SCENPOP · 隐私政策

SCENPOP 隐私政策

更新时间：2026年10月29日

生效时间：2026年10月29日

隐私政策温馨提示

欢迎您使用“SCENPOP”！我们非常重视保护您的个人信息和隐私。您可以通过《SCENPOP 隐私政策》了解我们收集、使用、存储用户个人信息的情况，以及您所享有的相关权利。本政策最新版本持续公布在 https://scenpop.com/support/privacy.html，并标明更新时间。如发生重大变更，我们会通过应用内页面、登录页面或您注册使用的电子邮箱等合理方式，在变更生效前或适用法律要求的时点通知您；依法需要重新取得同意时，我们会另行征得同意。请您仔细阅读并充分理解相关内容：

1.为向您提供应用服务，我们将依据《SCENPOP 隐私政策》收集、使用、存储必要的信息。

2.基于您的明示授权，我们仅在实现具体功能所必要时申请设备权限，例如相册权限；您有权拒绝或取消授权。具体权限、使用目的和授权时机以本政策“设备权限调用情况”及设备上的系统提示为准。

3.您可以访问、更正、删除您的个人信息，还可以撤回授权同意、投诉举报以及调整隐私设置或申请删除账户。

4.我们已采取与所处理个人信息的性质、范围和风险相适应的安全防护措施保护您的个人信息。

5.如您是未成年人，请您和您的监护人共同阅读本政策，并在适用法律要求的范围内取得监护人必要同意后使用我们的服务或向我们提供个人信息。

“SCENPOP”隐私政策

SCENPOP TECHNOLOGY LIMITED（地址：香港观塘励业街46号天辉工业大厦1楼16室，以下简称“我们”）系移动应用程序“SCENPOP”（以下简称“SCENPOP”）的运营者。我们非常重视保护用户（以下简称“您”）的个人信息和隐私。您在使用“SCENPOP”时，我们会收集、使用、保存您的相关个人信息。为呈现我们处理您个人信息的情况，我们特制定《SCENPOP 隐私政策》（以下简称“隐私政策”），我们承诺严格按照本隐私政策处理您的个人信息。

我们在此提醒您：在您使用“SCENPOP”前，请您务必认真阅读本隐私政策，充分理解各条款内容，包括但不限于免除或限制我们责任的条款。本隐私政策中涉及的相关术语，我们努力用通俗易懂和简明扼要的文字表述，并对本隐私政策中与您的权益存在重大关系的条款和个人信息采用加粗处理以提示您注意。

您需要理解，只有在您确认并同意本隐私政策后，我们才会依据本隐私政策收集、使用、处理和存储您的个人信息；如您不同意本政策内容，将无法注册或使用“SCENPOP”。如您在注册或首次使用页面确认同意本政策，即表示您充分理解并同意本政策的全部内容。请您知悉，本政策仅适用于我们通过“SCENPOP”向您提供服务所收集的信息，不适用于第三方独立向您提供服务时自行收集的信息。

本隐私政策将帮助您了解以下内容：

目录

1. 一、我们如何收集和使用您的个人信息
2. 二、我们如何保存您的个人信息
3. 三、我们如何使用Cookies
4. 四、我们如何委托处理、共享、转让、公开披露您的个人信息
5. 五、第三方SDK服务
6. 六、我们如何保护您的个人信息
7. 七、您如何管理您的个人信息
8. 八、我们如何处理未成年人的个人信息
9. 九、本隐私政策如何更新
10. 十、如何联系我们

一、我们如何收集和使用您的个人信息

（一）我们如何收集您的个人信息

在您使用“SCENPOP”的过程中，我们会按照如下方式收集您的个人信息：

1. 完成注册和登录

1.1 当您注册“SCENPOP”账户时，我们需要收集您的电子邮箱和邮箱验证码。我们收集上述信息是为了帮助您完成账户注册、验证您的电子邮箱并保护您的账户安全。如您不提供这类信息，我们将无法为您创建账户并向您提供需要登录的服务。

1.2 在登录“SCENPOP”后，您可以在【设置-个人资料】页面自主选择填写或更新头像、昵称等基础资料。我们收集上述信息是为了提供应用内资料展示和内容创建服务；如您不愿意提供这些补充信息，不会影响您使用“SCENPOP”的基本功能。

2. 应用服务

为了维护服务正常运行、保障账户和网络环境安全，我们会收集提供服务所必需的运行信息，包括IP地址、访问日期和时间、“SCENPOP”客户端版本及必要的安全日志。我们不会为这些目的收集设备型号、设备标识符或广告标识符，也不会通过此类信息开展广告画像或跨应用追踪。

