Privacy Policy

Last Updated: October 31, 2024

📱 English Version

Introduction

Welcome to FishReading (小鱼阅读)! We take your privacy very seriously. This Privacy Policy explains in detail how we collect, use, store, and protect your personal information.

Please read this Privacy Policy carefully. Using FishReading indicates your agreement with all its contents.

1. Information We Collect

1.1 What Information We Collect

✅ Automatically Collected Information

Device Information (for optimization):

• Device model (e.g., iPhone 14 Pro)
• Operating system version (e.g., iOS 17.0)
• Screen size and resolution
• System language settings
• Timezone settings
• App version number

Usage Information (for improvement):

• Feature usage frequency (e.g., daily app opens)
• Page visit statistics (e.g., settings page visits)
• Reading duration statistics (total time only, not specific content)
• Book format statistics (EPUB/PDF distribution)
• Crash and error logs (technical diagnostics, not your content)

Advertising Information (if not disabled):

• Advertising Identifier (IDFA)
• Ad display and click records

✅ Information You Provide

Account Information (if using Google Sign-In):

• Google account email
• Google avatar and display name

Feedback Information (when contacting support):

• Email address you provide
• Feedback content and screenshots

❌ Information We Explicitly Do NOT Collect

We promise to never collect:

• ❌ Your book file contents or title lists
• ❌ Your detailed note contents or excerpts
• ❌ Your reading positions, progress, or bookmark locations
• ❌ Your word lookup history and specific vocabularies
• ❌ Your search content and search history
• ❌ Real name, ID numbers, home address, phone numbers
• ❌ Contacts, photos, location, health data
• ❌ Bank card numbers, payment passwords, or financial information
• ❌ Usage data from other apps

In short: What you read and what notes you take are completely unknown to us, and we don't care to know. 📚

1.2 How We Collect Information

• Automatic Collection: Through SDKs (like Firebase Analytics) automatically collecting technical data
• User-Provided: You actively provide when logging in or submitting feedback
• Third-Party: Basic profile from Google when using Google Sign-In

1.3 Children's Information

• We do not knowingly collect personal information from children under 13
• If you are a parent and discover your child has used the app without authorization, please contact us to delete related information
• We will delete children's information immediately upon verification

2. How We Use Your Information

2.1 Usage Purposes

We use collected information only for the following purposes:

Service Improvement:

• Analyze crash causes and fix bugs
• Understand most-used features for prioritized optimization
• Test new feature performance and compatibility
• Optimize app loading speed and smoothness

Personalized Experience:

• Remember your reading settings (font, theme, etc., stored locally only)
• Adapt display based on device
• Recommend potentially interesting features (not based on reading content)

Security:

• Detect and prevent fraud and abuse
• Maintain app security and stable operation
• Handle violating accounts

Legal Compliance:

• Comply with laws and regulations
• Respond to legitimate government requests
• Protect our legitimate interests

Notifications (with your permission):

• Send app update notices
• Important feature change alerts
• Security warnings

2.2 What We Won't Do

We promise:

• ❌ Will not sell your personal information to any third party
• ❌ Will not use your reading content for any commercial purpose
• ❌ Will not push targeted ads based on your reading content
• ❌ Will not share your information with advertisers (except anonymous statistics)
• ❌ Will not send marketing emails (unless you explicitly subscribe)

3. Information Storage

3.1 Storage Location

Local Storage (core data):

• All your core data is stored locally on your iPhone/iPad
• Including: book files, note content, reading records, bookmarks, highlights, settings
• We cannot access this data unless you actively send it to us (e.g., customer feedback)

Cloud Storage (analytics data only):

• Crash logs, anonymous usage statistics: stored on Firebase (Google cloud servers)
• Server locations: typically US or Singapore
• Does not contain any personally identifiable information

3.2 Retention Period

3.3 Security Measures

We take the following measures to protect your data:

Technical Measures:

• Data transmission encryption (HTTPS/TLS)
• Local data encryption (using iOS system encryption)
• Access control
• Regular security audits

Administrative Measures:

• Employee confidentiality agreements (if any)
• Minimum privilege access principle
• Regular security training

Please Note:

