1. Introduction
This Privacy Policy explains how QIANJU PTE. LTD. (“we,” “us,” or “our”) collects, uses, discloses, stores, protects, and processes your personal data when you download, install, access, or use the Vegetable Defense mobile application, game content, and related services collectively, the “Service”.
This Privacy Policy is primarily prepared in accordance with Singapore’s Personal Data Protection Act 2012 “PDPA”. If you are located outside Singapore, we will also comply, where applicable, with mandatory personal data protection laws in your jurisdiction that cannot be excluded.
Please read this Privacy Policy carefully before using the Service. If you do not agree with this Policy, please stop using the Service.
2. Who We Are
Personal data controller and processing entity:
Company Name: QIANJU PTE. LTD. Contact Email: hzqjkjyxgs@163.com Data Protection Officer / DPO Contact: hzqjkjyxgs@163.com
3. Scope of This Policy
This Policy applies to:
- (a) the Vegetable Defense mobile game application; (b) game accounts, customer support, events, in-app purchases, subscriptions, advertising, analytics, anti-cheat, and security services; (c) related services provided through app stores, official websites, social media, customer support channels, or other official channels.
This Policy does not apply to third-party websites, platforms, SDKs, payment services, advertising services, or social media services that are independently operated by third parties. Such third-party services are governed by their own privacy policies.
4. Personal Data We Collect
We collect personal data only within a reasonable and necessary scope related to the Service. The specific information collected depends on the features you use, device permissions, your region, app store settings, and the choices you make.
4.1 Data You Provide
We may collect:
- (a) account data, such as username, nickname, avatar, email address, phone number, login credentials, and account ID; (b) age or date of birth, to determine whether you meet the age requirements for the Service; (c) customer support data, such as questions, feedback, communication content, contact details, screenshots, device information, and support records; (d) payment-related data, such as order number, purchase history, subscription status, transaction time, product type, and payment status. Full card numbers, payment account passwords, and other sensitive payment information are usually processed by app stores or payment service providers, and we do not directly store complete payment card information; (e) event or survey data that you voluntarily submit when participating in events, surveys, tests, or prize draws; (f) other information you voluntarily provide: .
4.2 Data Collected Automatically
When you use the Service, we or third-party SDKs may automatically collect:
- (a) device data, such as device model, operating system, system version, device language, time zone, network type, screen resolution, device identifiers, and advertising identifiers; (b) log data, such as IP address, login time, access time, error logs, crash reports, and diagnostic data; (c) gameplay data, such as level progress, play duration, operation records, game settings, Virtual Item usage, achievements, leaderboards, and event participation; (d) security and anti-cheat data, such as abnormal login activity, abnormal operations, cheating risk signals, ban records, and device or account risk assessment information; (e) advertising and analytics data, such as ad impressions, clicks, conversions, attribution, advertising IDs, and de-identified statistical data; (f) information collected through cookies, SDKs, local storage, or similar technologies.
4.3 Data From Third Parties
We may receive necessary data related to the Service from the following third parties:
- (a) app stores or payment channels, such as Apple App Store and Google Play; (b) advertising, attribution, and analytics service providers; (c) cloud services, crash monitoring, customer support, and anti-cheat service providers; (d) third-party login service providers, if you choose to use such login methods; (e) other sources permitted by law or authorized by you.
5. Purposes for Collecting, Using, and Disclosing Personal Data
We may collect, use, or disclose your personal data for the following purposes:
- (a) creating, verifying, maintaining, and managing your account; (b) providing, operating, maintaining, updating, and improving the Service; (c) saving game progress, distributing Virtual Items, and managing leaderboards, events, rewards, and achievements; (d) processing orders, in-app purchases, subscriptions, refunds, transaction verification, and related disputes; (e) providing customer support, troubleshooting, user communications, and service notices; (f) protecting account, transaction, game environment, and server security; (g) identifying, preventing, and addressing cheating, fraud, abuse, violations, or security incidents; (h) conducting data analysis, product optimization, performance monitoring, and crash fixes; (i) conducting ad display, ad attribution, marketing activities, and performance measurement within the scope of your consent or as permitted by applicable law; (j) complying with laws, regulations, regulatory requirements, court orders, law enforcement requests, or compliance obligations; (k) protecting the lawful rights and interests of us, users, partners, or third parties; (l) completing mergers, acquisitions, restructuring, financing, asset transfers, or similar corporate transactions; (m) other purposes separately consented to by you.
