亿通行APP是北京如易行科技有限公司自主开发的一款致力于为民众提供更为便捷、高效的出行+生活消费服务的平台，北京如易行科技有限公司（以下或称"我们"）尊重并保护您的隐私。为了遵守国家法律法规及监管规定，也为了向您提供服务及提升服务质量，我们需要收集、存储、使用及对外提供您的信息。 您同意我们按照本政策约定处理您的信息，以便您享受优质、便捷、个性化的服务，同时更好地保护您的信息安全。

我们将按照法律法规的要求和亿通行APP隐私政策（以下简称"本政策"）收集、使用、共享和保护您的个人信息。在您使用亿通行平台的产品及服务前，请您仔细阅读并全面了解本政策。如果您是未成年人或其他无民事行为能力人或限制民事行为能力人，您的监护人需要仔细阅读本政策并同意您依照本政策使用我们的产品或服务。 对于本政策中与您的权益存在重大关系的条款，我们已将字体加粗以提示您注意。

在您首次注册亿通行账号或使用我们的服务时，您需要阅读并同意本《隐私政策》。请您仔细阅读、充分理解各条款内容，特别是以加粗、下划线等方式标识的与您权益相关的条款。您同意后，我们方能根据本政策为您提供完整的产品或服务。当您首次注册亿通行账号后继续浏览、访问亿通行平台及/或使用亿通行平台的产品或服务时，即表示您已经同意我们按照本政策来收集、使用、共享和保护您的个人信息。

本政策不适用于其他第三方向您提供的服务，也不适用于亿通行平台中已另行独立设置隐私政策的产品或服务。

信息的收集范围

我们收集您的以下个人信息：

个人信息是指以电子或者其他方式记录的，能够单独或者与其他信息结合识别特定自然人身份或者反映特定自然人活动情况的各种信息。

本政策涉及的个人信息包括：基本信息、个人身份信息、网络身份标识信息、订单信息、设备信息、位置信息、个人敏感信息。

基本信息 包括个人姓名、性别、住址、个人电话号码、电子邮箱；

个人身份信息 包括身份证件信息（如身份证、护照等）、生物特征（人脸照片）；

网络身份标识信息 包括系统账号、IP地址、邮箱地址及与前述有关的密码、口令、口令保护答案；

订单信息 包括交易和消费记录、支付状态、支付渠道、银行卡号、红包及优惠券；

设备信息 包括硬件型号、设备MAC地址、操作系统类型、软件列表唯一设备识别码（如IMEI、Android ID、IDFA、IDFV、OAID、IMSI及其它标识符）、设备序列号（SN）、剪切板信息、应用信息（应用崩溃信息、通知开关状态、软件列表相关信息）、设备传感器（含陀螺仪传感器，加速度传感器、重力传感器等）、设备参数及系统信息（SIM卡、IMSI信息、设备类型、设备型号、操作系统及硬件相关信息、SD卡数据）在内的描述个人常用设备基本情况的信息；

位置信息 包括行程信息、精准定位信息（IP地址、GPS位置以及能够提供相关信息的WLAN接入点、蓝牙和基站传感器信息、出发地、到达地、出行轨迹）。

个人敏感信息 是指一旦泄露、非法提供或使用可能危害人身和财产安全极易导致个人名誉、身心健康受到损害或歧视性待遇的个人信息。 本隐私政策中涉及的个人敏感信息包括：您的个人身份信息、人脸照片；网络身份识别信息、订单信息、位置信息。

个人信息收集清单

信息的收集方法

您授权我们通过以下方法收集您的个人信息：

1、注册账户

在您注册亿通行账户时，您需提供 手机号码 作为账户登录名。如您不提供前述信息，将无法注册亿通行账户并无法享受亿通行提供的所有服务。

为了向您提供更优质的产品和服务，在您以其他方式关联登录亿通行APP时，我们会向关联第三方请求您的个人信息（姓名、手机号、证件号码、昵称、头像、电子邮箱地址）。如果您选择不提供为实现亿通行APP核心业务功能的必备信息或使用其中某类功能的必备信息，将导致我们无法为您提供快捷登录功能。

为了确保账号安全和落实网络实名制，在您使用其他方式关联登录、使用亿通行APP的某些功能时，您可能仍然需要绑定有效的手机号码。收集这些信息是为了帮您创建亿通行APP账号，如果您拒绝提供这些信息，将影响您注册使用亿通行APP。

2、互联网购票、二维码乘车、NFC乘车

在您进行互联网购票业务时， 我们需要对您的身份进行验证， 需采集您的姓名、证件号码等信息， 以确保您的账户与资金安全。 采集的信息将加密进行存储，信息采集后仅在APP账户使用期间有效，当您注销账号时自动删除。 如您不同意提供前述信息，则可能无法使用上述服务，但不影响您使用我们提供的其他服务。

3、市郊铁路人脸过闸开通乘车

为落实市郊铁路实名制乘车管理要求，如您选择乘坐市郊铁路，我们为您提供了"人码合一"或"人卡合一"功能。 开通此功能需要您单独同意我们收集和使用您的面部图像信息。 您可以在开通页面详细了解信息处理规则， 并自主选择是否同意。 如果您不同意，您将无法乘坐市郊铁路人脸核验线路。

您需在APP内按指引完成人脸录入。系统将采集您的面部图像，图像会 通过互联网传输但使用加密通道进行安全传输。录入的人脸照片将加密存储于用于过闸验证环节符合国家信息安全等级保护要求的服务器中。人脸照片信息仅用于过闸时比对是否为您本人乘车使用。

您的人脸照片仅在业务使用有效期间存储，在您关闭业务时自动进行删除。您可在APP中自助申请或联系客服热线96123申请关闭业务。如您不同意提供前述信息，则可能无法进行乘车，但不影响您使用我们提供的其他服务。

4、互联网购物

当您在亿通行平台进行消费时，我们需要按照法律法规及监管规定对商家进行管理，防范套现或欺诈风险，因此，我们将直接收集或向商家收集您的 订单信息，包括手机号码、交易金额、交易对象、交易商品、交易时间、配送信息（如有）。 如您不同意我们记录前述信息，则可能无法完成交易，但不影响您使用我们提供的其他服务。