• No system is 100% secure
• You should set a device passcode and enable Face ID/Touch ID
• Avoid using on unsecured networks (like public WiFi)

4. Information Sharing

4.1 When We Share Information

We share your information very limitedly, only in the following circumstances:

Third-Party Service Providers:

• Google (Firebase/AdMob): Providing analytics and advertising services
• Shared content: Device info, usage statistics (anonymous data)
• Purpose: Service improvement, ad display
• These providers have strict confidentiality obligations

Legal Requirements:

• Court subpoenas or legal processes
• Legitimate government investigations
• Protecting our legitimate interests (e.g., litigation)
• Emergency situations (e.g., preventing physical harm)

Business Transfers (if occurring):

• During company mergers, restructuring, or asset sales
• We will notify you in advance and give you choices

With Your Consent:

• After obtaining your explicit consent
• You may withdraw consent at any time

4.2 Information We Never Share

Never shared:

• Your book content
• Your note content
• Your personal identity information (without consent)
• Your payment information (handled by Apple, we don't touch it)

5. Your Rights

Under laws such as the Personal Information Protection Law, you have the following rights:

5.1 Right to Access

• You have the right to know what information we have about you
• Apply via customer service email; we'll respond within 15 days

5.2 Right to Rectification

• If information is inaccurate, you can request correction
• Account info can be modified in "Settings → Account Management"

5.3 Right to Erasure (Right to be Forgotten)

• You can request deletion of your personal information if:
  • Collection purpose is achieved or no longer necessary
  • You have withdrawn consent
  • Information was illegally collected or used
• Deletion methods:
  • Uninstall app: deletes all local data
  • Delete account: removes cloud account data
  • Contact support: remove your identifier from analytics

5.4 Right to Data Portability

• You can request to export your data (notes, bookmarks, etc.)
• We'll provide common formats (JSON, TXT)
• Via "Settings → Data Export" feature

5.5 Right to Object

• You can object to processing your information for marketing purposes
• You can disable ad tracking
• You can decline push notifications

5.6 Right to Withdraw Consent

• You can withdraw consent for data collection at any time
• Method: Disable in "Settings → Privacy Settings"
• Withdrawal doesn't affect lawfulness of prior processing

5.7 Right to Complain

• If you believe we've violated your privacy rights
• Complain to us: support@yureading.top
• Or to regulatory authorities:
  • CAC (China): https://www.cac.gov.cn/
  • FTC (US): https://www.ftc.gov/
  • ICO (UK): https://ico.org.uk/

6. Third-Party Services

6.1 Services We Use

Google Firebase Analytics

• Purpose: App analytics and crash reporting
• Data Collected: Device info, usage behavior, crash logs
• Processing Location: United States
• Privacy Policy: https://firebase.google.com/support/privacy
• Opt-Out: Disable "Data Statistics" in app settings

Google AdMob

• Purpose: Display ads (if you haven't purchased ad-free)
• Data Collected: Advertising Identifier (IDFA), ad interactions
• Processing Location: United States
• Privacy Policy: https://policies.google.com/privacy
• Opt-Out:
  • iOS Settings: Settings → Privacy & Security → Tracking → Off
  • Or purchase ad-free service

Google Sign-In

• Purpose: Convenient login option (if applicable)
• Data Collected: Google email, avatar, display name
• Processing Location: United States
• Privacy Policy: https://policies.google.com/privacy
• Opt-Out: Use alternative login methods or no login

6.2 Cross-Border Data Transfer

• Due to use of Google services, some data is transferred to the United States
• Transferred data: Crash logs, anonymous usage statistics (not your reading content)
• Legal basis: Your explicit consent
• Google follows Privacy Shield-like standards for data protection
• You can prevent cross-border transfer by disabling data statistics

6.3 Third-Party Responsibility

• Third-party services have their own privacy policies not governed by this policy
• We've made efforts to select trustworthy service providers
• But we are not responsible for third-party actions
• We recommend reading their privacy policies

7. Data Security

7.1 Security Measures

Our Measures:

• ✅ HTTPS encrypted transmission
• ✅ iOS system-level Data Protection
• ✅ Access control and permission management
• ✅ Regular security checks and updates
• ✅ Third-party security audits (if resourced)

