Shuangyu Select Privacy Policy

Privacy Policy

Last updated: 15 August 2026

Thank you for trusting Shuangyu Select. We understand the importance of personal information and sensitive personal information and will take reasonable technical and organizational measures required by applicable law to keep such information secure and under appropriate control. This Privacy Policy (the “Policy”) is issued by Hangzhou Aoti Technology Co., Ltd. (杭州奥体科技有限公司) (“we,” “us,” “our,” or the “Operator”) for the Shuangyu Select application and related services. The English company name is provided only as a translation for ease of reading; the governing legal entity name is 杭州奥体科技有限公司.

Before using any product or service, please read and fully understand this Policy, including how we collect, store, use, process, share, transfer, publicly disclose, and protect personal information. If you do not agree with this Policy, stop using the Platform. Where applicable law requires separate or express consent, we will request that consent separately rather than relying solely on your use of the service.

If you have any question, comment, or request concerning this Policy, contact us using the details in Section 10.

This Policy explains:

1. About Us
2. Scope and Definitions
3. How We Collect and Use Personal Information
4. How We Use Cookies and Similar Technologies
5. How We Share, Transfer, and Publicly Disclose Personal Information
6. How We Store and Protect Personal Information
7. Your Rights and Control over Personal Information
8. Protection of Minors
9. Updates to This Policy
10. Contact Us

1. About Us

   Shuangyu Select is operated and serviced by Hangzhou Aoti Technology Co., Ltd. (杭州奥体科技有限公司). The English company name is a convenience translation only; the legal entity is the company identified by its Chinese registered name.

   App name: Shuangyu Select

   Bundle ID: club.yoha.app

   Privacy contact: Mr Wang

   Contact email: aiti@hangzhou.com

   Customer service: Mr Li, +66 943831894

2. Scope and Definitions

   1. Scope

      This Policy applies to personal information that we process when you visit, register for, log into, or use Shuangyu Select, whether you are a visitor or a registered User.

      This Policy does not govern:

      1. independent processing by a third party that provides a separate product, website, application, or service linked from the Platform; or
      2. products or services that are not provided by Shuangyu Select or the Operator.

      When using an independently operated third-party service, carefully read its user agreement and privacy policy and provide personal information cautiously. This Policy applies to our processing and to processing carried out on our instructions. It does not replace an independent third party’s policy.

   2. Definitions

      1. Personal information

         Personal information means information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding information that has been irreversibly anonymized. Depending on the functions you use, it may include profile information, identity information, online identifiers, account credentials, transaction records, communications, content, device and network information, service logs, and location information.

      2. 敏感 personal information

         For purposes of this English Policy, “sensitive personal information” means personal information that, if leaked or unlawfully used, may readily harm personal dignity or endanger personal or property safety. It may include biometric information, identity-document information, financial accounts and transactions, precise location, private communications, credentials, and personal information of children under the age threshold specified by applicable law.

         We process sensitive personal information only for a specific and necessary purpose, take enhanced protective measures, explain the necessity and impact where required, and obtain separate consent when applicable law requires it.

      3. Device

         A device is a computer, tablet, smartphone, or other terminal used to access our products or services.

      4. Unique device identifier

         A unique device identifier is a device- or application-related value, such as IDFV or another identifier made available by the operating system, that may distinguish an application installation or device. We use such identifiers only where necessary, permitted, and disclosed.

      5. IP address

         An internet protocol address is a number assigned to a device or network connection. It may indicate an approximate network location and is used for connectivity, security, troubleshooting, and fraud prevention.

      6. TLS

         Transport Layer Security is a security protocol used to encrypt communications between a client and a server and to reduce the risk of interception or tampering during transmission.

      7. Cookie and similar technologies

         A Cookie is a small data file stored by a browser or web view. Similar technologies include local storage, software development kit storage, pixels, and embedded scripts used for comparable purposes.

      8. Account

         An account is the profile created or assigned to you for authentication, security, and access to Shuangyu Select services.