5．金融产品服务

当您在亿通行平台办理金融产品服务时，您需按照金融机构的要求提供您的 基本信息及个人身份信息 包括 姓名、国籍、性别、职业、住址、联系方式、银行卡号、银行预留手机号码以及证件号码、生物特征信息。 如您不提供前述信息，可能无法使用金融产品服务，但不影响您使用我们提供的其他服务。

6、平台活动

当您在亿通行平台参加活动时，我们需要收集您的 手机号码、通讯录及相关活动中的相关信息。 如您不同意我们记录前述信息，则可能无法参与活动，但不影响您使用我们提供的其他服务。

7、导航服务

您可以选择开启手机的定位权限，用于提供您的 位置信息， 以便您基于所在地点位置接受乘车服务推荐；如您不提供前述信息，您将不会收到该等服务推荐，但不影响您使用我们提供的其他服务。

8、开具电子发票

当您在平台开具电子发票时，我们将根据您填写的信息收集您的邮箱信息、出行人信息、填写的抬头及备注相关信息。如您不同意我们记录前述信息，则可能无法开具电子发票，但不影响您使用我们提供的其他服务。

9、客户服务

在您向亿通行客服寻求服务时，您需提供您的 基本信息、设备信息、位置信息、行程信息、订单信息以及其他与亿通行服务相关的日志信息。 如您不提供前述信息，我们将无法对您的反馈意见进行正确核实并提供帮助，但不影响您使用我们提供的其他服务。

10、设备序列号（SN）信息收集

为保障设备识别、账号安全校验、华为生态服务适配（仅鸿蒙版本APP）及应用稳定性分析，我们会收集您的设备序列号（SN），并将该信息加密传输至服务后台。信息仅用于上述业务目的，不用于身份识别以外的其他用途，不对外泄露。如您不同意提供，可能影响部分设备适配与安全校验服务，但不影响核心乘车功能使用。

11、剪切板信息收集

为实现快捷输入、链接识别、辅助提示等功能，我们会在您主动触发相关场景时读取您设备剪切板中的文本内容。该信息收集仅为实现相关功能服务所必需，仅用于实现您主动发起的功能。仅读取当前内容，不上传、不存储、不用于其他目的。您可在 APP 内我的→设置→隐私设置中自主开启或关闭剪切板读取权限，关闭后不影响核心乘车服务。如您不同意读取，将无法使用依赖剪切板的快捷功能，但不影响其他服务。

12、定向推送与个性化推荐

为向您提供更贴合需求的服务、出行服务信息、活动及优惠信息，我们会基于您的设备信息、位置信息、出行行为等经去标识化处理后的数据，为您提供定向推送与个性化推荐服务。该服务基于您同意本隐私政策及提升服务体验的合法、正当、必要原则开展。您可在 APP 内我的→设置→隐私设置中随时关闭个性化推荐 / 定向推送，关闭后不再接收定向类信息，仅接收基础服务通知。

上述服务类型可能需要您在您的设备中向我们开启您的地理位置（位置信息）、相机（摄像头）、相册（图片库）、麦克风、通讯录以及其他设备访问权限，以实现这些功能所涉及的信息的收集和使用。您可以在手机设备系统的隐私模块（设置一隐私一权限管理）中逐项查看您上述权限的开启状态，并可以决定将这些权限随时地开启或关闭。请您注意，您开启这些权限即代表您授权我们可以收集和使用这些个人信息来实现上述的功能，您关闭权限或停止使用相关服务即代表您取消了这些授权，则我们将不再继续收集和使用您的这些个人信息，也无法为您提供上述与这些授权所对应的功能。您关闭权限的决定不会影响此前基于您的授权所进行的个人信息的处理。

我们可能从第三方（包括但不限于支付宝、微信、网易微博）获取您授权共享的账户信息（姓名、手机号、证件号码、昵称、头像、性别），并在您同意本隐私政策后将您的第三方账户与您的亿通行账户绑定，使您可以通过第三方账户登录并使用我们的服务。我们会依据与第三方的约定，在对个人信息来源的合法性进行确认后，在符合相关法律和法规规定的前提下，使用您的这些个人信息。

信息的用途

您授权我们出于以下用途使用您的个人信息：

向您提供亿通行平台的产品及服务，并进行亿通行平台相关网站及APP的管理和优化；

提升和改善亿通行平台现有产品及服务的功能和质量，包括但不限于产品及服务内容的个性化定制及更新；

根据经去标识化处理后的数据，为您推送运营状态变更、线路调整等更精准的出行服务信息；

开展亿通行平台产品及服务相关的市场活动，向您推送最新的市场活动信息及优惠方案；

设计、开发、推广全新的产品及服务；

提高亿通行平台产品及服务安全性，包括但不限于身份验证、客户服务、安全防范、诈骗监测、存档和备份；

协助行政机关、司法机构等有权机关开展调查，并遵守适用法律法规及其他向有权机关承诺之义务；

在收集信息之时所通知您的用途以及与上述任何用途有关的其他用途；

此外，我们可能向您发送与上述用途有关的信息和通知，包括但不限于为保证服务完成所必需的验证码、使用产品或服务时所必要的推送通知、当前费用优惠及减免信息、关于亿通行平台产品或服务的新闻以及市场活动及优惠促销信息。

信息的使用

我们会根据本隐私政策的约定为实现我们的服务功能对所收集的个人信息进行使用。我们在中华人民共和国境内收集和产生的个人信息将存储在中华人民共和国境内。如将来涉及跨境业务，我们需要向境外机构传输境内收集的相关个人信息的，我们会按照法律法规和相关监管部门的规定执行，向您说明个人信息出境的目的以及涉及的个人信息类型，征得您的同意，并通过签订协议、现场核查等有效措施，要求境外机构为所获得的您的个人信息保密。

在收集您的个人信息后，我们将通过技术手段对数据进行处理，经过技术处理后的个人信息将无法识别至特定个人且不能复原。请您了解并同意，在此情况下我们有权使用处理后的信息；并在不透露您个人信息的前提下，我们有权对用户数据库进行分析并予以商业化的利用。

为了提升用户服务体验，为用户推荐更为优质或适合的服务，我们可能会根据用户信息形成群体特征标签，用于向用户提供其可能感兴趣的营销活动通知、商业性电子信息或广告。

请您注意，您在使用我们的服务时所提供的所有个人信息，除非您删除或通过系统设置为拒绝收集，否则将在您使用我们的服务期间持续授权我们使用。在您注销账户时，我们将停止使用并删除您的个人信息。

