1. Operator, scope and contact
CLPBN TECHNOLOGY CO., LTD. operates 云泡泡 and is responsible for the processing described here. This policy covers the app and its supporting services. Features and processing differ by platform and version; a feature that you do not use does not authorize unrelated collection.
For privacy requests, account-deletion help or questions, email admin@ztalking.com. Include your account ID, request and relevant app version. Do not send passwords, verification codes, full payment-card details or unrelated private messages. We may ask for proportionate identity verification before disclosing or changing account data.
2. Information and how it is collected
- Information you provide: email and verification information for email sign-in; an optional linked phone number; nickname, avatar, biography, language and other profile fields you choose to complete; messages, voice messages, images, videos, files, posts, comments, reports and support requests that you submit.
- Information needed to deliver the service: account and OpenIM identifiers, friend and block relationships, group or community membership, conversation and delivery records, scheduled-message settings, call participants, timing and duration, and push-registration tokens. A friend list inside 云泡泡 is not your device address book.
- Information from Apple or Google sign-in: the provider identifier, authorization credentials needed to verify or revoke sign-in, and name or email only when the provider makes them available with your authorization. An Apple private relay email can be used where provided; we do not receive your Apple or Google password.
- Information generated during use: IP address, app and OS version, device model, network and crash diagnostics, performance traces and security events. Device storage also holds sign-in credentials, preferences, message caches and downloaded media needed for the features you use.
- For digital transactions on versions that offer them: product and order identifiers, receipts or purchase tokens, payment status, entitlements, points and gift records. App stores handle card payment details; they do not give us your full card number. The current iOS version does not offer recharge, membership purchases, points-funded gifts or gift redemption, red-packet transactions, or game entry.
3. Purposes and processing grounds
We use account and communication information to authenticate users and provide the messages, calls, uploads, social features and notifications you request; transaction records to verify purchases and deliver entitlements where offered; reports and necessary evidence to prevent abuse and moderate content; and diagnostics to investigate failures and keep the service secure.
Where applicable law requires a processing ground, processing is based on providing the service you request, fulfilling legal duties, legitimate security and reliability interests where permitted, or your consent where required. Optional device permissions and any legally required separate consent are requested for the relevant feature. Accepting this policy does not authorize new, unrelated uses.
4. Communications, visibility and moderation
Messages, files and real-time call media are processed by the communication services needed to connect you with recipients. Voice messages are recorded when you choose to record and send them; recording voice messages is different from recording a call. Call recording is not a default feature. We do not describe the service as end-to-end encrypted.
Posts and comments are submitted for human review before they are shown to other users. Authorized reviewers may access submitted content, uploaded media, reports and necessary evidence, including message evidence you submit, to investigate violations. This does not mean all private conversations are routinely read by reviewers.
New group-creation requests, group names, photos, descriptions, announcements and group nicknames are saved as review records, including the members you select for a new group. Approved changes are applied automatically and the application result is recorded. You can view submitted drafts and results, cancel requests before they take effect, correct rejected content and retry failed processing. Moderators can withdraw violating group details. These records are used for moderation, delivery recovery and safety; your own review records are cleared when your account is deleted, subject to the retention exceptions described below.
Content is visible to its intended recipients or the audience allowed by the relevant feature and privacy settings. Recipients can save or copy content. Deleting a message or account cannot erase independent copies already made by recipients.
5. Providers and disclosures
We require entrusted providers to process only the information necessary for the assigned purpose, follow our instructions, use appropriate confidentiality and security measures, and provide protection at least equivalent to this policy and applicable App Store privacy requirements. A provider name below does not mean every provider receives every category of data.
Apple and Google may independently handle store transactions, sign-in or device-platform services under their applicable policies. Using their services does not remove our responsibility for the data we collect. We do not sell personal information or authorize providers to use entrusted communication content for their own advertising.
We may disclose necessary information to comply with valid legal obligations, protect users or investigate fraud. A merger or transfer of the service must maintain the applicable privacy protections; where the purpose or manner of processing changes, required notice and consent must occur first.
- Apple / Google sign-in and app-store services: authorized provider identifiers and sign-in verification data; receipts, transaction identifiers and entitlement-verification information where purchases are offered.
- Apple Push Notification service and Firebase Cloud Messaging: device or app-instance registration tokens, routing identifiers and notification payloads needed to deliver messages or call notices. Notification previews depend on your app and device settings.
- OpenIM communication components and their deployed services: account identifiers, relationships, messages, shared-media references and delivery state. LiveKit components and their deployed services: room/participant identifiers, connection diagnostics and live audio/video needed for a call. Integrating a component does not itself mean that its software author receives all hosted data.
- Amazon Web Services or the S3-compatible hosting/storage service used for deployment: uploaded media and files, object references and access/network information needed to store and deliver them. Email or SMS delivery providers receive the address or number and verification-message content needed for the chosen verification method.
- Sentry: optional, sanitized app/device error and performance diagnostics. This is off by default and can be enabled or disabled in Settings without affecting messaging. Production builds disable screenshot attachments and session replay; diagnostics are not intended to collect passwords or private chat text.
- Telegram, when administrator notifications are enabled: moderation item/report identifiers, content or report category, reason category, submission/deadline times and an authenticated administrator-page link. These notifications exclude reporter identity, private-message text, uploaded media and full evidence; authorized reviewers consult evidence in the protected administrator system.
6. Permissions, refusal and withdrawal
- Camera: taking photos/videos, scanning QR codes and video calls. Microphone: recording voice messages and voice/video calls. Photo access: selecting media you choose to upload; saving media uses the relevant save permission. You can choose limited photo access where the operating system supports it.
- Notifications: displaying new-message and call notices. Refusing notifications does not prevent use of other available app functions. Refusing camera, microphone or photo permissions affects the features that need them, rather than requiring permission for unrelated functions.
- Change permissions at any time in device Settings → 云泡泡. Change profile details, last-seen visibility, stranger-message controls and blocked accounts in the app. Withdrawing permission stops future access that depends on that permission; it does not automatically delete information already lawfully processed.
- The current iOS version does not request access to the system address book or precise location and does not use IDFA for cross-app advertising tracking. It does not make advertising-tracking consent a condition of messaging. New purposes or permissions must be disclosed and authorized where required before they are used.
7. Retention, account deletion and remaining copies
We keep each category only for as long as needed for its stated purpose or a legal obligation: account and relationship information while providing the account; communication and media for delivery, synchronization or the retention settings that apply; diagnostics for failure/security investigation; and transaction or safety records for applicable accounting, fraud, dispute or legal requirements. Retention is assessed by purpose and legal need, rather than an unlimited right to keep all information.
Start deletion in My → Settings → Delete Account (注销账号 in the Chinese interface). Apple-linked accounts verify with Apple authorization, including when no usable email is available; other accounts use the bound-email verification code. This deletes the account rather than merely disabling it. An active subscription does not remove the option to delete immediately.
After confirmation, sign-in sessions are revoked, direct login identifiers are removed and linked Apple authorization is revoked. Profile fields, published posts/comments and associated application records are cleared through the deletion process; associated hosted assets enter cleanup tasks, while the communication account is signed out and its profile is de-identified. Historical communication records remain subject to applicable delivery and retention settings; you may request deletion of remaining hosted information through the contact above. This work can take additional processing time; deletion is not a promise that every distributed copy is erased at the same instant. Contact us to request the status of a deletion.
Records retained to meet a specific legal duty, fraud investigation or dispute must be limited to that need and protected from unrelated use. Isolated backup copies are removed through the applicable backup rotation. Copies independently held by message recipients are not under our control. Uninstalling the app or signing out does not delete the account, and deleting the account does not itself cancel an Apple or Google subscription.
8. International processing and security
The operator and deployed communication, hosting, notification, monitoring or support services may process information outside your country. Where cross-border transfer rules apply, required safeguards and any required separate consent must be in place before transfer. You may contact us about the providers and safeguards relevant to your information.
We use measures such as authenticated access, permission controls, protected transmission and limited administrator access appropriate to the data and service. No online system guarantees absolute security. If a security incident requires notification under applicable law, we will provide that notification.
9. Your rights and how to exercise them
Subject to the law that applies to you, you may request access or a copy, correction, deletion, restriction, portability, objection to certain processing or withdrawal of consent. You may also complain to the competent data-protection authority. Use the in-app controls for available changes or email admin@ztalking.com for other requests, including when you cannot sign in.
We will verify identity only to the extent reasonably necessary and handle requests within applicable legal time limits. Where a request cannot be fulfilled in full because of a legal duty or another person’s rights, we will explain the reason where permitted. Withdrawing consent does not affect processing lawfully completed before withdrawal.
10. Children and policy changes
云泡泡 is not directed to children who cannot lawfully consent to the service in their location. Where parental authorization is required, the user must obtain it. A store age rating does not replace local legal eligibility requirements. If you believe a child’s information has been collected unlawfully, contact us to investigate and delete it as required.
We update this policy when our practices change and show the revision date above. Material changes require appropriate notice; where a new use requires consent, we must obtain that consent before starting the new processing. The Chinese and English versions are intended to describe the same practices.