Timona Privacy Policy

Privacy Policy Publication Date: December 16, 2025

Privacy Policy Update Date: December 31, 2025

Privacy Policy Effective Date: December 31, 2025

This Privacy Policy applies to all regions outside of Chinese Mainland.
For users in Chinese Mainland, please refer to the Chinese version of the Privacy Policy.

Timona is provided by the developer of Timona (hereinafter referred to as "Timona" or "we"). We take your personal information and privacy protection very seriously and will provide corresponding security protection measures for your personal information in accordance with legal requirements and industry-standard security practices. This privacy statement is established by us for processing your personal information and aims to help you fully understand how we collect, use, share, store, and protect your personal information when you use our products and/or services, as well as how you can manage your personal information, so that you can make appropriate choices.

Except as otherwise provided in this Privacy Policy, we will not disclose or provide this information to third parties without your prior consent. Before registering or logging into Timona, you should carefully read and fully understand all the contents of this Privacy Policy. By clicking the button to agree to the Privacy Policy, clicking the "Register" or "Login" button, or other active operations, you indicate that you agree to our processing of your personal information in accordance with this Privacy Policy. If you do not agree to this Privacy Policy, please do not use our products and/or services; if you have already started using them, please stop using them immediately.

Information We Collect

We follow the principles of legitimacy, legality, and necessity, and collect and use personal information that you voluntarily provide during your use of our products or services based on the following functions and services.

To provide you with complete services, when you register a Timona account, you can use your email address or phone number to complete account registration. When registering with an email address, you need to actively provide your email address and set a password; when registering with a phone number, you need to actively provide your phone number and set a password. If you refuse to provide the above information, you will not be able to use our services normally.

When you use Timona services, we may collect your usage information. If you are in a logged-in state, we may associate the collected usage information with your account. We will ensure that it is directly related to the services provided before collection and will not exceed the necessary scope.

When you seek help from us within the application or through other contact methods, to ensure the security of your account and system, we need you to provide necessary personal information to verify your user identity. To contact you, help you solve problems, or record the handling plan and results of problems, we will save your communication records with us and related content generated during the process (including account information, other information you provide to prove relevant facts, or contact information you leave).

Information Security Commitment

Your personal information, account information, and information such as to-dos and time records within the application are only visible to you personally, unless you actively share them externally using the sharing function provided in the Timona application.

Except for the following circumstances, we will not provide, sell, rent, share, or trade your personal information and all behavioral statistics existing in the application to any unrelated third parties: we have obtained your explicit written consent; it is necessary to fulfill legal duties or legal obligations (such as responding to legitimate requests from judicial organs and regulatory authorities); it is necessary to respond to public health emergencies or protect the life, health, and property safety of natural persons and public interests; sharing with our affiliated companies and service partners (only for the purpose of achieving the service purposes agreed in this policy, and the partners have signed data security protection agreements).

Timona does not allow any unrelated third parties to collect, edit, sell, or freely disseminate your personal information by any means. If users engage in the above activities, once discovered, Timona has the right to immediately terminate the service agreement with such users.

We strive to protect your personal information from unauthorized access or alteration, disclosure, or destruction. We regularly monitor our systems to detect any potential vulnerabilities and attacks, and regularly review our information collection, storage, and processing practices to update our physical, technical, and other security measures. If we suspect or discover any behavior that compromises the security of products, systems, or services, we may suspend your right to use all or part of the services without notice.

Information Storage

Unless otherwise provided by laws and regulations, we will stop collecting your personal information after you terminate the use of our products and services, and delete or anonymize your personal information within a reasonable period.

We will take all reasonably feasible measures to ensure that irrelevant personal information is not collected. We will only retain your information for the period necessary to achieve the purposes described in this Privacy Policy, unless the retention period needs to be extended or is permitted by law: for example, certain laws may require that transaction information be retained for a certain period after the transaction is completed; network logs may be required to be retained for a certain period; to comply with legal data retention obligations, certain "traffic data" should be retained for a specified period.

Our criteria for determining the aforementioned period include: completing transaction purposes related to you, maintaining corresponding transaction and business records, and responding to your possible inquiries or complaints; completing other business functions you have agreed to use; ensuring the security and quality of the services we provide to you; whether you agree to a longer retention period; whether there are other special provisions regarding the retention period. After your personal information exceeds the retention period, we will delete your personal information or anonymize it in accordance with applicable legal requirements.

We will do our best to ensure and guarantee the security of the information you send and provide to us. If a personal information breach or other security incident occurs, we will activate an emergency plan in accordance with legal and regulatory requirements, prevent the security incident from expanding, and send you a notification. We will promptly inform you of the relevant situation of the incident through email, phone, push notifications, and other methods. When it is difficult to notify each personal information subject individually, we will take reasonable and effective methods to publish announcements. At the same time, we will also proactively report the handling of personal information security incidents to regulatory authorities as required.

Please keep your registered account information safe, including but not limited to email address, phone number, and password. If you find that the above information has been leaked, please contact us in time.

