Privacy Policy

Last Updated: April 7, 2020

Welcome to UOKA Cam (the “Platform”). The Platform is provided and controlled by Bytedance Pte. Ltd. (“we” or “us”). We are committed to protecting and respecting your privacy. This policy sets out the basis on which any information we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your information and how we will treat it. By accessing or using the Platform, services, applications, products and content (collectively, the “Services”), you are accepting and consenting to the practices described in this policy. For purposes of this privacy policy, “you” and “your” means you as the user of the Services.

1. The types of information we collect

We may collect and use the following information about you:

Information you provide to us directly:  When you register or otherwise interact with the Services, you may be invited to provide access to your camera application and photographs.  

Information we collect automatically:  In addition to the information you provide to us directly, we may collect information about your use of the Services. For example, we may collect:

· Technical information we collect about you and device information, including unique device and other identifiers, IP address, mobile carrier, time zone setting, mobile phone area, language option, mobile or device model, device manufacturer, operating system, camera parameters, CPU and/or GPU information and information regarding your use of the Platform.

· Behavioral information we collect about you. We also collect inferences, internet or other electronic network activity information (e.g., 4G, 5G, wifi), and information regarding your use of the Services, e.g., photo shooting acts, shooting scenes, filter selection, filter preference.

Information we obtain from other sources: We may receive information about you from other sources, including through third-party services or providers.  For example, if you access third-party services, such as Facebook, Google, or Twitter, through the Services to login to the Services or to share information about your experience on the Services with others, we may collect information from these third-party services.

2. How we use your information

We will use the information in the following ways:

We may use your information to:

· personalize the content you receive and provide you with tailored content (e.g., stickers, filters, emojis) that may be of interest to you;

· notify you about changes to our Service;

· provide you with user support;

· enforce our terms, conditions and policies; and

· communicate with you.

As it is in our legitimate interests to be responsive to you and to ensure the proper functioning of our products and organization, we may use your information to:

· improve the Platform and to ensure content from the Platform is presented in the most effective manner for you and your device;

· administer the Platform and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

· allow you to participate in interactive features of the Platform, when you choose to do so;

· keep the Platform safe and secure; and

· develop our Platform and conduct product development.

We may also use your information with your consent or at your direction.

3. How we share your information

We don’t sell any of your information and we impose restrictions on how partners can use the data we provide. We may disclose the categories of personal information discussed above for a business purpose to selected third parties in or outside your country, including with:

· our suppliers and subcontractors who help us run the Platform;

· data analytics, crash analytics, and search engine providers that assist us in the improvement and optimization of the Platform.

We may share your information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, or companies that we control, are controlled or under common control, and our service providers and strategic business partners, in each case in or outside your country, for the purposes set out above, as permitted by applicable law, to assist in the improvement and optimization of the Platform, or for our internal business purposes.

We may share your information with law enforcement agencies, public authorities or other organizations if legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:

· comply with legal obligation, process or request;

· enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;

· detect, prevent or otherwise address security, fraud or technical issues; or

· protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).

We may also disclose your information to third parties:

· in the event that we sell or buy any business or assets in which case we may disclose your information to the prospective seller or buyer of such business or assets; or

· if we sell, buy, merge, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, user information may be among the transferred assets.

In this case, we will ensure that the terms of this policy are observed and will inform you in advance if the transfer implies any change to these terms.

Finally, we may share information otherwise with your consent or at your direction.

4. Third-party content

The Services may contain links to content maintained by third parties who we do not control. We are not responsible for the privacy practices of these third parties, and the information practices of these third parties are not covered by this Privacy Policy.   

5. Where we store your information

The information that we collect from you may be transferred to, and stored at, a destination outside of your country, including in Singapore, for the purposes as described in this policy. It may also be processed by staff, for example senior data engineers, operating outside your country who work for us, for one of our suppliers or one of our business partners. By submitting your information, you agree to this transfer, storing or processing. We will take reasonable steps to secure your information and treat it in accordance with this policy.

6. The security of your information

We will take reasonable steps to secure your information and treat it in accordance with this policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your information, we cannot guarantee the security of your information transmitted through the Platform. We have put in place technical and organizational measures that we will amend and update from time to time to improve the overall security of our systems.

7. Data retention

We will delete your information upon request. Otherwise, we will use the following criteria to determine the period for which we will keep your information:

· our contractual obligations and rights in relation to the information involved;

· legal obligations under applicable laws and regulations to retain data for a certain period of time;

· statute of limitations under applicable laws;

· our legitimate business purposes; and

· disputes or potential disputes.

After you have terminated your use of our Services, we may store your information in an aggregated and anonymized format. Notwithstanding the foregoing, we may also retain any personal information as reasonably necessary to comply with our legal obligations, allow us to resolve and litigate disputes, and to enforce our agreements.

8. Information relating to children

The Platform is not directed at children under the age of 13. Users under the relevant age are not allowed to use the Platform. If we become aware that personal information has been collected from a person under the relevant age, we will delete the user’s information in accordance with applicable law. If you believe that we may have information about or collected from a child under the relevant age, please contact us at the address at the end of this policy.

9. Complaints

In the event that you wish to make a complaint about how we process your personal information, please contact us in the first instance at the email address at the end of this policy and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with your information protection authority or follow the dispute process.

10. Changes

We will use commercially reasonable efforts to generally notify all users of any material changes to this policy, such as through a notice on our Platform, however, you should look at this policy regularly to check for such changes. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. Your continued access to or use of the Services after the date of the updated policy constitutes your consent to the updated policy. If you do not consent to the updated policy, you must stop accessing or using the Services.

11. Contact

Questions, comments and requests regarding this policy are welcomed and should be addressed to:

Bytedance Pte. Ltd.

Email Address: uoka@bytedance.com

SUPPLEMENTAL TERMS – JURISDICTION-SPECIFIC

In the event of a conflict between the provisions of the Supplemental Terms – Jurisdiction-Specific that are relevant to your jurisdiction from which you access or use the Services, and the rest of the policy, the relevant jurisdictions’ Supplemental Terms – Jurisdiction-Specific will supersede and control.

United States

If you are using our Services in the United States, the following additional terms apply:

· California Privacy Rights

If you are a California resident, under California law you may request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year.

Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and/or across different websites. Our products do not support Do Not Track requests at this time.

Effective January 1, 2020, the CCPA allows California residents to request that a business that collects a consumers’ personal information provide them access, upon a verifiable consumer request, to the personal information that the business has collected about the consumer, the categories of sources for that information, the business or commercial purposes for collecting the information, the categories of third parties with which the information was shared, and the specific pieces of their personal information.  If you are a California resident, you also have right to request this information in a portable format and submit a request for deletion of your information under certain circumstances. Consistent with California law, if you choose to exercise either of these rights, we will not charge you different prices or provide different qualities of services unless those differences are related to your information. Please submit your request via the following method:

uoka@bytedance.com

We do not sell personal information to third parties for purposes of the CCPA. We may permit third parties to collect personal information through our Services and share each of the categories of personal information described above with third parties for business purposes. These business purposes are described above and include providing advertising on our products and services and elsewhere based on users’ online activities over time and across different sites, services, and devices (so-called “interest-based advertising”) and website and online service analytics. The information practices of these third parties are not covered by this policy.

Brazil

If you are using our Services in Brazil, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Applicable Law and Jurisdiction. These terms, their subject matter and their formation, are governed by Brazilian law. You and we both agree that the courts of Brazil will have exclusive jurisdiction.

Parental and Guardian Consent. If you are over the age of 16 but under the age of 18, you declare that you had the consent of your parent or legal guardian to use the Services and to agree to this Privacy Policy term. If you are under the age of 16, your parent or legal guardian must agree to these terms, otherwise you cannot use the Services.

Change to the terms. In the case of relevant changes that require the user´s consent, we will present the new Terms to obtain your consent.

Request for Information or Deletion of Personal Data. If you wish to (i) obtain information about how and which of your personal data is collected, used, stored and processed when using the Services, or (ii) submit a deletion request of your information, please submit your request via the following method: uoka@bytedance.com.