WoolMate Privacy Policy (Android Global)

Prepared on: October 1, 2026

Effective date: October 5, 2026

Version: 1.2.0

Platform: Android

Distribution region: overseas/global distribution build

Status: Active

Developer: Beijing Chenghan Bowen Education Technology Co., Ltd.

Contact: contact@chenghanbowen.com

This English version is provided for convenience. If it differs from the Chinese version, the Chinese version will prevail to the extent permitted by applicable law.

1. Scope

This Policy applies to the WoolMate Android Global app and the related Global catalog, search, product detail, affiliate-link, account, feedback, legal, analytics, advertising, diagnostics, and support services.

WoolMate helps users discover products available through AliExpress. WoolMate participates in the AliExpress Affiliate Program and may receive a commission when a user follows an affiliate link and completes an eligible transaction. WoolMate is not the seller, payment processor, shipping provider, or after-sales provider for AliExpress transactions.

2. Information We Process

Depending on the features you use, we may process:

• Catalog and interaction data, such as search terms, category or market selections, product identifiers, page views, outbound-link actions, and affiliate-link results.
• Request context, such as country or market, locale, currency, client platform, app version, and an app installation identifier used for service operation, abuse prevention, and diagnostics.
• Optional account information, such as the phone number or email address used to sign in, account identifier, profile details, login state, and account-deletion requests.
• Feedback and support information, such as feedback text, contact details you provide, and files you actively select for attachment.
• Device and diagnostics information, such as device model, operating-system version, app version, network state, IP address, crash information, performance diagnostics, and security or anti-abuse signals.
• Consent and advertising information, such as privacy choices, advertising-consent status, app interactions, ad impressions or clicks, and advertising identifiers when permitted by applicable law, platform rules, and your consent state.

We do not collect precise or approximate location through an Android location permission in the Global app.

Automatic SDK processing is accounted for separately from the app's business-data allowlist. After applicable privacy consent and feature enablement, SDKs may automatically process device and app information, IP address, network state, advertising or installation identifiers, consent state, ad request/fill/impression/click/close/failure results, and security, anti-fraud, or diagnostic signals. This SDK field list does not mean that business content is uploaded to ad or analytics providers; catalog, account, and affiliate-link data remain processed according to the relevant feature and your active action.

3. How We Use Information

We use information to provide catalog browsing, search, product details, affiliate links, optional account and feedback features; remember language, market, currency, and consent choices; secure and troubleshoot the service; measure reliability and feature usage; display ads or first-party promotions under the applicable consent state; comply with law and platform requirements; and respond to support, privacy, and deletion requests.

4. Third-Party Services

The Android Global app may use:

• AliExpress APIs and web pages for product information, attributed links, availability, shipping, tax, price, purchase, and after-sales flows.
• Firebase Analytics for app-usage measurement after applicable privacy consent and analytics enablement.
• Firebase Crashlytics for crash and stability diagnostics after applicable privacy consent and stability-diagnostic enablement.
• Google Mobile Ads (GMA/AdMob) for advertising, measurement, frequency control, and invalid-traffic prevention under the applicable consent state and ad configuration.
• Google User Messaging Platform (UMP) for advertising and privacy-consent choices and privacy-options management in applicable regions.
• TopOn mediation SDK for Global mediation, demand-source configuration, bidding or waterfall management, and ad measurement; it works only after applicable consent, ad configuration, and release configuration are ready.
• Pangle as a demand source configured through TopOn, only where the region, format, account authorization, and consent state permit it.
• The Android Pangle advertising dependency also includes an optional TikTok App Events technical module. This app does not actively enable the TikTok App Events service. Packaging the module does not mean event reporting is enabled, nor does it establish that every internal component processes no data. Pangle advertising purposes and regional policies are linked below.
• TopOn ADX is an advertising-resource service configured through TopOn mediation for ad delivery, measurement and fraud prevention, subject to applicable privacy choices and advertising configuration. TopOn may work with affiliates and advertising or technical-service partners described in its policy; details and privacy-request channels are provided below.
• The system browser or supported external-app links to open AliExpress and other first-party support pages.

These providers process information under their own terms and privacy policies. The Global build does not load domestic-market commerce or advertising SDKs. The actual data scope of advertising and analytics SDKs varies by region, consent, app configuration, account status, and version; this policy does not promise a fixed third-party retention period, cross-border route, or automatic field set.

5. Permissions and Consent

The Global app requires Internet access to provide its core service. It does not request Android location, storage, or notification permission for the current core release. Files for feedback are selected through the system picker when you choose to attach them.