      9. De-identification and anonymization

         De-identification means technical processing that prevents identification without additional information. Anonymization means irreversible processing after which a person cannot be identified and the information cannot reasonably be restored to an identifiable form.

      10. Server logs

          Server logs are records automatically generated when you access a service. They may include request information, IP address, device or browser type, language, date and time, response status, and security or error information.

3. How We Collect and Use Personal Information

   We process personal information according to the principles of lawfulness, fairness, transparency, purpose limitation, and data minimization. We collect information you provide, information generated when you use a function, and information lawfully received from a service provider. If we intend to use information for a purpose not described here, or materially change the original purpose, we will provide an appropriate notice and obtain consent where required before that new use.

   Available features may differ by account, language, region, device, or release. We process information only for functions actually made available to you.

   1. Account registration and login

      To register, authenticate, and secure an account, we may process your mobile number, verification-code result, account ID, nickname, avatar, password or password verifier, gender, birthday, and registration or login records. If you do not provide information necessary for registration and authentication, you may be unable to create or access an account.

      You may optionally provide school, occupation, interests, hometown, introduction, and other profile details to improve social discovery and personalization. Refusing optional information does not affect basic account functions.

   2. Real-name verification and host or service-provider registration

      Where a specific feature lawfully requires real-name verification, we may process your real name, identity-document type and number, identity-document image, facial image or video, verification result, and relevant device and network information. This information is used for identity authentication, fraud prevention, age protection, account recovery, or compliance. Facial and identity-document information is sensitive personal information. We will provide a specific notice and obtain separate consent where required before starting the verification flow.

      Real-name verification through Tencent Cloud Huiyan is triggered only when a Chinese-language User voluntarily enters a feature that requires verification. A User who does not complete a required verification cannot use that particular feature but may continue to use other available functions that do not require verification.

   3. Voice rooms, live interaction, messaging, and games

      To provide voice rooms, live interaction, private or group messaging, and room games, we may process your account ID, nickname, avatar, room and interaction records, message content, user-selected images or files, audio or video streams, microphone or camera input, network quality, device model, operating-system version, and service logs.

      Audio and video input is processed only when you enter or activate a function that needs it and after the required permission has been granted. If you deny microphone or camera permission, the corresponding audio or video function will be unavailable, but unrelated functions remain available.

   4. Orders, virtual items, and payment records

      When you purchase a product or service, we may process the product or service selected, order number, transaction amount, order time, merchant record, transaction identifier, payment method category, payment status, delivery status, refund status, and app-store billing receipt or verification result. This information is used to complete and verify the transaction, deliver virtual items, prevent fraud, provide customer service, and satisfy accounting or legal requirements.

      We do not receive your full bank-card number or account password from the app-store billing platform. The billing platform independently processes the payment credentials required to complete the transaction under its own terms.

   5. Product security, fraud prevention, and service stability

      To secure accounts, transactions, and systems and to diagnose failures, we may process login time and location derived from IP, IP address, app version, Bundle ID, language setting, feature-use and operation logs, security events, transaction-risk information, device model and manufacturer, operating-system type and version, device settings and environment, IDFV and other permitted device identifiers, network type and status, carrier information, sensor information, application process name, installed-application characteristics where provided by a disclosed security SDK, crash stack, performance data, and fraud-risk results.

      We use this information to authenticate activity, identify unusual devices or behavior, detect abuse, prevent account theft and fraudulent transactions, troubleshoot crashes, maintain service continuity, create security audits, and respond to incidents. We do not use security data for unrelated advertising profiling.

   6. Customer service, complaints, and appeals

      When you contact customer service or submit a complaint or appeal, we may process your account information, name, mobile number, proof of account or identity ownership where necessary, the content of your communication, attachments, audio or call records where lawfully recorded and notified, and information needed to investigate the issue. If you refuse information necessary to verify the account or investigate the request, we may be unable to provide a complete response.