我们会对我们的服务使用情况进行统计，并可能与第三方共享这些统计信息，以展示我们服务的整体使用情况，但这些统计信息不包含您的任何身份识别信息。

信息的共享

我们承诺对您的信息进行严格保密。除法律法规及监管部门另有规定外，我们仅在以下情形中与第三方共享您的信息，第三方包括我们的关联公司、合作金融机构以及其他合作伙伴。

您授权我们在下列情况下将您的信息与第三方共享：

1.关联方共享：

为了保证公共安全、卫生防疫要求，或为了提供和提升我们基于亿通行向您提供的产品及服务质量或向您提供全新的产品及服务或提升您的用户体验，推荐您可能感兴趣的信息，识别用户账号异常，保护亿通行关联公司或其他用户或公众的人身安全、财产安全免遭侵害，我们可能会向关联方和/或其指定的服务提供商共享您的相关信息。这种共享将限制在必要的个人信息范围内，且受本隐私政策中所声明目的和承诺的约束，如果我们共享您的个人敏感信息或关联公司改变个人信息的使用及处理目的，将再次征求您的授权同意。

2.授权合作方共享：

我们可能委托授权合作方为您提供某些服务或代表我们履行职能，我们仅会出于本隐私政策声明的合法、正当、必要、特定、明确的目的共享您的信息，授权合作方只能接触到其履行职责所需的必要信息，且不得将此信息用于其他任何目的。我们的授权合作方包括以下类型：

(1)交易主动选择共享：

您通过亿通行购买或使用商品或服务的，为了让您完成交易、实现交易目的，我们会根据您的选择将您的订单信息中与交易有关的必要信息共享给交易其他相关商品或服务的提供者，以实现您的交易及售后服务需求。

(2)业务合作共享

a.推广、分析服务类的授权合作方。除非得到您的许可，否则我们不会将您的个人身份信息与提供推广、分析服务的合作方共享。我们会委托这些合作方处理与推广、广告覆盖面和有效性相关的信息，但不会提供您的个人身份信息，或者我们将这些信息进行去标识化处理，以便它不会识别您个人。这类合作方可能将上述信息与他们合法获取的其他数据相结合，以执行我们委托的推广服务或决策建议。

b.信息处理合作方。为了提升信息处理效率，降低信息处理成本，或提高信息处理准确性，我们可能会委托有能力的我们的关联公司或其他专业机构代表我们来处理信息。我们会通过书面协议等方式要求受托公司遵守严格的保密义务及采取有效的保密措施，禁止其将这些信息用于未经您授权的用途。在委托关系解除时，受托公司不再保存个人信息。我们承诺对此负责。

c.供应商、服务提供商和其他合作方。我们将信息发送给支持我们业务的供应商、服务提供商和其他合作方，这些支持包括受我们委托提供的技术基础设施服务、分析我们服务的使用方式、衡量广告和服务的有效性、提供客户服务、支付便利或进行学术研究和调查。我们会对授权合作方获取有关信息的应用程序接口（API）、软件工具开发包（SDK）进行严格的安全检测，并与授权合作方约定严格的数据保护措施，令其按照我们的委托目的、服务说明、本隐私政策以及其他任何相关的保密和安全措施来处理个人信息。

d.委托我们进行推广的合作方。我们可能会接受其他企业、个人向使用我们产品或服务的用户群提供促销推广的服务。我们可能会使用您的个人信息集合成的间接用户画像与委托我们进行推广的合作方（"委托方"）共享，但我们仅会向这些委托方提供推广的覆盖面和有效性的信息，而不会提供您的个人身份信息，以便它不会识别您个人。

涉及信息共享的第三方主体清单如下：

3.争议解决共享：

为了维护您的合法权益，在协助处理和解决与您有关的纠纷或争议（包括投诉）时，我们可能会向存在利害关系的第三方、消费者权益保护部门及监管机关、有关争议解决机构等提供解决纠纷或争议所必需的信息；

根据法律法规的规定及商业惯例，我们需要接受第三方的审计或尽职调查时，可能向其提供您的相关信息；

其他经您同意或授权可以向第三方提供您的个人信息的情况。

关于我们所接入的第三方软件开发工具包（SDK）

为保障亿通行APP相关功能的实现与应用的稳定运行，我们可能会接入第三方提供的软件开发包（SDK）以实现相关目的。第三方如何收集、使用您的个人信息，建议您参考第三方SDK的相关服务协议及个人信息保护政策。具体第三方SDK使用情况如下：

IOS系统第三方SDK列表

Android系统第三方SDK列表

HarmonyOS Next系统第三方SDK列表

信息的转让

我们不会将您的个人信息转让给任何公司、组织和个人，但以下情况除外：

（1）事先获得您的明确同意；

（2）根据法律法规或强制性的行政或司法要求；

（3）在涉及资产转让、收购、兼并、重组或破产清算时，如涉及个人信息转让，我们会向您告知有关情况，并要求新的持有您个人信息的公司、组织继续受本政策的约束。如变更个人信息使用目的时，我们将要求该公司、组织重新取得您的明确同意。

信息的公开披露

我们在以下情形下可能会公开披露您的个人信息：

1、获得您明确同意或基于您的主动选择；

2、如果我们确定您出现违反法律法规或严重违反亿通行相关协议及规则的情况，或为保护亿通行用户或公众的人身财产安全、保护国家、公共利益免遭侵害，我们可能依据法律法规或在征得您同意的情况下披露关于您的个人信息，包括相关违规行为以及亿通行已对您采取的措施。

根据相关法律法规及国家标准，在以下情形中，我们可能会依法共享、转让、公开披露您的个人信息无需征得您的同意：

（1）与国家安全、国防安全直接相关的；

（2）与公共安全、公共卫生、重大公共利益直接相关的；

（3）与犯罪侦查、起诉、审判和判决执行等直接相关的；

（4）出于维护您或其他个人的生命、财产等重大合法权益但又很难得到您本人同意的；

（5）您自行向社会公众公开的个人信息；

（6）从合法公开披露的信息中收集的个人信息，例如：合法的新闻报道、政府信息公开等渠道。

信息的安全及保护措施

我们及我们的关联方将采用严格的安全制度以及行业通行的安全技术和程序来确保您的个人信息不被丢失、泄露、毁损或滥用；

为保障您的信息安全，我们致力于使用各种安全技术及配套的管理体系来尽量降低您的信息被泄露、毁损、误用、非授权访问、非授权披露和更改的风险。例如：通过网络安全层软件（SSL）进行加密传输、信息加密存储、严格限制数据中心的访问。传输和存储个人敏感信息（含个人生物识别信息）时，我们将采用加密、权限控制、去标识化等安全措施。我们将使用行业通行的安全技术和程序，来保护您的个人信息不被未经授权的访问、使用；

