亿通行APP是北京如易行科技有限公司自主开发的一款致力于为民众提供更为便捷、高效的出行+生活消费服务的平台，北京如易行科技有限公司（以下或称“我们”）尊重并保护您的隐私。为了遵守国家法律法规及监管规定，也为了向您提供服务及提升服务质量，我们需要收集、存储、使用及对外提供您的信息。 您同意我们按照本政策约定处理您的信息，以便您享受优质、便捷、个性化的服务，同时更好地保护您的信息安全。

我们将按照法律法规的要求和亿通行APP隐私政策（以下简称“本政策”）收集、使用、共享和保护您的个人信息。在您使用亿通行平台的产品及服务前，请您仔细阅读并全面了解本政策。如果您是未成年人或其他无民事行为能力人或限制民事行为能力人，您的监护人需要仔细阅读本政策并同意您依照本政策使用我们的产品或服务。 对于本政策中与您的权益存在重大关系的条款，我们已将字体加粗以提示您注意。当您浏览、访问亿通行平台及/或使用亿通行平台的产品或服务时，即表示您已经同意我们按照本政策来收集、使用、共享和保护您的个人信息。

本政策不适用于其他第三方向您提供的服务，也不适用于亿通行平台中已另行独立设置隐私政策的产品或服务。

信息的收集范围

我们收集您的以下个人信息：

个人信息是指以电子或者其他方式记录的能够单独或者与其他信息结合识别特定自然人身份或者反映特定自然人活动情况的各种信息。本隐私政策中涉及的个人信息包括:基本信息、个人身份信息、网络身份标识信息、订单信息、设备信息、位置信息、个人敏感信息。其中

基本信息 包括个人姓名、性别、住址、个人电话号码、电子邮箱；

个人身份信息 包括身份证信息(如身份证、护照)、生物特征（人脸照片）；

网络身份标识信息 包括系统账号、IP地址、邮箱地址及与前述有关的密码、口令、口令保护答案；

订单信息 包括交易和消费记录、支付状态、支付渠道、银行卡号、红包及优惠券；

设备信息 包括硬件型号、设备MAC地址、操作系統类型、软件列表唯一设备识别码(如IMEI、Android ID、IDFA、IDFV、OAID、IMSI及其它标识符）、设备序列号、应用信息（应用崩溃信息、通知开关状态、软件列表相关信息）、剪切板、设备传感器（含陀螺仪传感器,加速度传感器、重力传感器等）、设备参数及系统信息（SIM卡、IMSI信息、设备类型、设备型号、操作系统及硬件相关信息）SD卡数据)在内的描述个人常用设备基本情況的信息；

位置信息 包括行程信息、精准定位信息(IP地址、GPS位置以及能够提供相关信息的WLAN接入点、蓝牙和基站传感器信息、出发地、到达地、出行轨迹；

个人敏感信息 是指一旦泄露非法提供或用可能危害人身和财产安全极易导致个人名誉、身心健康受到损害或歧视性待遇的个人信息。 本隐私政策中涉及的个人敏感信息包括:您的基本信息、个人身份信息、人脸照片;网络身份识别信息;订单信息、其他信息(包括个人电话号码、手机号码、位置信息)。

信息的收集方法

您授权我们通过以下方法收集您的个人信息：

1、注册账户

在您注册亿通行账户时，您需提供 手机号码 作为账户登录名。如您不提供前述信息，将无法注册亿通行账户并无法享受亿通行提供的所有服务。

为了向您提供更优质的产品和服务，在您以其他方式关联登录亿通行APP时，我们会向关联第三方请求您的个人信息(姓名、手机号、证件号码、昵称、头像、电子邮箱地址)。如果您选择不提供为实现亿通行APP核心业务功能的必备信息或使用其中某类功能的必备信息，将导致我们无法为您提供快捷登录功能.

为了确保账号安全和落实网络实名制，在您使用其他方式关联登录、使用亿通行APP的某些功能时，您可能仍然需要绑定有效的手机号码。收集这些信息是为了帮您创建 亿通行APP账号，如果您拒绝提供这些信息，将影响您注册使用亿通行APP。

2、互联网购票、二维码乘车、NFC乘车

在您进行互联网购票业务时， 我们需要对您的身份进行验证，需采集您的姓名、证件号码信息，以确保您的账户与资金安全。采集的信息将加密进行存储，信息采集后仅在APP账户使用期间有效，当您注销账号时自动删除。 如您不同意提供前述信息，则可能无法使用上述服务，但不影响您使用我们提供的其他服务。

3、市郊铁路人脸过闸开通乘车

为落实市郊铁路实名制乘车管理要求，如您选择乘坐市郊铁路，我们为您提供了“人脸过闸”功能。开通此功能需要您单独同意我们收集和使用您的面部图像信息。 您可以在开通页面详细了解信息处理规则，并自主选择是否同意。如果您不同意，您将无法乘坐市郊铁路人脸核验线路。 您需在APP内按指引完成人脸录入。系统将采集您的面部图像，图像会通过互联网传输但使用加密通道进行安全传输。录入的人脸照片将加密存储于用于过闸验证环节符合国家信息安全等级保护要求的服务器中。人脸照片信息仅用于过闸时比对是否为您本人乘车使用。 您的人脸照片仅在业务使用有效期间存储，在您关闭业务时自动进行删除。您可在APP中自助申请或联系客服热线96123申请关闭业务。如您不同意提供前述信息，则可能无法进行乘车，但不影响您使用我们提供的其他服务。

4、互联网购物

当您在亿通行平台进行消费时，我们需要按照法律法规及监管规定对商家进行管理，防范套现或欺诈风险，因此，我们将直接收集或向商家收集您的 订单信息，包括手机号码、交易金额、交易对象、交易商品、交易时间、配送信息（如有）。 如您不同意我们记录前述信息，则可能无法完成交易，但不影响您使用我们提供的其他服务。

5．金融产品服务

当您在亿通行平台办理金融产品服务时，您需按照金融机构的要求提供您的 基本信息及个人身份信息 包括 姓名、国籍、性别、职业、住址、联系方式、银行卡号、银行预留手机号码以及证件号码、生物特征信息。 如您不提供前述信息，可能无法使用金融产品服务，但不影响您使用我们提供的其他服务。

6、平台活动

当您在亿通行平台参加活动时，我们需要收集您的 手机号码、通讯录及相关活动中的相关信息。 如您不同意我们记录前述信息，则可能无法参与活动，但不影响您使用我们提供的其他服务。

7、导航服务

您可以选择开启手机的定位权限，用于提供您的 位置信息， 以便您基于所在地点位置接受乘车服务推荐；如您不提供前述信息，您将不会收到该等服务推荐，但不影响您使用我们提供的其他服务。

8、客户服务

在您向亿通行客服寻求服务时，您需提供您的 基本信息、设备信息、位置信息、行程信息、订单信息以及其他与亿通行服务相关的日志信息。 如您不提供前述信息，我们将无法对您的反馈意见进行正确核实并提供帮助，但不影响您使用我们提供的其他服务。

上述服务类型可能需要您在您的设备中向我们开启您的地理位置(位置信息)、相机(摄像头)、相册(图片库)、麦克风、通讯录以及其他设备访问权限，以实现这些功能所涉及的信息的收集和使用。您可以在手机设备系统的隐私模块(设置一隐私一权限管理)中逐项查看您上述权限的开启状态，并可以决定将这些权限随时的开启或关闭。请您注意，您开启这些权限即代表您授权我们可以收集和使用这些个人信息来实现上述的功能，您关闭权限即代表您取消了这些授权，则我们将不再继续收集和使用您的这些个人信息，也无法为您提供上述与这些授权所对应的功能。您关闭权限的决定不会影响此前基于您的授权所进行的个人信息的处理。

我们可能从第三方（包括但不限于支付宝、微信、网易微博）获取您授权共享的账户信息（姓名、手机号、证件号码、昵称、头像、性别），并在您同意本隐私政策后将您的第三方账户与您的亿通行账户绑定，使您可以通过第三方账户登录并使用我们的服务。我们会依据与第三方的约定，在对个人信息来源的合法性进行确认后，在符合相关法律和法规规定的前提下，使用您的这些个人信息。

信息的用途

您授权我们出于以下用途使用您的个人信息：

向您提供亿通行平台的产品及服务，并进行亿通行平台相关网站及APP的管理和优化；

提升和改善亿通行平台现有产品及服务的功能和质量，包括但不限于产品及服务内容的个性化定制及更新；

开展亿通行平台产品及服务相关的市场活动，向您推送最新的市场活动信息及优惠方案；

设计、开发、推广全新的产品及服务；

提高亿通行平台产品及服务安全性，包括但不限于身份验证、客户服务、安全防范、诈骗监测、存档和备份；

协助行政机关、司法机构等有权机关开展调査，并遵守适用法律法规及其他向有权机关承诺之义务；

在收集信息之时所通知您的用途以及与上述任何用途有关的其他用途；

此外，我们可能向您发送与上述用途有关的信息和通知，包括但不限于为保证服务完成所必须的验证码、使用产品或服务时所必要的推送通知、当前费用优惠及减免信息、关于亿通行平台产品或服务的新闻以及市场活动及优惠促销信息。

信息的使用

我们会根据本隐私政策的约定为实现我们的服务功能对所收集的个人信息进行使用。我们在中华人民共和国境内收集和产生的个人信息将存储在中华人民共和国境内。如将来涉及跨境业务，我们需要向境外机构传输境内收集的相关个人信息的，我们会按照法律法规和相关监管部门的规定执行，向您说明个人信息出境的目的以及涉及的个人信息类型，征得您的同意，并通过签订协议、现场核查等有效措施，要求境外机构为所获得的您的个人信息保密。

在收集您的个人信息后，我们将通过技术手段对数据进行处理，经过技术处理后的个人信息将无法识别至特定个人且不能复原。请您了解并同意，在此情况下我们有权使用处理后的信息；并在不透露您个人信息的前提下，我们有权对用户数据库进行分析并予以商业化的利用。

为了提升用户服务体验，为用户推荐更为优质或适合的服务，我们可能会根据用户信息形成群体特征标签，用于向用户提供其可能感兴趣的营销活动通知、商业性电子信息或广告。

请您注意，您在使用我们的服务时所提供的所有个人信息，除非您删除或通过系统设置为拒绝收集，否则将在你使用我们的服务期间持续授权我们使用。在您注销账户时，我们将停止使用并删除您的个人信息。

我们会对我们的服务使用情况进行统计，并可能与第三方共享这些统计信息，以展示我们服务的整体使用情况，但这些统计信息不包含您的任何身份识别信息。

信息的共享

我们承诺对您的信息进行严格保密。除法律法规及监管部门另有规定外，我们仅在以下情形中与第三方共享您的信息，第三方包括我们的关联公司、合作金融机构以及其他合作伙伴。

您授权我们在下列情况下将您的信息与第三方共享：

1、关联方共享：为了保证公共安全、卫生防疫要求，或为了提供和提升我们基于亿通行向您提供的产品及服务质量或向您提供全新的产品及服务、或提升您的用户体验，推荐您可能感兴趣的信息，识别用户账号异常，保护亿通行关联公司或其他用户或公众的人身财产安全免遭侵害，我们可能会向关联方和/或其指定的服务提供商共享您的相关信息。这种共享将限制在必要的个人信息范围内，且受本隐私政策中所声明目的和承诺的约束，如果我们共享您的个人敏感信息或关联公司改变个人信息的使用及处理目的，将再次征求您的授权同意。

