Privacy
Version 2026-10-09
Privacy notice
HSKOn is operated by 轻创掘金(青岛)信息技术有限公司, registered in Qingdao, mainland China ("we", "us"). We are responsible for the personal data we process to provide the learner app, account services and website, including optional AI writing grading and feedback translation. Privacy and support contact: contact@zinuto.com.
1. Eligibility and children
You must be at least 13 and meet any higher local minimum age, capacity and parental authorization requirements. If a legally required guardian-consent or child-data process has not been completed, do not register or submit data. Where mainland China's rules for children under 14 apply, a 13-year-old must not register until the required guardian consent and child-data protections are in place. Parental permission does not make an under-13 child eligible for HSKOn.
Do not register on behalf of an ineligible child or include their personal data in answers. If we learn an account belongs to an ineligible child, we will restrict further processing, verify only necessary information and delete the child's data, except records we must retain by law. Guardians can report an account to contact@zinuto.com. An age statement does not remove our duties when we become aware of a child's data.
2. Information and purposes
- Accounts: email verification and password sign-in, or enabled identity services: Apple, Google, Facebook, Kakao or LINE. A third-party sign-in flow runs only when you choose that available method. Account records use a hashed sign-in identifier and masked email hint. Delivering verification messages requires processing the full recipient address; we also receive emails you send to support. Passwords are stored as salted hashes, not plain text. Identity tokens, session and device identifiers support sign-in, security and timed mock exams.
- Learning: level, exam date, daily goal, answers, practice history, mistakes, mock reports, writing submissions and feedback, seals, nickname, avatar, theme and settings, synchronized across your signed-in devices. Free-member daily question counts are kept for 120 days to apply limits and investigate abuse.
- Security and support: necessary request metadata, rate-limit identifiers, failure and security logs and support requests. Edge delivery necessarily receives connection information including IP addresses. We do not infer your location from IP addresses. Do not send passwords, verification codes, full card details or unnecessary sensitive information to support.
- Purchases: transaction identifiers, purchase and refund status, subscriptions, tickets and unlocked editions. The App Store and Google Play handle payment methods; HSKOn does not receive card numbers.
We use information for the requested service, account and purchase administration, security, support, the limited statistics below and legal obligations. We do not sell personal data, use it for targeted advertising or cross-app tracking, collect advertising identifiers or device fingerprints, or use a third-party analytics SDK. We do not use your writing to train our own general-purpose AI models or authorize providers to use it for general-purpose model training.
3. Product and question statistics
To understand and improve HSKOn, we record pages opened, features used and counts, foreground minutes, platform and build, interface language, system country or region and time-zone offset. Records are account-linked and combined across signed-in devices. System region is a setting, not your location. Before sign-in a summary stays on your device and is sent with learning sync after sign-in; visitors who never sign in are not included in account statistics.
Statistics are enabled by default without an in-app switch. Where the GDPR applies, the basis is our legitimate interest in understanding and improving our own service, subject to your rights and the required balancing assessment. Email contact@zinuto.com to object. After verification we stop this processing and delete linked usage records; the app stops local account collection when it next receives the updated account summary. Where local law requires consent instead, it must be obtained before processing.
Daily details are kept for 60 days, then folded into one record per account and month. Monthly records are kept for the current month and preceding 12 months, then deleted. Reports without account identifiers are retained. Question-difficulty statistics use first-answer facts under a separate statistics key, kept for 13 months before reduction to question totals. A separate key does not mean irreversible anonymity while it can still be linked to an account. Account deletion removes that link and linked usage records; aggregate data must not be used to re-identify you.
4. Actual data flow and recipients
- Your device → Thailand backend. Necessary network requests pass through Alibaba Cloud edge delivery. Account and learning data enter our Thailand primary database and sync to your signed-in devices. Public question and media packages may be cached globally; account API responses bypass edge caching.
- Thailand backend → OpenCode → selected inference service. Authorized AI requests send your answer, necessary question and scoring context and technical request identifiers. The gateway forwards them to the selected service. Retries or format repair may send the same necessary content again; each answer is not sent to every listed model.
- Inference service → OpenCode → Thailand backend → your device. Scores and feedback are stored with your learning records. Requested feedback translation sends necessary feedback text through the gateway again, then caches the result for your account. Feedback may include excerpts from your answer.
- Separate necessary flows: email delivery uses the recipient address and verification message; chosen identity services exchange sign-in data; the App Store or Google Play exchange transaction and entitlement information. These functions do not need writing answers.
- HSKOn operator
- 轻创掘金(青岛)信息技术有限公司, mainland China; contact@zinuto.com. Our production backend and primary database are in Thailand. Authorized staff may access necessary data from mainland China for support, security or maintenance. Restricted recovery backups, authorized operational copies and your device caches are also processing; a Thailand server does not place every copy or access in Thailand.
- AI gateway: OpenCode
- ANOMALY INNOVATIONS, INC., United States; help@anoma.ly; 2443 Fillmore St #380-6343, San Francisco, CA 94115, United States. It receives and routes necessary AI content and technical metadata. See its privacy policy and inference privacy information. OpenCode states that Zen inference is hosted in the United States and European Union.
- Downstream models and inference services
- We currently select paid models including DeepSeek, MiMo and GLM; model developers involved are mainly based in China and the United States. A developer's country does not identify the actual request recipient or inference location. Before any legally required recipient-specific consent, we must identify the selected route's inference operator, country, contact, retention and safeguards; model brands alone cannot supply this information. Ask us for current recipient details and assistance exercising rights.
- Infrastructure and email
- Alibaba Cloud provides Thailand hosting and global edge delivery and processes necessary hosting or connection data. The configured email delivery operator receives recipient addresses and message content. Locations depend on the service and region. Each receives only information needed for its purpose; the exact operator and transfer details must be disclosed before any consent required by local law. Ask us for current details.
- Chosen identity services and stores
- Apple or Google exchange identity data when you choose their sign-in service and transaction data when you use their store. Where enabled and chosen, Facebook, Kakao and LINE exchange sign-in authorization, tokens and necessary identity information, which may include an email address you authorize. They are not recipients of your writing answers or learning history. The relevant operator and region depend on the selected service. Their own processing is described in the Apple, Google, Facebook, Kakao and LINE / LY Corporation privacy notices; these do not replace our disclosure, consent or transfer obligations.
Other HSKOn users see only the limited invitation information in section 7. We have no other routine personal-data use or recipient. We may disclose the minimum necessary information to a competent authority when legally required, after checking the request. No unspecified third party receives a general right to use your information. A new recipient or materially different purpose requires updated notice and legally required authorization before processing.
5. Optional AI and training restrictions
The app asks for agreement before the first writing-grading request. Current requests contain answer text, level, question instructions or material, required words, scoring rules and, for picture questions, scene descriptions. Original question images are not sent in the current text-grading flow. We do not append your email, password, payment details or complete account history. Personal information in an answer or quoted feedback can nevertheless identify you; this is not guaranteed anonymous processing.
Do not include real names, contact details, identity numbers, health or financial information, children's data, confidential material or another person's personal data. Use fictional or non-identifying examples, and submit only content you are authorized to use. HSK practice does not need sensitive information.
We use paid API routes and do not use Free models or discounted contributor routes that exchange requests for general-purpose training. Paid access alone does not establish zero retention: necessary security or legal retention depends on the service. OpenCode publishes model-specific retention terms, and some API providers temporarily retain requests. We select routes consistent with this notice's purposes and training restrictions and must review changes before sending further user data. We do not promise zero retention for every gateway log, provider or backup.
You may decline AI grading. To withdraw AI-processing consent, email contact@zinuto.com; this is currently handled by support, not an in-app withdrawal switch. While the request is being handled, do not start further AI grading, feedback translation or mock exams that automatically submit writing under existing consent. After verification we stop future consent-based AI processing and coordinate required deletion with recipients. Withdrawal cannot undo completed requests or invalidate earlier lawful processing. AI scores are practice references, not official results or decisions determining admission, qualifications or legal rights.
6. International transfers and legal grounds
Using HSKOn from another country may send data to Thailand. AI routing, global edge services and authorized access may involve further countries including mainland China, the United States and European Union, with different protection rules. Server location alone does not complete transfer requirements.
We must apply the mechanism required for the relevant transfer, such as appropriate contractual safeguards, required impact assessments and filings, or a narrowly applicable lawful exception. Where mainland China's law requires separate consent, the overseas recipient, contact, purpose, method, categories and rights procedure must be disclosed and that consent obtained before transfer. Where EU or UK law applies, required safeguards must be in place; you may request information about them. If local law requires in-country storage or other conditions, the affected service must be restricted until they are met. This notice does not claim that every country's procedures are already completed.
For EU or UK users, necessary account, learning, synchronization and purchase processing generally supports performing the service contract; optional AI relies on consent; essential security and the statistics above rely on legitimate interests where permitted; mandatory records rely on legal obligations. Elsewhere we use the lawful grounds and consents required locally. Accepting terms is not blanket consent to every purpose, transfer or sensitive-data operation. Declining an optional purpose does not prevent unrelated features; a feature requiring a lawful transfer cannot operate if the necessary condition is unmet.
7. Invitations and Apple refunds
When someone uses your invite code, you see the first character of their nickname, practice-day progress towards the reward and whether they subscribed; they see the first character of yours. Invitation and ticket records are account-linked. Do not use invitations to expose another person's identity.
When you request an App Store ticket refund, Apple can ask whether the ticket unlocked an edition and whether a preview was shown before purchase. The current account flow records agreement to provide this limited information; it does not send email or writing answers. You can turn this off under Me; no further such information is sent. Any separate consent required locally must still be obtained. Apple decides and processes its copy under its own policy. Use privacy.apple.com to exercise rights over that copy, or ask us for help.
8. Retention, security and deletion
When Kakao notifies us that you unlinked HSKOn or withdrew the associated account, we remove the active Kakao sign-in identity and end affected sessions. Independently held HSKOn learning and purchase records and other sign-in methods remain. If Kakao was your only method, that removed identity alone cannot recover the old account; link another method before withdrawing it. We keep event receipts and hashed revocation-ordering records without an account-owner link for security: inactive records are removed by daily cleanup after 30 days; an active Kakao identity retains the ordering record needed to reject stale events. These hashes are security identifiers, not a claim of irreversible anonymity.
Account-linked learning and feedback remain while needed for the account until you delete the relevant data or account, subject to mandatory retention. Statistics periods are in sections 2 and 3. Verification tasks expire; temporary email job content is cleared after sending, failure or expiry. Sessions, security and support records are retained only for their operational purpose and applicable legal requirements. Limited purchase, refund and accounting records may remain for the statutory period or a necessary unresolved dispute, restricted to that purpose.
We use transport encryption, restricted access, password hashing and protected credentials and backups. Authorized personnel may handle data for necessary support or security. No internet service can guarantee absolute security; we remain responsible for legally required prevention, incident response and notification. We require appropriate security, purpose and confidentiality obligations from necessary providers and do not shift our statutory duties to them.
You can delete your account under Me. Deletion removes active account and sign-in records, practice, mistakes, mock reports, writing and feedback, seals, invitations, tickets, unlocked editions and linked usage. Active-database deletion is distinct from restricted recovery backups, provider copies and store records. If a recovery copy cannot be erased immediately, it must be isolated from ordinary use, removed when lawful retention ends, and deletion reapplied before restored data returns to service. We coordinate legally required recipient deletion; provider and store copies do not necessarily disappear immediately with your account.
Deleting HSKOn does not cancel a store subscription: cancel in the App Store or Google Play. Deleted data and entitlements may be unrecoverable, subject to mandatory rights.
9. Rights, contact and updates
As provided by applicable law, request access, a copy or portability, correction, deletion, restriction, recipient and transfer information, withdrawal of consent or objection by emailing contact@zinuto.com with your sign-in method and request. We verify identity proportionately; do not send an identity document unless we explain the need for a limited check. We normally respond within 30 days and follow any shorter statutory deadline. We explain lawful extensions or exceptions and available review routes.
You may complain to the competent authority where you live or another authority with jurisdiction and seek legal remedies. We do not penalize privacy-rights requests. Changes to the operator, purposes, recipients, transfer locations or material rights require clear notice and any new consent before affected processing. A new version does not retroactively authorize an undisclosed use. The Chinese and English versions describe the same practices; neither limits mandatory protections.