我们的员工将受到保密协议的约束，同时还将受到数据信息的权限控制和操作监控；

但是，请您注意，任何安全系统都存在可能的及未知的风险。

您访问的第三方网站经营者、您使用的第三方服务提供者和通过我们获取您的个人信息的第三方可能有自己的隐私权保护规则以及获取您个人信息的方法和措施，这些第三方的隐私权保护规则、获取个人信息的方法和措施将不会受到我们的控制。虽然我们将与可能接触到您的个人信息的我们的合作方等第三方签署保密协议并尽合理的努力督促其履行保密义务，但我们无法保证第三方一定会按照我们的要求采取保密措施，我们亦不对第三方的行为及后果承担任何责任。

未成年人的个人信息收集和处理

我们非常重视对未成年人信息的保护。如果您是未满18周岁的未成年人，您或您的监护人需要仔细阅读本政策，并同意依照本政策使用我们的服务。如果您是未满14周岁的未成年人（以下简称"儿童"），您的监护人需要仔细阅读本政策并同意您依照本政策使用。

如果您/您的监护人不同意本政策的任何内容，您应该立即停止使用。

当且仅当我们通过您提交的信息或者您的声明或陈述，判断您为儿童用户时，我们通过您账号收集的个人信息才被视为儿童个人信息。

我们将按照本政策的约定处理儿童个人信息，当本政策约定的处理目的、方式、范围，存储事项，安全保障措施等发生了实质性变化，我们将再次征得监护人的同意。

儿童个人信息的收集、使用：我们收集、使用儿童个人信息的目的、方式与范围，不会超过我们在本政策中列明的内容。如果我们发现在未事先获得可证实的监护人同意的情况下收集了儿童的个人信息，则会设法尽快删除相关信息。

儿童个人信息的共享、转让、公开披露：一般情况下，我们不会向第三方共享、转让、公开披露儿童的个人信息。我们仅在监护人同意的情况下，才可能与第三方共享、转移、披露儿童的个人信息。如需向第三方共享、转让儿童个人信息，我们将自行或者委托第三方机构进行安全评估。

儿童个人信息的委托处理：一般我们不会委托第三方处理儿童个人信息，如确需委托第三方处理的，我们会根据法律、行政法规的规定进行合规措施，包括但不限于对第三方进行安全评估。

儿童个人信息的存储：我们会按照本政策的约定存储儿童个人信息。

儿童个人信息的更正、删除：

（1）监护人或者儿童本人可以按照本政策提供的方式更正、删除个人信息。

（2）如果儿童或其监护人发现我们违反法律、行政法规的规定或者本政策处理儿童个人信息，或者儿童监护人撤回同意，或者儿童或其监护人通过注销等方式终止使用服务的，可以联系我们对相关儿童个人信息进行删除。

（3）儿童个人信息的内部管理。我们对工作人员以最小授权为原则，严格设定了信息访问权限，控制儿童个人信息知悉范围。工作人员访问儿童个人信息需经过审批，我们采取了技术措施记录访问情况，避免违法复制、下载儿童个人信息。

儿童个人信息的安全事件应急处置和报告：

（1）我们发现儿童个人信息发生或者可能发生泄露、毁损、丢失的，将立即启动应急预案，采取补救措施。

（2）一旦发生安全事件，我们将及时向儿童监护人告知：安全事件的内容和影响；我们已采取或将要采取的处置措施；关于儿童或其监护人自主防范和降低风险的建议；我们针对儿童个人信息主体提供的补救措施。

（3）如果我们判断儿童信息安全事件已经造成或者可能造成严重后果，我们将立即向有关主管部门报告。

管理您的个人信息

在您使用亿通行服务期间，为了您可以更加便捷地访问和管理您的信息，同时保障您注销账户的权利，我们在客户端中为您提供了相应的操作设置，您可以参考下面的指引进行操作。

（1） 账户及安全信息： 一个手机号码只允许注册一个亿通行账户。为保障您的账户安全，如果您由于证件号码信息变更等特殊情况，需要变更亿通行中登记的实名信息，您可联系亿通行客服进行重新核实和修改。

如您不再想使用亿通行，您可以在“我的 → 设置→账号与安全”中根据页面提示自助进行操作来注销账户。账户注销后您在亿通行的所有个人信息及数据将不再保留。

有关防疫所获取的您的个人信息数据，我们将按照相关防疫要求执行。

（2）查阅：您可通过登录亿通行个人账户，在 “我的 → 设置”中查阅您的个人信息、行程信息、订单信息、支付渠道信息。为了您的个人信息安全，您的手机号码和证件号码会进行脱敏展示；

（3）修改：您可以在“我的 → 设置”中根据页面提示对您的支付方式进行修改。

（4）删除：您可通过登录亿通行个人账户，在 “我的 → 设置”删除您的行程信息、订单信息、发票信息及支付方式信息。

根据《中华人民共和国个人信息保护法》规定，我们将在15个工作日内响应您关于个人信息的诉求，切实保障您的个人信息权益。您可联系客服热线96123获取协助。

如果我们监测到您将亿通行平台的产品及服务以及相关信息用于欺诈或非法目的，我们将会采取相应措施，包括但不限于中止或终止向您提供任何产品或服务。

为确保信息安全，在受理您的服务请求时，我们会采取必要的身份验证措施，防范他人冒领。

若监测到您利用亿通行平台、其产品、服务、相关信息实施欺诈、侵权等不法违法违规行为或用于违法违规用途，我们将有权采取包括中止或终止服务在内的相应措施，并保留向您追诉或追偿的权利。

