Legal

Third-Party Information Sharing List

Last updated: September 2026

Gravity never sells your personal information. To provide necessary functionality, the app integrates the following third-party services (including SDKs). Each entry lists the provider, the purpose, and the information involved. Questions: [email protected]

JPush SDK (Aurora push)

Provider: Shenzhen Hexun Huagu Information Technology Co., Ltd. (深圳市和讯华谷信息技术有限公司)

Purpose: Delivering message notifications on devices without Google services (via OEM vendor channels).

Information involved: Device identifiers, network information, notification content.

Privacy policy: https://www.jiguang.cn/license/privacy

Firebase Cloud Messaging

Provider: Google LLC

Purpose: Message push delivery on Android devices with Google services.

Information involved: Push token, notification content.

Apple Push Notification service (APNs)

Provider: Apple Inc.

Purpose: Message push delivery on iOS devices.

Information involved: Device push token, notification content.

Google / Apple sign-in

Provider: Google LLC / Apple Inc.

Purpose: One-tap third-party sign-in, only when you choose it.

Information involved: OpenID identifier, email, name (provided with your authorization).

Cloudflare

Provider: Cloudflare, Inc.

Purpose: Network acceleration and security protection.

Information involved: IP address and network request metadata.

Resend

Provider: Resend, Inc.

Purpose: Sending verification-code and notification emails.

Information involved: Email address, email content.

Alibaba Cloud Phone Number Verification Service (号码认证服务)

Provider: Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司)

Purpose: Sending SMS verification codes, and — only if you tap it — one-tap sign-in with the number of the SIM in your phone.

Information involved: Mobile number, and for one-tap sign-in a single-use carrier token plus network and device information the SDK collects to complete it.

Privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html

Twilio Verify

Provider: Twilio Inc. (United States)

Purpose: Sending SMS verification codes to mobile numbers outside mainland China and checking the code you enter. Mainland numbers (+86) never go through Twilio; Alibaba Cloud sends those.

Information involved: Mobile number, and whether a code was sent and verified.

Note: Only when you sign in, register, bind a number or reset a password with a non-+86 number; the number is transmitted to Twilio’s servers outside mainland China to deliver the message.

Privacy policy: https://www.twilio.com/en-us/legal/privacy

Cloudflare Turnstile (human check, global site)

Provider: Cloudflare, Inc. (United States)

Purpose: Before a phone or email verification code is sent, confirming the request comes from a person rather than an automated program, so codes cannot be sent in bulk.

Information involved: Device and browser signals the check collects in your browser or app (such as browser characteristics, interaction signals and IP address) to tell people from bots. Not your phone number or email address.

Note: Only when you request a code on hplab.dev; the mainland China site does not use it.

Privacy policy: https://www.cloudflare.com/privacypolicy/

Alibaba Cloud Captcha 2.0 (验证码, human check, mainland China site)

Provider: Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司)

Purpose: Before a phone or email verification code is sent, confirming the request comes from a person rather than an automated program, so codes cannot be sent in bulk.

Information involved: Device and environment information, interaction signals and IP address the check collects in your browser or app. Not your phone number or email address.

Note: Only when you request a code on supergravity.cn; the data stays in mainland China.

Privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html

Alibaba Cloud ID Verification (实人认证, liveness check)

Provider: Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司) for accounts homed in mainland China; Alibaba Cloud (Singapore) Private Limited, served from Hong Kong, for all other accounts

Purpose: Only after you consent to the face check: its check page performs the liveness verdict (blink or movement prompts, colour flashes) and returns that verdict plus one face frame to us. We compute the face signature from that frame in your account’s region, for profile-photo matching and duplicate-account detection. The signature stays with us and is never handed to Alibaba Cloud.

Information involved: The camera frames of the check and the device information the check page collects to run it. Alibaba Cloud physically deletes its verification record after 30 days; the single frame we keep in authorised object storage follows the retention in the Face Information Rules.

Note: Mainland-homed accounts use the mainland service (data stays in China); all other accounts use the international service and never enter mainland China.

Privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html

Alibaba Cloud ID Verification (实人认证, identity verification)

Provider: Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司)

Purpose: Real-identity verification required by mainland-China law for mainland-homed accounts; holders of a PRC resident ID card homed elsewhere may use it when a name review asks for it or by choice (the check runs on Alibaba Cloud’s mainland service). Only when you start it and give separate consent: its check page matches your name and resident ID number against the authoritative record, runs the same liveness check and compares your face with the official ID photo, and returns to us only pass/fail and a reason code.

Information involved: The real name locked at registration, the ID number you enter, the camera frames of the check and the device information the check page collects to run it. Alibaba Cloud returns the verdict, its check scores, device-risk tags, one best face frame and a roughly one-second evidence video; we keep what it returns (the ID number encrypted) for profile-photo matching, duplicate-account detection and dispute handling, and compute the face signature from that frame in your account’s region. Alibaba Cloud physically deletes its own verification record after 30 days.

Note: Open to any account holding a PRC resident ID card; the check itself runs in mainland China, and what we keep stays in your account’s region. One ID card can back only one account per region.

Privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html

Alibaba Cloud Model Studio (百炼 / DashScope)

Provider: Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司)

Purpose: Only when you use "Quick fill" — uploading a résumé or pasting profile text — a large language model turns it into a profile draft (experience, education, skills) for you to review and edit before saving.

Information involved: The text of the résumé file you upload, or the profile text you paste. The file itself is not stored; our servers keep no copy of your résumé.

Note: Whichever region your account is homed in, this parsing runs on Alibaba Cloud servers located in mainland China.

Privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html