Managing Your Personal Information

In accordance with relevant laws, regulations, and standards, as well as global common practices, we guarantee that you can exercise the following rights regarding your personal information in compliance with legal and regulatory requirements:

(1) Access, Correction, and Supplement

You have the right to access your personal information, except as otherwise provided by laws and regulations. You can access your registered account at any time and query your personal information through the "User Center" page.

When you find that the personal information we process about you is incorrect or missing, you have the right to request us to make corrections or supplements. If you find that you cannot correct or supplement this personal information, you can contact us at any time through the contact method provided in this Privacy Policy. We will reply to your correction request within 10 business days.

(2) Deletion of Information and Account Cancellation

In the following circumstances, you can request us to delete personal information through the contact method provided in this Privacy Policy: our processing of personal information violates laws and regulations; we collect and use your personal information without obtaining your explicit consent; our processing of personal information seriously violates our agreement with you; the purpose of our processing of your personal information has been achieved, cannot be achieved, or is no longer necessary; we stop providing products and/or services, or the retention period has expired.

After you or we assist you in deleting relevant information, due to applicable laws, regulations, and security technical limitations, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and restrict any further processing of it until the backup can be deleted or anonymized, which period shall not exceed 90 days.

If you need to cancel your account, you can make a request to us through the contact method provided in this Privacy Policy. After account cancellation, we will stop providing products and/or services to you and, in accordance with your requirements, delete your information, except as otherwise provided by laws and regulations.

(3) Withdrawal of Authorization

If you need to withdraw your consent to collect authorization, you can make a request to us through the contact method provided in this Privacy Policy. We will review the issues involved as soon as possible and reply to and process your request within 10 business days after verifying your user identity. If you wish to withdraw the application permissions you have agreed to, you can withdraw or modify the permission status in the permission settings of your phone or computer system.

However, please understand and agree that when you withdraw certain authorizations, it will cause related functions to become unavailable, and we will not be able to continue to provide you with the specific products and/or services corresponding to the withdrawn consent or authorization. Your decision to withdraw authorization will not affect the processing of personal information previously carried out based on your authorization.

(4) Responding to Your Above Requests

For you or your possible guardian, close relatives, and other authorized entities to make the above requests to us, as well as your relevant personal information rights as provided by applicable laws, you can contact us through the contact method provided in this Privacy Policy. We will reply to and process your request within 10 business days. If the situation is complex (such as involving a large amount of data queries, cross-system collaboration, etc.), in accordance with relevant laws and regulations, it can be extended to 60 business days, and the extension period will be explained to you in advance.

To ensure the security of your account and personal information, when you make the above requests to us, we may verify your identity before processing your request.

For your reasonable requests, we will not charge fees in principle, but for multiple repeated requests that exceed reasonable limits, we will charge a certain cost fee depending on the situation. For those requests that are groundlessly repeated, require excessive technical means (for example, require the development of new systems or fundamental changes to current practices), bring risks to the legitimate rights and interests of others, or are very impractical (for example, involve information stored on backup tapes), we may refuse them.

In the following circumstances, we will not be able to respond to your request: related to our fulfillment of obligations under laws and regulations; directly related to national security and defense security; directly related to public safety, public health, and major public interests; directly related to criminal investigation, prosecution, trial, and execution of judgments; there is sufficient evidence that you have subjective malice or abuse of rights; responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations; involving trade secrets.

Policy Updates

To provide you with a better product and/or service experience, we will work hard to optimize our products, services, and technology. Due to changes in service processes or content, the content of this Privacy Policy may change over time. We will remind you of the updated content through website announcements, in-app prompts, and other methods, so that you can learn about the latest version of this Privacy Policy in time. We will not restrict the rights you enjoy under this policy without your consent.

Minor Protection

In all the services we provide, we assume that you have the corresponding civil capacity. If you are a minor, we require you to ask your parents or other legal guardians to read this Privacy Policy and use our services or provide information to us only after obtaining their consent.

If you are a child under the age of 14 (or the age of majority in your jurisdiction), before using any of our services, you must first ensure that you have obtained your guardian's consent to this Privacy Policy. After that, you can use our services under the guidance of your guardian, or provide information to us.

If we find that a minor (especially a child under the age of 14) uses the service and provides personal information without obtaining guardian consent, we will immediately stop processing their personal information and, after verifying the guardian's identity, delete relevant information or terminate the service according to the guardian's requirements. If a guardian finds that the minor under their guardianship uses our services without consent, or has questions about the personal information of the child under their guardianship, they can contact us through the contact method agreed in this policy, and we will assist in verifying identity and processing relevant information.

Dispute Resolution

Any dispute arising from the conclusion, performance, interpretation, or change of this Privacy Policy shall first be resolved through friendly negotiation between the parties; if negotiation fails, either party has the right to file a lawsuit with a court of competent jurisdiction in the location where the Timona service provider is located. During the dispute resolution period, both parties shall continue to perform other agreements in this Privacy Policy except for the disputed matters.

Contact Us

If you have any questions, comments, or suggestions about this policy, or need to file a complaint, please contact us at timona.privacy@tianzeds.com. We will review the issues involved as soon as possible and reply to your request within 10 business days.