推乐乐隐私政策
Tuilele Privacy Policy
生效日期 / Effective Date: July 1, 2026
一、适用范围
本隐私政策适用于推乐乐 App 提供的本地记录、统计、收藏、备注、数据备份、账号登录（含 Apple 登录、微信登录）、反馈、远程房间实时体验、商城、Apple 内购、虚拟道具、会员等级、任务福利、站内邮件等功能。
本地记录、统计、收藏、备注、导入导出等基础功能通常可在未登录状态下使用；远程房间、商城、支付、积分兑换、任务福利、反馈、删除账号等需要账号识别的功能，可能要求用户登录。
我们只会为实现具体功能、保障服务安全、处理订单和用户支持所必需的目的处理信息。
二、本地数据
游玩记录、收藏机台、备注和统计数据默认保存在用户当前设备内。记录字段可能包括机台标识、机台类型、机台名称、游玩时间、投入、产出、备注、创建时间和更新时间。
本地统计、排行、趋势、今日概览和历史汇总等结果，基于当前设备内的本地数据计算生成。
用户主动使用导出或备份功能时，应用会将本地数据整理为 JSON 或 CSV，并复制到系统剪贴板，便于用户自行粘贴保存。用户主动导入或恢复时，应用仅处理用户手动粘贴的 JSON 或 CSV 内容，用于预览、校验和本地恢复。
除用户主动触发登录、远程房间、反馈、删除账号、商城、支付、兑换或其他联网功能外，游玩记录、收藏和备注不会因基础本地记录功能被主动上传到开发者服务器。
三、账号登录信息
当用户主动使用 Apple 登录时，应用会获取用户授权提供的 Apple 账号标识、邮箱地址、昵称或姓名信息，并提交至开发者服务器用于登录校验、账号识别和维持登录状态。
当用户主动使用微信登录时，应用可能获取微信授权返回的 openId、unionId、昵称、头像等信息，并提交至开发者服务器用于登录校验、账号识别和维持登录状态。
登录成功后，应用会在当前设备本地保存登录令牌、账号标识、uid、昵称、邮箱或已绑定手机号、登录类型等信息，以便展示登录状态、访问远程房间、商城、反馈、删除账号和支付相关服务。
内部测试登录如被启用，仅用于开发、测试或审核场景。测试登录产生的 uid、令牌和账号状态也会按账号登录信息处理。
四、远程房间、视频与指令
当用户登录后主动进入推币机、娃娃机、弹珠机、游艺机、街机等远程房间时，应用会向服务器请求房间列表、房间详情、是否可进入、实时画面地址、房间设置、用户余额、机台状态、播放状态和试玩状态。
用户进行试玩交互时，应用可能通过 HTTPS 请求和 WebSocket 发送或接收房间 ID、用户 uid、登录令牌、client_id、投币数量、开始、停止、方向、按钮、补偿、弹幕、兑换、离开房间、余额变化、结算状态等必要信息。
实时视频播放可能通过 WebRTC、HLS、腾讯云 TCPlayer 或相关流媒体服务完成。服务过程中可能产生必要的网络连接信息、设备系统信息、播放状态、错误日志、流地址参数或连接状态，用于建立连接、播放画面、排查异常和保障服务稳定。
应用在播放实时视频时仅接收并展示远程机台画面，不会调用或上传用户设备摄像头、麦克风内容，也不会主动录制、保存或上传用户观看的视频画面。
远程房间中产生的操作状态、金币、积分、龙珠、结算结果等信息用于完成本次服务、余额更新、异常处理和客服支持，不会自动写入本地游玩记录，除非用户主动保存或编辑本地记录。
五、商城、内购与虚拟道具
用户打开商城或购买虚拟道具时，应用会请求商品列表、价格、商品 ID、卡类或金币权益、用户余额和版本配置等信息。
iOS 端购买通过 Apple App Store 内购完成。应用会向服务器提交订单号、商品 ID、Apple 交易凭证、交易 ID、App 版本、登录令牌等信息，用于创建订单、验票、发放虚拟道具、恢复未完成订单和处理支付异常。
应用可能在当前设备本地临时保存未完成订单的订单号和商品 ID，用于掉单恢复。订单完成或确认失败后的处理以应用逻辑、服务器结果、Apple 规则和法律法规要求为准。
用户使用积分兑换金币或类似兑换功能时，应用会向服务器提交兑换数量、账号标识和登录令牌，用于校验余额、执行兑换和更新展示。
六、会员、任务与站内邮件信息
应用会基于账号的登录、消费和活动参与等信息计算会员等级、成长值、任务完成状态和积分余额，用于展示等级权益、任务进度和积分兑换结果。
应用内站内邮件（含全服邮件、客服邮件及附件奖励）由服务器下发，可能包含账号标识、邮件内容、奖励发放状态和时间信息，用于消息通知和奖励领取。
七、反馈与配置
用户提交反馈时，应用会提交用户主动填写的反馈内容、可选上传的图片附件、联系方式（如用户提供）、uid、openId、渠道和时间参数，用于问题排查、用户支持和产品改进。
用户发起删除账号申请时，应用会提交 uid、openId、渠道、登录令牌和时间参数，用于校验身份并处理删除流程。
应用可能请求项目配置、App 版本号、版本代码、平台、渠道和系统信息，用于功能开关、商城展示、审核版本配置和服务兼容。
八、设备、权限与第三方服务
为实现网络访问、登录、支付、视频播放、WebSocket 连接和故障排查，应用和服务器可能处理设备系统、平台、App 版本、网络状态、IP 地址、请求时间、错误信息和基础日志。
当前核心功能不会主动访问通讯录、精确定位、日历、短信，也不会在用户未操作时主动调用用户设备摄像头或麦克风采集内容。当用户在提交反馈时主动选择拍照或从相册选择图片附件，应用会按用户选择访问相机或相册，仅获取用户指定的单张图片用于该次反馈提交，不会读取或上传其他照片。
应用可能使用 Apple 登录、Apple App Store 内购、微信登录、腾讯云播放器或相关流媒体能力。相关第三方会根据其自身规则处理完成授权、支付、视频播放或网络传输所必需的信息。
我们不会出售用户个人信息，不提供个性化广告服务，也不会为了广告画像主动共享本地游玩记录、收藏或备注。
九、数据删除与保留
用户可在应用内清空本地数据；清空后将从当前设备删除游玩记录、收藏和备注，且无法由应用自动恢复。
用户可在应用内退出登录，清除当前设备上保存的登录状态。退出登录不会自动删除本地记录。
用户可在应用内发起删除账号申请。删除申请提交后将进入 15 天等待期，在此期间请勿再次登录该账号，以免影响删除流程。
账号删除完成后，我们会删除或匿名化不再需要的账号信息；但为交易安全、订单核验、争议处理、风控审计、遵守法律法规或平台规则，部分订单、支付、日志或必要记录可能在合理期限内保留。
如用户卸载应用、清除系统存储、导入恢复、覆盖写入或删除本地数据，相关本地数据可能被删除、替换或丢失，请谨慎操作并自行备份。
十、联系我们
如对本隐私政策、数据处理、账号删除、订单或反馈流程有疑问，可通过以下方式联系我们：
1. Scope
This Privacy Policy applies to Tuilele App features including local records, statistics, favorites, notes, data backup, account sign-in (Apple Sign In and WeChat login), feedback, live remote rooms, shop, Apple in-app purchases, virtual items, membership levels, task rewards, and in-app mail.
Basic features such as local records, statistics, favorites, notes, import, and export can generally be used without sign-in. Features that require account recognition, such as remote rooms, shop, payment, point conversion, task rewards, feedback, and account deletion, may require sign-in.
We process information only for purposes necessary to provide specific features, protect service security, process orders, and support users.
2. Local Data
Play records, favorite machines, notes, and statistics are stored on the user's current device by default. Record fields may include machine identifier, machine type, machine name, play time, coins spent, output, notes, creation time, and update time.
Local statistics, rankings, trends, daily overview, and history summaries are generated from local data on the current device.
When the user actively exports or backs up data, the app prepares local data as JSON or CSV and copies it to the system clipboard so the user can paste and save it. When the user imports or restores data, the app only processes JSON or CSV content manually pasted by the user for preview, validation, and local restore.
Except when the user actively uses sign-in, remote rooms, feedback, account deletion, shop, payment, conversion, or other online features, play records, favorites, and notes are not actively uploaded to developer servers by the basic local record feature.
3. Account Sign-In Information
When the user actively uses Apple Sign In, the app obtains the Apple account identifier, email address, and nickname or name authorized by the user and submits them to the developer server for login verification, account recognition, and maintaining the signed-in state.
When the user actively uses WeChat login, the app may obtain openId, unionId, nickname, avatar, and similar information returned by WeChat authorization and submit them to the developer server for login verification, account recognition, and maintaining the signed-in state.
After successful sign-in, the app stores the login token, account identifier, uid, nickname, email or bound phone number, login type, and similar information locally on the current device to display sign-in state and access remote rooms, shop, feedback, account deletion, and payment-related services.
If internal test login is enabled, it is used only for development, testing, or review scenarios. uid, token, and account state generated by test login are handled as account sign-in information.
