Last Updated: March 28, 2025
Welcome to “3:00 AM” (hereinafter referred to as “the App”). We highly value your personal information and privacy protection. In accordance with applicable laws, regulations, and Apple review policies, we explain how we collect, use, store, protect, and share your personal information during the provision of services. This policy applies to all users of the App. By continuing to use the App, you signify that you have fully read and agree to the contents of this policy.
Policy Update Notice: As our business develops and regulations change, we may revise this policy. If you continue to use the App after updates, it will be deemed that you accept the updated content. If you disagree, please stop using the App and contact customer service.
When using Alibaba Cloud Number Verification Service, the SDK may obtain the following permissions and information:
| Permission Name | Purpose of Collection | Usage Scenario | Frequency of Invocation |
|---|---|---|---|
| Mobile Data Network Permission | Essential information for using SDK functions. | Calling the pre-fetch interface. | Used when calling the pre-fetch interface under normal conditions. |
Additionally, the SDK will collect basic device information as follows:
| Type of Personal Information | Purpose of Collection | Usage Scenario | Frequency of Collection |
|---|---|---|---|
| IP Address | Essential for the SDK’s functionality. | Used when calling the SDK’s pre-fetch interface, or when obtaining a one-click login or verifying a token. | Required each time the interface is called. |
| Network Type | To check network status. | Helps determine if the network environment is suitable for one-click login. | Required each time the interface is called. |
| Device Manufacturer, Device Model, Mobile Operating System | To identify the device type, used to determine the appropriate adaptation scheme for one-click login or verification. | Used to adapt one-click login or number verification for the device. | Required each time the interface is called. |
Before using the App, please ensure that you have fully read and understood all the contents of this policy. If you cannot accept or have objections to this policy, please immediately stop using the App and uninstall it.
Thank you for your trust and support of “3:00 AM”. Enjoy using the App!
If you have any questions, comments, or suggestions regarding this Privacy Policy or the App's privacy protection, or if you need to exercise your related rights, please contact us through the following methods:
We will review and process your request within a reasonable time.
| Name / Dependency | Provider / Organization | Data That Might Be Collected/Used | Usage / Scenario |
|---|---|---|---|
| Kingfisher | Open Source Community (GitHub) | - Only downloads and caches images locally - Does not actively collect or upload user information |
Used for loading, displaying, and caching images (typically loaded from own servers or third-party CDNs). It does not have automatic reporting or statistics functionality and will not send information to Kingfisher officials. |
| Starscream | Open Source Community (GitHub) | - Does not collect or transmit personal information to third-party servers of the library - Only responsible for underlying WebSocket communication |
Used to establish a real-time WebSocket connection between the client and the backend server. The actual data transmitted is determined by business logic; Starscream does not collect or report additional user information. |
| Alibaba Cloud Number Verification SDK | Alibaba Cloud | - SIM card information (SIM State), IP address, network type - Device manufacturer, device model, mobile operating system |
Used for one-click login and verification via the user's phone number, determining the terminal type to adapt the login process. It collects necessary information when calling pre-fetch or verifying a token. For more details, please refer to the Number Verification Service Privacy Policy (available only for Mainland China users). |
| Name / Dependency | Provider / Organization | Data That Might Be Collected/Used | Usage / Scenario |
|---|---|---|---|
| Pushy(com.eatthepath:pushy) | Eatthepath (Open Source Project) | - Device push identifier (Device Token of iOS device) - Push-related logs (if any) |
Communicates with Apple APNs to send push notifications to iOS clients. Only saves or uses the push token on the server side, and does not upload it to Pushy officials or other third parties. |
| Spring Boot Starter(Web, Security, Cache, Data Redis, AMQP, AOP) | Spring Community / VMware | - Does not directly collect personal information; - May internally process data such as user accounts, permissions, caches, sessions, message queues, etc. (depending on business logic) |
Provides basic functionalities such as web services, authentication, caching, message queuing, and AOP. All data flows within own servers or internal networks and is not uploaded to Spring officials. |
| Hibernate Validator(org.hibernate.validator:hibernate-validator) | Hibernate / JBoss Open Source Community | - User input or request parameters (for validation only) | Validates the format/rules of data submitted by users, and does not upload information to third parties. |
| Lombok(org.projectlombok:lombok) | Project Lombok (Open Source) | - Does not collect any personal information | A compile-time annotation library that simplifies Java code without transmitting data externally. |
| fastjson(com.alibaba:fastjson) | Alibaba / Open Source Community | - Serialization/deserialization of Java object data; - Does not actively report user information |
Used solely for converting JSON data on the server side, and will not send data to fastjson official servers. |
| Jackson Dataformat XML(com.fasterxml.jackson.dataformat:xml) | FasterXML Community | - Data to be serialized/deserialized - Does not actively report user information |
Used for data format conversion, and will not transmit data to officials. |
| JJWT(io.jsonwebtoken:jjwt) | JSON Web Token (Open Source) | - User ID, roles, permissions in the token - Not uploaded externally |
Used to generate/parse/validate JWT for login authentication and permission control. |
| MyBatis-Plus(com.baomidou:mybatis-plus-boot-starter) | Shenzhen Baozupa Information Technology / Open Source Community | - Business data in the database (users, orders, etc.) - Does not actively transmit to third parties |
Performs CRUD operations on the database only; data remains in own database. |
| MySQL Connector(mysql:mysql-connector-java) | Oracle / MySQL Community | - Database requests and result sets - Does not actively collect user information |
Used to connect to local/self-built MySQL databases, and will not upload user data to MySQL officials. |
| Druid(com.alibaba:druid-spring-boot-starter) | Alibaba / Open Source Project | - Database SQL/connection pool monitoring information - If SQL contains personal data, may write to logs |
Used solely for monitoring and managing the database connection pool internally on the server, and does not upload logs externally. |
| Hutool(cn.hutool:hutool-all) | dromara / Open Source Community | - Does not collect personal information - Various utility methods (string operations, encryption/decryption, time handling, etc.) |
A purely local utility library that does not transmit data externally. |
| Swagger2 / Swagger UI(io.springfox:…) | Springfox / Open Source Community | - Scans backend interface metadata to generate API documentation - Does not actively collect personal information |
Displays API documentation for developers or testers locally/intranet without uploading data to Swagger officials. |
| Netty(io.netty:netty-all / io.netty-transport) | Netty Open Source Community | - Does not actively collect user information; - Only used for network communication, whether transmitted content contains personal information depends on business logic |
A low-level communication framework responsible for high-concurrency network IO. Whether data contains personal information is determined by the application layer. |
| Logback(ch.qos.logback:logback-core) | QOS.ch / Open Source Project | - Server-side logs (may contain user actions, error information) - Not uploaded externally |
Records system logs and does not send logs to Logback officials. |
| sensitive-word (com.github.houbb:sensitive-word) | Open Source Community / GitHub (houbb) | - Sensitive word filtering - Detect and replace sensitive words in text |
Used to locally integrate sensitive word filtering on the server side to detect and replace sensitive content in text, without uploading any data to third parties. |
| JUnit(junit:junit) | JUnit Open Source Organization | - Test environment, does not involve real user data - Does not collect personal information |
Used only for unit testing during development, unrelated to production environment user data. |
| Alibaba Cloud Number Verification (dypnsapi20170525) | Alibaba Cloud | - Minimal necessary information such as phone number and IP address required for pre-fetch or token verification | Invoked on the backend to call Alibaba Cloud Number Verification service for one-click login or number verification (available only for Mainland China users). |