例如为落实疫情防控工作部署，提高广大市民公共交通乘车防疫安全，亿通行APP根据相关主管部门防疫要求，使用您的身份信息，查询与防疫有关的行程卡、健康码、核酸检测、疫苗接种等信息。

2、授权合作方共享：

我们可能委托授权合作方为您提供某些服务或代表我们履行职能，我们仅会出于本隐私政策声明的合法、正当、必要、特定、明确的目的共享您的信息，授权合作方只能接触到其履行职责所需的必要信息，且不得将此信息用于其他任何目的。我们的授权合作方包括以下类型：

(1)交易主动选择共享：

您通过亿通行购买或使用商品或服务的，为了让您完成交易、实现交易目的，我们会根据您的选择将您的订单信息中与交易有关的必要信息共享给交易其他相关商品或服务的提供者，以实现您的交易及售后服务需求。

(2)业务合作共享

a.推广、分析服务类的授权合作方。除非得到您的许可，否则我们不会将您的个人身份信息与提供推广、分析服务的合作方共享。我们会委托这些合作方处理与推广、广告覆盖面和有效性相关的信息，但不会提供您的个人身份信息，或者我们将这些信息进行去标识化处理，以便它不会识别您个人。这类合作方可能将上述信息与他们合法获取的其他数据相结合，以执行我们委托的推广服务或决策建议。

b.信息处理合作方。为了提升信息处理效率，降低信息处理成本，或提高信息处理准确性，我们可能会委托有能力的我们的关联公司或其他专业机构代表我们来处理信息。我们会通过书面协议等方式要求受托公司遵守严格的保密义务及采取有效的保密措施，禁止其将这些信息用于未经您授权的用途。在委托关系解除时，受托公司不再保存个人信息。我们承诺对此负责。

c.供应商、服务提供商和其他合作方。我们将信息发送给支持我们业务的供应商、服务提供商和其他合作方，这些支持包括受我们委托提供的技术基础设施服务、分析我们服务的使用方式、衡量广告和服务的有效性、提供客户服务、支付便利或进行学术研究和调查。我们会对授权合作方获取有关信息的应用程序接口（API）、软件工具开发包（SDK）进行严格的安全检测，并与授权合作方约定严格的数据保护措施，令其按照我们的委托目的、服务说明、本隐私政策以及其他任何相关的保密和安全措施来处理个人信息。

d.委托我们进行推广的合作方。我们可能会接受其他企业、个人向使用我们产品与或服务的用户群提供促销推广的服务。我们可能会使用您的个人信息集合成的间接用户画像与委托我们进行推广的合作方（“委托方”）共享，但我们仅会向这些委托方提供推广的覆盖面和有效性的信息，而不会提供您的个人身份信息，以便它不会识别您个人。

3、争议解决共享：为了维护您的合法权益，在协助处理和解决与您有关的纠纷或争议（包括投诉）时，我们可能会向存在利害关系的第三方、消费者权益保护部门及监管机关、有关争议解决机构等提供解决纠纷或争议所必需的信息；

根据法律法规的规定及商业惯例，我们需要接受第三方的审计或尽职调査时，可能向其提供您的相关信息；

其他经您同意或授权可以向第三方提供您的个人信息的情况。

关于我们所接入的第三方软件开发工具包（SDK）

为保障亿通行APP相关功能的实现与应用的稳定运行，我们可能会接入于第三方提供的软件开发包（SDK）以实现相关目的。第三方如何收集、使用您的个人信息，建议您参考第三方SDK的相关服务协议及个人信息保护政策。具体第三方SDK使用情况如下：

IOS系统第三方SDK列表

Android系统第三方SDK列表

HarmonyOS Next系统第三方SDK列表

信息的转让

我们不会将您的个人信息转让给任何公司、组织和个人，但以下情况除外：

（1）事先获得您的明确同意；

（2）根据法律法规或强制性的行政或司法要求；

（3）在涉及资产转让、收购、兼并、重组或破产清算时，如涉及到个人信息转让，我们会向您告知有关情况，并要求新的持有您个人信息的公司、组织继续受本政策的约束。如变更个人信息使用目的时，我们将要求该公司、组织重新取得您的明确同意。

信息的公开披露

我们在以下情形下可能会公开披露您的个人信息：

1、获得您明确同意或基于您的主动选择；

2、如果我们确定您出现违反法律法规或严重违反亿通行相关协议及规则的情况，或为保护亿通行用户或公众的人身财产安全、保护国家、公共利益免遭侵害，我们可能依据法律法规或征得您同意的情况下披露关于您的个人信息，包括相关违规行为以及亿通行已对您采取的措施。

根据相关法律法规及国家标准，在以下情形中，我们可能会依法共享、转让、公开披露您的个人信息无需征得您的同意：

（1）与国家安全、国防安全直接相关的；

（2）与公共安全、公共卫生、重大公共利益直接相关的；

（3）与犯罪侦查、起诉、审判和判决执行等直接相关的；

（4）出于维护您或其他个人的生命、财产等重大合法权益但又很难得到您本人同意的；

（5）您自行向社会公众公开的个人信息；

（6）从合法公开披露的信息中收集的个人信息，例如：合法的新闻报道、政府信息公开等渠道。

信息的安全及保护措施

我们及我们的关联方将采用严格的安全制度以及行业通行的安全技术和程序来确保您的个人信息不被丢失、泄露、毀损或滥用；

为保障您的信息安全，我们致力于使用各种安全技术及配套的管理体系来尽量降低您的信息被泄露、毁损、误用、非授权访问、非授权披露和更改的风险。例如：通过网络安全层软件（SSL）进行加密传输、信息加密存储、严格限制数据中心的访问。传输和存储个人敏感信息（含个人生物识别信息）时，我们将采用加密、权限控制、去标识化等安全措施。我们将使用行业通行的安全技术和程序，来保护您的个人信息不被未经授权的访问、使用；