4. Remote Rooms, Video, and Commands
When a signed-in user actively enters remote rooms such as coin pusher, claw machine, pinball, arcade, or similar rooms, the app requests room lists, room details, entry eligibility, live stream address, room settings, user balance, machine status, playback status, and trial status from the server.
During trial interactions, the app may send or receive room ID, user uid, login token, client_id, coin amount, start, stop, direction, button, compensation, barrage, conversion, room leave, balance change, settlement status, and other necessary information through HTTPS requests and WebSocket.
Live video playback may use WebRTC, HLS, Tencent Cloud TCPlayer, or related streaming services. Necessary network connection information, device system information, playback status, error logs, stream address parameters, or connection state may be generated for connection setup, video playback, troubleshooting, and service stability.
When playing live video, the app only receives and displays the remote machine view. It does not access or upload the user's device camera or microphone content, and it does not proactively record, save, or upload the video viewed by the user.
Operation status, coins, points, dragon balls, settlement results, and similar information generated in remote rooms are used to complete the current service, update balances, handle exceptions, and support users. They are not automatically written into local play records unless the user actively saves or edits a local record.
5. Shop, In-App Purchases, and Virtual Items
When the user opens the shop or purchases virtual items, the app requests product lists, prices, product IDs, card or coin benefits, user balance, and version configuration.
Purchases on iOS are completed through Apple App Store in-app purchases. The app submits order number, product ID, Apple transaction receipt, transaction ID, app version, login token, and related information to the server for order creation, receipt verification, virtual item delivery, unfinished order recovery, and payment issue handling.
The app may temporarily store the order number and product ID of unfinished orders on the current device for recovery. Completion or failure handling follows app logic, server results, Apple rules, and applicable legal requirements.
When users use point-to-coin conversion or similar conversion features, the app submits conversion amount, account identifier, and login token to the server to verify balance, execute conversion, and update display.
6. Membership, Tasks, and In-App Mail Information
The app calculates membership level, growth points, task completion status, and point balance based on account sign-in, spending, and activity participation, used to display level benefits, task progress, and point conversion results.
In-app mail (including server-wide mail, customer service mail, and reward attachments) is delivered by the server and may include account identifier, mail content, reward delivery status, and timestamp information, used for notifications and reward collection.
7. Feedback and Configuration
When users submit feedback, the app submits the feedback content voluntarily entered by the user, an optional uploaded image attachment, contact information if provided, uid, openId, channel, and timestamp parameters for issue investigation, user support, and product improvement.
When users initiate an account deletion request, the app submits uid, openId, channel, login token, and timestamp parameters to verify identity and process deletion.
The app may request project configuration, app version, version code, platform, channel, and system information for feature switches, shop display, review-version configuration, and service compatibility.
8. Device, Permissions, and Third-Party Services
To provide network access, sign-in, payment, video playback, WebSocket connection, and troubleshooting, the app and server may process device system, platform, app version, network status, IP address, request time, error information, and basic logs.
Current core features do not proactively access contacts, precise location, calendar, or SMS, and do not proactively use the user's device camera or microphone to collect content without user action. When a user actively chooses to take a photo or select an image from the photo library to attach to feedback, the app accesses the camera or photo library as chosen by the user, obtaining only the single image the user selects for that feedback submission, and does not read or upload any other photos.
The app may use Apple Sign In, Apple App Store in-app purchases, WeChat login, Tencent Cloud player, or related streaming capabilities. These third parties process information necessary to complete authorization, payment, video playback, or network transmission according to their own rules.
We do not sell users' personal information, do not provide personalized advertising services, and do not actively share local play records, favorites, or notes for advertising profiling.
9. Data Deletion and Retention
Users can clear local data in the app. Once cleared, play records, favorites, and notes are removed from the current device and cannot be automatically recovered by the app.
Users can sign out in the app to clear the sign-in state stored on the current device. Signing out does not automatically delete local records.
Users can initiate an account deletion request in the app. Once submitted, a 15-day waiting period begins. During this period, users should not sign in to the same account again, otherwise the deletion process may be affected.
After account deletion is completed, we will delete or anonymize account information that is no longer needed. However, some order, payment, log, or necessary records may be retained for a reasonable period for transaction security, order verification, dispute handling, risk control, audit, compliance with laws, or platform rules.
If users uninstall the app, clear system storage, import, restore, overwrite, or delete local data, related local data may be deleted, replaced, or lost. Users should operate carefully and keep their own backups.
10. Contact
If you have questions about this Privacy Policy, data handling, account deletion, orders, or feedback process, contact: