Weixin Privacy Protection Guideline

Updated: 29 August 2018
Effective Date: 29 August 2018

Weixin is a social networking service provided by Tencent. This Guideline will explain how Weixin collects, uses and stores your personal information, along with the rights you are entitled to. We will use this Guideline to explain the relevant details, including the following:

i. We will describe the types of personal information we collect and their corresponding use in order for you to understand how we collect specific type of personal information for a particular function, the reasons for its use and the methods of such collection.

ii. Whilst using some features, we will collect your personal information after obtaining your consent. For example, when you use Weixin’s “Movement” function, we will collect information on the number of your steps taken; where you use the “recommended contacts/friends” function, we will collect your mobile contact information; and where you use the “people nearby” and “shake” function, we will collect your location information. Unless it is required by the relevant laws and regulations for you to provide such information, refusing to provide such information will only result in your not being able to use the specific functions relating to such information, but does not affect your normal use of other functions of Weixin.

iii. At present, Weixin will not actively share or transfer your personal information to any third parties. Where the sharing or transferring of your personal information arises in some other situation or you require us to share or transfer your personal information to a third party, we will directly obtain, or verify the third party has obtained your prior express consent to such share or transfer of your personal information. Also we will evaluate the risks of such sharing or transferring.

iv. At present, Weixin will not actively obtain your personal information from a third party. If there is a requirement to obtain your personal information indirectly from a third party for future business development purposes, we will clarify with you the source, type and scope of such personal information. For example, if the processing of personal information for a specific development is beyond the scope of what you originally agreed to provide to a third party, we will obtain your prior express consent before processing your personal information, and we will strictly abide by the relevant laws and regulations and require that the third party guarantees the legitimacy of the information provided.

v. You can access, correct and delete your personal information through the instructions listed in this Guideline, or you can withdraw your consent, cancel your account, report complaints and manage your privacy settings.

For more detailed information on the above, please refer to the relevant sections in following index:

1. The Information We Collect

2. The Location and Time Period of Storing Information

3. Information Security

4. How We Use Information

5. External Parties

6. Your Rights

7. Amendments

8. Protection of minors

9. Others

10. Contact us

1.The Information We Collect

In the process of using Weixin service, Weixin will, in accordance with the following ways, collect information provided by you during the use of the service or information generated by the use of the service, in order to provide such services to you, to optimize our services and protect your account security:

1.1 When you register with Weixin service, we will collect your name, profile picture, and mobile phone number in order to assist you with completing Weixin registration and to protect your Weixin account security. Mobile phone numbers are considered to be sensitive information. As such, the collection of such information is to meet the relevant laws and regulations of the identity verification network system requirements. If you do not provide such information, you may not be able to use our services properly. You may also choose to fill in gender, region and other information in accordance to your own preference. In addition, you may choose to provide us with your voice biometrics, which is sensitive information. Refusing to provide us with such information will only render the voiceprint function useless, but will not affect your normal use of other functions in Weixin.

1.2 When you use Weixin’s service, in order to ensure the normal use of our services, to maintain the normal operation of our services, and to optimize and improve our services and protect the safety of your account, we will collect information about your device model, operating system, unique device identifier, login IP address, Weixin version number, access network mode , type and status, the quality of your network, equipment accelerators (such as gravity sensing equipment), operation logs, service logs (such as the information you search or browse on Weixin, or the information about service failure, referrer URLs etc.) and other log information. Such information is required to provide you with Weixin’s service and are basic information which must be collected.

1.3 When you use Weixin’s Moments function, your uploaded photos, comments, “likes” and other information will be stored in our server, because the storage of such information is necessary for this function to work. We will store such information in an encrypted manner, and you may delete it at any time. We will not provide the above contents of your Moments to any third party or use it for purposes other than implementing this function, unless you elect to do so or unless we are required to follow relevant laws and regulations.

1.4 When you use Weixin’s official accounts, Weixin’s mini programs, Weixin games and other functions, Weixin will not reveal and disclose your personal information to Weixin’s official account’s operators, mini program developers or game developers without your permission.

1.5 When you use Weixin’s “People Nearby”, “Shake”, “Join Private Group” and other functions, we will obtain your independently consent prior to recording your location information, for the purpose of providing you with such service. Such information is sensitive information, refusing to provide such information may only result in you being unable to use the above functions, but does not affect your normal use of Weixin’s other functions. In addition, you can always turn off the relevant features and clear your location information within that feature.

