Xingchi XC Privacy Policy

1. Scope and service configuration

The app provides travel inspiration, routes, personal travel intentions and companion coordination. Availability depends on version, permissions, device and network. This Android edition automatically obtains service configuration using necessary brand and build access identifiers, without requiring a company code.

The route map does not require current device location. Send location is a separate feature requiring an intentional action and system permission.

2. Information and purposes

• Account IDs, passwords or other credentials, registration details and session tokens support registration, authentication, session restoration and security. Optional profile details include nickname, avatar, gender, birthday, signature, phone and email as provided.
• Destinations, dates, descriptions, travel styles, edits, saved routes and companion intentions are linked to your account and stored by the business service to manage My Routes. Planned destinations are not real-time device locations.
• Comments, replies, likes, hiding and reports, including chosen reasons, support content display, interaction states and feedback. Visibility follows the actual feature. Do not post another person’s private contact or itinerary details.
• Contact IDs and relationships, verification requests, team/member information and searches support the in-app roster and coordination. This is not reading the device address book.
• Messages and chosen text, images, videos, files, voice and location support delivery, history, sync, previews and notifications. Recipients and team members can view content sent to them as supported.
• Calling processes audio, video, signalling, call state and necessary quality logs after the user initiates or answers a call and grants permissions.
• Feedback and appeals process submitted descriptions, account details, contact information and chosen attachments for support, appeals, content reports and responses.
• After consent, necessary device/OS/app versions, IP, network and connection information, logs, SDK identifiers and push IDs support compatibility, security, connections and notifications. See the SDK list for details.

3. Permissions

Policy consent does not replace system permission. Manage permissions and notifications in system settings. Refusing permission for one feature does not block unrelated features.

• Camera: scanning, taking and sending pictures/videos and video calls, requested when used.
• Microphone: voice messages and audio/video calls, requested when used.
• Media/storage: chosen content and relevant folders when sending, downloading or saving files, according to Android version.
• Precise/approximate location: intentional Send location and network-assisted positioning. Location is sensitive personal information. No persistent background location permission is requested.
• Bluetooth/audio devices: supported headsets during calls, according to device and OS requirements.
• Notifications, full-screen calls and overlays: messages, incoming calls and returning to an ongoing call, controlled by system authorisation.

4. Consent and background notifications

Before initial or renewed material consent, the app does not enter auto-login or initialise relevant communication, push or location business SDKs. Consent version and time are recorded on-device; old login state is not new consent.

After consent and while signed in, Yunxin and compatible device push services receive messages and calls. Backgrounding, locking or removing the recent-task entry is not signing out. System services may start necessary receivers after a notification or user click, processing tokens, messages, delivery status and network/device data. Static network-change broadcasts do not repeatedly launch the app.

Sign out at the bottom of the right-hand My drawer to end the account session. Withdraw consent under My → Privacy settings to sign out, stop relevant entry points and close the app. Disabling notifications alone is not sign-out or consent withdrawal.

5. SDKs, sharing and visibility

Necessary SDKs support communication, calling, push, location, scanning and updates in supported builds. SDKs may obtain data through system APIs or through user actions in the app. Device push channels are selected by compatibility.

We do not sell personal information. Necessary providers receive or process information to deliver requested services, within the relevant scope and applicable requirements. Changes requiring separate authorisation will be disclosed and appropriate consent obtained.

Information you actively share follows the indicated audience. Others may save or forward visible content.

Third-party SDKs ↗

6. Storage and protection

Business services or relevant SDK providers store accounts, plans, interactions, feedback and communications. The device keeps necessary sessions, configuration, consent records, message caches and selected downloads. The website saves language preference locally; necessary access logs and IP addresses support page delivery, downloads and security.

Information is retained for the minimum period needed for its purpose and legal requirements, then deleted or anonymised when applicable. Legally retained information after withdrawal or deletion is restricted. Your own downloads and copies held by recipients require separate management.

Authentication, access controls, transmission protection and necessary logging support security. Personal information incidents are handled, notified and reported as legally required.

Storage arrangements depend on actual business deployments and providers. Any cross-border provision requiring notice, separate consent or other procedures will be handled accordingly, including recipient, purpose, scope and rights information. Website visits do not replace authorisation.

7. Your rights

Edit profile information and manage plans where the app allows. Contact us for access, copies, corrections, deletion, explanations or legally available restrictions. Only necessary identity information is checked.

Sign out: avatar on any main tab → right-hand My drawer → Sign out at the bottom. Delete account: Delete account link at the bottom of the same drawer → follow confirmation. Deletion may make the account and linked services unavailable; review notices and preserve needed information first. Sign-out is not account deletion.

Withdraw consent: My → Privacy settings → Withdraw consent. Withdrawal does not invalidate prior consent-based processing and is not account deletion. Contact the operator if in-app action is unavailable.

8. Children

Minors should use the service with guardian guidance and be careful sharing location, itinerary and contact details. Children under 14 need guardian consent before personal-information services; special protection applies as legally required. Guardians can contact us about unauthorised submissions.

9. Website and updates

This website provides product information, actual app screens, Android downloads, documents and contact channels. It does not provide online chat or booking. Feedback creates an email draft you choose to send; the website does not automatically submit or save it. Email providers process sent mail under their rules. No advertising or third-party analytics scripts are loaded and camera, microphone or location permissions are not requested.

Material updates are dated and notified through suitable app prompts with required confirmation. New website documents do not modify local documents inside an installed APK. English is provided for convenience; Chinese prevails in a discrepancy without reducing statutory rights.