Your Measures:

• 🔒 Set strong passcode and enable biometric authentication (Face ID/Touch ID)
• 🔒 Don't jailbreak your device (compromises security)
• 🔒 Don't use on public WiFi (or use VPN)
• 🔒 Keep iOS and app updated
• 🔒 Don't share your device with others

7.2 Data Breach Response

If a data security incident occurs, we will:

1. Immediate Response (within 24 hours):

   • Activate emergency plan
   • Stop the breach source
   • Assess impact scope

2. Timely Notification (within 72 hours):

   • Notify affected users via push, email, or in-app announcement
   • Explain data types breached, potential impact, our response measures
   • Provide remediation recommendations (e.g., change password)

3. Investigation Cooperation:

   • Report to regulatory authorities
   • Cooperate with law enforcement
   • Implement remediation and improvement measures

4. Post-Incident Review:

   • Analyze causes
   • Strengthen protection measures
   • Update security policies

8. Cookies and Similar Technologies

8.1 Technologies We Use

Local Storage (NSUserDefaults, Core Data):

• Purpose: Save your settings and reading progress
• Location: Only on your device locally
• Not sent to servers

Analytics SDK (Firebase):

• Purpose: Usage statistics
• Can be disabled in settings

8.2 How to Manage

• In-app settings: Settings → Privacy → Data Statistics
• iOS system settings: Settings → Privacy & Security → Tracking
• Reset advertising identifier: Settings → Privacy & Security → Apple Advertising → Reset Advertising Identifier

9. Privacy Policy Changes

9.1 Update Notifications

• We may update this Privacy Policy from time to time
• Major changes will be notified through:
  • Pop-up prompt on app launch
  • Push notifications
  • Prominent in-app announcements
  • Email (if you've provided one)
• Minor changes will be updated on this page with the updated date

9.2 Effective Date of Changes

• Updated policy takes effect on publication date
• Continued use indicates acceptance of new policy
• If you don't accept, please stop using and uninstall the app

9.3 Historical Versions

We will retain historical versions of the Privacy Policy for reference:

• Access: Visit app website or contact customer service

10. Region-Specific User Rights

10.1 China Mainland Users

Under the Personal Information Protection Law, you have:

• Right to be informed and to decide
• Right to limit or refuse processing
• Right to access and copy
• Right to data portability
• Right to rectification and supplementation
• Right to erasure

10.2 EU Users (GDPR)

Under GDPR, you have:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure/right to be forgotten (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to lodge a complaint with supervisory authority

GDPR Data Controller: [Your Company Name]
GDPR Representative (EU-based, if applicable): [To be designated]

10.3 California Users (CCPA)

Under CCPA, you have:

• Right to know (what information is collected)
• Right to delete (request deletion of information)
• Right to opt-out of sale (we don't sell information)
• Right to non-discrimination (exercising rights won't result in differential treatment)

How to Exercise Rights: Email support@yureading.top (please replace with actual email)

10.4 Other Regions

If your region has specific privacy laws, please inform us and we will strive to comply.

11. Contact Us

11.1 Privacy Inquiries

For questions about this Privacy Policy or to exercise your rights, please contact:

Privacy Officer Email: support@yureading.top (please replace with actual email)
Customer Service Email: support@yureading.top
In-App Feedback: Settings → Help & Feedback → Privacy Issues

Response Times:

• General inquiries: Reply within 3 business days
• Rights requests (deletion, access, etc.): Process within 15 days
• Emergencies (security incidents): Response within 24 hours

11.2 Data Protection Officer (if applicable)

If we have designated a Data Protection Officer (DPO):

• DPO Email: support@yureading.top
• Responsibilities: Supervise data processing compliance, handle user privacy complaints

11.3 Regulatory Authorities

If you're unsatisfied with our response, you may complain to:

China:

• Cyberspace Administration of China: https://www.cac.gov.cn/
• MIIT: 12381

EU:

• Your country's data protection authority
• Directory: https://edpb.europa.eu/about-edpb/board/members_en

US:

• FTC (Federal Trade Commission): https://www.ftc.gov/

We commit to handling your information transparently and responsibly. Thank you for your trust! 🙏