Legal Policy
Effective Date: 2026-05-11. This Privacy Policy applies to the website and digital services of Tuoji (Xuzhou) Network Technology Co., Ltd, including mobile management applications distributed through Google Play and the App Store.
Controller: Tuoji (Xuzhou) Network Technology Co., Ltd
Office Address: 1-2419, Buildings 1, 2, 3, 5, and 8, Tongshan Wanda Plaza, Tongshan District, Xuzhou, 221000, CN
Website: https://xztuoji.com
Business Support Contact: support@xztuoji.com
Key Accounts Contact: sunzhaoping@xztuoji.com
This policy covers:
Depending on your interaction, we may collect:
We process personal data under one or more legal bases depending on jurisdiction:
For applications published through Google Play and the App Store, we align with platform requirements including data safety disclosures, privacy nutrition labels, consent collection, account deletion workflows where applicable, and SDK usage transparency.
We maintain documentation for permissions, data collection categories, transmission purpose, data-sharing context, and retention practices to support platform declarations and audits.
Our applications may use ad monetization and mediation providers, including but not limited to:
Google AdMob, AppLovin MAX, Unity Ads, Meta Audience Network, ironSource, Pangle, Mintegral, InMobi, Liftoff Monetize (Vungle), Chartboost, Start.io, Smaato, Yandex Ads, Digital Turbine, and Bigo Ads.
Ad formats commonly integrated include:
Advertising SDKs may process identifiers, IP-derived region information, ad interaction metrics, and anti-fraud signals. Where legally required, ad requests are limited until valid consent is collected through a consent management flow.
For iOS, where applicable, we request App Tracking Transparency permission before accessing IDFA. For Android, we follow Google Play advertising ID policies and user choice settings.
We support non-personalized ad mode, limited ad mode, and region-based controls for users who do not grant consent where consent is legally required.
We use cookies, local storage, software development kits, and server logs for authentication, performance, analytics, and ad delivery operations. Non-essential technologies are activated according to jurisdictional consent rules.
Where the IAB Transparency and Consent Framework or comparable regional mechanisms apply, we maintain consent strings or equivalent records as required by law and platform policy.
We do not knowingly collect personal data from children in violation of applicable law. If an app is directed to mixed audiences or youth segments, we apply age-gating, limited data processing, and ad controls appropriate to legal requirements.
Regional examples include:
When required, personalized advertising is disabled for child-directed or age-restricted contexts.
We adapt privacy and ad processing according to applicable local laws and guidance, including but not limited to:
Where multiple laws apply, we apply the stricter practical standard if feasible to improve user protection consistency.
We may share data with:
We do not sell personal information where prohibited by law. Where laws classify certain ad-tech sharing as "sale" or "sharing," we provide legally required rights and controls.
Cross-border data transfers may occur when services are provided internationally. We use applicable transfer safeguards such as contractual clauses, risk assessments, and vendor due diligence according to regional legal requirements.
We retain data only as long as needed for operational, legal, security, and dispute-resolution purposes. Retention periods differ by data type, legal obligations, fraud risk windows, and account status.
When retention is no longer required, data is deleted, anonymized, or irreversibly de-identified according to technical feasibility and legal requirements.
We implement organizational and technical controls including access control, encryption in transit, secure credential handling, role-based permissions, logging, vulnerability management, and incident response procedures.
No online system can be guaranteed as absolutely secure; however, we continuously improve safeguards based on risk assessments and operational reviews.
Depending on jurisdiction, users may have rights to access, correction, deletion, portability, restriction, objection, withdrawal of consent, and appeal of certain automated decisions where legally applicable.
Rights requests may be submitted to support@xztuoji.com. We may verify identity and legally permitted exceptions before completion.
Users may also manage ad preferences through device settings, consent prompts, and in-app privacy controls where available.
Because standards for browser-level Do Not Track signals are not uniformly defined across jurisdictions, responses may vary by product and region. We prioritize legally recognized consent and opt-out mechanisms where required.
Our websites and apps may link to third-party properties. Their data practices are governed by their own policies. Users should review those policies before providing information.
We may update this policy to reflect legal, technical, or operational changes. Material updates will be posted through appropriate channels, including website updates and in-app notices where required.
For questions, rights requests, or complaints regarding privacy and data handling, contact support@xztuoji.com. For enterprise-level matters, contact sunzhaoping@xztuoji.com.
Where applicable, users may also lodge complaints with competent data protection or consumer protection authorities in their jurisdiction.
