Welcome to Dulian ("the App" or "we"). We understand the importance of your personal data and are committed to strictly protecting your privacy. This Policy explains in detail how we collect, use, store, share, and protect your personal data, as well as your rights regarding your personal data.
Last Updated: June 10, 2026
This Policy applies to the following regions: Hong Kong, Taiwan, Macau, and the United States. Please pay special attention to the provisions marked for your region.
I. Scope
This Policy applies to all services provided to you through the Dulian application (including iOS and Android versions). Please read and understand this Policy carefully before using the App. If you do not agree with any provision of this Policy, please stop using the App.
II. Information We Collect
We only collect information necessary to provide our services and improve product experience, as detailed below. Providing your personal data is voluntary; however, if you refuse to provide certain necessary information, we may not be able to provide you with the corresponding service features.
2.1 Account Information (Required)
Information Type
Details
Purpose
Email
Email address provided when logging in with email and password
Account registration and login
Third-Party Account Information
When logging in with Google / Apple / Facebook, we obtain your third-party account identifier and public information (e.g., email, avatar)
Account registration and login
Nickname
Your personalized display name
Profile display
2.2 Health Record Data (Content You Actively Record)
All data you actively record while using the App's core features is stored on our servers and associated with your account:
Dietary Logs: Meal times, dish names, cooking methods, ingredients, and seasoning information
Bowel Movement Logs: Bristol Stool Scale type (Types 1-7), accompanying symptoms (incomplete evacuation, urgency, mucus in stool, etc.)
Dish Library: Personal dishes you save and AI-assisted dish information
Special Handling of Health Data:
Taiwan: The above health-related data constitutes "special personal data" under Article 6 of the Personal Data Protection Act. We will obtain your explicit consent before collecting and processing such data. You may withdraw your consent at any time by deleting your account or contacting us.
Macau: The above health-related data constitutes "sensitive data" under Article 7 of Law No. 8/2005 (Personal Data Protection Act). We will obtain your explicit consent before collecting and processing such data and have implemented the special security measures required under Article 16 (including stricter access controls, transmission encryption, logical isolation, etc.).
United States: The above health-related data may be subject to additional protection under state health privacy laws (such as Washington State's My Health My Data Act and California's Confidentiality of Medical Information Act / CMIA). We will not use your health data to market any products or services to you, nor will we share health data with third parties for their own commercial purposes without your explicit consent.
2.3 Device & Usage Information
Information Type
Details
Purpose
Device Information
Device model, operating system version, unique device identifier
Account security, troubleshooting
Log Information
App usage time, feature click behavior, crash logs
Product experience optimization
Network Information
IP address, network type
Network connectivity and data transmission
2.4 Payment Information
When you purchase VIP membership services, the payment process is handled by third-party payment channels (Google Pay, Apple Pay). We do not collect or store your bank card numbers, passwords, or other sensitive payment information. We only receive the payment result (success/failure) and order information.
2.5 Information We Do Not Collect
This App does not collect your contacts, photo gallery content (unless you actively choose to upload images; this feature is not available in the current version), geolocation, call logs, or other information unrelated to core functionality.
III. How We Use Information
We use the collected information for the following purposes:
Service Provision: Recording and displaying your dietary, bowel movement, abdominal symptom, and emotional data, and generating health insight analysis reports based on such data.
Account Management: Maintaining your account information, processing login and deletion requests.
Data Analysis & Improvement: Analyzing anonymized data to improve our health insight algorithms and user experience. We do not associate analysis results with your personal identity.
Customer Support: Responding to your inquiries, processing feedback and complaints.
Legal Compliance: Fulfilling obligations under applicable laws and regulations.
We only use your information to the extent necessary to achieve the above purposes and will not use your information for new purposes incompatible with the above unless we obtain your additional consent.
IV. Information Storage & Protection
4.1 Storage Location & Cross-Border Transfer
Your personal data is stored on servers located in Hong Kong, China. This means:
Hong Kong / Macau Users: Your data is stored locally.
Taiwan Users: Your personal data will be transferred to Hong Kong for storage and processing. We have ensured that the recipient provides a level of protection comparable to that under Taiwan's Personal Data Protection Act.
United States Users: Your personal data will be transferred to and stored and processed outside the United States (in Hong Kong). Data protection laws in Hong Kong may differ from those in your state. By using this App, you consent to this cross-border data transfer.
4.2 Retention Period
We retain your personal data only for the period necessary to provide our services:
Account Information: Retained for the duration of your active account
Health Record Data: Retained for the duration of your active account
Log Information: No more than 12 months
After account deletion, we will delete or anonymize your personal data in accordance with applicable law, unless otherwise required by laws and regulations.
4.3 Data Security Measures
We employ industry-standard security measures to protect your personal data:
Transmission Encryption: Phone numbers and verification codes during login are transmitted using RSA encryption; all network communications are encrypted via HTTPS/TLS
Storage Encryption: Sensitive information is encrypted at rest on our servers
Access Controls: Only authorized personnel may access user data; access rights are periodically reviewed based on the principle of least privilege
Regular Security Audits: We conduct periodic security assessments of our systems
Logging & Monitoring: Data access logs are maintained and abnormal access behavior is monitored
Security Risk Notice: Despite the above measures, transmitting data over the Internet or public networks carries inherent security risks, and no method of Internet transmission or electronic storage is completely secure. Please understand this inherent risk and take care to protect your account security when using this App.
4.4 Data Breach Notification
In the event of a data security incident involving your personal data, we will notify you in accordance with applicable legal requirements:
Hong Kong: We will notify you in accordance with the guidance of the Privacy Commissioner for Personal Data.
Taiwan: We will notify you immediately upon discovery of a breach and report to the competent authority within 72 hours.