   7. Posting and sharing text, images, audio, and video

      When you comment, post, upload, share, or publish content, we process the text, image, audio, video, file, and related interaction information that you choose to submit. With your permission, we access the photo library, camera, or microphone only to let you select, capture, record, upload, or save content. Revoking a permission stops future access through that permission but does not automatically delete information already lawfully processed.

   8. Information obtained indirectly

      We may receive information from a disclosed service provider when necessary to provide a function, such as transaction status, identity-verification result, message-delivery result, file-transfer result, game-session result, crash report, or fraud-risk result. We require the provider to have a lawful basis for its processing and protect indirectly obtained information to a standard no lower than that applied to comparable information collected directly.

   9. System permissions used by Shuangyu Select

      Permissions are requested in context and only for the function you activate. You can manage them in device settings. Denial may disable the corresponding function but will not affect unrelated services.

      1. Photos and media

         Used to select or save images and videos for avatars, posts, messages, identity verification, customer-service attachments, or other media functions. We do not automatically read the entire photo library; we process items you select or items made available under the permission scope you choose.

      2. Microphone

         Used for voice rooms, live audio, voice messages, audio recording, and a verification flow that requires a spoken response. If denied, those audio functions cannot operate.

      3. Notifications

         Used to show account, message, room, transaction, security, and service notices. If denied, you may not receive timely device notifications, but you can still view available information inside the App.

      4. Camera

         Used to capture an avatar or post, participate in live video, scan or photograph an identity document, or complete facial verification. If denied, the corresponding capture, video, or verification function cannot operate.

      5. Location

         If a nearby or location-based feature is offered and you enable it, location permission is used to provide that feature and may process approximate or precise location according to the permission you select. If denied, the location-based feature is unavailable. Location is not required for basic messaging or voice-room access.

      6. Network access

         Used to connect to the service, transmit messages and media, complete transactions, and obtain network status for quality optimization and security. Without network access, online functions cannot operate.

   10. Other lawful and necessary purposes

       If a new function requires personal information not described in this Policy, we will explain the categories, purpose, method, and scope through an updated policy, contextual notice, pop-up, in-app message, or other clear method and obtain consent when required.

       Applicable law may allow or require processing without consent in limited circumstances, including national or public security, public health emergencies, criminal investigation or judicial proceedings, protection of life or major property interests where consent is difficult to obtain, information lawfully made public by you, performance of a contract requested by you, service-security maintenance, compliance with a legal duty, or another circumstance expressly provided by law.

4. How We Use Cookies and Similar Technologies

   Web pages or embedded web content used for Shuangyu Select services may use Cookies, local storage, pixels, or similar technologies to maintain a session, remember settings, prevent repeated input, improve performance, diagnose errors, and protect account security. We do not use these technologies to collect information unrelated to the stated service purpose.

   You can manage or delete browser Cookies through browser settings. Some web functions that depend on a session or saved setting may not work correctly if all Cookies or local storage are disabled. A web beacon or similar pixel may record the page address, referring page, display setting, environment, and time spent for lawful service analytics or security where permitted.

5. How We Share, Transfer, and Publicly Disclose Personal Information

   1. Sharing

      We do not sell personal information. We share personal information only in the following circumstances:

      1. after obtaining separate or express consent where required;
      2. to comply with laws, legal process, or a binding request from a competent authority;
      3. to protect the life, property, security, or major lawful interests of you, another person, the Platform, or the public where permitted by law;
      4. with an affiliate only for a disclosed, necessary purpose and subject to this Policy and appropriate safeguards; or
      5. with an authorized processor or service provider that performs a necessary function under our instructions and contractual confidentiality, security, and purpose limitations.

      Third-Party SDK Personal Information Disclosure

      To provide voice and video, identity verification, messaging, file transfer, room games, crash diagnostics, device-risk control, and anti-cheating functions, Shuangyu Select currently integrates the following third-party SDK products. The information actually processed may vary by SDK version, device, permission choice, feature, and configuration. A provider’s linked official policy controls its own processing terms.

      SDK	Provider	Purpose and Trigger	Personal Information Processed	Official Privacy / Personal Information Rules
      Tencent TRTC / V2TXLive (TXLiteAVSDK)	Shenzhen Tencent Computer Systems Co., Ltd. (深圳市腾讯计算机系统有限公司)	Real-time audio and video for voice rooms and live interaction, including live-stream pulling and playback; activated when you enter or use the relevant function.	Wi-Fi and network status, device model, operating system, IP address, CPU and sensor information, camera input, microphone input, and audio/video stream and quality data.	TRTC SDK Personal Information Protection Rules
      Tencent Cloud Huiyan	Tencent Cloud Computing (Beijing) Co., Ltd. (腾讯云计算（北京）有限责任公司)	Real-person identity verification; triggered only when a Chinese-language User voluntarily enters a feature that requires verification.	Name, identity-document number or image, facial video and photos, verification result, GUID, cellular-network IP, Wi-Fi IP, device model, operating-system version, and network information.	Huiyan SDK Personal Information Protection Rules
      RongCloud IM	Beijing Yunzhong Rongxin Network Technology Co., Ltd. (北京云中融信网络科技股份有限公司)	Private and group messaging, message delivery, and related communication functions.	Device and network information, device or application identifier, SDK operation logs, account profile if the relevant hosted function is enabled, and message content such as text, images, audio, video, and files.	RongCloud IM / RTC SDK Privacy Policy
      Alibaba Cloud OSS	Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司)	Uploading and downloading user-selected images, audio, video, and other files.	User-selected media or files, device model, operating-system information, file-transfer metadata, network request information, and upload or download result.	Object Storage SDK Privacy Policy
      Sud / SudGIP	Sud; official provider: 忽然科技（上海）有限公司深圳分公司	Interactive mini-games and game state synchronization inside rooms.	Network identity information, device identifier, app version, Bundle ID, audio used by a game function, game-session data, and game interaction or behavior records.	Sud Privacy Policy
      LUKSDK (CFGameSDK)	HONG KONG CHUANGFA TECHNOLOGY CO., LIMITED (香港创发科技有限公司)	Providing interactive mini-games inside voice chat rooms.	User ID, user verification code, room ID, nickname, session duration, device information (device identifier, model, OS version, screen information, language, app version, and bundle identifier), network information (network type and signal strength), audio (speaker access), runtime logs, and crash reports. Cross-app tracking: false (NSPrivacyTracking = false).	LUKSDK Privacy Policy
      Tencent Bugly	Shenzhen Tencent Computer Systems Co., Ltd. (深圳市腾讯计算机系统有限公司)	Crash detection, fault diagnosis, stability monitoring, and restoration of the technical context of an error.	Device model and brand, operating-system type and version, app name and version, network type, CPU and memory or disk metrics, process information, crash stack, diagnostic logs, and Platform account identifier if configured for fault tracing.	Bugly SDK Personal Information Protection Rules
      Shumei SmAntiFraud	Beijing Shumei Shidai Technology Co., Ltd. (北京数美时代科技有限公司)	Device-risk control and fraud prevention for account and transaction security.	Device brand, manufacturer, model, name, operating-system type and version, device settings and environment, IDFV and any advertising identifier only when lawfully authorized, network-access form, nearby Wi-Fi characteristics, carrier and connection status, host-app Bundle ID and version, current process name, sensor information, device fingerprint, and configured optional risk signals.	Shumei Privacy Policy
      TuringShield	Shenzhen Tencent Computer Systems Co., Ltd. (深圳市腾讯计算机系统有限公司)	Device fingerprinting, risk identification, anti-cheating, and detection of abnormal registration, login, traffic, or transaction behavior.	Device fingerprint, device and system information, IDFV and any advertising identifier only when lawfully authorized, IP and network information, device environment and risk events, app and SDK identifiers, and installed-application characteristics used for anti-cheating analysis.	TuringShield SDK Personal Information Protection Rules

      We require each provider to process information only for the disclosed function, follow our lawful instructions where it acts as a processor, and apply appropriate security measures. If you deny an optional permission or do not activate a relevant function, the corresponding SDK function may be unavailable. Core functions unrelated to that SDK should remain available where technically possible.

   2. Transfer

      We do not transfer control of personal information to another company, organization, or individual except:

      1. with your separate consent where required; or
      2. as part of a merger, acquisition, restructuring, asset transfer, or insolvency proceeding. In that event, we will require the recipient to continue to comply with this Policy or to provide a new notice and obtain consent where required before changing the original purpose or method of processing.

   3. Public disclosure

      Public disclosure means making information available to the public or an unspecified group. We publicly disclose personal information only:

      1. with your separate and express consent;
      2. when required by law, legal process, or a competent authority;
      3. within a reasonable scope for public-interest reporting or supervision where permitted by law;
      4. to protect life, health, property, or another major lawful interest in an emergency where consent cannot reasonably be obtained; or
      5. in a de-identified form where a rule requires an enforcement announcement, fraud warning, or publication of a winner.

      We review the lawfulness, legitimacy, necessity, and scope of a proposed disclosure and apply protective measures before and after disclosure.

   4. Legal exceptions

      Applicable law may allow sharing, transfer, or disclosure without prior consent where directly related to national security, public security, public health, major public interests, criminal investigation or judicial enforcement; necessary to protect life, property, or major lawful rights where consent is difficult to obtain; based on information you lawfully made public; necessary to conclude or perform a contract requested by you; or otherwise expressly permitted or required by law.

6. How We Store and Protect Personal Information

   1. Storage method, location, and retention

      We may store information in encrypted or access-controlled databases, server logs, backups, and local application caches. Personal information collected and generated in Mainland China will be stored in Mainland China unless a lawful cross-border transfer is necessary. If a future function requires a cross-border transfer, we will provide the notices, conduct the procedures, and obtain the separate consent required by applicable law before the transfer.

      We retain personal information only for the shortest period necessary to provide the relevant function, comply with legal obligations, resolve disputes, maintain security, and enforce agreements. Retention periods depend on the information category, service purpose, account status, legal limitation period, and mandatory recordkeeping requirements. When retention is no longer necessary, we delete or anonymize the information, unless deletion is technically impracticable in a backup; in that case, we isolate the backup from further ordinary processing until it can be securely overwritten or deleted.

      If the product or service stops operating, we will provide notice by announcement, in-app message, device notification, or another reasonable method and delete or anonymize personal information within a reasonable period, unless law requires continued retention.

   2. Security measures

      We use reasonable safeguards designed to prevent unauthorized access, disclosure, use, alteration, damage, or loss. Measures may include TLS transmission encryption, encryption or de-identification of sensitive fields, access control, least-privilege permissions, multi-factor authentication for privileged systems, security logging, monitoring, vulnerability management, backup protection, employee confidentiality duties, vendor security terms, and audits across the information lifecycle.

      Before receiving personal information from a business partner, we require the partner to confirm a lawful source and appropriate authorization. Before sharing information with an authorized processor, we contractually limit purpose, scope, retention, access, onward sharing, and security responsibilities.

      We maintain incident-response procedures. If a personal information security incident occurs, we will take remedial measures and, where required, notify affected individuals and competent authorities of the nature and possible impact, measures taken or planned, risk-reduction suggestions, and available remedies. Where individual notice is impracticable, we may issue a public notice in a reasonable and effective manner.

      No internet or storage system is absolutely secure. Use a strong, unique password, protect verification codes, keep your device secure, and contact us promptly if you suspect account or personal information compromise.

7. Your Rights and Control over Personal Information

   Subject to applicable law, you may exercise the following rights through available account or privacy settings or by contacting us under Section 10.

   1. Access, correction, and completion

      You may access, correct, or complete eligible account and profile information in the App. For information that cannot be edited directly, contact customer service. We may request information reasonably necessary to verify your identity and protect the account.

