Source: WeChat platform documentation.
1. Data collection and storage
1. Before collecting user data, you must ensure the user has consented, and truthfully disclose the purpose, scope of use and other relevant information of the data.
2. Do not illegally collect or steal user passwords or other personal data.
3. Unless required by law or consented to by the user, do not require users to enter personal information (phone number, date of birth, etc.) before using functions, or collect user passwords or personal information (including but not limited to phone number, ID number, birthday and address).
4. If a user requests it, you should delete all data received about that user, unless the law entitles you to retain it.
5. If you stop using WeChat mini programs, you must immediately delete all user data received from WeChat and WeChat mini programs.
2. Data use
1. Do not display a user’s WeChat ID, name, QQ, phone number, email address or date of birth to other mini program users or any third party.
2. Do not use such information for any purpose not authorised by the user and the WeChat platform.
3. Do not perform reflective lookups, tracking, correlation, mining or acquisition of such information, or use it in ways unrelated to the identity the mini program has published.
4. Do not copy, store, use or transmit user data without the user’s explicit consent and truthful disclosure of purpose and scope.
5. Data received through WeChat must be kept up to date and used to improve the mini program’s user experience.
6. Without Tencent’s authorisation, do not add mini program data to search engines or directories, or add search functions of WeChat mini programs into your own mini program.
7. Without Tencent’s authorisation, do not use data received from WeChat to make eligibility decisions, including whether to approve or reject an application, or how much interest to charge on a loan.
8. If your mini program’s subject is acquired by or merged with a third party, data received from WeChat may continue to be used only within your mini program.
9. Without Tencent’s consent, do not collect, store, scrape or solicit through mini program services any data Tencent deems sensitive, including WeChat accounts and passwords, QQ numbers and passwords, user relationship chains and friend list data, bank accounts and passwords, nor use legally obtained data of this kind, yourself or by providing it to users or clients, to create, supplement or maintain your own relationship chains.
3. Data security
1. Safeguard your account, password and keys carefully.
2. If you use third-party partners’ services, sign contracts protecting any information obtained from WeChat, limiting their use and keeping it confidential.
3. Do not require users to reduce their phone operating system security (such as jailbreaking iPhones or rooting Android devices) to use functions.
4. Without user permission, do not leak, provide, disclose or license collected user data to any third party in any form.
5. After collecting user data, take necessary, reasonable and effective security measures against any form of theft, leakage or disclosure.
6. If user data is stolen, leaked or disclosed in any form, immediately take lawful, effective measures to prevent the damage from spreading, and report to the relevant authorities according to law.
7. User data collected in a specific mini program may be used only within that specific mini program, not outside it or for any other purpose, even if you have registered two or more mini programs.
8. After termination of the mini program service, within 24 hours take lawful, effective measures to irreversibly and irrevocably delete all obtained user data, unless the user has previously given written, explicit consent to continued retention.
9. Provide users ways to modify and delete their data, ensuring users can complete deletion themselves and that the data is irreversibly and irrevocably removed.
10. Users’ personal information and data security deserve careful, high-level attention and protection. If a mini program needs technologies or functions that identify personal identity, personal credit scores or credit information, including biometric technologies such as face verification, fingerprint, iris or voiceprint recognition, it should use those provided by the mini program platform or approved by the platform.
4. Location
1. Mini programs that collect, transmit or use location data without notifying and obtaining user consent will be rejected.
2. Mini programs using location-based APIs for automatic or autonomous control of vehicles, aircraft or other equipment will be rejected.
3. Mini programs using location-based APIs for dispatch, fleet management or emergency services will be rejected.
4. Location data may be used only for functions or services directly related to those the mini program provides.
Want to talk through what you just read?
We work end to end, from product design to launch. Tell us about your scenario and we can start there.
Shenzhen XZS Technology Co., Ltd. · Tel 0755-82494862 · 13760424861