MeetU RWA 移动端隐私政策草案 / Mobile Privacy Policy Draft

本草案适用于 MeetU RWA 移动应用（iOS bundle ID 与 Android application ID：com.meetu.rwa）以及与应用直接相连的账户、交易、托管和客服功能。

This draft covers the MeetU RWA mobile apps and the account, trading, custody, and support features directly connected to them.

运营主体法定名称、注册地址、隐私联系人和适用监管地区：需用户提供并经法务终审。

Legal operator name, registered address, privacy contact, and regulated territories:user input and legal approval required.

以下类别由当前产品入口与 iOS 隐私清单推导，尚不是经运营、全部 SDK/处理者与法务共同核准的最终数据清单。提交前必须逐字段核对实际收集、用途、共享对象和保留方式。 / The categories below are inferred from current product entry points and the iOS privacy manifest; they are not yet a final inventory approved against every SDK, processor, operator fact, and legal requirement. Each field, purpose, recipient, and retention action must be verified before submission.

• 注册与联系信息：邮箱、账户标识、语言与通知偏好。
• 身份与合规信息：姓名、地址、证件影像、活体或验证结果及 KYC/AML 证据。
• 财务与交易信息：余额、订单、持仓、充提、钱包地址及对账记录。
• 设备与安全信息：IP、设备标识、登录时间、安全事件、推送 token 与审计日志。
• 用户提交内容：客服工单、附件、相机或相册中由用户主动选择的资料。

We process registration/contact data, identity and compliance evidence, financial and transaction records, device and security data, push tokens, audit records, and content that the user submits to support or identity-verification flows.

数据用于提供账户与交易服务、身份验证、反洗钱与制裁筛查、托管和结算、欺诈防范、安全告警、客服、争议处理、审计和法定义务。正式文本须按目标地区逐项确认合同履行、法定义务、合法利益或同意等处理依据。

Data is used to deliver account and trading services, verify identity, perform AML and sanctions screening, support custody and settlement, prevent fraud, issue security alerts, provide support, resolve disputes, maintain audits, and meet legal obligations. The final policy must map each purpose to a lawful basis in every launch territory.

草案预计仅为提供服务或履行法律义务，才会向身份验证、托管/钱包、经纪与交易通道、云基础设施、通知与安全服务商提供必要数据。正式发布前须补充实际处理者、处理地点、跨境机制和地区性披露，并逐地区确认“出售/共享/定向广告”的法定定义与真实事实；当前尚无经用户与法务确认的“未出售/未共享”商店声明。

The draft anticipates that necessary data may be disclosed to identity-verification, custody/wallet, brokerage/trading, cloud, notification, and security providers only to deliver the service or meet legal duties. The final version must name or categorize the actual processors, locations, transfer safeguards, and territory-specific disclosures, and verify the facts and local definitions of sale, sharing, and targeted advertising. No user-and-legal-approved “not sold/not shared” store declaration exists yet.

普通账户数据在实现目的所需期间保存；会话与推送 token 在账户关闭时撤销或清除。交易、资金、KYC/AML、制裁筛查、审计和争议记录可能因金融监管、反洗钱、税务或诉讼保全义务继续保存。正式政策须填写每类记录的具体期限和法律依据。

Ordinary account data is retained only as needed for its purpose; sessions and push tokens are revoked or cleared when the account is closed. Trading, funds, KYC/AML, sanctions, audit, and dispute records may be retained where financial, AML, tax, or litigation obligations require it. Exact periods and legal bases remain a legal-review item.

用户可在适用法律范围内请求访问、更正、导出、限制处理或删除数据。账户删除步骤与保留说明见账户删除页面；登录后也可在设置页直接发起关闭。

Subject to applicable law, users may request access, correction, export, restriction, or deletion. See theaccount deletion pageor initiate closure from Settings after signing in.

平台采用传输加密、最小权限、凭证保护和审计留痕等措施；任何系统均不存在绝对安全保证。草案拟将产品限定于可依法使用相关金融服务的成年人，但目标地区年龄门槛、未成年人访问控制和儿童数据结论尚待产品、用户与法务逐地区确认。若处理方式发生实质变化，生效政策应在应用或网站中提示并更新日期。

The platform uses transport encryption, least privilege, credential protection, and audit trails, but no system can guarantee absolute security. The draft proposes limiting the service to adults legally eligible for the relevant financial services; territory-specific age thresholds, minor-access controls, and the children-data conclusion still require product, user, and legal confirmation. An effective policy should announce material changes in the app or on the website and update its date.

当前可登录后通过客服工单联系平台。商店提交前还须由用户提供可公开访问的隐私邮箱、运营主体和邮寄地址。

Signed-in users may currently contact the platform throughsupport tickets. A public privacy email, operator identity, and postal address must be supplied before store submission.