3. 保障网络和服务的安全

为保障网络连接和账户安全，我们会处理必要的IP地址、访问日期和时间、访问路径及安全事件日志。这些信息仅用于维持服务稳定、识别异常访问、防止滥用和处置故障；我们不会据此收集设备型号、设备标识符或广告标识符。

4. 调整通告

随着我们业务的发展，可能会调整“SCENPOP”提供的产品或服务。如调整后的产品或服务处理个人信息的目的、方式或范围发生变化，我们会再次向您告知，并根据适用法律的要求取得必要同意。

（二）设备权限调用情况

在您使用“SCENPOP”过程中，我们仅在实现具体功能所必要的范围内申请设备权限。请您知悉，我们不会默认开启您设备的权限，仅在您主动确认开启的情况下，“SCENPOP”才可能通过相应设备权限收集信息。“SCENPOP”可能调用的权限、调用目的及授权情况如下：

设备权限：网络；调用权限目的：连接网络；是否询问：由设备操作系统提示；是否可以关闭权限：可。

设备权限：相册；调用权限目的：由用户选择上传或保存图片、视频或其他素材；是否询问：是；是否可以关闭权限：可。

（三）我们如何使用您的个人信息

1.我们会根据本政策的约定并为实现我们的服务目的，对所收集的个人信息进行使用。

2.请您注意，您在使用我们提供的服务时提供的个人信息，除您删除、撤回同意或通过系统设置拒绝我们收集外，将在实现本政策所述目的所需的期间内使用。在您删除账户时，我们将停止使用并依据本政策及相关法律删除或匿名化处理您的个人信息。

3.我们可能会对我们提供的服务使用情况进行统计，并形成不包含任何身份识别信息的汇总统计信息，以用于产品开发、服务优化和安全保障。我们不会公开或向第三方提供可识别您个人身份的统计信息。

4.随着我们的产品与服务的升级迭代，我们可能会对本隐私政策描述的业务功能及对应收集使用的个人信息类型进行调整。当新功能或服务与我们当前提供的功能或服务相关时，收集与使用的个人信息将与原处理目的具有直接或合理关联。当我们要将您的个人信息用于本政策未载明的其他用途时，或基于特定目的收集而来的信息用于其他目的时，会更新本隐私政策并通过适当方式向您告知；依法需要取得同意的，我们会事先取得您的同意。

（四）其他规则

根据相关法律法规，以下情形中，我们可能会处理您的相关个人信息而无需征求您的授权同意：

(1) 与我们履行法律法规规定的义务相关的；

(2) 与国家安全、国防安全直接相关的；

(3) 与公共安全、公共卫生、重大公共利益直接相关的；

(4) 与刑事侦查、起诉、审批和判决执行等直接相关的；

(5) 出于维护个人信息主体或其他个人的生命、财产等重大合法权益但又很难得到本人授权同意的；

(6) 所涉及的个人信息是个人信息主体自行向社会公众公开的；

(7) 根据个人信息主体要求签订和履行合同所必需的；

(8) 从合法公开披露的信息中收集个人信息的，如合法的新闻报道、政府信息公开等渠道；

(9) 维护所提供产品或服务的安全稳定运行所必需的，如发现、处置产品或服务的故障；

(10) 法律、行政法规规定的其他情形。

二、我们如何保存您的个人信息

1.我们将在本政策载明的目的所需及法律法规要求的最短保存期限之内，保存您的个人信息。前述期限届满后，我们将对您的个人信息做删除或匿名化处理。

2.我们在提供“SCENPOP”服务过程中收集和产生的个人信息，将按照适用法律及本政策所述目的保存在必要的地点。除本政策另有说明外，我们不会将个人信息用于与服务无关的目的。

(1) 为提供服务、维护服务安全或履行法律义务所必需，依法向受托服务提供商传输信息；

(2) 获得您的明确授权，或根据适用法律允许的其他合法依据处理信息；

(3) 您主动要求获取境外服务，或您主动向我们提供需要跨境处理的信息。

针对以上情形，我们会确保依据本隐私政策以及相关法律，对您的个人信息提供与处理风险相适应的保护；依法需要采取跨境传输保障措施的，我们会先行落实。

三、我们如何使用Cookies

通过使用Cookies、本地存储或浏览器（或关联应用程序）提供的类似技术，我们向用户提供安全的服务体验。我们会在您的计算机或移动设备上存储通常包含标识符、站点名称以及一些号码和字符的本地记录（以下合称“Cookies”）。我们可能通过Cookies收集您的信息，并将信息用于以下用途：

安全类Cookies：Cookies可帮助我们保障产品和服务的安全和高效运转。当前版本不使用Cookies进行跨应用行为追踪。您可以通过设备或浏览器设置限制或清除相关存储，但相关操作可能导致登录状态或部分功能无法正常使用。