   2. Deletion

      You may request deletion where our processing violates law, exceeds the stated purpose or necessary scope, lacks required consent, seriously violates this Policy, is no longer necessary, or follows account cancellation, and in other circumstances provided by law. We may retain information where law requires retention or where it is necessary to establish, exercise, or defend legal claims.

   3. Withdrawal of consent and permission management

      You can manage camera, microphone, photos, notifications, and location permissions in device settings and use available in-App privacy controls. You may also contact us to withdraw consent that cannot be managed directly. Withdrawal affects future processing based on consent but does not affect the lawfulness of processing completed before withdrawal or processing based on another lawful ground.

   4. Account cancellation

      You may use an available account-cancellation function or contact customer service. After identity and account-ownership verification and completion of any legally necessary settlement, we will cancel the account and delete or anonymize related personal information unless law requires retention.

   5. Copy and portability

      You may request a copy of eligible personal information. Where applicable law provides a data-portability right and the statutory conditions are met, you may request transfer to a designated recipient through a method we make available.

   6. Automated decision-making

      If an automated decision has a significant impact on your lawful rights or interests, you may request an explanation and, where provided by law, refuse a decision made solely through automated processing. Security systems may continue to make necessary risk assessments, but you may submit an appeal for human review where appropriate.

   7. Response to requests

      To protect security, we may require proportionate identity or account-ownership verification. We generally respond within 15 working days or the period required by applicable law. We may refuse or limit a request where permitted by law, including where it concerns national or public security, public health, criminal investigation or judicial proceedings, another person’s lawful rights, trade secrets, manifestly unfounded or excessive requests, or information that must be retained by law. If we cannot fulfill a request, we will explain the reason where legally permitted.

8. Protection of Minors

   Shuangyu Select is principally intended for adults. A minor must not create an account or use an age-restricted or paid function unless applicable law permits it and all required guardian consent and supervision have been obtained. We may use age or identity information lawfully provided during registration or verification to determine eligibility.

   If we provide a function to a minor with valid guardian consent, we process the minor’s personal information only as permitted by law, with enhanced safeguards and only to the extent necessary to provide the function or protect the minor. We do not knowingly use a minor’s personal information for unrelated profiling or targeted marketing.

   If a guardian believes that we collected a minor’s personal information without required consent, the guardian should contact us under Section 10. After appropriate identity and guardianship verification, we will take measures including restriction or deletion as required by law.

9. Updates to This Policy

   We may update this Policy to reflect changes in law, technology, security practices, service functions, or business operations. We will publish the updated Policy through the App or another clear channel. Where an update materially changes the purpose, method, or scope of processing or otherwise requires renewed consent, we will provide a prominent notice and obtain consent before the change applies to the relevant processing.

   Material changes may include:

   1. a significant change to our service model, processing purpose, information categories, or method of use;
   2. a significant change in ownership or organizational structure caused by restructuring, merger, acquisition, or insolvency;
   3. a significant change in the main recipient of shared, transferred, or publicly disclosed information;
   4. a significant change in your rights or the method for exercising them;
   5. a change in the responsible privacy contact or complaint channel; or
   6. a personal information protection impact assessment identifying a high risk that requires a policy or control change.

10. Contact Us

    The Operator has designated a privacy contact to receive questions, comments, complaints, and requests concerning personal information. We will review your request and generally respond within 15 working days or the period required by applicable law.

    Legal entity: 杭州奥体科技有限公司

    English translation for ease of reading: Hangzhou Aoti Technology Co., Ltd.

    Contact person: Mr Wang

    Email: aiti@hangzhou.com

    Customer service: Mr Li

    Customer service phone: +66 943831894

    This Policy is governed by the laws of the People’s Republic of China. The parties should first attempt to resolve a dispute through good-faith consultation. If consultation fails, either party may submit the dispute to the competent people’s court at the Operator’s legally registered domicile, unless mandatory law provides otherwise.