adults. If you are a child under 14 years old, you and your guardian should carefully read our specially formulated Todo Plan Children's Privacy Protection Statement before using our services, and ensure that you can only use our services under the guidance of your guardian after obtaining the guardian's consent to the Todo Plan Children's Privacy Protection Statement.

For cases where we collect children's personal information with the consent of their guardian, we will only use or publicly disclose this information when it is legally permitted, with the explicit consent of the parents or guardians, or when it is necessary to protect the children.

If we find that we have collected personal information of children without obtaining verifiable parental consent in advance, we will try to delete the relevant data as soon as possible.

7. How is this policy updated?

Since this privacy policy may be updated from time to time, you should check it regularly to understand our plans and procedures for protecting the personal information we collect. Your continued use of the Todo Plan service constitutes your consent to this privacy policy and any updates.

For major changes, we may provide more prominent notices to explain the specific changes to this policy, depending on the circumstances. Major changes include but are not limited to:

• Major changes in our service model, such as the purpose of processing personal information, the types of personal information processed, and the way personal information is used;
• Major changes in our ownership structure and organizational structure, such as business adjustments, bankruptcy acquisitions, etc. that result in changes in ownership;
• Changes in the main recipients of personal information sharing, transfer, or public disclosure;
• Major changes in your rights and the way you exercise your rights in personal information processing;
• Changes in the departments responsible for personal information security, contact information, and complaint channels;
• When the personal information security impact assessment report indicates high risk.

8. How to contact us

If you or your guardian have any questions, opinions or suggestions about this privacy policy, please contact us through the following methods:

• Submit feedback within the Todo Plan app
• Send an email to modai08@163.com