四、我们如何委托处理、共享、转让、公开披露您的个人信息

1. 委托处理

我们会委托第三方服务提供商处理我们所收集的您的个人信息，以便其为我们提供基础设施技术、内容存储、电子邮箱验证、安全维护、错误排查及客户支持等产品或技术支持。上述委托处理行为受本政策所声明目的约束，并且我们会通过合同或其他适当方式要求受托第三方采取相应保护措施并接受监督。

（1）服务端基础设施与内容存储

我们委托服务提供商提供服务器运行、内容存储、备份和安全保障。受托处理的信息限于运行“SCENPOP”所必要的账户、内容、配置和安全记录；处理目的是维持服务运行、保存用户内容、备份和保障安全。相关服务由我们的服务端接入，不通过客户端 SDK 申请设备权限。服务商名称、处理规则及变更情况以本政策说明和其公开的数据处理条款为准。

（2）电子邮箱验证服务

为发送注册、登录和安全验证邮件，我们会委托电子邮箱服务提供商处理完成验证所必要的电子邮箱地址和验证信息。该服务由我们的服务端接入，不通过客户端 SDK 申请设备权限；具体处理规则以邮件服务商公开的隐私政策或数据处理条款为准。

（3）网络与安全服务

为保障网络连接、账户安全、防止滥用和处置故障，我们会委托网络与安全服务提供商处理必要的网络信息、访问时间、访问路径和安全事件记录。该服务由我们的服务端接入，不通过客户端 SDK 申请设备权限；具体处理规则以相关服务商公开的隐私政策或数据处理条款为准。

2. 共享

(1)事先获得您明确的同意或授权，或您要求我们通过电子邮件或其他方式与第三方共享您的个人信息；

(2) 根据适用的法律法规规定，或按照政府主管部门、司法机关的强制性要求进行提供；

(3)与我们的关联公司共享：仅在实现本政策所述目的所必需时，我们才可能与关联公司共享最少必要的个人信息。关联公司只能按照本政策列明的目的、适用法律和我们的书面指示处理信息，不得用于本政策未说明的目的，并应采取与信息性质和风险相称的安全保护措施。

3. 转让

我们不会将您的个人信息出售给任何公司、组织和个人。在涉及合并、收购、资产转让或破产清算时，如涉及个人信息转让，我们会向您告知有关情况，并要求新的持有您个人信息的公司、组织继续受本政策的约束；否则，我们将要求其重新取得您的授权同意。

4. 公开披露

（1）您的昵称、头像及其他您选择公开的个人资料，以及您选择公开发布的创作内容，可能按照应用的发布状态和页面设置展示在“SCENPOP”首页或平台其他用户可访问的页面。公开范围以您发布时的选择和页面设置为准。取消公开或删除作品后，相关页面将停止展示；因缓存、备份、安全记录或依法保留，页面和系统可能在一段合理时间内保留副本。您应仅在自己的账户和获授权范围内管理和使用您的内容。

（2）除前款约定外，如确需公开披露您的个人信息，我们会取得您的同意或者满足法律规定的其他条件。

5.请注意，您在使用我们服务时自愿共享甚至公开的信息，可能会涉及您或他人的个人信息甚至个人敏感信息。请您谨慎共享或公开；如所涉信息包含他人个人信息，请您在共享或公开前取得他人同意。

6.请知悉，根据法律规定，若我们采取技术措施和其他必要措施处理个人信息，使得数据接收方无法重新识别特定个人且不能复原，经上述处理后的数据的共享、转让、公开披露无需另行向您通知并征得您的同意。

五、第三方SDK服务

本节说明当前版本客户端 SDK 的使用情况，以及应用商店等独立第三方服务。第三方 SDK 的具体信息收集和使用情况请以其运营方的隐私政策或相关声明为准。未来如实际接入其他第三方 SDK，我们会在启用前更新本节，并依法取得必要授权或同意。

1. 当前版本的客户端 SDK 情况

当前版本未接入用于广告、营销归因、消息推送、内容分享、用户画像或跨应用追踪的第三方客户端 SDK。操作系统、开发框架或应用商店为保障安装、运行和安全所提供的基础组件，不因本说明而被描述为用户画像或广告 SDK。

2. 应用商店等独立第三方服务

您可能通过应用商店下载、更新或管理“SCENPOP”。应用商店及相关服务提供方可能依据其自身隐私政策和服务条款独立处理相关信息，不受本政策控制。其处理目的、信息范围和保护措施以其公开说明为准；您可以查看相应应用商店提供的隐私信息。

3. 未来接入与变更

如未来实际接入新的客户端 SDK，或某项第三方服务发生个人信息处理目的、类型或方式的实质变化，我们会在启用前复核并更新本政策和应用内披露；依法需要取得同意的，我们会先向您告知并取得同意。我们不会把未实际启用的服务描述为正在处理您的信息。

