Cross-Border Data Transfer Notice
Explains the overseas recipients, transfer scenarios and choices that may be involved when you use Luotopia.
This is an English translation provided for your convenience. If it differs from the Simplified Chinese original, the Simplified Chinese version governs.
1. Purpose of This Notice
This notice tells you which features may, in the course of providing Luotopia's services, cause your data to be transferred to servers outside the People's Republic of China or processed through overseas nodes, so that you can decide whether to use those features on a fully informed basis.
Campus unified authentication and most business requests — for academic affairs, venues, the library, the shuttle bus and the like — are sent by default to Wuhan University and to the domains of partner systems within mainland China, and are not the “active cross-border” scenarios that this notice mainly addresses; but accessing the website, weather, wallpapers, some AI providers, code hosting and CDNs may involve cross-border processing.
2. Scenarios and Recipients That May Involve Cross-Border Transfers
2.1 Weather and Geocoding (Optional / Depends on Provider)
Open-Meteo (such as api.open-meteo.com, air-quality-api.open-meteo.com and geocoding-api.open-meteo.com): may receive latitude-and-longitude or place-name queries, used for forecasts and air quality. Its service facilities are usually located overseas.
AccuWeather (api.accuweather.com): if you choose this source or the system uses it, query parameters and location-related information may be sent overseas.
OpenStreetMap Nominatim (nominatim.openstreetmap.org): reverse-geocoding requests may be sent overseas.
Coarse IP-based location (such as api.ip.sb and ip-api.com): when GPS is not authorised, or a fallback location is needed, the app may query the relevant service for an approximate, IP-based location; these services may be located overseas or reached through overseas routes.
Domestic sources such as Mi Weather (weatherapi.market.xiaomi.com): these generally do not constitute the cross-border transfer described in this section, but the actual DNS resolution and network path are authoritative.
2.2 Wallpapers and Content Distribution
Bing daily wallpaper (www.bing.com and related interfaces): when requesting wallpaper metadata or images, the app may reach Microsoft's relevant overseas infrastructure and cache the image file on your device.
2.3 AI Large Models (Configured by the User)
When you set the AI provider to OpenAI (api.openai.com), Anthropic (api.anthropic.com), Google Gemini (generativelanguage.googleapis.com), xAI (api.x.ai), Perplexity (api.perplexity.ai) or another overseas or custom overseas address, your conversation content, message history and local agenda-summary fields are transferred to the corresponding overseas server.
If you use a default or optional provider that is based within mainland China or whose main site is within mainland China — such as SiliconFlow, DeepSeek, Moonshot AI, Zhipu AI, Tongyi or Hunyuan — this generally does not constitute a cross-border transfer in the sense of this section; the provider's actual deployment and privacy policy are ultimately authoritative. The model gateway built into the app, ai.tsinbei.cn, is our own first-party service (within mainland China).
2.4 Official Website, Static Resources and Security Verification
Luotopia's website and some static resources (such as the whu.sb site, the friend-links JSON, the legal text and app screenshots) may be hosted on Cloudflare Pages or distributed through the Cloudflare network, and the access logs and requests may pass through overseas nodes.
The client itself also actively requests www.whu.sb to obtain the legal text and catalogue, the font mirror, the hot-update script manifest, the friend-links configuration and app-update information; these requests are likewise distributed through the Cloudflare network and may generate standard access logs (IP, User-Agent and request path). Among these, our Pages Function reverse proxy forwards font requests to fonts.gstatic.com.
The server uses Altcha human verification, whose proof-of-work is completed on the client and verified by the server.
2.5 Developer and Community Resources (Accessed by the User)
GitHub (github.com, raw.githubusercontent.com and the like): when you view the source code, releases, hot-update scripts or documentation, the requests go overseas.