1.6 When you use Weixin’s movement function, we will collect information regarding the number of your steps, and compare it with your friends’. Such information is sensitive information, so refusing to provide such information may only result in you being unable to use the above function, but does not affect your normal use of Weixin’s other functions.

1.7 When you use the "recommended contacts/friends” function, we will conduct an irreversible encryption on your information, and only collect encrypted information. Such information is sensitive information, refusing to provide such information may result in you being unable to use the above function, but does not affect your normal use of Weixin’s other functions.

1.8 When you use Weixin’s “Search” or “Top Stories” functions, we will collect information of your usage including your search history, reading history and the time of your access in order to provide you with more accurate and personalized services and content.

1.9 When you use functions of Weixin voice input, voice to text conversion and Weixin translation, we will collect your voice recordings, the voice or text information that is converted, and the text information to be translated because collection is necessary to achieve the above functions. After the real-time processing, we will return the processed result to you and will not retain such information.

1.10 The Weixin payment service is provided to you by Tenpay. When you enable the Weixin payment function, Tenpay will collect your name, type of card and card number, validity and the mobile phone number linked to your bank. When you use Weixin to pay, the company will also collect relevant payment records in order to facilitate your queries. Such information is sensitive information, so refusing to provide such information may result in you being unable to use the Weixin payment service, but does not affect your normal use of Weixin’s other functions.

1.11 When you use Weixin with other interoperable software or hardware, providers of such software or hardware can, with your consent, obtain relevant information that you actively disclose or transmit on Weixin. You should fully understand product features and information protection policy of other software or hardware before granting your consent.

1.12 The third party services in Weixin service is provided by external third party entities, and Weixin cannot obtain the information generated by you when using such third party services. However, if you have expressly agreed for the third party to obtain your location information, the third party will obtain your location information through Weixin’s application programming interface. Such information is sensitive information, refusing to provide such information may result in you being unable to use the above third party services, but does not affect your normal use of Weixin’s other functions.

In addition, in accordance with relevant laws and regulations and national standards, in the following circumstances, we may collect and process your relevant personal information without asking for your consent:

1) When it is directly related to national interests such as national security and national defense, or it is directly related to major public interests such as public safety, public health, and public knowledge;

2) When it is directly related to a criminal investigation, prosecution, trial or execution of judgments;

3) In order to protect vital legitimate interests of you or of other individuals, such as right of life, property, and reputation, while it’s hardly to obtain the consent of the individual;

4) When the personal information is disclosed to the public by yourself;

5) When the personal information is collected from legally publicly disclosed information, such as legitimate news reports, government information disclosure, etc.;

6) When it is necessary for entering into and/or performance of a contract to which you are the party;

7) When it is necessary for maintenance of the safe and stable operation of the products or services provided, such as discovering malfunctions and/or troubleshooting products or services;

8) When it is necessary for legitimate news reporting;

9) When it is necessary for conducting statistical or academic research which is for public interest, and when the results of academic research or description are provided externally, the personal information contained is de-identified.

10) Other circumstances as stipulated by laws and regulations.

Please understand that the functions and services we provide to you are constantly updated and developed. If a function or service is not in the above description and your information is collected, we will explain to you the type of information, the scope and the purpose of the information collection by means of page prompts, interactive processes, website announcements or other ways, to obtain your consent.

Please note that at present, Weixin will not actively obtain your personal information from a third party. In the event that we need to obtain your personal information indirectly from a third party for future business developments, we will inform the source, type and scope of the use of your personal information to you prior to obtaining such information. For example, where Weixin requires to process personal information for a specific development which is beyond the scope of what you originally agreed to provide to a third party, we will obtain your prior express consent before processing your personal information; In addition, we will strictly abide by the relevant laws and regulations, and require that third parties guarantee the legitimacy of the information provided.

 

2.Storage of Information

2.1 Where Information is Stored

We will act in accordance with laws and regulations and store personal information collected within the territory in China.

2.2 The Duration Storing Information

In general, we will only keep your personal information for the time necessary to achieve a specific purpose, for example:

Mobile phone number:When you use Weixin service, we will need to store your mobile phone number to ensure your normal use of the service; when you delete your Weixin account, we will delete the corresponding information;

Information in Moments: When you post in Moments, we will need to save your information in Moments to ensure your normal use of the Moments function; when you delete your information in Moments, we will delete the corresponding information.

In the event where we cease our products or services, we will notify you in the form of push notifications, announcements, etc., and delete your personal information or anonymize such information within a reasonable period of time.

 

3.Information Security

We strive to secure users' information to prevent information leakage, improper use, unauthorized access or disclosure.

We will use a variety of security measures to ensure the security of information within reasonable security standards. For example, we will use encryption technology (for example, SSL), data anonymization and other means to protect your personal information.

We use ever-improving technical means to enhance the security of the software installed on your device to prevent your personal information from leaking. For example, we will perform partial information encryption on your device for secure transmission; to prevent viruses, Trojans or other malicious programs or website, we will collect the information about applications installed on your device or process information regarding the running application.

We have set up specialized management systems, processes and organizations to ensure the security of information. For example, we strictly limit the range of people who may access such information and require them to comply with the confidentiality obligations and conduct audits.

In the case of information leakage or other incidents involving information security, we will initiate contingency plans to prevent the wide spread of security incidents and inform you in the form of push notifications and announcements.

Currently, Weixin has passed the assessment test and undergone the record-filling of Level 3 Graded Protection of Information System Security. In terms of information security, Weixin has also implemented and achieved the certification to ISO27001, the international information security management system standard, TRUSTArc and some other authoritative international standards.

 

4.How We Use Information

We may use information collected by certain features for our other services. For example, we may use the information we collect when you use one of our features, and provide you with specific content in another service, including, but not limited to ads (please click About our Advertising for more details), information security tips for content you have read, indirect crowd portraits based on feature tags, and providing more accurate and personalized services and content.

In order to ensure the security of our services, and to enable us to better understand the operations of our applications, we may record information such as your frequency of using our applications, crash logs, overall usage, performance data, and the sources that apps are installed from. We will not combine the information stored in the analytics software with any personally identifiable information you provide in the application.

Where we utilize your personal information beyond the scope of our collection statement or a direct or reasonable connection, we will inform you and obtain your prior express consent again before using your personal information in such situations.

 

5.External Parties

At present, we will not actively share or transfer your personal information to a third party. If there are other circumstances in which your personal information is to be shared or transferred or where you require us to share or transfer your personal information to a third party, we will directly obtain or verify the third party has obtained your prior express consent to such share or transfer of your personal information.

We will not publicly disclose personal information collected by us. If we have to disclose such information publicly, we will inform you of the purpose of such disclosure, type of information disclosed and the sensitive information that may be involved, and obtain your prior express consent.

As our business continues to develop, we may engage in mergers, acquisitions, transfers of assets, etc. We will inform you of such circumstances and continue to protect your personal information and require new controllers to continue to protect your personal information in accordance with the laws and regulations and the standards as strict as required by this Guideline.

In addition, in accordance with relevant laws and regulations and national standards, in the following circumstances, we may share, transfer, or publicly disclose personal information without prior consent of the subject of personal information:

1) When it is directly related to national security or national defense;

2) When it is directly related to public safety, public health, or major public interests;

3) When it is directly related to a criminal investigation, prosecution, trial or execution of judgments;

4) When it is for protecting vital legitimate interests of you or of other individuals, such as right of life, property, and reputation, while it’s hardly to obtain the consent of the individual;

5) When the personal information is disclosed to the public by yourself;

6) When the personal information is collected from legally publicly disclosed information, such as legitimate news reports, government information disclosure, etc..

 

6.Your Rights

During your course of using Weixin, in order to provide you with an easier way to access, change, delete your personal information while ensuring you with the right to withdraw your consent regarding the use of personal information and the right to cancel your account, we have provided you with the applicable function when designing the product. You may refer to the following operational Guideline. In addition, we have also set up a report and complaints channel, in order to address your feedback in a timely manner.

 

6.1 Access Personal Information

6.1.1 Access your profile picture, name, Weixin ID, QR code, gender, region, what’s up, address and other basic information:

1)  After entering Weixin, tap on "Me”;

2)  Tap on the column with your profile picture;

3)  Access your information.

6.1.2 Access your Weixin ID, mobile phone number, Weixin password, voiceprint, QQ number, email address, emergency contacts:

1)  After entering Weixin, tap on "Me”;

2)  Tap on"Settings";

3)  Tap on "Account Security";

4)  Access your Weixin ID, mobile phone number, Weixin password, voiceprint, QQ number, email address, emergency contacts.

6.1.3 Access your posts in Moments:

1)  After entering Weixin, tap on "Me”;

2)  Tap on the image album;

3)  Tap on the post in Moments you would like to access.

6.1.4 Access and manage the Weixin games display function:

1)  After entering Weixin, tap on "Discover";

2)  Tap on “Games”

3)  Tap on "" at the upper right corner;

4)  Access and manage the games information you want to display.

6.1.5 Access “Blocked List”

1)  After entering Weixin, tap on "Me”;

2)  Tap on "Settings";

3)  Tap on "Privacy";

4)  Tap on “Blocked List” to view.

 

6.2 Deleting Personal Information

6.2.1 Delete one-to-one chat history:

1)  After entering Weixin, select and open the specific chat history, tap on "" at the upper right corner;

2)  Tap on “Clear Chat History”.

6.2.2 Deleting Group Chat history:

1)  After entering Weixin, select and open the specific chat history, tap on "" at the upper right corner;

2)  Tap on “Clear Chat History”.

6.2.3 Delete parts of the chat history:

1)  After entering Weixin, select and open the specific chat history, press and hold on the specific message to be deleted;

2)  Select "Delete" to delete the message.

6.2.4 Delete your profile picture, name, gender, region, address and other basic information (Weixin ID and two-dimensional code cannot be modified):

1)  After entering Weixin, tap on "Me”;

2)  Tap on the column with your profile picture;

3)  Delete information.

6.2.5 Delete a post in Moments:

1)  After entering Weixin, tap on "Me”;

2)  Tap on the image album;

3)  Tap on the post in Moments you wish to access;

4)  Tap on "" at the upper right corner to delete the post in Moments.

 

6.3 Amending Your Personal Information

6.3.1 Changing profile photo, name, gender, region, what’s up, address:

1)  After entering Weixin, tap on "Me”;

2)  Tap on the column with your profile picture;

3)  Change your picture, name, gender, region, personalized signature, address.

6.3.2 Change your mobile phone number, Weixin password, voiceprint, emergency contacts:

1)  After entering Weixin, tap on "Me”;

2)  Tap on "Settings";

3)  Tap on "Account Security";

4)  Change your mobile phone number, Weixin password, voiceprint, emergency contacts.

 

6.4 Withdraw Permission

6.4.1 Disable Recommended Friends from Mobile Contacts

1) After entering Weixin, tap on "Me”;

2) Tap on "Settings";

3) Tap on "Privacy";

4) Tap on "Find Mobile Contacts" to turn it off.

6.4.2 Disable the “People Nearby” setting:

1)  After entering Weixin, tap on "Discover";

2)  Tap on "nearby people" (open);

3)  Tap on "" at the upper right corner;

4)  Tap "Clear Location " (close).

6.4.3 Disable Weixin’s “Movement” function

1) After entering Weixin, tap on "Me”;

2) Tap on "Settings";

3) Tap on "General";

4) Tap on "Features";

5) Tap on "Weixin Movement";

6) Tap on "Disable";

7) Tap on "Clear and Disable".

6.4.4 Disable the “Shake” function

1) After entering Weixin, tap on "Me”;

2) Tap on "Settings";

3) Tap on "General";

4) Tap on "Features";

5) Tap on "Shake";

6) Tap on "Disable";

7) Tap on "Clear and Disable".

6.4.5 Delete Weixin Payment’s Cards

1) After entering Weixin, tap on "Me”;

2) Tap on "Wallet";

3) Tap on “Cards”

4) Tap on the specific bank linked card to be deleted;

5) Tap on "" at the upper right corner;

6) Tap on "Unlink".

6.4.6 Withdrawal of information authorizations to other applications (all)

1) After entering Weixin, tap on “Me";

2) Tap on “Settings";

3) Tap on "Privacy";

4) Tap on "Authorizations";

5) Tap on "Manage" in the upper right corner;

6) Click the minus sign on the application you wish to withdraw authorization;

7) Click "Delete" to withdraw the authorization.

6.4.7 Withdrawal of information authorizations to other applications (partial)

1) After entering Weixin, tap on “Me";

2) Tap on “Settings";

3) Tap on "Privacy";

4) Tap on "Authorizations";

5) Click the application you wish to withdraw authorization from;

6) Click the button on the right side of the content you want to withdraw.

 

6.5 Delete Account Cancellation

6.5.1 Delete Weixin Account

1) After entering Weixin, tap on "Me”;

2) Tap on "Settings";

3) Tap on "Account Security";

4) Tap on "Weixin Security Center";

5) Tap on "Delete Account"

Note: After you have deleted your account, we will delete or anonymize your personal information

6.5.2 Disable Weixin Payment

1) After entering Weixin, tap on "Me”;

2) Tap on "Wallet";

3) Tap on "" at the upper right corner;

4) Tap on "Payment Security";

5) Tap on "Disable Weixin Payment";

6.6 Feedback

1)  After entering Weixin, tap on "Me”;

2) Tap on "Settings";

3) Tap on "About";

4) Tap on “Feedback”.

 

6.7 Privacy Settings

6.7.1 Manage Friend Confirmation:

1)  After entering Weixin, tap on "Me”;

2)  Tap on "Settings";

3)  Tap on "Privacy";

4)  Tap on "Friend Confirmation" to make changes.

6.7.2 Manage how users add you as a friend:

1)  After entering Weixin, tap on "Me”;

2)  Tap on "Settings";

3)  Tap on "Privacy";

4)  Tap on "Methods for Friending Me" to make changes.

6.7.3 Manage your Moments:

1)  After entering Weixin, tap on "Me”;

2)  Tap on "Settings";

3)  Tap on "Privacy";

4)  Enable/disable the “Moments”.

6.7.4 Review your Moments’ public settings:

1)  After entering Weixin, tap on "Me”;

2)  Tap on "Settings";

3)  Tap on "Privacy";

In the "Don’t Share My Moments", you can review the list of friends you do not want to share your Moments with, in the "Hide User’s Moments", you can review the list of friends whose Moments you do not want to view;

4)  You can also manage "the scope of Moments viewable by others";

5)  You can also choose whether to "allow strangers to access latest 10 Moments ".

6.7.5 Manage your Moments’ public settings:

1)  After entering Weixin, select the friend’s profile you wish to customize;

2)  After selecting your friend’s profile, tap on "" at the upper right corner;

3)  Tap on "Manage permission to view Moments";

4)  Select "Don’t Share My Moments" or "Hide His (Her) Moments".

6.7.6 Manage the location settings and privacy range of your posts in Moments:

1) After entering Weixin, tap on "Discover";

2) Tap on “Moments”;

3) Press and hold the "Camera" icon at the upper right corner;

You can select "Location", "Share to", "Mention" etc.

 

7.Amendments

We may revise this Guideline in due course. In the event where the terms of this Guideline are amended, we will show you amended Guideline by way of push notifications and/or pop-up windows when you log in or when the APP version has been updated. Please note that we will follow the updated Guideline to collect, use and store your personal information only after you have tapped on the consent button in the pop-up window.

 

8.Protection of minors

We place great importance in the protection of personal information of minors. If you are a minor under the age of 18, according to the relevant laws and regulations, your parents’ or legal guardian's written consent should be obtained prior to you use of Weixin service. If you are a legal guardian of a minor, you may contact us through the contact information specified in Section 10 where you have queries regarding the personal information of your minors.

 

9.Others

Tencent’s "Privacy Policy" is Tencent’s unified application of the general privacy terms, where the prescription of users’ rights and information security measures are applicable to Weixin users. Where there are any inconsistencies or conflicts between Tencent's "Privacy Policy" and this Guideline, this Guideline will prevail.

 

10.Contact us

If you have any other complaints, suggestions, or querries regarding personal information of minors, please contact us at http://kf.qq.com/. You can also send your queries to Dataprivacy@tencent.com or to the following address:

Tencent Legal Department (Privacy & Data Protection Centre), Tencent Building, Kejizhongyi Avenue, Hi-tech Park, Nanshan District, Shenzhen;

Postcode: 518057

We will review your queries as soon as possible and respond within thirty days after verifying your identity.

 

Tencent