如您对本节的 SDK 或第三方服务处理有疑问，可以通过本政策载明的联系方式联系我们。

六、 我们如何保护您的个人信息

我们非常重视个人信息安全，并采取一切合理可行的措施，保护您的个人信息：

1.我们采取与所处理个人信息性质、范围和风险相适应的数据保护技术与管理措施，例如访问控制、身份验证、数据加密、权限管理和员工访问控制等措施，以防止信息遭到未经授权的访问、披露、篡改、丢失或毁坏。

2.请您知悉，互联网环境并非百分之百安全。我们会尽力保护您发送给我们的信息；如因网络攻击、系统故障、通讯故障、设备故障、第三方服务瑕疵或其他超出我们合理控制范围的事件导致服务中断或信息受到影响，我们将在法律允许范围内承担责任，并及时采取合理措施减轻影响。本条不排除或限制依法不得排除或限制的责任。

3.在发生个人信息安全事件后，我们将按照法律法规的要求，及时向您告知：安全事件的基本情况和可能的影响、我们已采取或将要采取的处置措施、您可自主防范和降低风险的建议、对您的补救措施等。我们将及时将事件相关情况以应用内通知、电子邮件等适当方式告知您；难以逐一告知个人信息主体时，我们会采取合理、有效的方式发布公告。同时，我们还将按照监管机关要求报告个人信息安全事件的处置情况。

七、 您如何管理您的个人信息

在您使用“SCENPOP”期间，您可以通过相应页面提示或本隐私政策载明的方式联系我们，以访问、更正、删除您的个人信息，以及行使改变授权同意的范围与删除账户的权利。您的意见会及时得到处理。

1. 访问及更正您的个人信息

您可以通过应用页面或本隐私政策载明的方式查询、更正您的账户资料。如无法通过页面完成，可以通过本隐私政策载明的联系方式与我们联系，我们将及时响应您的请求。

2. 删除您的个人信息

在以下情形中，您可以通过本隐私政策载明的方式向我们提出删除个人信息的请求：

(1) 我们违反法律、行政法规或与您的约定收集、使用个人信息；

(2)我们违反法律、行政法规或与您的约定与第三方共享或转让您的个人信息，我们将立即停止共享、转让行为，并通知第三方及时删除；

(3)我们违反法律、行政法规规定或与您的约定，公开披露您的个人信息，我们将立即停止公开披露的行为，并发布通知要求相关接收方删除相应的信息；

(4)您不再使用我们的产品或服务，或您删除了账户，或我们终止服务及运营。

3. 改变您授权同意的范围

您可以通过设备权限设置或本隐私政策载明的方式与我们联系，以改变同意范围或撤回您的授权。

请您理解，“SCENPOP”可能需要开启部分权限并收集必要的个人信息才能实现相应功能。当您撤回同意时，我们将无法继续为您提供撤回同意所对应的服务，但不会影响此前基于您的授权而开展的个人信息处理活动，也不会影响依据其他合法依据进行处理的活动。

4. 删除账户

如果您希望删除您的账户，您可以打开“Me → Settings → Delete account”并按照页面提示提交请求，也可以通过本隐私政策载明的联系方式与我们联系。为保护账户安全，我们可能要求您通过注册电子邮箱完成身份核验。

您删除上述账户的行为是不可逆的，我们将停止为您提供产品或服务，不再为提供服务收集您的个人信息，并依据本政策及适用法律删除与您账户相关的个人信息或做匿名化处理。法律要求保留的信息除外。

5. 响应您的上述请求

如您无法按照上述方式行使权利，可以通过本隐私政策载明的联系方式与我们联系。为保障安全，我们可能会先要求您验证身份，然后再处理您的请求。我们将在收到您的请求后一个月内或适用法律法规规定的期限内作出答复；如适用法律允许延长，我们会告知原因和预计答复时间。

对于您合理的请求，我们原则上不收取费用，但对多次重复、明显缺乏依据、超出合理限度、需要不成比例的技术投入、给他人合法权益带来风险或客观上无法实现的请求，我们可以在适用法律允许的范围内收取合理费用或予以拒绝，并说明理由。

6. 响应情形的例外

在以下情形中，我们将无法响应您的请求:

(1) 与我们履行法律法规规定的义务相关的；

(2) 与国家安全、国防安全直接相关的；

(3) 与公共安全、公共卫生、重大公共利益直接相关的；

(4) 与刑事侦查、起诉、审判和执行判决等直接相关的；

(5) 我们有合理证据表明个人信息主体存在主观恶意或滥用权利的；

(6) 出于维护个人信息主体或其他个人的生命、财产等重大合法权益但又难以得到本人同意的；

(7) 响应个人信息主体的请求将导致个人信息主体或其他个人、组织的合法权益受到严重损害的；

(8) 涉及商业秘密或法律规定的其他情形的。

八、我们如何处理未成年人的个人信息

我们重视未成年人个人信息的保护。未成年人使用“SCENPOP”或向我们提供个人信息时，应由本人和父母或其他监护人共同阅读本隐私政策，并在适用法律要求的范围内取得监护人必要同意。是否需要监护人同意，以及同意的具体形式，取决于您所在地的适用规则、您的年龄、所处理个人信息的类型及服务的实际功能。

