生效日期： 2026 年 6 月 15 日
最近更新日期：2026 年 6 月 15 日
适用产品：Flyalbum 网站、移动应用、PC 端、管理后台及相关服务
服务提供方：影像科技有限公司，注册地址为香港火炭黃竹洋街14至18号华生大厦A座15楼01室A133。
隐私联系邮箱：event@ourwill.com.cn
感谢您使用 Flyalbum。本隐私政策说明，当您访问或使用 Flyalbum 网站、移动应用、PC 端软件、管理后台以及我们提供的照片直播、云相册、AI 修图、人脸检索、分享协作和相关技术服务时，我们如何收集、使用、披露、存储、保护和删除您的个人信息。
本政策适用于 Flyalbum 直接向用户提供服务的场景，也适用于摄影师、活动主办方、企业客户或其他合作方通过 Flyalbum 创建相册、上传照片或邀请终端用户访问相册的场景。在企业客户或活动主办方代表其参会者、嘉宾、员工、客户或其他人员使用 Flyalbum 的情况下，该客户或主办方通常是相关个人信息处理的主要决定方，并应负责取得必要授权、提供现场告知并响应其终端用户请求。Flyalbum 将按照本政策、服务协议以及与客户之间的合同安排处理相关数据。
重要提示。 如果您不同意本政策，请停止使用本服务。对于人脸识别、AI 美颜、人像检索、证件识别、精确定位、营销推送等可能涉及敏感信息或超出用户合理预期的数据处理，我们会在产品界面或客户实施流程中要求提供显著告知并取得必要同意。
一、我们收集的信息我们只会在实现产品功能、履行合同、保障安全、遵守法律或取得您同意所必要的范围内收集信息。不同产品版本、设备系统、权限设置和客户配置会影响实际收集范围；Google Play 数据安全表单、应用内权限说明和本政策应保持一致。
| 信息类别 | 示例 | 收集场景与说明 |
|---|---|---|
| 账号与身份信息 | 姓名、昵称、头像、邮箱、手机号、登录凭证、企业或团队归属、账号角色 | 当您注册账号、登录、加入团队、创建相册、开通付费套餐、使用双重验证或接受企业管理员邀请时收集。 |
| 联系与沟通信息 | 邮件地址、联系电话、客服工单、反馈内容、通知偏好 | 当您联系我们、订阅或退订通知、申请售后支持、提交投诉或举报时收集。 |
| 支付与交易信息 | 订单号、套餐类型、购买记录、账单状态、发票信息、收货或开票地址 | 当您购买付费服务、升级套餐、申请开票或退款时收集。银行卡号、支付账号等敏感支付信息通常由支付服务商直接处理，Flyalbum 不主动保存完整银行卡信息。 |
| 您上传或生成的内容 | 照片、视频、文件、相册名称、相册封面、评论、标签、分享链接、下载记录、操作记录 | 当您上传、管理、分享、下载或协作处理内容时收集，用于照片直播、云相册展示、备份、分享、协作和内容安全审核。 |
| 相册与协作元数据 | 文件大小、上传时间、拍摄时间、相册权限、协作人员、访问记录、处理状态 | 用于实现相册管理、排序、权限控制、协作审计、故障排查和安全风控。 |
| 人像与生物特征相关信息 | 人脸特征模板、人体区域、关键点、参考图匹配结果、人脸检索结果、AI 美颜处理结果 | 仅在您或客户主动启用人脸检索、找图、AI 美颜、人像融合等功能，并上传含人像的照片或视频时处理。该类信息属于敏感信息，我们不会出售生物特征信息，也不会在未取得必要同意的情况下将其用于训练通用人脸识别模型。 |
| 图文识别信息 | 证件图片、证件字段、文字识别结果、车牌或物体识别结果 | 仅在您主动上传图片并使用 OCR、证件识别、车牌识别、物体识别等功能时处理。身份证件、银行卡、驾照等信息属于敏感信息，请在确认必要并取得相关主体授权后使用。 |
| 设备与日志信息 | IP 地址、设备类型、操作系统版本、浏览器类型、应用版本、崩溃日志、请求时间、页面来源、网络状态、设备广告标识符（如适用） | 用于登录状态维护、版本适配、故障排查、安全风控、反作弊、统计分析和服务优化。我们不会为了广告目的使用不可重置的永久设备标识符。 |
| 位置信息 | 基于 IP 推断的大致地区；经系统授权后的精确定位（如产品实际启用） | 默认仅基于 IP 地址推断大致地区，用于安全风控、内容分发和故障排查。除非产品功能明确需要且您主动授权，我们不会收集 GPS、蓝牙、Wi‑Fi 热点或基站等精确定位信息。 |
| Cookie 与类似技术 | 登录 Cookie、偏好设置、统计分析标识、像素标签 | 用于保持登录、记住偏好、统计访问、分析性能、改进体验和进行合规推广。您可通过浏览器或系统设置管理非必要 Cookie。 |
| 未注册访问者邮箱 | 访问公开或受限相册时主动填写的邮箱 | 未注册用户如在人脸找图、照片推送或下载提醒中主动填写邮箱，我们仅用于发送对应相册的照片、视频或服务通知。填写邮箱不等于注册账号，我们不会将其与其他账号信息绑定，也不会用于无关营销，除非您另行同意。 |
我们不会在无必要的情况下收集通讯录、短信、通话记录、设备上已安装应用列表或后台精确定位信息。若未来产品确需调用相机、相册、麦克风、定位、通知等系统权限，我们会在权限申请前说明用途，并由您通过系统授权决定是否开启；拒绝授权通常只会影响相关功能，不影响其他基础功能。
二、我们如何使用信息我们使用个人信息的目的应当与用户合理预期一致，并限制在本政策披露的范围内。若需要将个人信息用于未披露的新目的，我们会在使用前更新告知并在法律要求的情况下征得您的同意。
| 使用目的 | 具体说明 |
|---|---|
| 提供、维护和履行服务 | 创建和管理账号、创建相册、上传与展示照片视频、生成缩略图、提供下载、分享、协作、AI 修图、人脸检索、客户管理后台、PC 端同步和技术支持。 |
| 完成交易和客户服务 | 处理订单、订阅、发票、售后、退款申请、服务通知、客服工单、投诉举报和版权通知。 |
| 安全、风控和防滥用 | 识别异常登录、欺诈、垃圾信息、恶意爬取、违规内容、侵权行为、安全漏洞和系统故障，保护 Flyalbum、用户、客户和公众权益。 |
| 内容审核和合规治理 | 通过自动化工具和人工复核识别违法、侵权、色情、暴力、恐怖主义、儿童性剥削、恶意软件、垃圾广告或其他违反协议的内容。 |
| 产品分析和改进 | 分析功能使用情况、性能表现、崩溃原因、用户体验和服务质量，以改进产品设计、稳定性和可用性。 |
| AI 功能实现 | 在用户或客户主动启用并授权的范围内，处理照片、视频、人像特征或图像内容，以实现人脸找图、参考图匹配、AI 美颜、图文识别和类似功能。 |
| 通知与沟通 | 发送账号安全提醒、服务变更、订单通知、活动通知、功能更新、系统维护、政策更新和您订阅的营销信息。您可随时退订营销信息。 |
| 法律合规和权益保护 | 响应合法政府、司法或监管请求，执行协议，处理争议，保存必要记录，防止损害或追究违法违规责任。 |
Flyalbum 可能为活动主办方、摄影师、企业客户和终端用户提供人脸检索、人脸找图、AI 美颜、人像融合、参考图匹配等功能。此类功能可能涉及 生物特征信息 或敏感个人信息。我们将采取更高标准处理此类信息。
在启用人脸识别或相关 AI 功能前，上传方、活动主办方或企业客户应当向相关人员提供清晰、显著的告知，说明收集的生物特征信息类型、使用目的、保存期限、删除方式和第三方处理情况，并在适用法律要求时取得书面或可验证的同意。对于美国伊利诺伊州、得克萨斯州、华盛顿州以及其他有生物识别专项法规的地区，客户应根据当地法律履行额外通知、授权、保留计划和销毁要求。
Flyalbum 对人脸特征的处理限于实现用户或客户启用的特定功能，例如在同一相册内匹配同一人物的照片、根据参考图查找照片、生成 AI 美颜或人像处理结果。除非获得您的单独明确同意或数据已进行不可识别化处理并符合法律要求，我们不会将可识别的人脸特征用于训练通用人脸识别模型、出售、出租或用于与本服务无关的广告定向。
人脸特征和相关匹配结果的保存期限以实现相册功能所需为限。通常情况下，当相册被删除、客户关闭人脸识别功能、用户撤回同意或账号删除完成后，我们会删除或不可逆匿名化相关人脸特征；但为安全、纠纷、审计或法律合规目的而必须保留的记录除外。对于适用生物识别专项法规的地区，我们会在目的实现、授权撤回或最后一次互动后按照法律要求及时销毁相关生物特征数据。
四、我们如何共享、委托处理或披露信息我们不会出售您的个人信息或个人敏感信息。我们仅在以下必要场景中共享或委托处理信息，并要求接收方采取适当的保密和安全措施。
| 接收方类型 | 共享或委托处理目的 |
|---|---|
| 云服务、存储、CDN、短信、邮件、客服、支付、数据分析和安全服务商 | 为提供基础设施、内容分发、通知发送、支付处理、技术支持、故障排查、反欺诈和统计分析所必需。 |
| 活动主办方、企业客户、团队管理员和协作成员 | 当您加入团队、访问客户创建的相册或参与协作时，管理员或客户可能查看、管理、导出、删除或限制其控制范围内的数据。 |
| 第三方应用或 API 对接方 | 仅在您、客户或管理员主动授权对接时共享必要数据。第三方对数据的后续处理受其自身条款和隐私政策约束。 |
| 关联公司 | 在统一账号、技术支持、基础设施、安全合规、客户服务和业务运营所需范围内共享。 |
| 法律、监管和权益保护场景 | 根据适用法律、法院命令、政府或监管请求，或为调查违法违规、保护用户安全、维护 Flyalbum 合法权益而披露必要信息。 |
| 并购、重组或资产转让 | 如发生合并、收购、融资、破产清算或资产转让，个人信息可能作为交易资产的一部分被转移。我们会要求新的接收方继续受本政策约束，并在法律要求时通知您。 |
第三方 SDK 或服务商的数据收集和共享情况应与 Google Play 数据安全表单、本政策以及 App 实际行为保持一致。若第三方 SDK 默认收集个人或敏感数据，Flyalbum 会评估其合规性并在必要时提供显著披露和同意机制。
五、国际传输与存储地点Flyalbum 的主要服务器部署在新加坡，并可能根据客户选择、访问地区、云服务供应商节点或业务需要，将数据存储或处理于新加坡、美国、欧洲经济区或其他国家和地区。不同司法辖区的数据保护法律可能不同，但我们会通过合同、访问控制、加密传输、最小权限、审计和其他合理措施保护个人信息。
若适用法律要求跨境传输评估、标准合同条款、用户同意或其他合规机制，我们会依据相关法律和客户协议履行相应要求。企业客户和活动主办方在向 Flyalbum 上传其控制的数据前，应确认其跨境传输安排具有合法依据。
六、信息安全措施我们采用合理的技术和组织措施保护个人信息，包括 HTTPS 加密传输、访问权限控制、账号双重验证、日志审计、漏洞检测、静态加密、备份机制、异常登录提醒、内容安全检测和员工保密管理。对于人脸特征、证件图像、支付相关记录等敏感信息，我们会采用更严格的访问控制和安全隔离措施。
互联网服务无法保证绝对安全。请您妥善保管账号、密码、验证码和相册访问链接，不要向无关人员公开密码相册、管理后台或团队账号权限。如发现账号异常或数据泄露风险，请立即通过 event@ourwill.com.cn 联系我们。
七、数据保留、删除与账号注销我们仅在实现本政策所述目的所需期限内保留个人信息，除非法律、监管、税务、会计、争议解决、安全审计或协议履行要求更长保留期限。具体保留期限取决于信息类型、账号状态、客户配置、法律要求和安全需要。
| 数据类型 | 一般保留规则 |
|---|---|
| 账号资料 | 在账号存续期间保留；账号注销完成后删除或匿名化，法律要求保留的除外。 |
| 相册内容和文件 | 在相册或账号存续期间保留；由上传方、管理员或用户删除后，通常在合理期限内从生产系统删除，并在备份系统中按备份周期覆盖。 |
| 人脸特征和 AI 处理数据 | 在实现相册人脸检索或 AI 功能所需期间保留；关闭功能、删除相册、撤回同意或账号删除后删除或匿名化，法律要求保留的除外。 |
| 交易、发票和支付记录 | 按税务、财务和审计要求保留必要期限。 |
| 安全日志和风控记录 | 为安全、反欺诈、故障排查和争议处理保留合理期限。 |
| 客服、投诉和版权记录 | 为处理请求、证明履约、合规审计和争议解决保留合理期限。 |
如果您在 Flyalbum App 内创建账号，您可以通过 App 内“设置—账号与安全—删除账号” 发起账号删除请求。我们会在验证身份后处理请求。为防止误删，账号删除可能设置合理冷静期；如原规则为 15 天冷静期，则冷静期结束后我们会启动删除流程。备份系统中的数据可能因备份覆盖周期存在延迟，但不会再用于日常业务展示。
账号删除后，我们将删除或匿名化与账号关联的个人信息；但为法律合规、税务会计、交易记录、安全防护、反欺诈、争议处理、履行协议或保护合法权益而必须保留的信息除外。若您通过企业客户、活动主办方或摄影师相册提交删除请求，我们可能需要将请求转交相应客户处理，或在其授权范围内协助完成。
八、您的权利与选择根据您所在司法辖区的法律，您可能有权访问、更正、删除、导出、限制处理、反对处理、撤回同意、选择退出营销或定向广告，以及投诉个人信息处理行为。您可通过账号设置、相册权限设置、系统权限设置或 event@ourwill.com.cn 行使相关权利。
如果您位于美国某些州，例如加利福尼亚、弗吉尼亚、科罗拉多、康涅狄格或犹他州，您可能享有州隐私法下的额外权利。Flyalbum 不会出售个人信息。若未来涉及“共享”个人信息用于跨情境行为广告或使用敏感个人信息超出必要目的，我们会提供适当的选择退出机制或限制使用机制。
若您位于欧洲经济区、英国或瑞士，我们处理个人信息的法律依据可能包括履行合同、取得同意、遵守法律义务、保护重大利益，以及基于安全、服务改进、客户支持、防欺诈和业务运营的合法利益。您有权向当地数据保护机构投诉。
九、Cookie、广告标识符与营销通信我们使用必要 Cookie 保障登录、账号安全、相册访问和基础功能运行。我们也可能使用分析 Cookie 或类似技术了解使用情况、衡量性能和改进服务。您可以通过浏览器设置禁用或清除非必要 Cookie，但部分功能可能无法正常使用。
如果 Flyalbum 在 Android 设备上使用 Android Advertising ID 或类似可重置广告标识符，我们仅会在合规范围内用于广告归因、频次控制、统计分析或防欺诈，并尊重用户的广告个性化选择。我们不会将广告标识符与不可重置的永久设备标识符进行广告目的关联。
您注册账号或主动订阅后，我们可能向您发送服务通知、产品更新、活动信息或营销邮件。服务性通知通常与账号、安全、订单或系统运行相关，无法完全关闭；营销信息可通过邮件中的“取消订阅”链接、账号通知设置或联系我们退订。
十、公开分享与第三方链接Flyalbum 支持公开相册、密码相册、私密相册和团队协作等权限模式。公开相册中的照片、视频、评论、昵称、头像和其他公开内容可能被其他访问者查看、下载、转发、截图或二次传播。请在分享前确认内容敏感程度、权限设置以及已取得相关人员授权。
本服务可能包含跳转至第三方网站、支付渠道、社交媒体或第三方工具的链接。第三方服务由其自身条款和隐私政策约束，Flyalbum 不控制其数据处理行为。请在使用第三方服务前阅读其隐私政策。
十一、儿童与未成年人Flyalbum 主要面向成年人、摄影师、企业和活动主办方，不面向 13 周岁以下儿童提供服务，也不故意收集 13 周岁以下儿童的个人信息。未满 18 周岁但已达到其所在地区数字同意年龄的用户，应在父母或法定监护人同意和监督下使用本服务。
如果活动相册、学校活动、家庭活动或其他场景可能包含未成年人照片，上传方或活动主办方应确保已经取得父母或监护人的必要授权，并根据适用法律提供告知和保护措施。若您认为我们在未经授权的情况下收集了儿童个人信息，请通过 event@ourwill.com.cn 联系我们，我们会尽快核查并删除相关信息。
十二、政策更新我们可能因产品功能、法律法规、Google Play 政策、业务运营或安全要求更新本政策。重大更新包括服务主体、数据类型、使用目的、共享对象、用户权利、跨境传输、账号删除机制或敏感信息处理方式的重大变化。重大更新时，我们会通过官网、App 内通知、邮件或其他适当方式提示您。更新后的政策将在公布时或通知中载明的日期生效。
十三、联系我们如您对本政策、个人信息处理、账号删除、数据访问、更正、导出、投诉或撤回同意有任何问题，请通过以下方式联系我们：
隐私联系邮箱：event@ourwill.com.cn
公司名称：影像科技有限公司
注册地址：香港火炭黃竹洋街14至18号华生大厦A座15楼01室A133
为了保护账号安全，我们可能需要验证您的身份后再处理请求。请在邮件中说明您的姓名、联系方式、账号邮箱或手机号、相册链接、请求类型和具体诉求。我们会在适用法律要求的期限内回复。
Effective Date: June 15, 2026
Last Updated: June 15, 2026
Applicable Products: Flyalbum website, mobile application, PC client, admin console, and related services
Service Provider: AIVISION TECHNOLOGY LIMITED, registered at Unit A133, Room 01, 15/F, Block A, Wah Sang Building, 14–18 Wong Chuk Yeung Street, Fo Tan, Hong Kong.
Privacy Contact Email: event@ourwill.com.cn
Thank you for using Flyalbum. This Privacy Policy explains how we collect, use, disclose, store, protect, and delete your personal information when you access or use the Flyalbum website, mobile application, PC client, admin console, as well as our photo live-streaming, cloud album, AI retouching, facial recognition, sharing and collaboration, and related technical services.
This policy applies to scenarios where Flyalbum provides services directly to users, as well as scenarios where photographers, event organizers, enterprise clients, or other partners create albums, upload photos, or invite end users to access albums through Flyalbum. In cases where enterprise clients or event organizers use Flyalbum on behalf of their attendees, guests, employees, clients, or other personnel, such client or organizer is typically the primary decision-maker regarding the processing of relevant personal information and shall be responsible for obtaining necessary authorizations, providing on-site notices, and responding to end-user requests. Flyalbum will process relevant data in accordance with this policy, the service agreement, and contractual arrangements with the client.
Important Notice. If you do not agree to this policy, please stop using the service. For data processing involving sensitive information or exceeding reasonable user expectations, such as facial recognition, AI beauty filters, portrait retrieval, ID document recognition, precise geolocation, and marketing pushes, we require prominent notice and necessary consent through our product interface or client implementation processes.
I. Information We CollectWe only collect information to the extent necessary to fulfill product functionality, perform contracts, ensure security, comply with legal obligations, or obtain your consent. The actual scope of collection may vary depending on product versions, device systems, permission settings, and client configurations. The Google Play Data Safety section, in-app permission descriptions, and this policy shall remain consistent.
| Information Category | Examples | Collection Scenarios & Description |
|---|---|---|
| Account & Identity Information | Name, nickname, avatar, email, phone number, login credentials, enterprise or team affiliation, account role | Collected when you register an account, log in, join a team, create an album, subscribe to a paid plan, use two-factor authentication, or accept an enterprise admin invitation. |
| Contact & Communication Information | Email address, contact number, customer service tickets, feedback content, notification preferences | Collected when you contact us, subscribe to or unsubscribe from notifications, apply for after-sales support, submit complaints or reports. |
| Payment & Transaction Information | Order number, package type, purchase records, billing status, invoice information, delivery or invoicing address | Collected when you purchase paid services, upgrade packages, apply for invoices or refunds. Sensitive payment information such as bank card numbers and payment accounts is processed directly by payment service providers. Flyalbum does not actively store complete bank card information. |
| Content Uploaded or Generated by You | Photos, videos, files, album names, album covers, comments, tags, sharing links, download records, operation logs | Collected when you upload, manage, share, download or collaboratively process content. The data is used for photo live streaming, cloud album display, data backup, content sharing, collaboration and content security review. |
| Album & Collaboration Metadata | File size, upload time, shooting time, album permissions, collaborators, access records, processing status | Used for album management, sorting, permission control, collaboration audit, troubleshooting and security risk control. |
| Portrait & Biometric Related Information | Facial feature templates, human body areas, key points, reference image matching results, facial recognition results, AI beautification processing results | Processed only when you or your clients actively enable facial recognition, image search, AI beautification, portrait fusion and other functions, and upload photos or videos containing human portraits. Such information is sensitive. We will never sell biometric information, nor use it to train general facial recognition models without obtaining necessary consent. |
| Image & Text Recognition Information | ID document images, document fields, text recognition results, license plate or object recognition results | Processed only when you actively upload images and use OCR, document recognition, license plate recognition, object recognition and other functions. Information including identity documents, bank cards and driving licenses is classified as sensitive information. Please use relevant functions only when necessary and after obtaining authorization from relevant parties. |
| Device & Log Information | IP address, device type, operating system version, browser type, application version, crash logs, request time, page source, network status, device advertising identifier (if applicable) | Used for login status maintenance, version adaptation, troubleshooting, security risk control, anti-cheating, statistical analysis and service optimization. We will not use non-resettable permanent device identifiers for advertising purposes. |
| Location Information | Rough geographic region inferred from IP address; precise location with system authorization (if the relevant product function is enabled) | By default, we only infer your rough region based on IP address for security risk control, content distribution and troubleshooting. We will not collect precise location data via GPS, Bluetooth, Wi-Fi hotspots or base stations unless required by specific product functions and you grant active authorization. |
| Cookies and Similar Technologies | Login cookies, preference settings, statistical analysis identifiers, pixel tags | Used to maintain login status, remember preferences, count visits, analyze performance, optimize user experience and conduct compliant promotion. You may manage non-essential cookies via browser or system settings. |
| Email Addresses of Unregistered Visitors | Email addresses voluntarily filled in when accessing public or restricted albums | If unregistered users provide email addresses for facial image search, photo push or download reminders, the addresses will only be used to send photos, videos or service notifications for the corresponding albums. Filling in an email address does not mean account registration. We will not link it to other accounts or use it for irrelevant marketing unless you give additional consent. |
We will not collect address books, SMS, call logs, lists of installed apps on your device, or background precise location information without necessity. If future products require system permissions such as camera, photo library, microphone, location, or notifications, we will explain the purpose before requesting permission, and you may decide whether to grant authorization through system settings; refusing authorization will typically only affect related features and will not impact other basic functionalities.
II. How We Use InformationThe purposes for which we use personal information shall be consistent with users' reasonable expectations and limited to the scope disclosed in this policy. If we need to use personal information for new purposes not previously disclosed, we will update the notice prior to use and obtain your consent where required by law.
| Purposes of Use | Specific Description |
|---|---|
| Provide, Maintain and Deliver Services | Create and manage accounts, build albums, upload and display photos and videos, generate thumbnails, provide download, sharing and collaboration services, AI photo retouching, facial recognition, customer management backend, PC-side synchronization and technical support. |
| Process Transactions and Provide Customer Services | Handle orders, subscriptions, invoices, after-sales services, refund applications, service notifications, customer service tickets, complaints, reports and copyright notices. |
| Security, Risk Control and Abuse Prevention | Identify abnormal login, fraud, spam, malicious crawling, illegal content, infringement acts, security vulnerabilities and system failures, and protect the legitimate rights and interests of Flyalbum, users, clients and the public. |
| Content Review and Compliance Governance | Identify illegal, infringing, pornographic, violent, terrorist content, child sexual exploitation, malicious software, spam advertisements and other content in violation of agreements through automated tools and manual review. |
| Product Analysis and Improvement | Analyze function usage, performance, crash causes, user experience and service quality to optimize product design, stability and availability. |
| Enable AI Functions | Process photos, videos, portrait features or image content within the scope of active enabling and authorization by users or clients to realize facial image search, reference image matching, AI beautification, image-text recognition and other similar functions. |
| Notification and Communication | Send account security alerts, service changes, order notifications, activity reminders, function updates, system maintenance notices, policy updates and subscribed marketing information. You may unsubscribe from marketing messages at any time. |
| Legal Compliance and Rights Protection | Respond to legitimate requests from government, judicial and regulatory authorities, execute agreements, settle disputes, retain necessary records, and prevent or hold accountable illegal and irregular acts. |
Flyalbum may provide facial search, facial photo search, AI beauty, portrait fusion, reference image matching, and similar features for event organizers, photographers, enterprise clients, and end users. Such features may involve biometric information or sensitive personal information. We will apply higher standards when processing such information.
Before enabling facial recognition or related AI features, the uploader, event organizer, or enterprise client shall provide clear and prominent notice to relevant individuals, specifying the types of biometric information collected, purposes of use, retention periods, deletion methods, and third-party processing, and shall obtain written or verifiable consent where required by applicable law. For regions with specific biometric legislation such as Illinois, Texas, and Washington in the United States, clients shall fulfill additional notice, authorization, retention plan, and destruction requirements in accordance with local laws.
Flyalbum's processing of facial features is limited to implementing specific features enabled by users or clients, such as matching photos of the same person within an album, searching photos based on reference images, or generating AI beauty or portrait processing results. Unless we obtain your separate explicit consent or the data has been de-identified in compliance with legal requirements, we will not use identifiable facial features to train general-purpose facial recognition models, sell, rent, or use them for advertising targeting unrelated to this service.
The retention period for facial features and related matching results is limited to what is necessary to fulfill album functionality. Typically, when an album is deleted, a client disables facial recognition, a user withdraws consent, or account deletion is completed, we will delete or irreversibly anonymize relevant facial features; except for records that must be retained for security, dispute resolution, auditing, or legal compliance purposes. For regions subject to specific biometric legislation, we will destroy relevant biometric data in a timely manner as required by law after the purpose is fulfilled, authorization is withdrawn, or the last interaction occurs.