Google Noto Sans font: unlike the resources above that you actively access, the font is a default interface resource that is usually loaded on demand in the background. When the client needs this font, it first tries to obtain it from our own first-party source www.whu.sb/fonts/gstatic/ (this source reverse-proxies fonts.gstatic.com through Cloudflare Pages, the file names are their SHA-256 digests, and the client verifies the digest and the file length); only when this mirror is unavailable does it connect directly to fonts.gstatic.com, in which case a cross-border request may occur.
iOS and macOS use the system fonts by default and usually do not download any fonts at all; devices whose system already includes the chosen font likewise do not download it. The MiSans font is obtained on demand from www.whu.sb/fonts/misans/. The fonts used by the website itself are all self-hosted and do not make requests to Google.
2.6 Friend Links and Third-Party Apps
After you click a friend link and go to a third-party website or app (such as a club site, a partner app or an AI sign-up page), that third party's privacy and cross-border rules apply, so please read them carefully.
2.7 Security Checks and Push Services
Security checks: freeRASP (Talsec / AHEAD) reports security events to that provider's back end, and we separately provide the random installation identifier generated by the client (a UUID) to that provider as an external id, so that security events can be matched to the same device; its servers may be located overseas.
Push services: the push token for Google Firebase Cloud Messaging (fcm.googleapis.com) is forwarded to Google via our server, and the related processing may take place overseas; on devices without Google Play services, Huawei Push Kit (within mainland China) may be used instead.
Optional telemetry: only after you turn it on in the onboarding page or in Settings are the crash and exception records, usage analytics and performance data from Firebase Analytics, Crashlytics and Performance sent to Google, whose servers are usually located overseas; these three channels are off by default.
None of the transfers described above include your campus account credentials, passwords, detailed grades or chat content. For the related processing, see the Privacy Policy.
3. Scope of Transferred Information (Minimised)
Weather / geo: location coordinates or a city name, the IP (for coarse location), and request metadata such as the device time zone and language;
Wallpapers: requests for the wallpaper list or image URLs, generally without any campus-account cookies;
AI: chat text, agenda-summary fields, the model name and the API key (the key is provided by you and stored on your device, and is submitted with the request to the provider you choose);
Website / CDN: standard web access logs (IP, User-Agent, the path accessed and the like);
Security checks: risk-type labels, the check conclusion and the random installation identifier;
Push: the push token, the installation identifier, the platform and version, and the language and time zone;
By default, CAS passwords, academic-affairs cookies and detailed grades are not uploaded in bulk to overseas weather or wallpaper services.
4. Purpose and Legal Basis
Cross-border transfers happen only to make the features you actively use work (obtaining forecasts, wallpapers, AI replies, accessing documentation or the website and so on), or to safeguard the security and availability of the site.
You give your consent by turning on the relevant permissions, by choosing an overseas data source or AI provider, or by actively following an overseas link; you can also refuse or stop this through “Your choices” below.
5. Security and Safeguards
We use encrypted transport such as HTTPS wherever possible;
Sensitive credentials are kept first in the system's secure storage, and AI conversations can be stored encrypted on your device;
The choice of overseas provider is left to you (especially for the AI);
Core campus business connects by default directly to the university's systems within mainland China, reducing unnecessary cross-border transfers.
We require or expect third parties to protect data within the scope of what their own policies promise, but a third party's independent processing is its own responsibility.
6. Your Choices
Refuse location permission and avoid using features that rely on overseas weather sources; in Settings, prefer a weather data source within mainland China (where one is available);
Do not use the Bing wallpaper source; use a local image instead, or turn wallpapers off;
For the AI, use only providers within mainland China, or turn off the AI assistant; do not provide sensitive personal information in the conversation;
Do not follow overseas links such as GitHub;
If you do not agree to the cross-border processing described in this notice, please stop using the relevant features or uninstall the app.
7. Updates to This Notice
The list of overseas recipients may change as versions iterate or as the default providers or infrastructure are adjusted. The updated notice is authoritative as of the “Last updated” date on this page and is published on this site. We suggest that you review it from time to time.
For the machine-readable catalogue, see /data/legal.json (it contains each document's slug, title and lastUpdated, so that the client can check versions).
8. Contact Us
If you have questions about cross-border processing, please contact us through the ClosedWHU community channels.