The Xiaoxiang app (together with its companion apps Xiang Rider, Xiang Store and Xiang Driver, collectively "Xiaoxiang" or "the Service") is operated by 西双版纳大地神韵科技有限公司 ("we", "us"). This policy explains what personal data we collect, how we use and protect it, and the rights you have. We show you this policy when you first launch the app and ask for your consent before collecting any personal data.
| Category | Data | When |
|---|---|---|
| Account | Phone number or username, password (stored only as an irreversible hash), nickname, avatar, Elephant ID, email address (optional; for password recovery and account protection) | On sign-up, sign-in and email binding |
| Communications | Text, images, voice, video, files and location messages you send or receive; group information; friend list within the app | When you chat; content is stored on our servers for delivery and multi-device sync |
| Location | Precise device location | When you use the map, navigation, nearby, ride-hailing or food delivery; and for a compliance check of whether you are inside the service area. Riders and drivers are tracked continuously during an active delivery or trip, possibly in the background, so customers can follow progress An optional "Improve location" setting, enabled only with your explicit consent at first launch or when you start navigation, anonymously uploads (no account data; the anonymous identifier changes every 24 hours) nearby Wi-Fi and cell-tower observations (including 5G), and, during navigation, your route (position, speed, heading, altitude, air pressure, satellite signal quality) and phone model, to improve maps and positioning accuracy; it is off by default and can be turned off anytime under Settings → Privacy → Data & improvement, which also deletes any data not yet uploaded from your device |
| Orders | Delivery, pick-up and destination addresses, contact phone, order items, amount, time | When you order food, dine in or hail a ride |
| Camera, photos, microphone | Photos and videos you choose to capture or upload, voice recordings, audio/video streams during calls | Only when you take a photo, send an image, scan a QR code, record a voice message or make a call |
| Device identifier (Android ID) | Android ID, a device identifier assigned by the Android system. Purposes: to identify your device when you sign in or register and to manage your signed-in devices; to address push notifications to your device (it is also read by the Huawei and Xiaomi push SDKs, see Section 3); and to check whether your device is inside the service area. Retention: kept with your account's device records for the life of the account and deleted or anonymised within 15 days after account deletion | Read only after you have agreed to this policy, and only when you sign in or register, when a push channel registers, or when the app checks the service area (also as a guest before sign-in, if you have allowed location); never before your consent |
| Device and logs | Device model, OS version, app version, language, network type, IP address, push token (on iOS: the device token and VoIP token issued by the Apple Push Notification service, generated by Apple, valid only for this app on this device, stored on our servers to address offline wake-up alerts, deleted when you sign out; on Android: the push token assigned by the device maker's push service (Huawei, Honor, Xiaomi, OPPO, vivo, Meizu) or Google FCM, stored on our servers to address offline wake-up alerts, deleted when you sign out), access timestamps and API logs, and app diagnostic logs (uploaded only on our request to troubleshoot a fault; never containing chat content; when the app crashes, the most recent diagnostic log lines, which may include your position at the time and your account identifier, are attached to the crash report, see Section 3) (on by default; can be turned off under Settings → Privacy → Data & improvement) | Collected automatically while you use the Service, for security, troubleshooting and push delivery |
We do not collect call logs, SMS or government ID data, we do not track you for advertising, and we do not embed any third-party advertising or analytics SDK.
We do not sell your personal data. We share it only as follows:
Data is stored in the AWS Singapore region and on the Cloudflare global network; app configuration, static files and app downloads are additionally mirrored on Alibaba Cloud (Shenzhen) and Tencent Cloud EdgeOne. These locations may be outside your country.
After account deletion, all of the above is deleted or anonymised within 15 days, except records we must keep by law.
All network traffic is TLS-encrypted; passwords are stored only as hashes; file and media access requires signed authorisation; server access is access-controlled and audited. No internet service is perfectly secure, so please keep your password safe.
The Service is intended for adults. We do not offer it to persons under 18 and do not knowingly collect their data. If you believe we have collected data from a minor, contact us and we will delete it.
Updates are published on this page with a new effective date; material changes are also announced in the app and, where required, we will ask for your consent again.
西双版纳大地神韵科技有限公司
Email: privacy@banna.org
We reply within 15 working days.
「小象」App(含配套的小象骑手、小象商家、小象司机端,以下合称「小象」或「本服务」)由西双版纳大地神韵科技有限公司(以下简称「我们」)运营。本政策说明我们如何收集、使用、存储和保护您的个人信息,以及您享有的权利。我们会在您首次启动 App 时向您展示本政策,并在征得您的同意后才开始收集个人信息。
| 类别 | 内容 | 何时收集 |
|---|---|---|
| 账号信息 | 手机号或用户名、密码(仅存储不可逆的加密摘要)、昵称、头像、小象号、电子邮箱(可选,用于找回密码与账号保护) | 注册、登录与绑定邮箱时 |
| 通讯内容 | 您发送和接收的文字、图片、语音、视频、文件、位置消息,群组信息,好友关系 | 使用聊天功能时;内容存储在服务器以便投递与多设备同步 |
| 位置信息 | 设备的精确位置 | 使用地图、导航、附近、叫车、外卖配送时;以及为判断您是否处于服务区域而进行的合规检查。骑手与司机在配送或行程进行中会持续采集位置(可能在后台),以便顾客查看进度。另有一项可选的「帮助改进定位」:经您在首次启动时或开始导航时明确同意后,匿名上传(不含账号信息,匿名标识每 24 小时更换)周围的 Wi-Fi 与基站(含 5G)观测,以及导航期间的行驶轨迹(位置、速度、方向、海拔、气压、卫星信号质量)和手机型号,用于改进地图与定位精度;默认关闭,可随时在 设置→隐私→数据与改进 关闭,关闭时尚未上传的数据会从设备上删除 |
| 订单信息 | 收货/上车/目的地地址、联系电话、订单内容、金额、下单时间 | 使用外卖、堂食点餐、打车时 |
| 相机、相册、麦克风 | 您选择拍摄或上传的照片与视频、录制的语音、通话中的音视频流 | 仅在您主动拍照、发送图片、扫码、发语音、发起音视频通话时 |
| 设备标识符(Android ID) | Android ID,即 Android 系统分配的设备标识符。用途:登录、注册时识别您的设备并管理您的登录设备;向您的设备定向发送推送;判断设备是否处于服务区域(第三方 SDK 读取情况见第三节,其中华为推送、小米推送也会读取)。保存期限:随账号的设备记录保存,账号存续期间保留,注销账号后 15 日内删除或匿名化 | 仅在您同意本政策之后读取,且仅在登录/注册、推送通道注册、App 判断服务区域时(含登录前的游客态,且您已允许定位)读取;同意之前不读取 |
| 设备与日志 | 设备型号、系统版本、应用版本、语言、网络类型、IP 地址、推送标识(iOS 为 Apple 推送通知服务(APNs)分配的设备令牌与 VoIP 来电令牌,由 Apple 生成、仅对本设备上的本 App 有效,存于我们的服务器以寻址离线提醒,退出登录即删除;Android 为设备厂商推送服务(华为/荣耀/小米/OPPO/vivo/魅族)或 Google FCM 分配的推送 token,存于我们的服务器以寻址离线提醒,退出登录即删除)、访问时间与接口日志、App 运行诊断日志(为排查故障,经我们的指令上传,不含聊天内容;默认开启,可在 设置→隐私→数据与改进 关闭;App 异常退出时,最近的诊断日志片段——可能含当时的位置坐标与账号标识——会随崩溃报告一并发送,见第三节) | 使用本服务期间自动收集,用于安全、故障排查与推送送达 |
我们不收集您的通话记录、短信、身份证件信息,不做广告追踪,不接入任何第三方广告或分析 SDK。
我们不会出售您的个人信息。仅在以下情形共享:
数据存储于 Amazon Web Services 新加坡区域及 Cloudflare 全球网络;App 配置、静态文件与安装包另在阿里云(深圳)与腾讯云 EdgeOne 镜像。您在使用本服务时,数据可能在您所在国家/地区之外传输与存储。
账号注销后,除法律要求保留的记录外,上述信息将在 15 日内删除或匿名化。
所有网络传输使用 TLS 加密;密码仅存储加密摘要;文件与媒体访问需要经过签名授权;服务器访问受访问控制与审计约束。尽管如此,互联网环境并非绝对安全,请妥善保管您的账号与密码。
本服务面向成年人。我们不面向未满 18 周岁的未成年人提供服务,也不会有意收集其个人信息。如您发现我们误收集了未成年人的信息,请联系我们删除。
本政策更新时,我们会在本页面发布新版本并更新生效日期;重大变更会在 App 内提示,并在需要时再次征得您的同意。
西双版纳大地神韵科技有限公司
电子邮箱:privacy@banna.org
我们将在收到您的请求后 15 个工作日内答复。