We will not require you to consent to the collection, use, or disclosure of personal data beyond what is reasonably necessary to provide the Service as a condition of providing the Service to you.
6. Consent, Deemed Consent, and Withdrawal of Consent
Where required by applicable law, we will notify you of the relevant purposes and obtain your consent before collecting, using, or disclosing your personal data.
In certain circumstances, under the PDPA, if you voluntarily provide personal data to us for an obvious purpose, or if you do not opt out after receiving notice, you may be deemed to have given consent. We will still make reasonable efforts to ensure that you understand the relevant processing purposes.
You may withdraw your consent to our collection, use, or disclosure of your personal data at any time by contacting hzqjkjyxgs@163.com. After receiving your withdrawal request, we will process it within a reasonable period and inform you of the likely consequences. For example, withdrawing consent for certain necessary data processing may prevent us from continuing to provide account login, payment, customer support, security protection, or certain game features.
Withdrawal of consent does not affect the lawfulness of processing based on your consent before the withdrawal.
7. How We Disclose Personal Data
We may disclose necessary personal data to the following parties:
- (a) service providers, such as cloud services, data storage, customer support, payment, order verification, analytics, crash monitoring, security, anti-cheat, and advertising attribution providers; (b) app stores and payment channels, for purchases, subscriptions, refunds, transaction verification, and disputes; (c) advertising and analytics partners, for ad display, attribution analysis, and performance measurement within the scope of your consent or as permitted by law; (d) affiliates, for unified operations, technical support, customer service, security management, and compliance purposes; (e) professional advisers, such as lawyers, auditors, accountants, insurers, or other professional advisers; (f) government, regulatory, judicial, or law enforcement authorities, where required by law, regulatory requirements, court orders, or lawful requests; (g) transaction-related parties, in connection with mergers, acquisitions, restructuring, financing, asset transfers, or similar transactions; (h) other third parties with your consent or authorization.
We will require service providers to process personal data only for agreed purposes and to adopt reasonable protection measures.
8. International Transfers
Because the Service may be provided in multiple regions, your personal data may be transferred to, stored in, accessed from, or processed in countries or regions outside Singapore.
When we transfer personal data outside Singapore, we will take reasonable steps to ensure that the recipient provides a standard of protection comparable to that under the PDPA, unless an exception is permitted by applicable law.
These measures may include contractual obligations, access controls, encryption, data minimization, vendor security assessments, and other appropriate safeguards.
9. Accuracy of Personal Data
We will make reasonable efforts to ensure that the personal data we collect is accurate and complete, especially where such data may be used to make decisions affecting you or may be disclosed to other organizations.
You should ensure that the information you provide to us is true, accurate, complete, and updated when it changes. You may also correct relevant data through account settings in the Service or by contacting us.
10. Retention of Personal Data
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required for legal, regulatory, tax, audit, dispute resolution, security, anti-cheat, or legitimate business purposes.
In general:
- (a) account data will be retained while the account exists; (b) order, payment, and transaction records will be retained as required by legal, tax, audit, and app store requirements; (c) customer support records will be retained for the period necessary to handle issues and subsequent disputes; (d) security, anti-cheat, and risk-control records will be retained for the period necessary to protect service security; (e) crash, log, and analytics data will be retained for the period necessary for product optimization and security.
When personal data is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of such data. After account deletion, we will generally delete or anonymize relevant personal data within [insert period], unless retention is required by law or for legitimate business purposes.
11. Security of Personal Data
We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks.
These measures may include:
- (a) encrypted transmission; (b) access control; (c) account and system security monitoring; (d) data minimization; (e) log auditing; (f) employee and vendor permission management; (g) security incident response procedures.
However, please understand that no method of Internet transmission or electronic storage is completely secure.
12. Data Breach Notification
If a data breach involving personal data occurs, we will assess the breach in accordance with applicable legal requirements and take reasonable steps to contain its impact.