随着亿通行平台的产品及服务的进一步提升，我们的隐私政策的内容会随时更新。对于本政策的重大或实质性变更（包括但不限于业务模式、个人信息处理目的、使用方式及个人信息共享情况发生重大变化），我们将通过显著方式（启动弹屏提醒）通知您，并重新获取您的同意。若您不同意变更后的内容，您可以选择停止使用相关服务；若您继续使用我们的服务，即表示您同意受修订后的隐私政策约束。我们鼓励您定期查看最新的隐私政策以了解我们对于隐私保护的最新措施。

联系我们

如您对本隐私政策或您个人信息的相关事宜有任何问题意见或建议，请拨打96123或4000196123客服热线与我们联系。

产品运营者基本情况：

产品名称：亿通行APP

公司名称:北京如易行科技有限公司

注册地址/办公地址：北京市朝阳区小营北路京投大厦3座10层]

邮箱号：LD@yitongxing.com

Yitongxing App is a platform independently developed by Beijing Yitongxing Science and Technology Co., Ltd., dedicated to providing more convenient and efficient travel and lifestyle consumption services. Beijing Yitongxing Science and Technology Co., Ltd. (hereinafter referred to as "We") respects and protects your privacy. To comply with national laws, regulations, and regulatory requirements, and to provide and improve our services, we need to collect, store, use, and share your information. You agree that we will process your information in accordance with this policy to enable you to enjoy high-quality, convenient, and personalized services while better protecting your information security.

We will collect, use, share, and protect your personal information in accordance with legal requirements and this Yitongxing App Privacy Policy (hereinafter referred to as "this Policy"). Before using Yitongxing Platform's products and services, please carefully read and fully understand this Policy. If you are a minor or a person without or with limited civil capacity, your guardian needs to carefully read this Policy and agree to your use of our products or services under this Policy. Terms that are material to your rights and interests are bolded for your attention.

The Policy does not apply to services provided to you by other third parties, nor does it apply to products or services on Yitongxing Platform that have separately established privacy policies.

When you first register a Yitongxing account or use our services, you need to read and agree to this Privacy Policy. Please carefully read and fully understand each provision, especially those bolded or underlined that relate to your rights and interests. Upon your agreement, we will provide complete products or services under this Policy. If you continue to browse, access the Yitongxing Platform and/or use its products or services after your initial account registration, it means you agree that we will collect, use, share, and protect your personal information in accordance with this Policy.

This Policy does not apply to services provided by other third parties, nor to products or services on the Yitongxing Platform that have separately established privacy policies.

Scope of Information Collection

We collect the following personal information about you:

Personal information refers to various types of information recorded electronically or by other means that can identify a specific natural person's identity or reflect a specific natural person's activities, either alone or in combination with other information.

Personal information covered in this Policy includes: Basic Information, Personal Identity Information, Network Identification Information, Order Information, Device Information, Location Information, and Personal Sensitive Information.

Basic information includes personal name, gender, address, personal phone number, email address;

Personally identifiable information includes identification document information (e.g., ID card, passport), biometric features (facial photos);

Network identification information includes system account, IP address, email address, and related passwords, passcodes, and security challenge answers;

Order information includes transaction and consumption records, payment status, payment channel, bank card number, red envelopes, and coupons;

Device information includes hardware model, device MAC address, operating system type, software list, unique device identifiers (such as IMEI, Android ID, IDFA, IDFV, OAID, IMSI, and other identifiers), device serial number (SN), clipboard information, application information (application crash information, notification switch status, software list related information), device sensors (including gyroscope, accelerometer, gravity sensor, etc.), device parameters and system information (SIM card, IMSI information, device type, device model, operating system and hardware related information, SD card data);

Location information includes travel information, precise location information (IP address, GPS location, and WLAN access points, Bluetooth, base station sensor information, departure location, arrival location, travel trajectory).

Personal sensitive information refers to personal information that, if leaked, illegally provided, or used, may endanger personal and property safety, or easily lead to damage to personal reputation, physical and mental health, or discriminatory treatment. Personal sensitive information covered in this Privacy Policy includes: your Personal Identity Information, facial photos; Network Identification Information, Order Information, Location Information.

Personal Information Collection List

Information Collection Methods

You authorize us to collect your personal information through the following methods:

1. Account Registration

When registering a Yitongxing account, you need to provide your mobile phone number as the account login name. If you do not provide this information, you will not be able to register a Yitongxing account or enjoy all services provided by Yitongxing.

To provide you with better products and services, when you log in to the Yitongxing App through other methods, we will request your personal information (name, mobile phone number, ID number, nickname, avatar, email address) from the relevant third party. If you choose not to provide the necessary information for core business functions or specific functions of Yitongxing App, we will not be able to provide you with the quick login function.

To ensure account security and implement real-name registration, you may still need to bind a valid mobile phone number when using other methods to log in or use certain functions of Yitongxing App. Collecting this information helps us create your Yitongxing App account. If you refuse to provide this information, it will affect your ability to register and use Yitongxing App.

2. Internet Ticket Purchase, QR Code Ride, NFC Ride

When you use internet ticket purchase services, we need to verify your identity and collect your name and ID document number to ensure your account and fund security. The collected information will be encrypted and stored, valid only during the use of your App account, and automatically deleted when you cancel your account. If you do not agree to provide this information, you may not be able to use these services, but this does not affect your use of other services we provide.

3. Suburban Rail Facial Recognition Gate Access Activation

To implement the real-name ride management requirements for suburban rail, if you choose to ride suburban rail, we provide you with "QR code + face" or "card + face" features Activating this feature requires your separate consent for us to collect and use your facial image information You can learn about the information processing rules in detail on the activation page and choose whether to agree voluntarily If you do not agree, you will not be able to ride suburban rail lines requiring facial verification.

You shall complete facial enrollment in the App following the instructions. The system will collect your facial image, which will be transmitted over the Internet using encrypted channels for secure transmission. The enrolled facial photo will be encrypted and stored on servers meeting national information security classified protection requirements for gate verification. The facial photo information is used only to verify your identity when passing through the gates.

Your facial photo will be stored only during the service's validity period and automatically deleted when you close the service. You can apply to close the service in the App or by contacting customer service hotline 96123. If you do not agree to provide this information, you may not be able to ride, but this does not affect your use of other services we provide.

4. Internet Shopping

When you make purchases on the Yitongxing Platform, we need to manage merchants according to laws, regulations, and regulatory requirements, and prevent cash-out or fraud risks. Therefore, we will directly collect or collect from merchants your order information, including mobile phone number, transaction amount, transaction counterparty, transaction goods, transaction time, delivery information (if any) . If you do not agree to us recording this information, you may not be able to complete the transaction, but this does not affect your use of other services we provide.

5．Financial Product Services

When you apply for financial product services on the Yitongxing Platform, you need to provide your Basic Information and Personal Identity Information according to the financial institution's requirements, including name, nationality, gender, occupation, address, contact information, bank card number, bank-registered mobile phone number, ID number, and biometric information. If you do not provide this information, you may not be able to use financial product services, but this does not affect your use of other services we provide.

6. Platform Activities

When you participate in activities on the Yitongxing Platform, we need to collect your mobile phone number, contact list, and relevant activity information. If you do not agree to us recording this information, you may not be able to participate in the activity, but this does not affect your use of other services we provide.

7. Navigation Service

You can choose to enable your phone's location permission to provide your location information, allowing you to receive ride service recommendations based on your location. If you do not provide this information, you will not receive such service recommendations, but this does not affect your use of other services we provide.

8. Electronic Invoicing

When you request an electronic invoice on the platform, we will collect your email address, traveler information, invoice header, and remarks based on the information you fill in. If you do not agree to us recording this information, you may not be able to request an electronic invoice, but this does not affect your use of other services we provide.

9. Customer Service

When you seek assistance from Yitongxing customer service, you need to provide your Basic Information, Device Information, Location Information, Travel Information, Order Information, and other log information related to Yitongxing services. If you do not provide this information, we will not be able to correctly verify your feedback and provide assistance, but this does not affect your use of other services we provide.

10. Device Serial Number (SN) Information Collection

To ensure device identification, account security verification, Huawei ecosystem service adaptation (for HarmonyOS version only), and application stability analysis, we collect your device serial number (SN) and transmit it encrypted to the service backend. This information is used only for the above business purposes, not for purposes other than identity identification, and is not disclosed externally. If you do not agree to provide it, it may affect some device adaptation and security verification services but does not affect core ride functions.

11. Clipboard Information Collection

To enable quick input, link recognition, and auxiliary prompts, we read the text content of your device's clipboard when you actively trigger related scenarios. This information collection is necessary only for implementing the relevant functions and is used only for the function you initiate. Only the current content is read, not uploaded, stored, or used for other purposes. You can enable or disable clipboard reading in My → Settings → Privacy Settings in the App. Disabling it does not affect core ride services. If you do not agree to reading, you will not be able to use quick functions dependent on the clipboard, but this does not affect other services.

12. Targeted Push and Personalized Recommendations

To provide you with more relevant services, travel information, activities, and offers, we may provide targeted push and personalized recommendations based on data that has been de-identified, such as your device information, location information, and travel behavior. This service is based on your consent to this Privacy Policy and is carried out for legitimate, necessary, and appropriate purposes to enhance service experience. You can turn off personalized recommendations/targeted push anytime in My → Settings → Privacy Settings in the App. After turning off, you will no longer receive targeted information but will still receive basic service notifications.

The above service types may require you to grant us access to your device's geographic location (location information), camera, photo album, microphone, contacts, and other device permissions to enable the collection and use of information for these functions. You can check the status of these permissions and enable or disable them at any time in the privacy module of your device's system (Settings → Privacy → Permission Management). Please note that enabling these permissions constitutes your authorization for us to collect and use this personal information to achieve the above functions. Disabling permissions or stopping use of the relevant service withdraws this authorization, and we will no longer collect or use your personal information for these purposes or provide the corresponding functions. Your decision to disable permissions does not affect the processing of personal information based on your prior authorization.

We may obtain account information (name, mobile phone number, ID number, nickname, avatar, gender) that you authorize to share from third parties (including but not limited to Alipay, WeChat, NetEase Weibo), and bind your third-party account to your Yitongxing account after you agree to this Privacy Policy, allowing you to log in and use our services through the third-party account. After confirming the legality of the source of personal information based on agreements with third parties, we will use this personal information in compliance with relevant laws and regulations.

Purposes of Information

You authorize us to use your personal information for the following purposes:

Provide you with Yitongxing Platform products and services, and manage and optimize Yitongxing Platform-related websites and Apps;

Enhance and improve the functionality and quality of existing Yitongxing Platform products and services, including but not limited to personalizing and updating product and service content;

Push more accurate travel service information, such as operation status changes and route adjustments, based on de-identified data;

Conduct market activities related to Yitongxing Platform products and services, and push the latest market activity information and offers;

Design, develop, and promote new products and services;

Improve the security of Yitongxing Platform products and services, including but not limited to identity verification, customer service, security prevention, fraud monitoring, archiving, and backup;

Assist administrative and judicial authorities and other competent bodies in investigations, and comply with applicable laws, regulations, and other obligations promised to competent authorities;

Purposes notified to you at the time of collection and other purposes related to any of the above;

Additionally, we may send you information and notifications related to the above purposes, including but not limited to verification codes necessary for service completion, necessary push notifications when using products or services, current fee discounts and reductions, news about Yitongxing Platform products or services, and market activities and promotional offers.

Use of Information

We will use the collected personal information to achieve our service functions in accordance with this Privacy Policy. Personal information collected and generated within the territory of the People's Republic of China will be stored within the territory of the People's Republic of China. If cross-border business is involved in the future and we need to transfer relevant personal information collected domestically to overseas institutions, we will comply with laws, regulations, and relevant regulatory authorities, explain the purpose of the cross-border transfer and the types of personal information involved, obtain your consent, and require overseas institutions to keep your personal information confidential through effective measures such as signing agreements and on-site verification.

After collecting your personal information, we will process the data through technical means. The processed personal information will no longer identify a specific individual and cannot be restored. You understand and agree that we have the right to use the processed information in this case, and we have the right to analyze and commercially utilize the user database without disclosing your personal information.

To enhance user experience and recommend higher quality or more suitable services, we may form group characteristic tags based on user information to provide marketing activity notifications, commercial electronic information, or advertisements that may interest you.

Please note that all personal information you provide while using our services will continue to be authorized for our use during your use of our services unless you delete it or set it to refuse collection through the system. When you cancel your account, we will stop using and delete your personal information.

We will generate statistics on the use of our services and may share these statistics with third parties to demonstrate the overall usage of our services, but these statistics do not contain any of your personally identifiable information.

Information Sharing

We promise to keep your information strictly confidential. Unless otherwise stipulated by laws, regulations, and regulatory authorities, we will share your information with third parties only in the following circumstances. Third parties include our affiliates, cooperative financial institutions, and other partners.

You authorize us to share your information with third parties under the following circumstances:

1. Sharing with Affiliates: To ensure public safety and health and epidemic prevention requirements, or to provide and improve the quality of products and services we offer you based on Yitongxing, or to provide you with new products and services, or to enhance your user experience, recommend information you may be interested in, identify abnormal user accounts, and protect the personal and property safety of Yitongxing affiliates, other users, or the public from harm, we may share your relevant information with affiliates and/or their designated service providers. This sharing will be limited to the necessary scope of personal information and is subject to the purposes and commitments stated in this Privacy Policy. If we share your personal sensitive information or if affiliates change the purpose of using and processing personal information, we will seek your authorization and consent again.

2. Sharing with Authorized Partners:

We may entrust authorized partners to provide you with certain services or perform functions on our behalf. We will share your information only for the legal, legitimate, necessary, specific, and clear purposes stated in this Privacy Policy. Authorized partners can only access the necessary information to perform their duties and cannot use this information for any other purpose. Our authorized partners include the following types:

(1) Transaction-Initiated Sharing:

When you purchase or use goods or services through Yitongxing, to complete the transaction and achieve its purpose, we will share necessary transaction-related information from your order with other providers of related goods or services according to your choice, to fulfill your transaction and after-sales service needs.

(2) Business Cooperation Sharing

a. Promotion and Analysis Service Partners: Unless permitted by you, we will not share your personal identity information with partners providing promotion and analysis services. We entrust these partners to process information related to promotion, advertising coverage, and effectiveness, but we will not provide your personal identity information, or we will de-identify such information so it does not identify you. These partners may combine this information with other data they have legally obtained to execute the promotion services or decision-making recommendations entrusted to us.

b. Information Processing Partners: To improve information processing efficiency, reduce costs, or increase accuracy, we may entrust capable affiliates or other professional organizations to process information on our behalf. We will require the entrusted companies to comply with strict confidentiality obligations and adopt effective confidentiality measures through written agreements, prohibiting them from using this information for purposes not authorized by you. Upon termination of the entrustment relationship, the entrusted company will no longer retain personal information. We commit to being responsible for this.

c. Suppliers, Service Providers, and Other Partners: We send information to suppliers, service providers, and other partners who support our business. This support includes technical infrastructure services entrusted to us, analysis of how our services are used, measuring the effectiveness of advertising and services, providing customer service, facilitating payments, or conducting academic research and surveys. We will conduct strict security checks on Application Programming Interfaces (APIs) and Software Development Kits (SDKs) used by authorized partners to obtain relevant information, and establish strict data protection measures with authorized partners, requiring them to process personal information according to our entrusted purposes, service descriptions, this Privacy Policy, and any other relevant confidentiality and security measures.

d. Partners Entrusting Us with Promotion: We may accept promotional services provided by other companies or individuals to user groups using our products or services. We may share indirect user profiles formed from your personal information with partners entrusting us with promotion ("entrusting parties"), but we will only provide information on the coverage and effectiveness of the promotion to these entrusting parties, without providing your personal identity information, so that it does not identify you.

The list of third parties involved in information sharing is as follows:

3. Dispute Resolution Sharing: To protect your legitimate rights and interests, when assisting in handling and resolving disputes or complaints related to you, we may provide necessary information to interested third parties, consumer protection authorities, regulatory bodies, and relevant dispute resolution institutions;

According to legal regulations and business practices, when we need to be subject to third-party audits or due diligence, we may provide your relevant information to them;

Other circumstances where you have consented or authorized us to provide your personal information to third parties.

Regarding Third-party Software Development Kits (SDKs) we integrate

To ensure the functionality and stable operation of the Yitongxing App, we may integrate third-party SDKs to achieve related purposes. We recommend that you refer to the relevant service agreements and personal information protection policies of the third-party SDKs to understand how they collect and use your personal information. The specific third-party SDKs used are as follows:

List of Third-party SDKs for iOS System

Android系统第三方SDK列表

HarmonyOS Next系统第三方SDK列表

Transfer of Information

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

(1) Having obtained your explicit prior consent;

(2) Pursuant to laws, regulations, or mandatory administrative or judicial requirements;

(3) In the event of asset transfer, acquisition, merger, reorganization, or bankruptcy liquidation involving the transfer of personal information, we will inform you of the relevant situation and require the new company or organization holding your personal information to continue to be bound by this Policy. If the purpose of using the personal information changes, we will require that company or organization to obtain your explicit consent again.

Public Disclosure of Information

We may publicly disclose your personal information in the following circumstances:

1. Having obtained your explicit consent or based on your active choice;

2. If we determine that you have violated laws, regulations, or seriously breached relevant Yitongxing agreements or rules, or to protect the personal and property safety of Yitongxing users or the public, or to protect national and public interests from harm, we may disclose your personal information, including relevant violations and measures taken by Yitongxing against you, in accordance with laws and regulations or with your consent.

According to relevant laws, regulations, and national standards, we may lawfully share, transfer, or publicly disclose your personal information without your consent in the following circumstances:

(1) Directly related to national security or defense security;

(2) Directly related to public safety, public health, or major public interests;

(3) Directly related to criminal investigations, prosecutions, trials, or enforcement of judgments;

(4) For the purpose of protecting your or another individual's significant legitimate rights and interests, such as life or property, where obtaining your consent is difficult;

(5) Personal information that you have disclosed to the public yourself;

(6) Personal information collected from legally publicly disclosed information, such as from legitimate news reports or government information disclosure channels.

Information Security and Protection Measures

We and our affiliates will use strict security systems and industry-standard security technologies and procedures to ensure that your personal information is not lost, leaked, damaged, or abused;

To ensure your information security, we are committed to using various security technologies and supporting management systems to minimize the risk of your information being leaked, damaged, misused, accessed, disclosed, or altered without authorization. For example, using Secure Sockets Layer (SSL) for encrypted transmission, encrypted information storage, and strict access control to data centers. When transmitting and storing personal sensitive information (including personal biometric information), we will adopt security measures such as encryption, access control, and de-identification. We will use industry-standard security technologies and procedures to protect your personal information from unauthorized access or use;

Our employees are bound by confidentiality agreements, as well as data information access control and operational monitoring;

However, please note that any security system carries potential and unknown risks.

Third-party website operators you visit, third-party service providers you use, and third parties that obtain your personal information through us may have their own privacy protection rules and methods for obtaining personal information. These third parties' privacy protection rules and methods for obtaining personal information are not under our control. Although we will sign confidentiality agreements with third parties such as our partners who may have access to your personal information and make reasonable efforts to urge them to fulfill their confidentiality obligations, we cannot guarantee that third parties will take confidentiality measures as required by us, nor do we assume any responsibility for the actions or consequences of third parties.

Collection and Processing of Minors' Personal Information

We attach great importance to the protection of minors' information. If you are a minor under 18 years old, you or your guardian need to carefully read this Policy and agree to your use of our services under this Policy. If you are a minor under 14 years old (hereinafter referred to as "child"), your guardian needs to carefully read this Policy and agree to your use under it.

If you/your guardian do not agree to any part of this Policy, you should immediately stop using our services.

Only when we determine that you are a child user based on the information you submit or your statements or representations, will the personal information collected through your account be considered child personal information.

We will process child personal information in accordance with this Policy. If there are substantial changes to the processing purposes, methods, scope, storage matters, security measures, etc., as stipulated in this Policy, we will obtain the guardian's consent again.

Collection and Use of Child Personal Information: The purposes, methods, and scope of our collection and use of child personal information will not exceed what is stated in this Policy. If we discover that we have collected child personal information without obtaining verifiable guardian consent in advance, we will take steps to delete the relevant information as soon as possible.

Sharing, Transfer, and Public Disclosure of Child Personal Information: Generally, we will not share, transfer, or publicly disclose child personal information to third parties. We will only share, transfer, or disclose child personal information with third parties with the guardian's consent. If sharing or transferring child personal information to a third party is necessary, we will conduct a security assessment ourselves or entrust a third-party institution to do so.

Entrusted Processing of Child Personal Information: Generally, we do not entrust third parties to process child personal information. If it is necessary to entrust a third party, we will take compliance measures in accordance with laws and administrative regulations, including but not limited to conducting a security assessment of the third party.

Storage of Child Personal Information: We will store child personal information in accordance with this Policy.

Correction and Deletion of Child Personal Information:

(1) The guardian or the child himself/herself may correct or delete personal information in accordance with the methods provided in the Policy.

(2) If the child or his/her guardian discovers that we have violated laws, administrative regulations, or the Policy by processing the child's personal information, or if the child's guardian withdraws his/her consent, or if the child or his/her guardian terminates the use of the service through cancellation or other means, the guardian may contact us to delete the relevant child's personal information.

(3) Internal management of child personal information: We adhere to the principle of minimum authorization for staff, strictly setting information access permissions and controlling the scope of access to child personal information. Staff access to child personal information requires approval, and we use technical measures to record access and prevent illegal copying or downloading of child personal information.

Emergency response and reporting of security incidents of the child's personal information:

(1) If we discover that a child's personal information has been or may be leaked, damaged or lost, we will immediately activate the emergency plan and take remedial measures.

(2) In the event of a security incident, we will promptly inform the child's guardian of the content and impact of the safety incident, the disposal measures we have taken or will take, suggestions for the child or his/her guardian to independently prevent and reduce risks, and the remedial measures we provide for the subject of the child's personal information.

(3) If we determine that information security incident of the child has caused or may cause serious consequences, we will immediately report to the relevant authorities.

Managing Your Personal Information

During your use of Yitongxing services, to facilitate your access to and management of your information, and to protect your right to cancel your account, we provide corresponding operational settings in the client application. You can follow the guidance below.

(1) Account and Security Information: Only one Yitongxing account can be registered per mobile phone number. To ensure your account security, if you need to change the real-name information registered in Yitongxing due to special circumstances such as changes in ID document information, you can contact Yitongxing customer service for re-verification and modification.

If you no longer wish to use Yitongxing, you can cancel your account by following the prompts in "My → Settings → Account & Security". After account cancellation, all your personal information and data on Yitongxing will no longer be retained.

Regarding your personal information and data obtained by the epidemic prevention and control, we will implement it in accordance with relevant epidemic prevention requirements.

(2) Access: You can log in to your Yitongxing account and access your personal information, travel information, order information, and payment channel information in "My → Settings". For your personal information security, your mobile phone number and ID number will be displayed with masking.

(3) Modification: You can modify your payment method according to the prompts in "My → Settings".

(4) Deletion: You can log in to your Yitongxing account and delete your travel information, order information, invoice information, and payment method information in "My → Settings".

Pursuant to the Personal Information Protection Law of the People's Republic of China, we will respond to your requests regarding personal information within 15 working days, effectively safeguarding your personal information rights and interests. You can contact customer service hotline 96123 for assistance.

To ensure information security, we will take necessary identity verification measures when handling your service requests to prevent impersonation.

If we detect that you are using the Yitongxing Platform, its products, services, or related information for fraud, infringement, or other illegal or improper activities, we will have the right to take appropriate measures, including suspending or terminating services, and reserve the right to pursue claims or seek compensation from you.

As the products and services of the Yitongxing Platform continue to evolve, the content of our Privacy Policy may be updated from time to time. For material or substantive changes to this Policy (including but not limited to significant changes in business models, purposes of personal information processing, usage methods, and personal information sharing), we will notify you through prominent means (such as a pop-up reminder upon startup) and obtain your consent again. If you do not agree to the revised content, you may choose to stop using the relevant services. If you continue to use our services, it means you agree to be bound by the revised Privacy Policy. We encourage you to regularly review the latest Privacy Policy to understand our latest measures for privacy protection.

Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy or your personal information, please contact us via customer service hotline 96123 or 4000196123.

Basic Information of Product Operator:

Product Name: Yitongxing APP

Company Name: Beijing Yitongxing Science and Technology Co., Ltd.

Registered Address/Office Address: 10th Floor, Tower 3, Jingtou Building, Xiaoying North Road, Chaoyang District, Beijing

Email Address: LD@yitongxing.com