我们的员工将受到保密协议的约束，同时还将受到数据信息的权限控制和操作监控；

但是，请您注意，任何安全系统都存在可能的及未知的风险。

您访问的第三方网站经营者、您使用的第三方服务提供者和通过我们获取您的个人信息的第三方可能有自己的隐私权保护规则以及获取您个人信息的方法和措施，这些第三方的隐私权保护规则、获取个人信息的方法和措施将不会受到我们的控制。虽然我们将与可能接触到您的个人信息的我们的合作方等第三方签署保密协议并尽合理的努力督促其履行保密义务，但我们无法保证第三方一定会按照我们的要求采取保密措施，我们亦不对第三方的行为及后果承担任何责任。

未成年人的个人信息收集和处理

我们非常重视对未成年人信息的保护。如果您是未满18周岁的未成年人，您或您的监护人需要仔细阅读本政策，并同意依照本政策使用我们的服务。如果您是未满14周岁的未成年人（以下称“儿童”），您的监护人需要仔细阅读本政策并同意您依照本政策使用。

如果您/您的监护人不同意本政策的任何内容，您应该立即停止使用。

当且仅当我们通过您提交的信息或者您的声明或陈述，判断您为儿童用户时，我们通过您账号收集的个人信息才被视为儿童个人信息。

我们将按照本政策的约定处理儿童个人信息，当本政策约定的处理目的、方式、范围，存储事项，安全保障措施等发生了实质性变化，我们将再次征得监护人的同意。

儿童个人信息的收集、使用：我们收集、使用儿童个人信息的目的、方式与范围，不会超过我们在本政策中列明的内容。如果我们发现在未事先获得可证实的监护人同意的情况下收集了儿童的个人信息，则会设法尽快删除相关信息。

儿童个人信息的共享、转让、公开披露：一般情况下，我们不会向第三方共享、转让、公开披露儿童的个人信息。我们仅在监护人同意的情况下，才可能与第三方共享、转移、披露儿童的个人信息。如需向第三方共享、转让儿童个人信息，我们将自行或者委托第三方机构进行安全评估。

儿童个人信息的委托处理：一般我们不会委托第三方处理儿童个人信息，如确需委托第三方处理的，我们会根据法律、行政法规的规定进行合规措施，包括但不限于对第三方进行安全评估。

儿童个人信息的存储：我们会按照本政策的约定存储儿童个人信息。

儿童个人信息的更正、删除：

（1）监护人或者儿童本人可以按照本政策提供的方式更正、删除个人信息。

（2）如果儿童或其监护人发现我们违反法律、行政法规的规定或者本政策处理儿童个人信息，或者儿童监护人撤回同意，或者儿童或其监护人通过注销等方式终止使用服务的，可以联系我们对相关儿童个人信息进行删除。

（3）儿童个人信息的内部管理。我们对工作人员以最小授权为原则，严格设定了信息访问权限，控制儿童个人信息知悉范围。工作人员访问儿童个人信息需经过审批，我们采取了技术措施记录访问情况，避免违法复制、下载儿童个人信息。

儿童个人信息的安全事件应急处置和报告：

（1）我们发现儿童个人信息发生或者可能发生泄露、毁损、丢失的，将立即启动应急预案，采取补救措施。

（2）一旦发生安全事件，我们将及时向儿童监护人告知：安全事件的内容和影响；我们已采取或将要采取的处置措施；关于儿童或其监护人自主防范和降低风险的建议；我们针对儿童个人信息主体提供的补救措施。

（3）如果我们判断儿童信息安全事件已经造成或者可能造成严重后果，我们将立即向有关主管部门报告。

管理您的个人信息

在您使用亿通行服务期间，为了您可以更加便捷地访问和管理您的信息，同时保障您注销账户的权利，我们在客户端中为您提供了相应的操作设置，您可以参考下面的指引进行操作。

（1） 账户及安全信息： 一个手机号码只允许注册一个亿通行账户。为保障您的账户安全，如果您由于证件号码信息变更等特殊情况，需要变更亿通行中登记的实名信息，您可联系亿通行客服进行重新核实和修改。

如您不再想使用亿通行，您可以在“我的 → 设置→账号与安全”中根据页面提示自助进行操作来注销账户。账户注销后您在亿通行的所有个人信息及数据将不再保留。

有关防疫所获取的您的个人信息数据，我们将按照相关防疫要求执行。

（2）查阅：您可通过登录亿通行个人账户，在 “我的 → 设置”中查阅您的个人信息、行程信息、订单信息、支付渠道信息。为了您的个人信息安全，您的手机号码和证件号码会进行脱敏展示；

（3）修改：您可以在“我的 → 设置”中根据页面提示对您的支付方式进行修改。

（4）删除：您可通过登录亿通行个人账户，在 “我的 → 设置”删除您的行程信息、订单信息、发票信息及支付方式信息。

根据《个人信息保护法》规定，我们将在15 个工作日内响应您关于个人信息的诉求，切实保障您的个人信息权益。您可联系客服热线96123获取协助。

为确保信息安全，在受理您的服务请求时，我们会采取必要的身份验证措施，防范他人冒领。

若监测到您利用亿通行平台、其产品、服务、相关信息实施欺诈、侵权等不法违法违规行为或用于违法违规用途，我们将有权采取包括中止或终止服务在内的相应措施，并保留向您追诉或追偿的权利。