If the data breach is likely to result in significant harm to affected individuals, or meets the applicable notification threshold, we will notify the Personal Data Protection Commission of Singapore “PDPC” and affected individuals as soon as reasonably practicable, unless otherwise provided by law.
13. Your Access and Correction Rights
Under the PDPA, you may contact us at hzqjkjyxgs@163.com to request:
- (a) access to your personal data in our possession or under our control; (b) information about how your personal data has been used or disclosed within one year before the request; (c) correction of errors or omissions in your personal data in our possession or under our control.
We may need to verify your identity. We may also refuse, restrict, or delay certain requests where permitted by law, for example where the request would disclose another person’s personal data, affect a security investigation, violate the law, or fall within a legal exception.
To the extent permitted by law, we may charge a reasonable fee for processing access requests and will inform you of the relevant fee before processing.
14. Account Deletion and Deletion Requests
You may contact us at hzqjkjyxgs@163.com to request account deletion or deletion of personal data.
Before processing a deletion request, we may need to verify your identity and confirm the request. After account deletion, you may no longer be able to access your account, game progress, Virtual Items, purchase records, subscription benefits, event rewards, or other account-related content.
We will process deletion or anonymization within the period required by applicable law, except for data that must be retained for legal, regulatory, audit, tax, dispute resolution, security, or anti-fraud purposes.
15. Advertising, Cookies, SDKs, and Similar Technologies
We and our third-party partners may use cookies, SDKs, advertising identifiers, local storage, and similar technologies to:
- (a) maintain login status and service functionality; (b) protect account and service security; (c) save preference settings; (d) analyze service performance and user experience; (e) display ads and conduct ad attribution and performance measurement; (f) identify cheating, fraud, or abnormal behavior.
You may manage advertising identifiers, personalized advertising, tracking permissions, or notification permissions through device system settings, in-app settings, or mechanisms provided by third-party platforms. Disabling certain permissions may affect some features or advertising experiences.
Please refer to the SDK List at the end of this Policy for specific SDK information.
16. Minors
The Service is not intended for users under 18 years old or under the age of legal majority in their place of residence.
We do not knowingly collect personal data from minors. If you believe that we have mistakenly collected personal data from a minor, please contact us at hzqjkjyxgs@163.com. After verification, we will delete the relevant data or take other necessary measures as soon as possible.
If the Service allows minors to use it in the future, we will set up age notices, parental consent, guardian rights, and minor data protection mechanisms as required by applicable law.
17. Direct Marketing
We will send you marketing messages, event information, or promotional content only where permitted by law or with your consent.
You may opt out of receiving marketing messages at any time by following the unsubscribe method in the message or by contacting us at hzqjkjyxgs@163.com. Even if you opt out of marketing messages, we may still send necessary notices related to your account, security, transactions, service changes, or legal compliance.
18. Third-Party Links and Services
The Service may contain links or features leading to third-party websites, applications, advertisements, payment services, social platforms, or other services. Third-party services are operated by their respective operators, and their personal data processing activities are governed by their own privacy policies.
We recommend that you read the privacy policies of third-party services before using them. We are not responsible for third-party personal data processing activities, but we will, within a reasonable scope, select partners with appropriate security and compliance capabilities.
19. Updates to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” or “Last Updated” date.
If an update materially affects your rights or our personal data processing practices, we will notify you through in-app notices, pop-ups, email, website announcements, or other reasonable means.
If you continue using the Service after the update takes effect, you will be deemed to have acknowledged the updated Policy.
20. Contact Us
If you have any questions about this Privacy Policy, our personal data processing practices, access or correction requests, withdrawal of consent, complaints, or data protection matters, please contact us through:
Company: QIANJU PTE. LTD. Data Protection Officer / DPO: hzqjkjyxgs@163.com Privacy Email: hzqjkjyxgs@163.com Mailing Address:
We will handle your request or complaint within a reasonable period. If you are not satisfied with our response, you may also seek further assistance from the Personal Data Protection Commission of Singapore “PDPC”.
Appendix: SDK List
Please complete this section based on the SDKs actually integrated: