Spider Privacy Policy

1.1 Terms of Service

This Privacy Policy is part of our Terms of Service, which describes the terms under which you use our services and can be viewed at Spider's Privacy Policy. Therefore, this Privacy Policy should be read in conjunction with those terms.

1.2 Contents

This Privacy Policy explains the following:

• The legal basis for processing your personal data;
• What personal data we may collect from you;
• How we keep your personal data secure;
• Who your personal data may be shared with;
• Your rights regarding your personal data;
• How we use your personal data.

3.1 Basic Account Data

Spider is a communication service. When you register for the Platform, you are required to provide email address and basic account data (which may include a username and profile picture) to create a Spider account.

To make it easier for your contacts and other people to reach you and recognize who you are, the username and profile picture you set on Spider are always public. We do not require you to provide your real name, gender, age, or personal preferences.

You can optionally add your date of birth and gender to your Spider profile.

3.2 Messages

Spider uses advanced end-to-end encryption technology. This means all data is encrypted with a key that only you and the recipient know. Neither we nor anyone else without direct access to your device can learn what content is being sent in those messages. We do not store your secret chat history on our servers. We also do not keep any logs for messages in secret chats, so after a short period, we no longer know who you sent a message to or when via secret chats.

3.3 Device Permissions and Data Collection

To ensure the proper functioning of the App and to provide the services you request, we will ask for specific system permissions. We will only collect the following related data after you have granted your authorization:

• Location Data:When you use Spider to send location messages or use location-based features, we will collect your geolocation information after obtaining your voluntary consent. Refusing to provide this information may prevent you from using location-related features, but it will not affect your normal use of Spider's other core functions.
• Camera and Microphone Data:When you actively tap the shutter button or initiate a call, we will access your camera and microphone. This is used for taking photos or videos, making audio/video calls, and recording voice messages. We only access this hardware when you take an active step and will not record audio or video secretly in the background.
• Storage Data:We need to access your device's storage space. This is used to save and read images, videos, and files from your chats, as well as to store necessary local cache data from SDKs to ensure the app runs smoothly. We only access files relevant to the app's functionality and will not scan other unrelated private files on your device.
• Communication Content Protection:Images, videos, voice messages, and files that you send through Spider are protected with end-to-end encryption by default during transmission. Only the participants in a conversation can access this content. Except for the communication participants, no third party—including Spider—can decrypt or access the content of your communications.
• Device Identifiers:We read basic device status information. This is used to identify a unique device identifier (such as the token for FCM push services) to ensure that push notifications are delivered accurately to your device and to ensure account security.

4.1 Information Security

We are committed to safeguarding the security of our users' information. To prevent information loss, misuse, alteration, unauthorized access, or disclosure, and to ensure it is used for its intended purpose, we implement appropriate administrative, technical, and physical security measures.We use a variety of security measures to ensure the security of your information within a reasonable level of security. For example, we use techniques such as end-to-end asymmetric encryption, the Double Ratchet Algorithm, and anonymization to protect your personal data.

We enhance the security capabilities of the software installed on your device through continuously improving encryption technologies to prevent the leakage of your personal information. For instance, to ensure secure transmission, we perform end-to-end encryption locally on your device. To prevent illegal activities such as fraud, account theft, and impersonation, and to conduct security checks, we may analyze and utilize data including unique device identifiers, login IP addresses, operation logs, and geographic location information to implement security measures or provide security alerts to users.

We have established dedicated management systems, operational procedures, and organizational structures to ensure information security. For example, we strictly limit the scope of personnel who can access information, require them to comply with confidentiality obligations, and conduct audits.

In the event of a personal data breach or other security incident, we will activate our emergency response plan and remedial measures to prevent the incident from escalating and fulfill our reporting and notification obligations in accordance with the law.

We will do our best to protect your personal data. We also ask for your understanding that no security measure is ever completely infallible.

4.2 Information Storage Period

In general, we retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and for the retention periods stipulated by law and administrative regulations. For example:

Email Address: We need to retain your email address for as long as you use Spider to ensure you can use the service normally. When you delete your Spider account, we will delete the corresponding information in accordance with the law.

If our products or services cease to operate, we will notify you via push notifications, announcements, or other forms and will delete your personal data or anonymize it within a reasonable period. (Anonymization refers to the process of technically processing personal information so that the subject of the personal information cannot be identified and the processed information cannot be restored. Information obtained after anonymization is not considered personal data.)

5.1 Other Spider Users

By agreeing to the Terms of Service and choosing to communicate with other Spider users, you are instructing us to transfer your personal data, on your behalf, to those users in accordance with this Privacy Policy. We employ all appropriate technical and organizational measures (including encryption of your personal data) to ensure a level of security for your personal data that is proportionate to the risk. However, please be aware that if you chat with and share data with others, they may be able to further share such data with third parties without your knowledge or consent, and Spider cannot prevent this.

5.2 Third-Party Service Providers and SDKs

We collaborate with third parties to provide certain services. For example, push notifications, map location, and other such providers are subject to their own privacy policies to protect this information. If you use other third-party services while using our services, their terms of service and privacy policies govern your use of those services.

5.3 Other Circumstances Where Spider May Share Your Data

• To comply with any applicable law, regulation, legal process, or enforceable governmental request.
• To enforce applicable Terms of Service, including investigation of potential violations.
• To detect, prevent, or otherwise address fraud, security, or technical issues.
• To protect against harm to the rights, property, or safety of Spider, our users, or the public as required or permitted by law.

6.1 Your Rights

Under applicable data protection laws, you have rights in certain circumstances regarding your personal data. You have the right to: (1) request a copy of all your personal data that we store and to transmit that copy to another data controller; (2) delete (see Section 7 below) or amend your personal data; (3) restrict, or object to, the processing of your personal data; (4) correct any inaccurate or incomplete personal data we hold about you; and (5) lodge a complaint with a national data protection authority regarding our processing of your personal data.

6.2 Exercising Your Rights

If you wish to exercise any of these rights, please contact us using the contact details in Section 10 below.

7.1 Accounts

If you wish to delete your account, you can do so on the Settings > Account page. Deleting your account will remove all your messages, media, contacts, and all other data within Spider. This action must be confirmed through your Spider account and cannot be undone.

If you are unable to delete your account through the Spider App, or if you have already uninstalled the App, you may request the deletion of your account and associated data by contacting us via the email address provided in Section 11 ("Contact Us") of this Privacy Policy. We will process your request in accordance with applicable laws after completing the necessary identity verification.

7.2 Messages

On Spider, either party in a one-on-one chat can choose to delete any message (both sent and received) for both sides. There is no time limit. Either party can also choose to clear the entire chat history for both sides, in which case the application will be instructed to delete all messages in that chat.