IV. How We Share, Entrust Processing, or Disclose InformationWe will not sell your personal information or sensitive personal information. We only share or entrust processing of information in the following necessary scenarios and require recipients to adopt appropriate confidentiality and security measures.
| Recipient Type | Purposes of Sharing or Entrusted Processing |
|---|---|
| Providers of cloud services, storage, CDN, SMS, email, customer service, payment, data analysis and security services | Necessary for providing infrastructure, content distribution, message delivery, payment processing, technical support, troubleshooting, anti-fraud and statistical analysis. |
| Event organizers, enterprise clients, team administrators and collaborators | When you join a team, access albums created by clients or participate in collaboration, administrators or clients may view, manage, export, delete or restrict data within their scope of control. |
| Third-party applications or API integrators | Necessary data will only be shared upon active authorization by you, clients or administrators. Subsequent data processing by third parties shall be subject to their own terms and privacy policies. |
| Affiliated Companies | Share data within the scope required for unified account management, technical support, infrastructure operation, security compliance, customer service and business operations. |
| Legal, Regulatory and Rights Protection Scenarios | Disclose necessary information in accordance with applicable laws, court orders, government or regulatory requests, or to investigate illegal acts, protect user safety and safeguard the legitimate rights and interests of Flyalbum. |
| Merger, Restructuring or Asset Transfer | In the event of merger, acquisition, financing, bankruptcy liquidation or asset transfer, personal information may be transferred as part of transaction assets. We will require new recipients to abide by this policy, and give notifications when required by law. |
The data collection and sharing practices of third-party SDKs or service providers shall be consistent with the Google Play Data Safety section, this policy, and the actual behavior of the App. If a third-party SDK collects personal or sensitive data by default, Flyalbum will assess its compliance and provide prominent disclosure and consent mechanisms where necessary.
V. International Transfers and Storage LocationsFlyalbum's primary servers are deployed in Singapore, and data may be stored or processed in Singapore, the United States, the European Economic Area, or other countries and regions depending on client preferences, access regions, cloud service provider nodes, or business needs. Data protection laws may vary across jurisdictions, but we will protect personal information through contracts, access controls, encrypted transmission, least-privilege principles, auditing, and other reasonable measures.
Where applicable law requires cross-border transfer assessments, standard contractual clauses, user consent, or other compliance mechanisms, we will fulfill corresponding requirements in accordance with relevant laws and client agreements. Enterprise clients and event organizers shall ensure that their cross-border transfer arrangements have a lawful basis before uploading data under their control to Flyalbum.
VI. Information Security MeasuresWe adopt reasonable technical and organizational measures to protect personal information, including HTTPS encrypted transmission, access permission controls, two-factor authentication, log auditing, vulnerability detection, encryption at rest, backup mechanisms, abnormal login alerts, content safety detection, and employee confidentiality management. For sensitive information such as facial features, ID document images, and payment-related records, we will apply stricter access controls and security isolation measures.
Internet services cannot guarantee absolute security. Please properly safeguard your account, password, verification codes, and album access links, and do not disclose password-protected album, admin console, or team account permissions to unauthorized personnel. If you discover abnormal account activity or data breach risks, please contact us immediately at event@ourwill.com.cn.
VII. Data Retention, Deletion, and Account CancellationWe retain personal information only for the period necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law, regulation, tax, accounting, dispute resolution, security auditing, or contract performance. Specific retention periods depend on information type, account status, client configuration, legal requirements, and security needs.
| Data Type | General Retention Rules |
|---|---|
| Account Profile | Retained while the account is active; deleted or anonymized after account cancellation, except for data required to be retained by law. |
| Album Content and Files | Retained while the album or account is active. After deletion by uploaders, administrators or users, data in production systems will be deleted within a reasonable period, and data in backup systems will be overwritten according to the backup cycle. |
| Facial Feature and AI Processing Data | Retained for the period necessary to provide album facial recognition and AI functions; deleted or anonymized after relevant functions are disabled, albums are deleted, consent is withdrawn or accounts are removed, except for data required to be retained by law. |
| Transaction, Invoice and Payment Records | Retained for the period required by tax, financial and audit regulations. |
| Security Logs and Risk Control Records | Retained for a reasonable period for security protection, anti-fraud, troubleshooting and dispute settlement. |
| Customer Service, Complaint and Copyright Records | Retained for a reasonable period to process requests, prove performance of obligations, conduct compliance audits and resolve disputes. |
If you create an account within the Flyalbum App, you may submit an account deletion request via the path in the App: Settings – Account & Security – Delete Account. We will process your request after identity verification. To prevent accidental deletion, a reasonable cooling-off period may apply to account deletion. Where the default rule provides for a 15-day cooling-off period, we will initiate the deletion procedure upon the expiry of such cooling-off period. Data retained in backup systems may remain accessible temporarily due to backup rotation cycles, but such data will no longer be used for regular business display purposes.
Upon account deletion, we shall delete or anonymize personal information associated with your account, save for information that we are required to retain for legal compliance, tax and accounting purposes, transaction records, security protection, anti-fraud measures, dispute resolution, performance of this Agreement or protection of legitimate rights and interests. If you submit a deletion request through an enterprise client, event organizer or photographer album, we may forward your request to the corresponding client or assist with completion within the scope of their authorization.
VIII. Your Rights and ChoicesSubject to the laws of the jurisdiction where you reside, you may have the right to access, rectify, delete, export, restrict the processing of, object to the processing of your personal information, withdraw your consent, opt out of marketing or targeted advertising, and file complaints regarding the processing of your personal information. You may exercise such rights via account settings, album permission settings, device system permission settings or by emailing event@ourwill.com.cn.
If you are located in certain U.S. states including California, Virginia, Colorado, Connecticut and Utah, you may be entitled to additional rights under state privacy laws. Flyalbum does not sell personal information. Should we engage in the "sharing" of personal information for cross-context behavioral advertising or use sensitive personal information beyond necessary purposes in the future, we will provide appropriate opt-out or usage restriction mechanisms.
If you are located in the European Economic Area, the United Kingdom or Switzerland, the legal bases for our processing of your personal information may include performance of a contract, your consent, compliance with legal obligations, protection of vital interests, and legitimate interests pertaining to security, service improvement, customer support, anti-fraud efforts and business operations. You have the right to lodge a complaint with the local data protection authority.
IX. Cookies, Advertising Identifiers and Marketing CommunicationsWe use essential Cookies to enable login, account security, album access and core basic functions. We may also use analytical Cookies or similar technologies to understand usage patterns, measure service performance and optimize our Services. You may disable or clear non-essential Cookies via your browser settings, though certain functions may cease to operate properly as a result.
Where Flyalbum uses the Android Advertising ID or other resettable advertising identifiers on Android devices, we will only use such identifiers within the scope of legal compliance for advertising attribution, frequency capping, statistical analysis and anti-fraud purposes, and will respect your personalized advertising preferences. We will not link advertising identifiers to non-resettable permanent device identifiers for advertising purposes.
After you register an account or actively subscribe to our communications, we may send you service notifications, product updates, event announcements or marketing emails. Service-related notifications concern accounts, security, orders or system operations and cannot be fully disabled. You may unsubscribe from marketing messages via the "unsubscribe" link contained in emails, account notification settings or by contacting us.
X. Public Sharing and Third-Party LinksFlyalbum supports multiple permission modes including public albums, password-protected albums, private albums and team collaboration. Photos, videos, comments, nicknames, avatars and other public content within public albums may be viewed, downloaded, forwarded, screenshot or redistributed by other visitors. Please assess the sensitivity of content, configure appropriate permissions and secure authorization from relevant individuals prior to sharing.
The Services may contain hyperlinks directing to third-party websites, payment gateways, social media platforms or third-party tools. Such third-party services are governed by their own terms and privacy policies, and Flyalbum has no control over their data processing practices. Please review the privacy policies of third-party services before using them.
XI. Children and MinorsFlyalbum is primarily intended for use by adults, photographers, enterprises and event organizers. We do not provide our Services to children under the age of 13, nor do we knowingly collect personal information from children under 13. Users under 18 years of age who have reached the digital consent age in their locality may use the Services only with the consent and supervision of their parents or legal guardians.
Where event albums, school events, family gatherings or other scenarios contain photographs of minors, uploaders or event organizers shall ensure that necessary authorization has been obtained from the minors' parents or guardians, and shall provide notifications and protective measures in accordance with applicable laws. If you believe we have collected personal information of a child without proper authorization, please contact us at event@ourwill.com.cn; we will conduct an investigation and delete the relevant information promptly.
XII. Policy UpdatesWe may update this Policy due to adjustments to product features, changes in laws and regulations, revisions to Google Play policies, business operational needs or security requirements. Material updates include substantial changes to the service provider identity, categories of personal data, purposes of use, recipients of shared data, user rights, cross-border data transfers, account deletion procedures and processing methods for sensitive information. In the event of a material update, we will notify you via our official website, in-app notifications, emails or other appropriate channels. The updated Policy shall take effect upon publication or on the date specified in the notification.
XIII. Contact UsShould you have any inquiries regarding this Policy, processing of personal information, account deletion, data access, rectification, export, complaints or consent withdrawal, please contact us using the information set forth below:
Privacy Contact Email: event@ourwill.com.cn
Company Name: AIVISION TECHNOLOGY LIMITED
Registered Address: Unit A133, Room 01, 15/F, Block A, Wah Sang Building, 14–18 Wong Chuk Yeung Street, Fo Tan, Hong Kong
To safeguard account security, we may verify your identity before processing your request. Please state your full name, contact details, account email or mobile phone number, album link, type of request and specific demands in your email. We will respond within the timeframes required by applicable laws.