随着亿通行平台的产品及服务的进一步提升，我们的隐私政策的内容会随时更新。对于本政策的重大或实质性变更（包括但不限于业务模式、个人信息处理目的、使用方式及个人信息共享情况发生重大变化），我们将通过显著方式（启动弹屏提醒）通知您，并重新获取您的同意。 若您不同意变更后的内容，您可以选择停止使用相关服务；若您继续使用我们的服务，即表示您同意受修订后的隐私政策约束。 我们鼓励您定期查看最新的隐私政策以了解我们对于隐私保护的最新措施。

联系我们

如您对本隐私政策或您个人信息的相关事宜有任何问题意见或建议，请拨打96123或4000196123客服热线与我们联系。

产品运营者基本情况：

产品名称：亿通行APP

公司名称:北京如易行科技有限公司

注册地址/办公地址：北京市海淀区花园路甲13号院7号楼11层1106-6

邮箱号：LD@ruubypay.com

Ruubypay App is a platform independently developed by Beijing Ruubypay Science and Technology Co., Ltd., dedicated to providing more convenient and efficient travel and lifestyle consumption services for the public. Beijing Ruubypay Science and Technology Co., Ltd. (hereinafter referred to as “We”) respects and protects your privacy. In order to comply with national laws, regulations and regulatory requirements, as well as to provide you with services and improve service quality, we need to collect, store, use and provide your information to the public. You agree that we will process your information in accordance with the Policy so that you can enjoy high-quality, convenient and personalized services while better protecting the security of your information.

We will collect, use, share and protect your personal information in accordance with the requirements of laws and regulations and the Ruubypay App Privacy Policy (hereinafter referred to as "the Policy"). Before using the products and services of Ruubypay Platform, please carefully read and fully understand the Policy. If you are a minor or another person without civil capacity or with limited civil capacity, your guardian needs to carefully read the Policy and agree to your use of our products or services in accordance with the Policy. For the terms of the Policy that are materially related to your rights and interests, we have bold the font to remind you to pay attention. When you browse and access Ruubypay Platform and/or use the products or services of Ruubypay Platform, it shall be deemed that you agree that we will collect, use, share and protect your personal information in accordance with the Policy.

The Policy does not apply to services provided to you by other third parties, nor does it apply to products or services on Ruubypay Platform that have separately established privacy policies.

Scope of Information Collection

We collect the following personal information about you:

Personal information refers to various types of information recorded electronically or in other ways that can be used separately or in combination with other information to identify the identity of a specific natural person or reflect the activities of a specific natural person. Personal information covered in the privacy policy includes basic information, personal identity information, network identification information, order information, device information, location information and sensitive personal information. Specifically,

Basic information includes personal name, gender, address, personal phone number and email address;

Personally identifiable information includes ID card, military officer certificate, driver's license and biometric features (facial recognition, iris and fingerprint recognition);

Network identification information includes system account, IP address, email address, and passwords, passcodes/passphrases, and security challenge answers related to the foregoing;

Order information includes transaction and consumption records, payment status, payment channel, bank card number, red envelopes and coupons;

Device information includes hardware model, device MAC address, operating system type, software list unique device identification code (such as IMEI, Android ID, IDFA, IDFV, OAID, IMSI and other identifiers), device serial number, application information (application crash information, notification switch status and software list related information), clipboard, device sensors (mainly including sensors with gyroscopes, and acceleration and gravity sensors), device parameters and system information (SIM card, IMSI information, device type and model, operating system and hardware related information), SD card data), which describes the basic condition of commonly-used personal devices;

Location information includes journey information, precise positioning information (IP address, GPS location, WLAN access points that can provide relevant information, Bluetooth and base station sensor information, departure and arrival locations, and travel records);

Personal sensitive information refers to personal information that, if leaked, illegally provided or used, may pose a threat to personal and property safety and could easily lead to damage to personal reputation, physical and mental health, or discriminatory treatment. Sensitive personal information involved in the privacy policy includes your basic information, personal identification information, network identification information, order information and other information (including personal phone number, mobile phone number and location information).

Information Collection Methods

You authorize us to collect your personal information through the following methods:

1. Account Registration

When registering for a Ruubypay account, you need to provide your phone number as the account login name. If you do not provide the above information, you will not be able to register for a Ruubypay account and will not be able to enjoy all the services provided by Ruubypay.

In order to provide you with better products and services, when you log in to Ruubypay APP in other ways, we will request your personal information (name, phone number, ID number, nickname, avatar and email address) from the associated third party. If you choose not to provide the necessary information for implementing the core business functions of Ruubypay APP or for using a certain type of function, we will not be able to provide you with a quick login function.

In order to ensure account security and implement network real-name registration, you may still need to bind a valid mobile phone number when you use other methods to log in or use certain functions of Ruubypay APP. The information is collected to help you create a Ruubypay APP account. If you refuse to provide such information, it will affect your registration to use Ruubypay APP.

2. Ticket Purchase via the Internet

When you purchase tickets via the Internet, we need to verify your identity to ensure the security of your account and funds. You need to provide, including but not limited to, your name and ID number. If you do not agree to provide the above information, you may not be able to complete the ticket purchase via Internet, but it will not affect your use of other services provided by us.

3. Enjoying riding service by scanning the QR code, swiping the NFC, or passing through the gate through facial recognition

As Ruubypay APP riding service operates under the "ride first, pay later" mechanism (Post-payment Mode), we need to verify your identity when you use Ruubypay APP for QR Code Authentication Access, NFC validation riding, or face recognition riding to ensure the security of your account and funds. You are required to provide, including but not limited to, your name, ID number and personal biometric information. If you do not agree to provide the above information, you may not be able to take the subway, but it does not affect your use of other services we provide.

4. Shopping via the Internet

When you make purchases on Ruubypay Platform, we need to manage merchants in accordance with laws, regulations and regulatory requirements to prevent cash out or fraud risks. Therefore, we will directly collect or collect your order information from merchants, including mobile phone number, transaction amount, transaction object, transaction product, transaction time, and delivery information (if any). If you do not agree to our recording of the above information, the transaction may not be completed, but it does not affect your use of other services we provide.

5．Financial Product Services

When you apply for financial product services on Ruubypay Platform, you need to provide your basic information and personally identifiable information as required by the financial institution, including name, nationality, gender, occupation, address, contact information, bank card number, bank-reserved mobile phone number, ID number and biometric information. If you do not provide the above information, you may not be able to use financial products and services, but it will not affect your use of other services provided by us.

6. Platform Activities

When you participate in activities on Ruubypay Platform, we need to collect your phone number, contact list and relevant information in related activities. If you do not agree to our recording of the aforementioned information, you may not be able to participate in the activity, but it does not affect your use of other services we provide.

7. Navigation Service

You may choose to enable the location permission on your phone to provide your location information, so that you can receive ride service recommendations based on your location. If you do not provide the above information, you will not receive such service recommendations, but it will not affect your use of other services we provide.

8. Customer Service

When you seek services from Ruubypay Customer Service, you need to provide your basic information, device information, location information, travel information, order information and other log information related to Ruubypay Service. If you do not provide the above information, we will not be able to verify your feedback correctly and provide assistance, but it will not affect your use of other services we provide.

The above service types may require you to grant us access to your geographic location (location information), camera (camcorder), photo album (photo gallery), microphone, contacts and other device access permissions on your device to collect and use the information involved in these functions. You may check the enabled status of the above permissions item by item in the privacy module (Settings - Privacy - Rights Management) of your mobile device system, and decide whether to enable or disable these permissions at any time. Please note that by activating these permissions, it is deemed that you authorize us to collect and use the personal information to achieve the above functions. Revocation of permissions through deactivation shall constitute immediate withdrawal of such authorization, and we will no longer continue to collect and use your personal information, nor will we be able to provide you with the functions corresponding to these authorizations. Your decision to revoke permissions will not affect the processing of personal information based on your previous authorization.

We may obtain the account information (name, mobile phone number, ID number, nickname, avatar and gender) you authorize to share from third parties (including but not limited to Alipay, WeChat, and Netease Weibo), and bind your third-party account to your Ruubypay account after you agree to the privacy policy, so that you can log in and use our services through a third-party account. We will use your personal information based on agreements with third parties, after confirming the legality of the source of the personal information, and in compliance with relevant laws and regulations.

Use of Information

You authorize us to use your personal information for the following purposes:

To provide you with products and services of Ruubypay Platform, and to manage and optimize related websites and APPs of Ruubypay Platform；

To enhance and improve the functionality and quality of existing products and services on Ruubypay Platform, including but not limited to personalized customization and updates of product and service content；

To carry out market activities related to products and services of Ruubypay Platform, and push you the latest market activity information and preferential schemes;

To design, develop and promote new products and services;

To improve the security of products and services of Ruubypay Platform, including but not limited to identity verification, customer service, security prevention, fraud monitoring, archiving and backup;

To assist administrative and judicial organs and other competent authorities in conducting investigations, and comply with applicable laws, regulations and other commitments made to the competent authorities;

The purposes notified to you at the time of information collection and any other purposes related to the purposes mentioned above;

Furthermore, we may send you information and notifications related to the above purposes, including but not limited to verification codes required to ensure service completion, push notifications required for using products or services, current fee discounts and exemptions, news about products or services of Ruubypay Platform, as well as market activities and promotional information.

Application of Information

We will use the collected personal information in accordance with the provisions of the privacy policy to achieve our service functions. The personal information we collect and generate in the territory of the People's Republic of China will be stored in the territory of the People's Republic of China. If cross-border business is involved in the future and we need to transmit relevant personal information collected in China to overseas institutions, we will implement it in accordance with laws, regulations and the provisions of relevant regulatory authorities, explain to you the purpose of transferring your personal information abroad and the types of personal information involved, obtain your consent, and require overseas institutions to keep your personal information confidential through effective measures such as signing agreements and on-site verification.

After collecting your personal information, we will process the data through technical means. The personal information after technical processing will not be identified to a specific individual and cannot be restored. Please understand and agree that we are entitled to use the processed information in such case. We have the right to analyze and commercially utilize the user database without disclosing your personal information.

In order to enhance the user service experience and recommend higher-quality or suitable services to users, we may form group characteristic labels based on user information to provide the user with marketing activity notifications, commercial electronic information or advertisements that they may be interested in.

Please note that all personal information you provide when using our services will continue to be authorized for us to use during your use of our services, unless you delete it or set it to refuse collection through the system. When you cancel your account, we will stop using and delete your personal information.

We will conduct statistics on the use of our services and may share the statistical information with third parties to demonstrate the overall use of our services, but the statistical information does not include any of your personally identifiable information.

Sharing of Information

We promise to keep your information strictly confidential. Unless otherwise stipulated by laws, regulations and regulatory authorities, we only share your information with third parties in the following circumstances, including our affiliated companies, cooperative financial institutions and other partners.

You authorize us to share your information with third parties in the following circumstances:

1. Sharing by related parties: In order to ensure public safety, health and epidemic prevention requirements, or to provide and improve the quality of products and services we provide to you based on Ruubypay, or to provide you with brand-new products and services, or to enhance your user experience, we may recommend information that you may be interested in, identify abnormal user accounts, and protect the personal and property safety of affiliated companies of Ruubypay or other users or the public from infringement. We may share your relevant information with related parties and/or their designated service providers. The sharing will be limited to the necessary personal information scope and subject to the purposes and commitments stated in the privacy policy. If we share your sensitive personal information or if our affiliated companies change the purpose of using and processing your personal information, we will seek your authorization and consent again.

For instance, in order to implement the deployment of epidemic prevention and control work and improve the safety of public transport for the general public, Ruubypay APP used your identity information to query information such as travel cards, health QR codes, nucleic acid testing, vaccination and other information related to epidemic prevention in accordance with the epidemic prevention requirements of relevant competent departments.

2. Authorization for Sharing of Partners:

We may entrust authorized partners to provide you with certain services or perform functions on our behalf. We will only share your information for the legal, legitimate, necessary, specific and clear purposes stated in the privacy policy statement. Authorized partners can only access the necessary information they need to perform their duties and may not use the information for any other purpose. Our authorized partners include the following types:

(1) Proactively Choosing to Share Transactions:

If you purchase or use goods or services through Ruubypay, in order to complete the transaction and achieve the transaction purpose, we will share the necessary information related to the transaction in your order information with the providers of other related goods or services according to your choice, so as to meet your transaction and after-sales service needs.

(2) Business Cooperation Sharing

a. Authorized partners for promotion and analysis services. Unless we obtain your permission, we will not share your personally identifiable information with partners who provide promotion and analysis services. We will entrust these partners to handle information related to promotion, advertising coverage and effectiveness, but we will not provide your personally identifiable information, or we will de-identify the information so that it does not identify you personally. Such partners may combine the above information with other data they legally obtain to carry out our commissioned promotional services or decision-making recommendations entrusted by us.

b. Information processing partner. In order to improve information processing efficiency, reduce information processing costs, or enhance information processing accuracy, we may entrust our affiliated companies or other professional organizations with the ability to process information on our behalf. We will require the entrusted company to comply with strict confidentiality obligations and take effective confidentiality measures through written agreements and other means, prohibit it using the information for purposes that are not authorized by you. When the entrusted relationship is terminated, the entrusted company will no longer retain personal information. We promise to take responsibility for this.

c. Suppliers, service providers and other partners. We send information to suppliers, service providers and other partners who support our business, including providing technical infrastructure services commissioned by us, analyzing how our services are used, measuring the effectiveness of advertising and services, providing customer service, facilitating payment or conducting academic research and surveys. We will conduct strict security checks on the application programming interfaces (APIs) and software development kits (SDKs) used by authorized partners to obtain relevant information, and agree with authorized partners on strict data protection measures to process personal information in accordance with our entrusted purposes, service instructions, the privacy policy, and any other relevant confidentiality and security measures.

d. The partner who entrusted us with promotion. We may accept promotional services provided by other companies or individuals to user groups who use our products and/or services. We may use your personal information to create indirect user profiles and share them with the partner who entrusts us with promotion ("the client"), but we will only provide information on the coverage and effectiveness of the promotion to these clients, and will not provide your personally identifiable information so that it will not identify you personally.

3. Dispute resolution sharing: In order to protect your legitimate rights and interests, when assisting in the handling and resolution of disputes or controversies (including complaints) related to you, we may provide information required for resolving disputes or controversies to interested third parties, consumer rights protection departments and regulatory agencies and relevant dispute resolution institutions; According to legal regulations and business practices, when we need to receive third-party audits or due diligence, we may provide you with relevant information;

According to legal regulations and business practices, when we need to receive third-party audits or due diligence, we may provide you with relevant information;

Other circumstances where your personal information can be provided to third parties with your consent or authorization

Regarding the Third-party Software Development Kit (SDK) that we Access

To ensure the implementation of functions related to Ruubypay APP and the stable operation of the application, we may integrate software development kits (SDKs) provided by third parties to achieve related purposes. How do third parties collect and use your personal information? It is recommended that you refer to the relevant service agreements and personal information protection policies of third-party SDKs. The specific use condition of third-party SDKs is as follows:

List of Third-party SDKs for IOS System

List of Third-party SDKs for Android System

List of Third-party SDKs for HarmonyOS Next System

Transfer of Information

We will not transfer your personal information to any company, organization or individual, except in the following circumstances:

(1) Having obtained your explicit consent in advance;

(2) In accordance with laws, regulations or mandatory administrative or judicial requirements;

(3) When it involves asset transfer, acquisition, merger, restructuring or bankruptcy liquidation, in case that it involves the transfer of personal information, we will inform you of the relevant condition and require new companies or organizations holding your personal information to continue to be bound by the Policy. If the purpose of using personal information is changed, we will require the company or organization to re-obtain your explicit consent.

Public Disclosure of Information

We may publicly disclose your personal information in the following circumstances:

1. Having obtained your explicit consent or based on your initiative selection;

2. If we determine that you have violated laws and regulations or seriously violated the relevant agreements and rules of Ruubypay, or to protect the personal and property safety of Ruubypay users or the public, and to protect the national and public interests from infringement, we may disclose your personal information, including relevant violations and measures taken by Ruubypay against you, in accordance with laws and regulations or with your consent.

According to relevant laws, regulations and national standards, we may lawfully share, transfer or publicly disclose your personal information without your consent in the following circumstances:

(1) Directly related to national security and defense security;

(2) Directly related to public safety, public health and major public interests;

(3) Directly related to criminal investigation, prosecution, trial and execution of judgments;

(4) For the purpose of safeguarding your or other individuals' significant legitimate rights and interests such as life and property, but it is difficult to obtain your consent;

(5) Personal information you disclose to the public on your own;

(6) Personal information collected from legally-disclosed information, such as from legitimate news reports, government information disclosure and other channels.

Information Security and Protection Measures

We and our related parties will use strict security systems and industry standard security technologies and procedures to ensure that your personal information will not be lost, leaked, damaged or abused;

To ensure your information security, we are committed to using various security technologies and supporting management systems to minimize the risks of your information being leaked, damaged, misused, accessed, disclosed, and altered without authorization, such as encrypted transmission through network secure socket layer (SSL), encrypted information storage and strictly restricted access to data centers. When transmitting and storing personal sensitive information (including personal biometric information), we will adopt security measures such as encryption, access control and de-identification. We will use industry standard security technologies and procedures to protect your personal information from unauthorized access and use;

Our employees will be subject to confidentiality agreements, as well as access control and operational monitoring of data information;

However, please note that any security system carries potential and unknown risks.

The third-party website operators you visit, the third-party service providers you use, and the third parties who obtain your personal information through us may have their own privacy protection rules and methods and measures for obtaining your personal information, which will not be under our control. Although we will sign confidentiality agreements with third parties such as our partners who may have access to your personal information and make reasonable efforts to urge them to fulfill their confidentiality obligations, we cannot guarantee that third parties will take confidentiality measures as required by us, and we should not assume any responsibility for the actions and consequences of third parties.

Collection and Processing of Personal Information of Minors

We attach great importance to the protection of information of minors. If you are a minor under the age of 18, you or your guardian must carefully read the Policy and agree to use our services in accordance with the Policy. If you are a minor under the age of 14 (hereinafter referred to as the "child"), your guardian needs to carefully read the Policy and agree to your use in accordance with the Policy.

If you/your guardian do not/does not agree with any content of the Policy, you should immediately stop using it.

Personal information collected through your account will be considered as child personal information if and only if we determine that you are a child user based on the information you submit or your statement or representation.

We will process the child's personal information in accordance with the provisions of the Policy. When there are substantial changes in the processing purpose, method, scope, storage matters and security measures stipulated in the Policy, we will obtain the consent of the guardian again.

The collection and use of the child's personal information: The purpose, method and scope of our collection and use of the child's personal information will not exceed the content listed in the Policy. If we discover that personal information of the child has been collected without obtaining verifiable consent from his/her guardian in advance, we will try our best to delete the relevant information as soon as possible.

Sharing, transfer and public disclosure of the child's personal information: Generally, we will not share, transfer or publicly disclose the child's personal information to any third party. We may only share, transfer or disclose the child's personal information with third parties with the consent of his/her guardian. If we need to share or transfer the child's personal information to third parties, we will conduct our own security assessment or entrust a third-party institution to conduct the security assessment.

Entrusted processing of the child's personal information: Generally, we do not entrust third parties to process the child's personal information. If it is indeed necessary to entrust a third party to process, we will take compliance measures in accordance with laws and administrative regulations, including but not limited to conducting security assessments on the third party.

Storage of the child's personal information: We will store the child's personal information in accordance with the provisions of the Policy.

Correction and deletion of the child's personal information:

(1) The guardian or the child himself/herself may correct or delete personal information in accordance with the methods provided in the Policy.

(2) If the child or his/her guardian discovers that we have violated laws, administrative regulations, or the Policy by processing the child's personal information, or if the child's guardian withdraws his/her consent, or if the child or his/her guardian terminates the use of the service through cancellation or other means, the guardian may contact us to delete the relevant child's personal information.

(3) Internal Management of the Child's Personal Information. We strictly set information access permissions for our working personnel based on the principle of minimum authorization, and control the scope of the child's personal information access. Working personnel accessing the child's personal information requires approval, and we have taken technical measures to record the access condition to avoid illegal copying and downloading of the child's personal information.

Emergency response and reporting of security incidents of the child's personal information:

(1) If we discover that a child's personal information has been or may be leaked, damaged or lost, we will immediately activate the emergency plan and take remedial measures.

(2) In the event of a security incident, we will promptly inform the child's guardian of the content and impact of the safety incident, the disposal measures we have taken or will take, suggestions for the child or his/her guardian to independently prevent and reduce risks, and the remedial measures we provide for the subject of the child's personal information.

(3) If we determine that information security incident of the child has caused or may cause serious consequences, we will immediately report to the relevant authorities.

Management of Your Personal Information

During your use of Ruubypay Service, in order to facilitate your access and management of your information and protect your right to cancel your account, we have provided you with corresponding operation settings in the client side. You can refer to the following instructions for operation.

(1) Account and security information: Only one Ruubypay account can be registered for one mobile phone number. To ensure the security of your account, if you need to change your real name information registered in Ruubypay due to special circumstances such as changes in your ID number information, you can contact Ruubypay customer service for re-verification and modification.

If you no longer want to use Ruubypay, you can cancel your account as prompted on the page in "My → Settings → Account and Security". After account cancellation, all your personal information and data on Ruubypay will no longer be retained.

Regarding your personal information and data obtained by the epidemic prevention and control, we will implement it in accordance with relevant epidemic prevention requirements.

(2) View: You can log in to your Ruubypay personal account and view your personal, travel and order information, and payment channel information in "My → Settings". For the security of your personal information, your mobile phone number and identification number will be anonymized and displayed;

(3) Modification: You may modify your payment method according to the prompts on the page in "My → Settings".

(4) Deletion: You may log in to your Ruubypay personal account and delete your information of travel, order, invoice and payment method in "My → Settings".

If we monitor and find that you are using the products, services and related information of Ruubypay Platform for fraudulent or illegal purposes, we will take corresponding measures, including but not limited to suspending or terminating the provision of any products or services to you.

With the further improvement of products and services on Ruubypay Platform, the content of our privacy policy will be updated at any time. Once the updated privacy policy is published on Ruubypay Platform, it will effectively replace the original privacy policy. We encourage you to regularly review the latest privacy policy to understand our latest measures for privacy protection.

Contact Us

If you have any questions, comments or suggestions regarding the privacy policy or your personal information, please call our customer service hotline at 96123 or 4000196123.

Basic Information of Product Operator:

Product Name: Ruubypay APP

Company Name: Beijing Ruubypay Science and Technology Co., Ltd.

Registered Address/Office Address: 1106-6, Floor 11, Building 7, Compound 13, Huayuan Road, Haidian District, Beijing

Email Address: LD@ruubypay.com