Macau: We will notify in accordance with the requirements of Law No. 8/2005 and the Office for Personal Data Protection.
United States: We will notify you and/or relevant regulatory authorities within the statutory timeframes under applicable state data breach notification laws.
V. Information Sharing & Disclosure
5.1 We Do Not Sell Your Information
We do not sell, trade, or transfer your personal data to any third party.
5.2 Third-Party Service Providers
We may share necessary information with third parties that provide technical services to us. These third parties are bound by contract and have confidentiality obligations; they may not use your information for any other purpose. Current categories of service providers include:
Cloud Service Providers: For server hosting and database storage
SMS Service Providers: For sending login verification codes
Payment Service Providers: Google Pay, Apple Pay — for processing membership subscription payments
Third-Party Login Service Providers: Google (Firebase Auth), Facebook, WeChat, Apple — for identity authentication
In the preceding 12 months, we have not "sold" (as defined by the California CCPA) any personal information, nor have we used personal information for cross-context behavioral advertising.
5.3 Legally Required Disclosures
We may disclose your personal data as required by law in the following circumstances:
In response to lawful requests from judicial, regulatory, or administrative authorities
To protect the legitimate rights and interests of us, other users, or the public
To respond to emergency security threats
VI. Your Rights
Depending on the data protection laws of your region, you have the following rights. We will not discriminate against you for exercising these rights.
Right
Description
How to Exercise
Applicable Regions
Right to Be Informed
Understand how we collect and use your information
Review this Policy
All Regions
Right of Access
View and obtain a copy of your personal data
View your health records and account information in the App; contact us for a complete copy
All Regions
Right to Rectification
Correct inaccurate personal data
Use in-app editing features
All Regions
Right to Erasure
Delete your personal data
Delete records in the App; account deletion removes all information
All Regions
Right to Restrict Processing
Restrict how we process your personal data
Contact us to exercise
Taiwan, Macau, United States
Right to Data Portability
Obtain your data in a structured, machine-readable format
Contact us to exercise
Taiwan, Macau, United States (select states)
Right to Object
Object to our processing of your information for specific purposes
Contact us to exercise
Taiwan, Macau
Right to Withdraw Consent
Withdraw your consent to our processing of your information
Withdrawal means ceasing to use the App; for historical data processing, refer to the Right to Erasure
All Regions
Right to Delete Account
Terminate use of the service and delete your account
Contact customer support to request deletion, or use the in-app account deletion feature
All Regions
Right to Opt Out
Opt out of the "sale" or "sharing" of personal information (for cross-context behavioral advertising)
This App does not sell or share personal information; exercising this right is unnecessary
United States (CCPA)
Legal Basis by Region
Hong Kong: Under the Personal Data (Privacy) Ordinance (Cap. 486), Section 18 and the Data Protection Principles in Schedule 1, you have the right to access, correct, and request deletion of your personal data. We will respond within 40 days of receiving your request.
Taiwan: Under Article 3 of the Personal Data Protection Act, you have the right to inquire, request access, request a copy, request supplementation or correction, request cessation of collection, processing or use, and request deletion. We will respond within 15 days of receiving your request.
Macau: Under Articles 10 to 13 of Law No. 8/2005 (Personal Data Protection Act), you have the right to information, access, rectification, and objection. We will respond within 30 days of receiving your request.
California, United States: Under the California Consumer Privacy Act (CCPA), you have the right to know, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of personal information. California residents may submit requests through the contact information at the end of this Policy. We will respond within 45 days (which may be extended by an additional 45 days if reasonably necessary). If you are an authorized agent of a California resident, please provide additional written proof of authorization.
VII. Protection of Minors
This App is not designed for or directed at minors. We take the following measures regarding the collection of minors' information in accordance with the laws of each region:
Hong Kong: If you are under 18 years of age, please use this App under the guidance of a parent or legal guardian. We will not knowingly collect personal data from individuals under 18 without obtaining guardian consent.
Taiwan: If you are under 20 years of age (the age of majority under Taiwan civil law is 18, but for legal acts involving personal data processing, assistance from a legal representative is recommended), please provide personal data with the consent of your legal representative.
Macau: If you are under 18 years of age, please use this App with the consent of the person exercising parental authority or your guardian.
United States: We do not knowingly collect personal information from children under 13 years of age, in compliance with the Children's Online Privacy Protection Act (COPPA). If we discover that we have collected information from a child under 13 without verifiable parental consent, we will promptly delete the relevant data.
If you are a parent or guardian of a minor (as defined by the applicable age threshold in each jurisdiction) and discover that your child has provided us with personal information, please contact us immediately.
VIII. Cookies & Local Storage
This App uses the following local storage technologies:
Hive Local Database: Used to cache your login token and nickname to maintain login state and enable fast loading. This data is stored only on your device locally.
This App does not use cookies or similar web tracking technologies to track your cross-app behavior.
IX. Updates to This Policy
We may update this Policy from time to time. Material changes will be notified to you through:
Prominent in-app notices (such as homepage pop-ups)
Prompts displayed at login
Push notifications or email (where applicable)
The updated version of the Policy will indicate the "Last Updated" date. Please review it periodically. Continued use of the App after an update constitutes your acceptance of the updated Policy. If you do not agree with the updated content, you have the right to stop using the App and request account deletion.
X. Contact Us
If you have any questions, comments, or complaints regarding this Policy, or wish to exercise your personal data rights, please contact us through the following channels:
Our response timeframes after receiving your request are as follows:
Hong Kong: within 40 days
Taiwan: within 15 days
Macau: within 30 days
United States: within 45 days (extendable by an additional 45 days if necessary)
Other Regions: within 15 business days
Data Deletion Request
If you need to confirm that all your personal data has been deleted after account deletion, please submit a data deletion request through the following link: