Privacy Policy

Version Updated: July 20, 2026

Introduction

Shenzhen Ciyun Interactive Technology Co., Ltd. (hereinafter referred to as "we" or "our") fully understands the importance of personal information to you, and your trust is very important to us. We will strictly comply with the requirements of laws and regulations, take corresponding security protection measures, and are committed to protecting the security of your personal information.

We hope that this Privacy Policy (hereinafter referred to as "this Policy") clearly introduces to you how Cun.com (hereinafter referred to as "this Platform") collects, uses, stores, shares, transfers, publicly discloses, and protects your personal information, and how you may manage your personal information.

This Policy applies to your access to and use of this Platform's services through the web terminal (Cun.com website), the corresponding mobile application (App), and all other forms. The foregoing terminals are collectively referred to as "this Platform". No matter which terminal you use to access this Service, you are bound by this Policy.

Before using this Platform's services, please carefully read and fully understand this Policy. If you do not agree with any provision of this Policy, you should immediately stop accessing or using this Platform. When you confirm this Policy by checking a box, clicking confirm, agreeing to authorization, or other means, it means that you have agreed to accept the binding effect of this Policy.

This Policy will help you understand the following:

• I. Definitions and Scope of Application
• II. How We Collect and Use Your Personal Information
• III. How We Use Cookies and Similar Technologies
• IV. How We Share, Transfer, and Publicly Disclose Your Personal Information
• V. How We Store Your Personal Information
• VI. How We Protect Your Personal Information
• VII. How You Manage Your Personal Information
• VIII. Protection of Minors' Personal Information
• IX. How This Policy Is Updated
• X. How to Contact Us

I. Definitions and Scope of Application

(I) Definitions

1. "Cun.com" or "this Platform": refers to the AI API service platform operated by Shenzhen Ciyun Interactive Technology Co., Ltd., including but not limited to the Cun.com website and its corresponding mobile application (App), mini programs, API interfaces, and any other terminal products in any form, collectively referred to as "this Platform". 2. This Service: refers to the AI model API calling services provided by us through Cun.com, including but not limited to AI capability access services such as text generation, image generation, video generation, and audio generation.

3. User/You: refers to any individual, legal person, or other organization that registers, logs in to, or uses this Platform's services.

4. Personal Information: refers to various information recorded electronically or otherwise that can identify a specific natural person alone or in combination with other information, or reflect the activities of a specific natural person.

5. Sensitive Personal Information: refers to personal information that, once leaked or illegally used, may easily cause harm to the dignity of a natural person or endanger personal or property safety, including biometric identification, religious beliefs, specific identity, medical health, financial accounts, location tracking, and other information, as well as personal information of minors under the age of fourteen.

6. User Content: refers to all text, images, videos, audio, and other information content uploaded, entered, generated, published, or transmitted by users through this Platform.

7. Generated Content: refers to text, images, videos, audio, and other content generated by users through this Platform's AI models.

8. Deletion: refers to the act of removing personal information from systems involved in daily business functions, so that it remains in a state in which it cannot be retrieved or accessed.

9. Anonymization: refers to the process of technically processing personal information so that the personal information subject cannot be identified and the processed information cannot be restored.

Unless otherwise agreed, the definitions used in this Policy have the same meanings as those in the Cun.com User Service Agreement.

(II) Scope of Application

1. This Policy applies to the Cun.com platform and all products and services provided to you in new forms that emerge with technological development.

2. Except for the information collection and use activities described in this Policy, this Policy does not apply to services provided to you by other third parties. Other services are subject to the privacy policies and other personal information collection and use rules separately explained to you by such third parties.

3. It should be particularly noted that, as a user of Cun.com, if you use the technology or services we provide to further develop downstream systems or applications for your end users or provide services to them, the processing rules for personal information collected from end users are not within the scope of this Policy. You should, as the processor of such personal information processing activities, separately agree with your users on a privacy policy or similar legal document.

II. How We Collect and Use Your Personal Information

We will collect and use your personal information for the following purposes described in this Policy, following the principles of legality, legitimacy, necessity, and good faith.

(I) Scenarios in Which You Need to Authorize Us to Collect and Use Personal Information

1. Registration, Login, and Real-name Authentication

1.1 To comply with cybersecurity laws and regulations concerning real-name network systems, when you register as a user of this Platform, you need to provide us with:

• (1) User name (nickname, ID, etc.);
• (2) Mobile phone number;
• (3) Email address;
• (4) Account password (stored in encrypted form).

1.2 After successful registration, we will generate a unique API Key for you as the identity credential for calling this Platform's API services.

1.3 Before using this Service, you must complete real-name authentication. You should provide true and valid identity information (such as your real name, etc.) for authentication according to platform instructions. For users who have not completed real-name authentication, we have the right to restrict their use of some or all service functions.

1.4 The above information you provide will be used to:

• (1) Create and manage your account;
• (2) Verify your identity;
• (3) Provide you with the various services of this Platform;
• (4) Send you service notices and important announcements.

2. Credits

2.1 When you obtain platform credits, we will collect:

2.1.1 Credit change records returned by the platform (including the time of credit acquisition, type of credit change, etc.);

2.1.2 Your credit change records and consumption records.

2.1.3 The above information will be used to:

• (1) Complete credit issuance;
• (2) Record your consumption;
• (3) Unlock corresponding levels of advanced function permissions for you, etc.

3. Provision of AI Model Calling Services

3.1 When you use this Platform's AI model calling services, we will collect:

• (1) Content you actively enter (including text prompts, uploaded images, videos, audio, and other files);
• (2) Output content generated by the model you call;
• (3) Your API call records (including call time, model type called, token usage, etc.);
• (4) Your behavioral information during use (including click, edit, and other operation records).

3.2 The above information will be used to:

• (1) Provide you with AI model calling services and return generated results;
• (2) Transmit your input content to the third-party AI model service provider you specify for processing according to your instructions;
• (3) Perform billing and settlement (consume your credits);
• (4) Optimize and improve the quality of our services.

4. Generated Content Download

When you need to download, export, save generated content locally, or obtain high-resolution/high-bitrate versions, we will record your download behavior and related information about the downloaded content for billing and delivery of download files to you.

5. Customer Service and After-sales Support

5.1 When you contact our customer service or seek after-sales support, we may collect:

• (1) Your account information (login account, mobile phone number) to verify your identity;
• (2) Communication/call records and related content between you and customer service (including the issues, suggestions, ticket information, etc. you provide);
• (3) Other information you provide to prove relevant facts or contact information you leave.

5.2 The above information will be used to:

• (1) Verify your identity and process your request;
• (2) Record the problem handling plan, progress, and results;
• (3) Improve the quality of our products and services.

6. Security Protection

6.1 To improve the security of your use of this Platform's services and protect your account and personal information, we will collect:

• (1) Your login account information;
• (2) Device information (including device model, operating system version, device identifier, etc.);
• (3) Service log information (including IP address, access time, pages accessed, etc.);
• (4) API call log information.

6.2 The above information will be used to:

• (1) Conduct identity verification, detection, and prevention of security incidents (such as phishing websites, online fraud, network vulnerabilities, hacker attacks, etc.);
• (2) Take necessary recording, analysis, and disposal measures according to law.

7. App Startup and Operation

When you start and run the App, to ensure the normal operation of the App, optimize user experience, and prevent security risks, we may collect:

• (1) Device information: including device model, operating system version, unique device identifiers (such as IMEI, Android ID, IDFA, etc.), screen resolution, network status, etc.;
• (2) App operation logs: including App startup time, crash records, page access paths, etc.

The above information will be used to ensure stable App operation, optimize performance, troubleshoot faults, and prevent security risks.

(II) Description of Device Permission Calls

1. If you access this Platform through a mobile device, we may need to call the following permissions on your device:

2. You can turn off the above permissions at any time in your device's system settings, but turning them off may affect your use of some functions.

(III) Exceptions to Information Collection

1. According to relevant laws and regulations, in the following circumstances, we do not need to obtain your authorized consent to collect and use your personal information:

• (1) Where it is necessary for entering into or performing a contract to which you are a party;
• (2) Where it is necessary for us to perform statutory duties or statutory obligations;
• (3) Where it is necessary to respond to public health emergencies or to protect the life, health, and property safety of natural persons in emergency situations;
• (4) Where personal information is processed within a reasonable scope for public interest news reporting, public opinion supervision, and other activities;
• (5) Where your personal information that you have disclosed yourself or that has otherwise been lawfully disclosed is processed within a reasonable scope in accordance with this law;
• (6) Other circumstances provided by laws and administrative regulations.

III. How We Use Cookies and Similar Technologies

1. To give you an easier access experience, when you visit this Platform, we may identify you through small data files to help reduce the number of times you repeatedly enter registration information or to help determine the security status of your account. These data files may be Cookies, Flash Cookies, or other local storage provided by your browser or associated applications (collectively, "Cookies").

2. Please understand that some of our services can only be implemented through the use of Cookies. If your browser or browser add-on services allow, you may modify your acceptance level for Cookies or refuse this Platform's Cookies. However, refusing this Platform's Cookies may in some circumstances affect your secure access to this Platform and your use of some functions of this Platform.

IV. How We Share, Transfer, and Publicly Disclose Your Personal Information

(I) Sharing

We do not share your personal information with any company, organization, or individual, except in the following circumstances:

1. Sharing with your explicit consent: after obtaining your explicit consent, we will share your personal information with other parties.

2. Sharing under statutory circumstances: we may share your personal information externally according to laws and regulations, needs for litigation dispute resolution, or lawful requests made by administrative or judicial authorities.

3. Sharing with third-party service providers: to provide you with services, we may share your information with the following types of third parties:

• (1) Third-party AI model service providers: when you call third-party AI models (including but not limited to AI capabilities or related services provided by Google, GitHub, etc.), your input content, prompts, and uploaded files will be transmitted to the third-party AI model service provider you specify for processing. The data processing rules of such third parties are subject to their own privacy policies. We make no guarantee and assume no responsibility for third-party data processing activities. We recommend that you understand and read the privacy policies of relevant third-party service providers before using specific models.
• (2) Payment service providers: when you obtain credits and payment is involved, your payment information will be processed by third-party payment service providers such as WeChat Pay and Alipay.
• (3) Cloud computing and infrastructure providers: we use third-party cloud computing service providers (including but not limited to Google Cloud) to provide servers, data storage, network transmission, and other infrastructure services. Some of your data may be stored on the servers of such third parties.
• (4) Developer communities and code hosting services: we use third-party platforms such as GitHub for code hosting and distribution of SDKs and sample code. When you access relevant code repositories through this Platform, you may be bound by the service terms of such third parties.
• (5) Mobile App third-party SDKs: when you use this Service through the App, we may embed third-party SDKs (software development kits) to provide push notifications, data statistics and analysis, payment, and other functions. Such SDKs may collect your device information (including device model, operating system version, device identifier, IP address, etc.). Specific rules are subject to the privacy policies of the third-party SDKs. We recommend that you pay attention to and read the relevant third-party SDK privacy notices when using the App.

The third-party SDK compliance list is as follows:

4. Sharing with affiliates: to facilitate our provision of services to you based on a unified account system, your personal information may be shared among our affiliates. However, we will only share necessary personal information and it will be bound by the purposes stated in this Policy.

5. Sharing in transactions involving merger, acquisition, asset transfer, etc.: if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this Policy; otherwise, we will require that company or organization to seek your authorized consent again.

6. We will not sell your personal information to any third party.

(II) Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

• Transfer with your explicit consent;
• In the event of merger, acquisition, asset transfer, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this Policy; otherwise, we will require that company or organization to seek your authorized consent again.

(III) Public Disclosure

We will publicly disclose your personal information only in the following circumstances:

• After obtaining your explicit consent;
• Based on mandatory provisions of laws or administrative regulations, or at the request of competent authorities (including but not limited to courts, procuratorates, public security authorities, cyberspace authorities, etc.).

(IV) Exceptions to Prior Authorized Consent for Sharing, Transfer, and Public Disclosure of Personal Information

According to relevant laws and regulations, in the following circumstances, we do not need to obtain your authorized consent in advance to share, transfer, or publicly disclose your personal information:

• Where it is related to our performance of obligations provided by laws and regulations;
• Where it is directly related to national security or defense security;
• Where it is directly related to public security, public health, or major public interests;
• Where it is directly related to criminal investigation, prosecution, trial, and enforcement of judgments;
• Where it is for protecting your or another individual's life, property, or other major lawful rights and interests, and it is difficult to obtain consent from the person concerned;
• Personal information that you disclose to the public yourself;
• Personal information collected from lawfully publicly disclosed information, such as lawful news reports, government information disclosure, and other channels.

V. How We Store Your Personal Information

(I) Storage Location

1. Personal information that we collect and generate within the territory of the People's Republic of China will be stored within the territory of the People's Republic of China.

2. If it is indeed necessary to transmit personal information overseas for service needs, we will:

• (1) Conduct a security assessment in accordance with the provisions of the national cyberspace authority;
• (2) Inform you of the name and contact information of the overseas recipient, the processing purpose, processing method, categories of personal information, and the methods and procedures for you to exercise your rights;
• (3) Obtain your separate consent.

(II) Storage Period

1. We retain your personal information only for the period necessary to achieve the processing purposes described in this Policy, unless otherwise required by laws and regulations. The specific storage periods are as follows:

• The retention period for user content (including input content and generated content) is subject to the rules under which users manage it themselves or other rules separately announced by this Platform. Users may delete relevant content and data themselves through functions provided by this Platform.

(III) Storage Security

1. We will take the following measures to protect the storage security of your personal information:

• (1) Encrypt stored personal information;
• (2) Establish access control mechanisms and authorize access only to necessary personnel;
• (3) Regularly conduct security audits and vulnerability scans;
• (4) Develop data security emergency plans to prevent risks such as data leakage, damage, and loss.

VI. How We Protect Your Personal Information

(I) Technical Security Measures

1. We use security protection measures that meet industry standards to protect the personal information you provide, preventing unauthorized access, public disclosure, use, modification, damage, or loss of data. We will take all reasonable and feasible measures to protect your personal information.

(II) Security Management Measures

1. We have established comprehensive information security management systems and processes;

2. We provide data security and privacy protection training to employees;

3. We have formulated data security incident emergency response plans.

(III) Security Incident Handling

1. After a personal information security incident occurs, we will, in accordance with the requirements of laws and regulations, promptly inform you of: the basic circumstances and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, remedial measures for you, etc. We will promptly inform you of the relevant situation by email, letter, telephone, push notification, or other means. Where it is difficult to notify personal information subjects one by one, we will issue an announcement in a reasonable and effective manner.

2. At the same time, we will proactively report the handling of personal information security incidents in accordance with regulatory requirements.

(IV) Your Responsibility

You should properly keep your account information and API Key safe, and must not transfer, lend, or otherwise allow others to use your account. We are not responsible for personal information leakage caused by your own reasons, including but not limited to account or API Key leakage or passwords being too simple.

VII. How You Manage Your Personal Information

We attach great importance to your rights regarding personal information and make every effort to protect your rights over your personal information, so that you have sufficient ability to protect your privacy and security. Your rights include:

(I) Accessing and Copying Your Personal Information

1. You have the right to access your personal information by logging in to this Platform and going to pages such as "Personal Center" or "Account Settings", including but not limited to:

• (1) Your account information (user name, mobile phone number, email address);
• (2) Your API Key;
• (3) Your credit balance and consumption records;
• (4) Your API call logs.

(II) Correcting or Supplementing Your Personal Information

1. When you find that the personal information we process about you is incorrect or incomplete, you have the right to request that we correct or supplement it. You may do so by:

• (1) Logging in to this Platform and modifying it yourself;
• (2) If you cannot operate it yourself, contacting us through the contact information provided in Article X of this Policy.

(III) Deleting Your Personal Information

1. In the following circumstances, you may request that we delete your personal information:

• (1) If our processing of personal information violates laws and regulations;
• (2) If we collect or use your personal information without obtaining your consent;
• (3) If our processing of personal information violates our agreement with you;
• (4) If you no longer use our services or you cancel your account;
• (5) If we no longer provide products and services to you.

2. You may also delete user content you have uploaded and some generated content yourself through functions provided by this Platform.

(IV) Changing the Scope of Your Authorized Consent

1. You may change or withdraw the scope of your authorization for us to collect and process your personal information through the following methods:

• (1) Turning off corresponding permissions in your device's system settings;
• (2) Adjusting through settings functions provided by this Platform;
• (3) Contacting us through the contact information provided in Article X of this Policy.

2. After you withdraw consent, we may be unable to continue providing the services related to the withdrawn consent, but this will not affect personal information processing previously carried out based on your authorization.

(V) Canceling Your Account

1. You have the right to cancel your Cun.com account. You may apply for cancellation through the following methods:

• (1) Operating it yourself through the account cancellation function provided by this Platform;
• (2) Contacting us through the contact information provided in Article X of this Policy for assistance with cancellation.

2. After you cancel your account, we will stop providing products and services to you and delete or anonymize your personal information in accordance with the requirements of laws and regulations.

(VI) Responding to Your Requests Above

1. To protect security, you may need to provide a written request or prove your identity by other means. We may first require you to verify your identity before processing your request.

2. We will respond within fifteen working days.

3. In the following circumstances, we will be unable to respond to your request:

• (1) Where it is related to our performance of obligations provided by laws and regulations;
• (2) Where it is directly related to national security or defense security;
• (3) Where it is directly related to public security, public health, or major public interests;
• (4) Where it is directly related to criminal investigation, prosecution, trial, and enforcement of judgments;
• (5) Where we have sufficient evidence that you have subjective malice or are abusing your rights;
• (6) Where it is for protecting your or another individual's life, property, or other major lawful rights and interests, and it is difficult to obtain consent from the person concerned;
• (7) Where responding to your request would cause serious harm to the lawful rights and interests of you or other individuals or organizations;
• (8) Where trade secrets are involved.

VIII. Protection of Minors' Personal Information

1. We attach great importance to the protection of minors' personal information.

2. The services of this Platform are mainly intended for adults. If you are a minor under the age of eighteen, before using this Platform's services, you should obtain the consent of your parents or other guardians in advance.

3. We especially remind you: if you are a child under the age of fourteen, please do not use this Platform's services unless you have obtained explicit consent from your parents or other guardians. If we discover that we have collected personal information of children without prior verifiable consent from parents or other guardians, we will try to delete the relevant data as soon as possible.

4. If you are the parent or other guardian of a minor and have questions about the personal information of the minor under your guardianship, please contact us through the contact information provided in Article X of this Policy.

IX. How This Policy Is Updated

1. Our Privacy Policy may change.

2. For major changes, we will provide more prominent notices (including by sending notices to you through one or more means such as in-platform messages, website announcements, emails, SMS messages, etc.) explaining the specific changes to this Policy. You should pay attention to in-platform messages and announcements on this Platform in a timely manner. From the time the notice is sent, you will be deemed to have received the relevant notice.

3. Major changes referred to in this Policy include but are not limited to:

• (1) Major changes in our service model, such as the purpose of processing personal information, the types of personal information processed, and the way personal information is used;
• (2) Major changes in our ownership structure, organizational structure, etc., such as changes in owners caused by business adjustments, bankruptcy, mergers and acquisitions, etc.;
• (3) Changes in the main recipients of personal information sharing, transfer, or public disclosure;
• (4) Major changes in your rights regarding personal information processing and the ways in which you exercise them;
• (5) Changes in the responsible department for personal information security, contact information, and complaint channels;
• (6) Where personal information security impact assessment reports indicate high risks.

X. How to Contact Us

1. If you have any questions, opinions, or suggestions about this Policy, or if you need to exercise your personal information rights, you may contact us through the following methods:

Company Name: Shenzhen Ciyun Interactive Technology Co., Ltd.

Contact Email: cunciyun@gmail.com

Contact Phone: 18124199007

2. Mobile app store notice. If you download the App through third-party app stores such as the Apple App Store, Google Play, or Huawei AppGallery, such app stores act only as distribution channels, do not participate in the operation of this Platform, and do not assume any responsibility for this Platform's services or privacy protection practices. Your relationship with such app stores is governed by their own service terms and privacy policies.