Firebase Analytics and Firebase Crashlytics collection, together with related analytics/diagnostic collection, is off by default. Collection may be enabled after applicable primary privacy consent and when independent analytics/diagnostics configuration permits. Google Mobile Ads (GMA/AdMob), UMP, TopOn, Pangle, TopOn ADX, and related first-party promotion features are additionally subject to applicable advertising consent, ad configuration, and demand-source configuration. Some SDK base instances, consent management, system diagnostics, or vendor-automatic behavior may exist or run earlier depending on version, platform, and network state; this policy does not guarantee zero SDK activity before consent. You can also limit personalized advertising in the app or through applicable Google and Android settings.

6. Sharing, Sale, and International Processing

We do not sell your personal information. We share information only as needed with service providers described above, hosting and security providers, account and feedback services, professional advisers, authorities where legally required, or a successor in a lawful business transfer.

Because the Global service and its providers operate internationally, information may be processed in countries or regions outside your residence. We use contractual, technical, and organizational safeguards required by applicable law. TopOn’s primary processing locations are described below, Pangle operates under its regional policies, and Google uses global infrastructure. Provider policies describe their processing locations, sharing and safeguards.

7. Retention and Security

We retain information only for as long as reasonably necessary for the purposes described in this Policy, legal obligations, dispute resolution, security, and fraud prevention. Retention periods vary by data type and service. We use encrypted transport and reasonable access-control, logging, backup, and security measures, but no system can guarantee absolute security.

Provider Privacy Policies

Current official policy links are Firebase privacy information, Google Ads privacy policy, Android UMP privacy guidance, the TopOn current privacy policy and TopOn terms, and the Pangle regional entity/policy map. These policies describe possible device/app information, IP address, network state, advertising or installation identifiers, ad requests and ad interactions, and security, anti-fraud, or diagnostic signals; they do not prove that every listed field is collected by this app. Processing and retention depend on the services you use, applicable privacy choices, current provider policies, contracts and legal obligations; there is no universal deletion deadline for every SDK or data category.

TopOn service entities and processing

The TopOn advertising-services policy dated 2026-07-10 assigns U.S. citizens and entities organized under U.S. law to Ascent Pro Technology Limited, and other cases to TOPON PTE. LTD., subject also to applicable service agreements. This identifies TopOn itself, not every indirect component's recipient.

TopOn describes IP, device/ad identifiers, device/network/app information, ad interactions, diagnostics and consent information for mediation, measurement and anti-fraud. Actual processing depends on version, configuration and applicable choices; not every listed field is collected by this app. TopOn names Singapore and the United States as primary processing locations, with possible other partner locations. Its general retention is up to two years from collection, subject to necessity and legal/contractual obligations. This is not a universal deletion deadline for app feedback or other SDKs. TopOn privacy requests: privacy@toponad.net.

Privacy Choices and Withdrawal

Use the app's Privacy Choices/Privacy Management entry in Settings to review or make a choice. If you previously gave explicit consent, confirm “Withdraw Privacy Consent” before switching to Basic Services; canceling that confirmation leaves the existing choice unchanged. Choosing again requires your explicit consent before the optional features can resume. Withdrawal cancels current ad preparation and pending presentation; it does not replay prior ad requests or impressions. It stops new advertising requests and disables optional analytics and diagnostics controlled by the app; basic features remain available. SDK base instances, consent-management components, system diagnostics, or vendor-automatic behavior may still exist or run; this does not mean all SDKs automatically stop and is not a guarantee of zero SDK activity before consent. Withdrawal does not affect processing already lawfully completed and does not automatically delete submitted feedback or other previously processed information.

The app's main privacy choice is separate from advertising-privacy choices. UMP appears only where applicable and when the required conditions are met; it is not a universal global prompt and does not replace the main privacy choice. On iOS, ATT applies only to cross-app tracking/IDFA where applicable and does not replace the app-level privacy, analytics, or diagnostic choice.

8. Your Choices and Rights

You may manage privacy consent and personalized-ad settings in the app, manage relevant device settings, sign out, edit supported account details, delete an account through Mine > Settings > Delete Account, or submit a web deletion request at https://woolmate.cn/apps/woolmate/account-deletion.

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent by contacting contact@chenghanbowen.com. Withdrawing consent does not affect processing already lawfully completed.

9. Children

The Global app is not directed to children under 13 or the minimum age required in the user's jurisdiction. If we learn that we processed a child's personal information without valid authorization, we will take reasonable steps to delete it.

10. Changes and Contact

We may update this Policy as the app, providers, law, or platform requirements change. Material changes will be presented through the app, legal page, or another appropriate notice before they take effect where required.

For privacy questions or requests, contact contact@chenghanbowen.com.