WoolMate Android Privacy Policy (Mainland China Channels) — 1.2.2
Version 1.2.2. Effective date: 2026-10-17.
Developer: Beijing Chenghan Bowen Education Technology Co., Ltd. App: WoolMate Platform: Android (Mainland China channels) Release channel: cn Contact: contact@chenghanbowen.com
This Policy applies to the WoolMate Android version distributed through mainland China app stores or domestic distribution channels.
1. Scope
WoolMate is an offer, coupon, and local-life information aggregation tool. We do not sell goods or services directly and do not process in-app payment, orders, delivery, or after-sales service. When you open Taobao, JD, Meituan, or another third-party platform, the transaction and related personal information processing are governed by that third party's rules.
If you choose to use basic services only, we will not formally initialize analytics SDKs or advertising SDKs and will not actively request location permission. Basic browsing, product lists, search, and related services send only necessary client context such as product line, platform, package name, version, distribution channel, network status, IP address, and API logs to keep the service available and secure. Unless you fully agree to this Policy or actively use account, feedback, or similar features that need request-source identification, common requests do not include an installation ID or login token.
2. Information We Process
| Scenario | Information | Purpose | Trigger |
|---|---|---|---|
| App launch, API access, and security | Product line, client platform, package name, app version, build number, distribution channel, environment, network status, IP address, User-Agent, and API logs; after full privacy consent, or when you actively use account, feedback, or similar features that need request-source identification, an installation ID may be generated and used | Complete requests, distinguish versions and channels, detect abnormal requests, maintain stability | When you use the app or access services; installation ID is used only after full consent or active feature trigger |
| Offer browsing, activities, topics, and search | Search keywords, filters, pagination parameters, product identifiers, platform identifiers, activity or topic identifiers, page views, and taps | Return product lists, activities, search results, popular keywords, recommendations, and improve the experience | When you browse, search, filter, or tap |
| Nearby and local-life offers | Location coordinates, location time, city, store distance, and short-term local location cache | Show nearby offers, local-life products, store distance, local search, and local product details | After you agree to this Policy, grant location permission, and use related features |
| Coupon conversion and third-party redirects | Product view identifiers, platform code, activity identifiers, business sid, product links, third-party links, Taobao/JD command text or other promotion text, and redirect results | Generate usable coupon or purchase links, identify conversion paths, troubleshoot errors, and provide fallback opening | When you tap claim, buy, use, or activity landing actions |
| Clipboard write | Command text or promotion text provided by third-party platforms | Let you paste coupon text after opening third-party platforms | When you trigger a conversion, copy, share, or redirect flow; we do not read clipboard content in unrelated scenarios |
| Account and profile | Phone number, email, verification result, access token, nickname, avatar URL, account status, and login time | Send verification codes, create or identify accounts, maintain login state, display or update profile, and log out | When you actively use account features; cold-start token validation happens only after privacy consent |
| Avatar and feedback attachments | Images, image URLs, or upload results selected by you | Update avatar or submit feedback screenshots and attachments | When you actively choose files through the system picker |
| Feedback | Feedback type, title, content, contact information, screenshots or attachments, app version, client platform, installation ID, and account login status | Diagnose issues, reply to feedback, improve products, and provide support | When you submit feedback or upload attachments |
| Local records and preferences | Privacy consent state, installation ID generated after full consent, search history, favorites, browsing history, short-term location cache, and login cache | Preserve basic experience, reduce repeated consent, display local history, and maintain login state | When you use related features; most data stays on your device |
| Analytics and diagnostics | App version, system version, device model, network status/type, carrier or SIM provider, IP address, page views, taps, Android ID, OAID/GUID, MAC address or network-device information where technically available | Basic usage analytics, path analysis, issue diagnosis, compatibility troubleshooting, and service improvement | Only after full privacy consent |
| Advertising and first-party promotion | Device/app/network information, IP address, ad placement, ad impression/click/close/reward events, ad load result, anti-fraud signals, and first-party promotion configuration/events | Domestic advertising, frequency control, measurement, invalid traffic prevention, and first-party promotion | Only after full privacy consent and when enabled by channel and ad configuration |
| Device sensor and motion/orientation information | The device-supported sensor list, including sensor name, vendor, and version; when relevant advertising interaction or security/anti-fraud capabilities require it, acceleration, gyroscope, magnetic-field, rotation-vector, or other motion/orientation information may be processed, and a sensor-feature summary may be derived locally. Exact fields depend on the applicable SDK version, system authorization, and ad configuration; this does not mean every item is collected or uploaded | Used for device-feature recognition, runtime compatibility, shake/twist-style ad interaction decisions, and security/anti-fraud | After full privacy consent and formal activation of the relevant advertising and security capability, read as needed through Android sensor interfaces |
3. Permissions
| Permission or capability | Use | Control |
|---|---|---|
| Device sensor and motion/orientation information (no separate runtime permission) | After full privacy consent and formal activation of the relevant advertising or security capability, the device-supported sensor name, vendor, and version may be read; when relevant advertising interaction or anti-fraud requires it, acceleration, gyroscope, magnetic-field, rotation-vector, or other motion/orientation information may be processed. Exact handling depends on the SDK, system, and configuration; this does not mean every item is read or uploaded | You can withdraw consent through Privacy Choices, stopping subsequent advertising requests and optional analytics controlled by the app; sensor availability is also controlled by the device system |
| Internet | Product, search, local-life, activity, redirect, feedback, legal, and account services | Core capability; disabling it makes major features unavailable |
| Network state | Network checks, analytics, ad loading, and diagnostics | Used with network and analytics capabilities |
| Approximate location | Nearby offers, local-life services, local search, and store distance | You can disable it in system settings |
| Precise location | Improve nearby products, store distance, and local search accuracy | You can disable it in system settings |
| Notifications | System notifications, service notices, or channel messages | You can disable it in system settings |
| Android system file picker | Avatar and feedback image or attachment selection | Triggered only when you choose files |
| Clipboard write | Write Taobao/JD command text or share links | Triggered only by conversion, copy, or share actions |
| Query/open third-party links or schemes | Open third-party coupon, product, activity, or fallback H5 pages | Used only after your action |
Third-party SDKs or services work only after you fully agree to the Privacy Policy, grant any required system permission, and enable the relevant feature or ad configuration.
4. Third-Party SDKs and Services
| Name (platform registration mapping) | Package or actual boundary | Provider (registered/current name) | Possible information scope | Purpose and processing method | Trigger | Official privacy rule |
|---|---|---|---|---|---|---|
| Umeng+ Analytics SDK（友盟+移动统计SDK） | com.umeng.analytics, com.umeng.commonsdk |
Umeng Tongxin (Beijing) Technology Co., Ltd.（友盟同欣（北京）科技有限公司） | Android ID, OAID/GUID, device model, system/app version, network status/type, carrier or SIM provider, IP address, channel, launch/page/tap events, crash or diagnostic logs; exact fields depend on version, system permission, and SDK capability | Reads runtime information through system interfaces and receives app events for page/tap analytics, basic usage, compatibility, and issue analysis over the network | Formal initialization and reporting after full privacy consent | Platform-registered privacy policy |
| Pangle Ads SDK（穿山甲广告SDK） | com.bytedance.sdk.openadsdk |
Beijing Ocean Engine Network Technology Co., Ltd.（北京巨量引擎网络技术有限公司） | Device/app information, network status, IP address, ad placement, impression/click/close/reward events, load results, anti-fraud signals, and, when relevant advertising interaction or security/anti-fraud requires it, sensor lists, acceleration, gyroscope, magnetic-field, or rotation-vector information; exact fields depend on the SDK, system authorization, and configuration | Processes ad requests, delivery, measurement, frequency control, performance measurement, and anti-fraud through system and advertising interfaces, and may use device features or motion/orientation information as needed; this does not mean every capability is enabled or uploaded | Initializes relevant capability after full privacy consent; works as needed when ad configuration enables and requests an ad or related security/interaction capability | Platform-registered privacy policy |
| Douyin SDK (Android)（抖音SDK（安卓版）） | Platform-registered package: com.bytedance.android.dy.sdk; the package embeds com.bytedance.android.dy.sdk.pangle.* and other ByteDance/Douyin components |
Beijing Weibo Vision Technology Co., Ltd. (former name)／北京微播视界科技有限公司; Beijing Douyin Technology Co., Ltd. (current name)／北京抖音科技有限公司 | Related components may process device, app, and network information and ad-interaction or risk-control logs, and may process device-feature or motion/orientation information when relevant capabilities require it; exact fields depend on component version and configuration | Related component for Pangle advertising or ad interaction, security, and risk control; WoolMate does not provide separate Douyin login, sharing, or live-streaming features | Relevant advertising and security capability formally initializes after full privacy consent; related components then work as needed along advertising, security, or interaction paths | Registered: Douyin platform privacy policy; current: Douyin SDK privacy policy |
| Baichuan E-commerce SDK（百川电商SDK） | Platform-registered package: com.alibaba.baichuan.trade.biz; one portal mapping for the same Baichuan 4.2 integration |
Zhejiang Taobao Network Co., Ltd.（浙江淘宝网络有限公司） | May process network information, app information, Android ID, OAID where supported, operating system and app version, as well as product/activity/platform identifiers, target links, business parameters, and redirect results; exact fields depend on SDK version, system authorization, and actual use | Initializes Baichuan trade capability after full privacy consent; when you actively tap claim, buy, use, or an activity landing action, it calls the trade/redirect interface to generate a coupon or purchase link and open a third-party platform | Formal initialization after full privacy consent; trade/redirect is invoked only after you actively tap the relevant button | Baichuan/Taobao privacy policy |
| Baichuan E-commerce Flagship Edition（百川电商旗舰版） | Platform-registered package: com.alibaba.baichuan; the second portal mapping for the same Baichuan 4.2 integration, not a separate 5.x package |
Zhejiang Taobao Network Co., Ltd.（浙江淘宝网络有限公司） | May process network information, app information, Android ID, OAID where supported, operating system and app version, as well as product/activity/platform identifiers, target links, business parameters, and redirect results; exact fields depend on SDK version, system authorization, and actual use | Initializes Baichuan trade capability after full privacy consent; when you actively tap claim, buy, use, or an activity landing action, it calls the trade/redirect interface to generate a coupon or purchase link and open a third-party platform | Formal initialization after full privacy consent; trade/redirect is invoked only after you actively tap the relevant button | Baichuan/Taobao privacy policy |
| First-party promotion center | — | Beijing Chenghan Bowen Education Technology Co., Ltd. and supporting service providers | Product line, client platform, package name, version, language, installation ID, placement, material, impression, click, redirect, and close events | Requests first-party promotion configuration and performs placement frequency control, click redirects, and operation statistics | After full privacy consent and according to placement configuration | This Policy |
| Android WebView | — | Android System WebView provider | Target URL, page load state, cookies, or local storage required by the web page | Displays legal pages, activities, third-party landing pages, and fallback pages | When you open a related page | The WebView provider's rules |
| Taobao, JD, Meituan, and other third-party platform services | — | The relevant third-party platforms and affiliates | Product/activity identifiers, target links, platform code, business sid, redirect results, and information required by the third-party platform | Displays products, generates coupon links, opens coupon or purchase pages, and supports third-party transactions | When you tap claim, buy, use, or open an activity page | The relevant third-party platform's rules |
5. Storage, Sharing, and Security
Access tokens, feedback, account information, and business logs are stored on servers in mainland China. Search history, favorites, browsing history, privacy consent state, installation ID generated after full consent, and short-term location cache are mainly stored on your device. We use HTTPS, access control, log minimization, permission separation, and other measures to protect information.
We do not sell personal information. We share personal information only when required by law, with your separate consent, or as necessary for the third-party SDKs and platform redirects described in this Policy.
6. Your Rights
You can manage location and notification permissions in system settings, view the Privacy Policy and Terms of Service in app settings, log out, or submit feedback. You may also contact us to request access, correction, deletion, withdrawal of consent, or account cancellation. We will process requests within the period required by applicable law.
Account cancellation: While signed in, open Me > Settings > Delete Account (我的 → 设置 → 注销账号), read the cancellation notice, and confirm to send an account-cancellation request to the server. After the request succeeds, this device signs out and clears its local sign-in state. Please read the effects described on the confirmation screen before confirming. If the request fails, follow the in-app prompt and try again. If you cannot sign in or use the in-app option, you may still request cancellation through the email address listed in the Contact section of this Policy.
7. Minors
WoolMate is primarily intended for adults. Minors should use the app with guardian consent and guidance. Guardians may contact us if they believe a minor's information has been improperly processed.
8. Updates
We may update this Policy when product features, permissions, SDKs, public request fields, distribution channels, or personal information processing change materially. We will notify you through in-app prompts, page notices, or policy version updates where appropriate.
9. Contact
For questions, complaints, or suggestions about this Privacy Policy or personal information processing, contact contact@chenghanbowen.com.
Children's Personal Information Protection Rules
This is a standalone children's personal information section within this Privacy Policy. “Child” means a minor under 14. WoolMate is not specifically directed to children.
When the app is first opened or asks for privacy consent again, if the user may be under 14, a guardian should read this section and this Policy first and decide whether to consent. Before guardian consent, you may continue to use Basic Services that do not depend on that consent. Processing that needs separate consent or an active request occurs only when its stated conditions are met. We do not ask children to provide a birthday, age, identity document, or similar information for routine use.
Current processing facts for this platform:
- Local content: On-device search history, favorites, browsing history, privacy-choice state, and short-term location cache are used for the local experience. WoolMate retains its existing account and profile features across the three platforms; when you actively use an account, phone number, email, verification result, access token, nickname, and avatar address are used for code delivery, session and profile management.
- Active feedback, installation, device, and SDK data: When you actively submit feedback, feedback type, title, content, contact details, screenshot or attachment address, app version, client platform, installation ID, and account state are used to locate issues, respond, and handle support. Android analytics, diagnostics, advertising, and first-party promotion continue to use the Android ID, OAID/GUID, device/network/system/app/operator information and page, ad, and promotion events described in the relevant sections of this Policy.
The retention period, storage location, sharing scope, and handling by third-party services for children's information are described in the corresponding storage, sharing, and third-party service sections of this Policy. When a guardian makes a request, we handle it under this Policy and applicable law; previously submitted feedback or saved data is not automatically deleted.
A guardian may contact contact@chenghanbowen.com to request access to, correction or deletion of children's personal information, or withdrawal of the related consent. To prevent impersonation, we perform only necessary and proportionate verification for an application. If we discover that children's personal information was processed without guardian consent, we will stop the related processing and delete or anonymize it as required by applicable law.
Privacy Choices and Withdrawal
Use the app's Privacy Choices/Privacy Management entry in Settings to review the current state or choose again. If you previously consented, confirm “Withdraw Privacy Consent” before switching to Basic Services; canceling that confirmation leaves the existing choice unchanged. Resuming the relevant optional features requires your explicit consent and does not replay prior ad requests or impressions.
Withdrawal cancels current ad preparation and pending presentation, stops new advertising requests, and disables optional analytics and diagnostics controlled by the app. Basic features that do not depend on that consent remain available. SDK base instances, system diagnostics, or vendor-automatic behavior may still exist or run; this does not mean all SDKs automatically stop and does not guarantee zero SDK activity before consent. Withdrawal does not affect processing already lawfully completed or automatically delete submitted feedback or previously saved data. Deletion requests use the existing contact and handling procedures.
The app's main privacy choice is separate from system permissions and personalized-ad settings. Limiting personalization neither withdraws main privacy consent nor means ads process no information. This CN shell does not add the Global Google/Firebase/AdMob/UMP route. Any ATT system authorization that actually applies on iOS does not replace the app's main privacy choice.