如您是未成年人的监护人，请关注您所监护的未成年人是否在取得适用法律要求的授权后使用我们的产品或服务。监护人可以通过本隐私政策载明的联系方式，要求查阅、更正或删除依法可处理的未成年人个人信息，并撤回此前依法作出的同意。因网络安全、防欺诈、争议处理或履行法定义务等需要保留信息的，我们会仅在必要期限内保留。若我们发现在需要监护人同意而未取得同意的情况下处理了未成年人个人信息，将依法删除相关信息或采取其他适当措施。

未成年人使用本服务时，我们仅处理实现实际功能所必需的个人信息。监护人依法享有查阅、更正、删除个人信息和撤回同意的权利；相关请求及身份核验应保持在必要且适度的范围内。如未成年人停止使用服务，或依法需要删除个人信息，我们会按隐私政策停止展示并按保存期限删除或匿名化处理；依法必须保留的信息除外。

九、本隐私政策如何更新

我们可能会不时更新本隐私政策。更新时，我们会修改政策顶部的更新时间，并在本页面公布最新版本；旧版本会按合理期限存档，供您查阅。如本政策发生重大变更，我们会采取合理措施，在变更生效前以醒目方式发布通知，或通过应用内页面、登录页面、注册电子邮箱等方式直接通知您。依法需要重新取得同意时，我们会另行征得同意。未经您的明确同意，我们不会在缺乏合法依据的情况下削减您依照本隐私政策所享有的权利。

本隐私政策所指的重大变更包括但不限于：我们的服务模式发生重大变化；个人信息共享、转让或公开披露的主要对象发生变化；您参与个人信息处理方面的权利及其行使方式发生重大变化；我们的联系方式及投诉渠道发生变化；个人信息保护影响评估表明存在高风险时。

我们还会将本隐私政策的旧版本存档，供您查阅。

十、如何联系我们

如果您对本政策或个人信息保护有任何问题，您可以将您的书面疑问、意见或建议通过以下联系方式反馈至客服部门：

隐私政策网址：https://scenpop.com/support/privacy.html

电子邮箱：contact@scenpop.com

地址：香港观塘励业街46号天辉工业大厦1楼16室

一般情况下，我们将在收到请求后一个月内或适用法律法规规定的期限内回复。如果您对我们的回复不满意，特别是您认为我们的个人信息处理行为损害了您的合法权益，您还可以向您所在地或我们所在地的数据保护监管机构提出投诉，例如英国信息专员办公室或加拿大隐私专员办公室。此外，任何关于本政策内容或其执行产生的争议，您可以依法向有管辖权的法院或监管机构提出。本隐私政策受香港特别行政区法律管辖，但该法律选择不影响您依照英国、加拿大或您惯常居所地强制性法律享有的消费者和个人信息保护权利。

SCENPOP · PRIVACY POLICY

SCENPOP Privacy Policy

Last updated: 29 October 2026

Effective date: 29 October 2026

Privacy Policy Notice

Welcome to SCENPOP. We take the protection of your personal information and privacy seriously. This Privacy Policy explains how we collect, use and store personal information when you use SCENPOP, and the rights available to you. The latest version is published at https://scenpop.com/support/privacy.html and shows its update date. If we make a material change, we will notify you through reasonable channels, such as an in-app page, the sign-in page or the email address registered for your account, before the change takes effect or at another time required by applicable law. Where the law requires us to obtain consent again, we will do so.

1. To provide the app, we collect, use and store the information that is necessary for the purposes described in this Policy.
2. We request a device permission only when it is necessary for a specific feature and only on the basis of your express authorisation. Examples include access to your photo library. You may refuse or withdraw permission. The permission, purpose and timing of the request are described in the Device Permissions section and in the operating-system prompt.
3. Subject to applicable law, you may access, correct or delete your personal information, withdraw consent, make a complaint or report, change your privacy settings and request deletion of your account.
4. We use security measures appropriate to the nature, scope and risks of the personal information we process.
5. If you are a minor, you and your parent or guardian should read this Policy together. You should use the service or provide personal information only after obtaining any consent required by applicable law.

SCENPOP Privacy Policy

SCENPOP TECHNOLOGY LIMITED, whose address is Room 16, 1/F, Tin Fai Industrial Building, 46 Lai Yip Street, Kwun Tong, Hong Kong (referred to as "we", "us" or "our"), operates the SCENPOP mobile application (referred to as "SCENPOP" or the "service"). When you use SCENPOP, we collect, use and retain personal information as described in this Policy. We will process personal information in accordance with this Policy.

Please read this Policy carefully before using SCENPOP and make sure you understand its terms, including any terms that limit or exclude liability. We have tried to explain the relevant terms clearly and concisely and have highlighted matters that may materially affect your rights or interests.

You should understand that we will collect, use, process and store your personal information under this Policy only after you have confirmed and agreed to it. If you do not agree, you will not be able to register for or use SCENPOP. Confirming your agreement on the registration or first-use page means that you understand and agree to this Policy. This Policy applies only to information collected by us through SCENPOP. It does not apply to information that an independent third party collects under its own privacy policy.

Contents

1. How we collect and use your personal information
2. How we retain your personal information
3. How we use Cookies
4. How we entrust, share, transfer or publicly disclose personal information
5. Third-party SDK services
6. How we protect your personal information
7. How you can manage your personal information
8. How we process minors' personal information
9. How we update this Policy
10. How to contact us

1. How we collect and use your personal information

1.1 How we collect personal information

1.1.1 Registration and sign-in

When you register for a SCENPOP account, we need your email address and the verification code sent to your email. We use this information to create and verify your account and protect account security. If you do not provide it, we cannot create an account or provide features that require sign-in.

After signing in, you may choose to add or update basic profile information, such as an avatar and nickname, under Settings - Profile. We use that information to display your profile in the app and support content creation. Choosing not to provide optional profile information will not prevent you from using the basic functions of SCENPOP.

1.1.2 App operation

To operate the service and protect accounts and the network environment, we collect the information needed to provide the service, including IP address, access date and time, SCENPOP client version and necessary security logs. For these purposes, we do not collect device model, device identifiers or advertising identifiers, and we do not use such information for advertising profiles or cross-app tracking.

1.1.3 Network and service security

To protect network connections and account security, we process necessary IP address, access date and time, access path and security-event logs. We use this information only to maintain stability, identify unusual access, prevent abuse and resolve faults. We do not use it to collect device model, device identifiers or advertising identifiers.

1.1.4 Changes to the service

We may change the products or features offered through SCENPOP as our business develops. If a change affects the purpose, method or scope of personal-information processing, we will provide a further notice and obtain any consent required by applicable law.

1.2 Device permissions

We request device permissions only to the extent necessary for a specific feature. We do not enable a permission by default. SCENPOP may process information through a device permission only after you actively grant it.

1.3 How we use personal information

1. We use personal information for the purposes described in this Policy and to provide the service.
2. Unless you delete information, withdraw consent or refuse collection through your device settings, we use personal information for the period needed to achieve the purposes described in this Policy. If you delete your account, we will stop using the information and delete or anonymise it in accordance with this Policy and applicable law.
3. We may produce aggregated statistics that do not identify any individual and use them for product development, service improvement and security. We will not disclose statistics that identify you to the public or to a third party.
4. If we introduce a feature that changes the information we collect or the purposes for which we use it, the new processing will have a direct or reasonable connection to the original purpose. If we use personal information for a purpose not described in this Policy, we will update this Policy and provide notice; where consent is required, we will obtain it in advance.

1.4 Other legal grounds

Where permitted by applicable law, we may process personal information without consent when the processing is:

1. necessary for us to comply with a legal obligation;
2. directly related to national security or national defence;
3. directly related to public security, public health or a major public interest;
4. directly related to a criminal investigation, prosecution, trial or the enforcement of a judgment;
5. necessary to protect the vital or other major lawful interests of the individual or another person where consent cannot reasonably be obtained;
6. related to personal information that the individual has made public;
7. necessary to enter into or perform a contract at the individual's request;
8. based on lawfully public information, such as lawful news reporting or government disclosure;
9. necessary to maintain the secure and stable operation of the service, including detecting and resolving faults; or
10. otherwise permitted by law.

2. How we retain your personal information

We retain personal information only for the shortest period needed for the purposes described in this Policy or required by law. After that period, we delete or anonymise it.

We store personal information in locations that are necessary for the service and consistent with applicable law and this Policy. We do not use personal information for purposes unrelated to the service. We may transfer information outside your location only where necessary to provide the service, maintain security or comply with law; with your authorisation or another lawful basis; or at your request. Where cross-border transfer safeguards are required by law, we will implement them before the transfer.

3. How we use Cookies

We use Cookies, local storage and similar technologies to provide a safe service. These technologies may store a local record containing an identifier, site name, numbers or characters on your computer or mobile device. We may use Cookies for security purposes, including protecting the service and keeping it available. The current version does not use Cookies for cross-app behavioural tracking. You can restrict or clear storage through your device or browser settings, but this may affect sign-in status or some features.

4. How we entrust, share, transfer or publicly disclose personal information

4.1 Service providers processing information on our behalf

We may appoint third-party service providers to process personal information for infrastructure, content storage, email verification, security, troubleshooting and customer support. These providers act only for the purposes described in this Policy. We require them by contract or other appropriate measures to protect information and remain subject to oversight.

4.1.1 Server infrastructure and content storage

We appoint service providers to operate servers, store content, provide backups and maintain security. The information processed is limited to account, content, configuration and security records necessary to operate SCENPOP. These services are integrated on our servers and do not request device permissions through a client SDK. Provider details, processing terms and changes are governed by this Policy and the provider's public data-processing terms.

4.1.2 Email verification

We appoint an email service provider to send registration, sign-in and security verification messages. The provider processes the email address and verification information necessary to complete verification. The service is integrated on our servers and does not request device permissions through a client SDK. Its processing is governed by its public privacy policy or data-processing terms.

4.1.3 Network and security services

We appoint network and security service providers to protect connections and accounts, prevent abuse and resolve faults. They process the necessary network information, access time, access path and security-event records. The service is integrated on our servers and does not request device permissions through a client SDK. Their processing is governed by their public privacy policy or data-processing terms.

4.2 Sharing

We may share personal information only:

1. with your express consent or authorisation, or at your request;
2. where required by applicable law or a mandatory request from a competent government or judicial authority; or
3. with our affiliates where necessary for the purposes described in this Policy and limited to the minimum information necessary. Affiliates may process information only for the purposes stated in this Policy, in accordance with applicable law and our written instructions, and must use security measures appropriate to the nature and risks of the information.

We do not sell your personal information.

4.3 Transfer

If a merger, acquisition, asset transfer or insolvency proceeding involves a transfer of personal information, we will tell you and require the recipient to remain subject to this Policy. If that is not possible, we will require the recipient to obtain your authorisation again.

4.4 Public disclosure

Your nickname, avatar, other profile information you choose to make public, and content you choose to publish may appear on SCENPOP pages available to other users, according to the publishing options and page settings you select. If you stop publishing or delete content, it will no longer be displayed on the relevant page, although a copy may remain in caches, backups, security records or records that must be retained by law for a reasonable period. You should manage and use content only within your account and the permissions granted to you.

Apart from the situations described above, we will publicly disclose personal information only with your consent or where another condition under applicable law is satisfied. Information you voluntarily share or publish may include personal information about you or others. Please share carefully and obtain consent before publishing another person's information.

Where we take technical and other necessary measures so that a recipient cannot re-identify an individual, applicable law may allow the resulting information to be shared, transferred or disclosed without further notice or consent.

5. Third-party SDK services

This section explains the client SDKs used in the current version and independent third-party services such as app stores. The operator's privacy policy or notice governs its own processing. If we enable another third-party SDK in the future, we will update this section before it is used and obtain any consent required by law.

5.1 Client SDKs in the current version

The current version does not include a third-party client SDK for advertising, marketing attribution, push notifications, content sharing, user profiling or cross-app tracking. Basic components supplied by the operating system, development framework or app store for installation, operation and security are not described here as user-profiling or advertising SDKs.

5.2 Independent third-party services such as app stores

You may download, update or manage SCENPOP through an app store. The app store and related providers may independently process information under their own privacy policies and terms. We do not control that processing. Its purposes, information types and safeguards are described in the provider's public information.

5.3 Future integrations and changes

If we add a client SDK or if a third-party service makes a material change to the purpose, type or method of processing, we will review and update this Policy and the in-app notice before activation. Where consent is required, we will explain the change and obtain consent first. We will not describe an inactive service as currently processing your information.

6. How we protect your personal information

We use technical and organisational measures appropriate to the nature, scope and risks of the information, including access controls, authentication, encryption, permission management and restrictions on employee access. These measures are designed to prevent unauthorised access, disclosure, alteration, loss or destruction.

The internet is not completely secure. We will take reasonable steps to protect information you send to us. If a network attack, system failure, communications failure, device failure, third-party service defect or another event outside our reasonable control disrupts the service or affects information, we will take reasonable steps to reduce the impact and accept responsibility to the extent required by law. Nothing in this Policy excludes or limits liability that cannot lawfully be excluded or limited.

If a personal-information security incident occurs, we will promptly provide the information required by law, including the nature and possible impact of the incident, the measures taken or planned, steps you can take and available remedies. We will provide notice through appropriate channels such as an in-app notice or email. If individual notice is not practicable, we will publish a reasonable and effective notice. We will also report the incident as required by regulators.

7. How you can manage your personal information

While using SCENPOP, you may access, correct or delete personal information and change or withdraw consent through the relevant app pages or the contact details in this Policy. We will handle your request promptly.

7.1 Access and correction

You may access and correct your account information through the app or the contact details in this Policy. If the app does not provide the relevant control, contact us and we will respond promptly.

7.2 Deletion

You may request deletion where:

1. we collected or used personal information in violation of law or our agreement with you;
2. we shared or transferred personal information in violation of law or our agreement with you;
3. we publicly disclosed personal information in violation of law or our agreement with you; or
4. you no longer use the service or have deleted your account, or we have ended the service.

Where a ground above applies, we will stop the relevant processing and take appropriate steps to notify recipients to delete the information.

7.3 Changing or withdrawing consent

You may change the scope of consent or withdraw authorisation through your device permission settings or by contacting us. Withdrawing consent may mean that we can no longer provide the feature that depends on it, but it does not affect processing that occurred lawfully before withdrawal or processing based on another lawful ground.

7.4 Deleting your account

To delete your account, open Me - Settings - Delete account and follow the instructions, or contact us using the details in this Policy. To protect your account, we may require verification through the email address registered to your account.

Account deletion is irreversible. We will stop providing the service, stop collecting personal information for the service and delete or anonymise information associated with the account in accordance with this Policy and applicable law, except where retention is required by law.

7.5 Responding to requests

If you cannot use the controls described above, contact us using the details in this Policy. We may first verify your identity. We will respond within one month after receiving the request or within another period required by applicable law. If applicable law permits an extension, we will explain the reason and expected response time.

We normally do not charge for reasonable requests. Where permitted by law, we may charge a reasonable fee or refuse a request that is manifestly unfounded, excessive, disproportionately technical, risks the rights of others or is objectively impracticable, and we will explain our reasons.

7.6 Exceptions

We may be unable to respond to a request where it is:

1. necessary for compliance with a legal obligation;
2. directly related to national security or national defence;
3. directly related to public security, public health or a major public interest;
4. directly related to a criminal investigation, prosecution, trial or enforcement of a judgment;
5. supported by reasonable evidence of bad faith or abuse of rights;
6. necessary to protect the vital or other major lawful interests of the individual or another person where consent cannot reasonably be obtained;
7. likely to cause serious harm to the lawful rights of the individual or another person or organisation; or
8. subject to a trade secret or another exception under applicable law.

8. How we process minors' personal information

We protect minors' personal information. A minor and their parent or guardian should read this Policy together and obtain any consent required by law before the minor uses SCENPOP or provides personal information. Whether guardian consent is required and the form of consent depend on applicable local rules, the minor's age, the information processed and the actual features of the service.

A guardian may contact us to access, correct or delete a minor's personal information where permitted by law, withdraw consent, or raise a concern. We will verify requests in a proportionate manner and respond in accordance with law. If we learn that we processed a minor's information without consent where consent was required, we will stop the processing and delete or otherwise handle the information as permitted by law. We may retain information only for the necessary period where required for security, fraud prevention, dispute resolution or legal compliance.

We process only personal information necessary for the actual features used by a minor. A guardian may exercise applicable rights to access, correction, deletion and withdrawal. Where a minor stops using the service or information must be deleted under applicable law, we will stop displaying it and delete or anonymise it within the applicable retention period, except where retention is required by law.

9. How we update this Policy

We may update this Policy from time to time. We will change the update date at the top and publish the latest version on this page. We will archive previous versions for a reasonable period so they can be reviewed. For material changes, we will provide prominent notice before the change takes effect or notify you through the app, the sign-in page, the registered email address or another reasonable channel. Where the law requires fresh consent, we will obtain it. We will not reduce rights you have under this Policy without a lawful basis and any consent required by law.

Material changes include a material change to our service model; a change to the main recipients of shared, transferred or publicly disclosed information; a material change to your rights or how you exercise them; a change to our contact or complaint channels; or a high-risk finding in a personal-information impact assessment.

10. How to contact us

If you have a question or complaint about this Policy or personal-information protection, contact us:

Privacy Policy: https://scenpop.com/support/privacy.html

Email: contact@scenpop.com

Address: Room 16, 1/F, Tin Fai Industrial Building, 46 Lai Yip Street, Kwun Tong, Hong Kong

We normally respond within one month after receiving a request or within the period required by applicable law. If you are not satisfied with our response, particularly if you believe our processing has affected your lawful rights, you may complain to a data-protection regulator, such as the UK Information Commissioner's Office or the Office of the Privacy Commissioner of Canada. You may also bring a claim before a court or regulator with jurisdiction. This Policy is governed by the laws of the Hong Kong Special Administrative Region, but that choice does not affect mandatory consumer or data-protection rights available to you in the United Kingdom, Canada or your habitual residence.