隐私政策
HSKOn 由轻创掘金(青岛)信息技术有限公司运营,注册地为中国大陆青岛市(以下简称“我们”)。我们对为提供学员应用、账户服务及网站而处理的个人信息负责,包括可选的 AI 写作批改与反馈翻译。隐私与支持联系方式:contact@zinuto.com。
一、使用资格与儿童信息
使用者须年满十三岁,并满足当地法律规定的更高最低年龄、民事行为能力及监护人授权要求。如法定监护人同意或儿童信息处理程序尚未完成,请勿注册或提交数据。适用中国大陆不满十四周岁未成年人个人信息保护规则时,十三岁用户在必要的监护人同意及儿童信息保护措施落实前不得注册。监护人许可也不能使未满十三岁的儿童取得 HSKOn 使用资格。
请勿代不符合资格的儿童注册,或在作答中填写其个人信息。一旦我们得知账户属于不符合资格的儿童,将限制继续处理,仅核实必要信息并删除其数据,法律强制保留的记录除外。监护人可通过 contact@zinuto.com报告。年龄声明不免除我们实际知悉儿童信息后的法定义务。
二、信息种类与用途
- 账户:邮箱验证及密码登录,或已启用的 Apple、Google、Facebook、Kakao、LINE 身份服务;仅在您选择可用方式时发起对应第三方登录。账户记录使用登录标识的哈希值及遮蔽后的邮箱提示。发送验证邮件时需处理完整收件地址;我们也接收您主动发送给支持邮箱的内容。密码以加盐哈希保存,不保存明文。身份令牌、会话及设备标识用于登录、安全和计时模考。
- 学习:等级、考试日期、每日目标、作答、练习、错题、模考报告、写作及反馈、印记、昵称、头像、主题和设置,并在您的已登录设备之间同步。普通会员每日题数保留一百二十天,用于执行额度及排查滥用。
- 安全与支持:必要的请求元数据、限流标识、故障及安全日志、支持请求。边缘服务必须接收 IP 地址等连接信息,我们不使用 IP 推断位置。请勿向支持人员发送密码、验证码、完整银行卡信息或不必要的敏感内容。
- 购买:交易标识、购买及退款状态、订阅、解锁券和已解锁内容。App Store 和 Google Play 处理支付方式,HSKOn 不接收银行卡号。
信息仅用于您请求的服务、账户与购买管理、安全、支持、下述有限统计及法定义务。我们不出售个人信息,不用于定向广告或跨应用追踪,不收集广告标识、设备指纹,也不接入第三方分析 SDK。不将您的作答用于训练自己的通用 AI 模型,也不授权供应商将其用于通用模型训练。
三、产品使用及题目统计
为了解并改进 HSKOn,我们记录打开的页面、使用的功能及次数、前台分钟数、平台与构建版本、界面语言、系统国家或地区、时区偏移。记录关联账户,在已登录设备间合并。系统地区是一项设置,并非实际位置。登录前摘要留在设备本地,登录后随学习同步发送;始终不登录的访客不会进入账户统计。
统计默认开启,目前无应用内开关。适用 GDPR 时,以完成必要的利益衡量并尊重用户权利为前提,依据了解及改进自有服务的合法利益处理。您可向 contact@zinuto.com提出异议;核实后停止处理并删除关联使用记录,应用在下次收到更新的账户摘要后停止本地账户统计。当地法律要求同意时,须在处理前取得。
每日明细保留六十天后合并为每账户每月一条记录;月度记录保留当月及之前十二个月后删除。无账户标识的汇总报告继续保留。题目难度统计使用单独统计键下的首次作答事实,保留十三个月后归并为题目总量;只要仍能关联账户,单独统计键不等于不可逆匿名化。删除账户会解除该关联并删除关联使用记录,不得利用汇总数据重新识别用户。
四、实际数据流与接收方
- 用户设备 → 泰国后台。必要请求经过阿里云边缘分发;账户及学习信息进入泰国主数据库,再同步至已登录设备。公开题包、媒体可能在全球缓存,账户 API 响应绕过边缘缓存。
- 泰国后台 → OpenCode → 选定推理服务。经授权的 AI 请求发送作答、必要题目及评分上下文、技术请求标识,由网关转交选定服务。重试或格式修复可能再次发送同一必要内容,不会把每份作答发给所有列出的模型。
- 推理服务 → OpenCode → 泰国后台 → 用户设备。评分与反馈随学习记录保存。请求翻译反馈时,必要反馈文字再次经过网关,并为账户缓存结果;反馈可能包含原作答片段。
- 其他必要服务分别处理:邮件投递处理收件地址及验证消息;选用的身份服务交换登录信息;App Store 或 Google Play 交换交易与权益信息。这些功能不需要写作作答。
- HSKOn 运营主体
- 轻创掘金(青岛)信息技术有限公司,中国大陆;contact@zinuto.com。生产后台及主数据库位于泰国,授权人员可能从中国大陆访问必要数据,完成支持、安全或维护。受限恢复备份、授权运维副本以及设备缓存同样属于数据处理;服务器在泰国不表示所有副本及访问都在泰国。
- AI 网关:OpenCode
- 运营主体为美国 ANOMALY INNOVATIONS, INC.,邮箱 help@anoma.ly,地址 2443 Fillmore St #380-6343, San Francisco, CA 94115, United States。接收并转发必要 AI 内容及技术元数据,详见其隐私政策及推理服务隐私说明。OpenCode 公布的 Zen 说明称其推理托管在美国及欧盟。
- 下游模型与推理服务
- 目前选用 DeepSeek、MiMo、GLM 等付费模型,所涉及模型研发厂商主要来自中国和美国。开发者所在地不等于实际请求接收方或推理节点所在地。依法需要针对接收方取得单独同意时,须先明确选定线路的推理运营者、国家、联系方式、保存规则及保护措施,仅列模型品牌不能代替这些信息。当前接收方详情及权利行使协助可向我们请求。
- 基础设施与邮件
- 阿里云提供泰国托管及全球边缘分发,处理必要托管或连接数据;配置的邮件投递运营者接收收件地址及消息。地区取决于服务及用户地区,各方仅接收对应目的所需信息。当地法律要求同意时,须在同意前告知实际运营主体及出境详情;当前详情可向我们查询。
- 选用的登录服务与商店
- 选择 Apple 或 Google 登录时交换身份信息,使用其商店时交换交易信息。Facebook、Kakao、LINE 登录仅在启用且由您选择时交换登录授权、令牌及必要身份信息,可能包括您授权的邮箱,不接收写作作答或学习历史。对应主体及地区取决于选定服务,其自身处理详见 Apple、Google、Facebook、Kakao、LINE/LY Corporation 隐私说明;不能以其政策代替我们的告知、同意及出境义务。
其他 HSKOn 用户仅能看到第七条规定的有限邀请信息。除此之外,没有其他日常个人信息用途或接收方。依法必须向有权机关提供信息时,我们核验请求并仅提供必要信息,不授予未指明的第三方任意使用权。新增接收方或实质改变用途,须在处理前更新告知并取得法定授权。
五、可选 AI 与训练限制
应用在首次写作批改前询问是否同意。当前请求包含作答文字、等级、题目指令或材料、必用词、评分规则及图片题场景描述,当前文字批改链路不发送原始题目图片,也不附加邮箱、密码、支付信息或完整账户历史。但作答或反馈引用中的个人信息仍可能识别您,不能保证已经匿名化。
请勿填写真实姓名、联系方式、证件号码、健康或财务信息、儿童信息、保密资料或他人的个人信息。使用虚构或不识别个人的例子,仅提交有权使用的内容。HSK 练习不需要敏感信息。
我们仅使用付费 API 线路,不使用 Free 模型或以补贴价格交换通用模型训练权限的 Contributor 线路。付费本身不保证零留存,必要的安全或法定保存规则取决于具体服务。OpenCode 公布按模型区分的留存规则,部分 API 供应商会短期保存请求。我们选择符合本政策用途及训练限制的线路,并须在变更后发送用户数据前核对;不承诺每项网关日志、每家供应商或每份备份一律零留存。
您可拒绝 AI 批改。撤回 AI 处理同意,请向 contact@zinuto.com发邮件;目前由支持人员处理,并非应用内撤回开关。处理期间,请勿发起新的 AI 批改、反馈翻译或依据既有同意自动提交写作的模考。核实后停止后续基于同意的 AI 处理,并协助接收方落实所需删除。撤回无法逆转已完成请求,不影响此前合法处理的效力。AI 分数为练习参考,并非官方成绩,不用于决定录取、资格或法律权利。
六、跨境处理与合法依据
从其他国家使用服务可能将数据发送至泰国。AI 路由、全球边缘服务及授权访问还可能涉及中国大陆、美国和欧盟等保护规则不同的地区。服务器所在地不能代替出境合法手续。
我们须为具体传输落实适用机制,例如适当合同保护、必要影响评估与申报,或严格符合条件的法定例外。中国大陆法律要求单独同意时,须先告知境外接收方、联系方式、目的、方式、信息种类及权利行使程序,并在传输前取得单独同意。适用欧盟或英国法律时,须落实所需保护措施,您可索取相关信息。当地要求境内存储或其他条件时,相关服务须在满足前受到限制。本政策不表示各国手续均已完成。
对欧盟或英国用户,必要账户、学习、同步及购买处理通常以履行服务合同为依据;可选 AI 以同意为依据;必要安全及上述统计在法律允许时以合法利益为依据;强制记录以法定义务为依据。其他地区采用当地所需合法依据及同意。接受协议不等于对所有用途、出境或敏感信息处理的一揽子同意。拒绝可选目的不影响无关功能;依赖合法出境的功能,在必要条件未满足时不能提供。
七、邀请及 Apple 退款
他人使用您的邀请码时,您看到其昵称首字、奖励所需练习天数进度及是否订阅,对方看到您的昵称首字。邀请及券记录关联账户,请勿借邀请披露他人身份。
申请 App Store 解锁券退款时,Apple 可能询问该券是否解锁一期内容、购买前是否展示试读。当前账户流程记录提供这些有限信息的同意,不发送邮箱或写作作答。您可在“我的”关闭,此后不再发送;当地法律要求单独同意时仍须取得。退款由 Apple 决定,其按自身政策处理副本;可通过 privacy.apple.com行使权利,或请我们协助。
八、保存、安全及删除
Kakao 通知我们您已断开 HSKOn 或撤销相关账户时,我们移除在用的 Kakao 登录身份并结束受影响的会话。独立持有的 HSKOn 学习、购买记录及其他登录方式保留。若 Kakao 是唯一方式,不能只凭已删除身份找回原账户,请先绑定其他方式再撤销。为防止重复通知和旧授权重放,我们保留无账户归属关联的事件收据和哈希撤销排序记录;非活跃记录满三十天后由每日清理删除,活跃 Kakao 身份保留拒绝迟到旧通知所需的排序记录。哈希仍是安全标识,不表示不可逆匿名化。
关联账户的学习与反馈在账户服务所需期间保留,直至删除相关数据或账户,法定保存除外。统计期限见第二、三条。验证任务到期失效,临时邮件任务在发送、失败或到期后清除。会话、安全、支持记录仅为运作目的及法定要求保留;有限购买、退款、会计记录可能为法定期限或必要未决争议保留,并限制用途。
我们采用传输加密、受限访问、密码哈希、受保护凭据及备份,授权人员可为必要支持或安全处理信息。互联网服务无法保证绝对安全,我们仍承担法定预防、事件处理及通知责任,要求必要供应商承担适当安全、用途及保密义务,不将法定义务转移给供应商。
您可在“我的”删除账户。删除清除在用账户与登录记录、练习、错题、模考报告、写作与反馈、印记、邀请、解锁券、已解锁内容及关联使用记录。在用数据库删除与受限恢复备份、供应商副本及商店记录不同。恢复副本无法立即擦除时,须隔离并停止日常使用,在合法保存期届满后删除,恢复投入服务前重新执行删除。我们协助落实法定接收方删除,不声称所有供应商及商店副本随账户立即消失。
删除 HSKOn 不取消商店订阅,请在 App Store 或 Google Play 取消。已删数据及权益可能无法恢复,但不影响法定权利。
九、权利、联系及更新
按适用法律,您可通过 contact@zinuto.com请求查阅、复制或可携带、更正、删除、限制处理、接收方及出境信息、撤回同意或提出异议,说明登录方式与请求内容即可。我们按必要程度核验身份;除非解释有限核验的必要原因,请勿发送身份证件。通常三十天内回复,法定更短期限优先,依法延长或适用例外时说明原因及复核途径。
您可向所在地或其他有管辖权的主管机关投诉并依法求助,不因行使隐私权利受到不利待遇。运营主体、用途、接收方、出境地区或重要权利变化时须明确告知,新的必要同意须在处理前取得。新版本不追溯授权未告知的使用。中英文描述相同实践,任何译文均不限制强制保护。