WoolMate Privacy Policy (iOS Global)
Prepared on: October 1, 2026
Effective date: October 5, 2026
Version: 1.2.0
Platform: iOS
Distribution region: overseas/global distribution build
Status: Active
Developer: Beijing Chenghan Bowen Education Technology Co., Ltd.
Contact: contact@chenghanbowen.com
This English version is provided for convenience. If it differs from the Chinese version, the Chinese version will prevail to the extent permitted by applicable law.
1. Scope and Service
This Policy applies to the WoolMate iOS Global app and its Global catalog, search, product detail, affiliate-link, account, feedback, legal, analytics, advertising, diagnostics, and support services. WoolMate participates in the AliExpress Affiliate Program and may receive a commission from eligible transactions completed after a user follows an affiliate link. WoolMate is not the seller or transaction provider.
2. Information We Process
Depending on the features you use, we may process catalog searches, market and currency choices, product identifiers, page views and outbound-link actions; country or market, locale, client platform, app version and an app installation identifier; optional phone or email account information, profile and login state; feedback text, contact details and photos or files you actively select; device model, iOS and app version, network state, IP address, crash and performance diagnostics; and consent, analytics, advertising impression or click information.
If App Tracking Transparency authorization is granted and personalized advertising is allowed, advertising providers may access the advertising identifier for advertising and measurement. If authorization is denied or personalized ads are limited, the app requests non-personalized or otherwise restricted ads where supported.
The iOS Global build does not request camera or location permission. Photo-library access is used only when you actively choose a feedback attachment through the supported picker flow.
Automatic SDK processing is accounted for separately from the app's business-data allowlist. After applicable privacy consent and analytics, diagnostics, or advertising feature enablement, SDKs may automatically process device and app information, IP address, network state, advertising or installation identifiers, consent state, ad request/fill/impression/click/close/failure results, and security, anti-fraud, or diagnostic signals. App Tracking Transparency (ATT) governs only applicable iOS cross-app tracking and advertising-identifier use; denying ATT does not by itself mean that Firebase Analytics or Firebase Crashlytics cannot be enabled. Their collection remains controlled by the app's privacy consent, independent analytics/diagnostics configuration. Automatic exception or diagnostic signals may include paths, endpoints, or business context; this allowlist is not exhaustive, and actual fields depend on SDK version, configuration, and vendor documentation. This SDK field list does not mean that business content is uploaded to ad or analytics providers; catalog, account, and affiliate-link data remain processed according to the relevant feature and your active action.
3. Purposes
We use information to provide catalog browsing, search, product details, affiliate links, optional account and feedback features; remember language, market, currency and consent choices; secure and troubleshoot the service; measure reliability and feature usage; show ads or first-party promotions under the applicable consent state; comply with law and App Store requirements; and respond to support, privacy and deletion requests.
4. Third-Party Services
The iOS Global app may use AliExpress APIs and web pages; Firebase Analytics; Firebase Crashlytics; Google Mobile Ads (GMA/AdMob); Google User Messaging Platform (UMP); TopOn mediation SDK; Pangle; TopOn ADX; Apple system browser, sharing, photo-picker, and App Tracking Transparency capabilities; and first-party account, feedback, legal, and promotion services. Firebase analytics and crash collection are enabled only under the app's privacy-consent, independent analytics/diagnostics configuration. Google advertising, UMP, TopOn mediation, and related demand-source features are additionally subject to applicable advertising consent, ad configuration, and ATT rules for cross-app tracking or advertising identifiers; denying ATT does not make analytics or crash collection automatically zero.
- TopOn mediation SDK supports Global mediation, demand-source configuration, bidding or waterfall management, and ad measurement.
- Pangle is a demand source configured through TopOn and works only where the region, format, account authorization, and consent state permit it.
- The iOS version covered by this policy uses the Pangle advertising module without the optional App Events module. Advertising services may still process the advertising data described in this policy under applicable consent and configuration.
- TopOn ADX is an advertising-resource service configured through TopOn mediation for ad delivery, measurement and fraud prevention, subject to applicable privacy choices and advertising configuration. TopOn may work with affiliates and advertising or technical-service partners described in its policy; details and privacy-request channels are provided below.
- Apple App Tracking Transparency (ATT) may request tracking authorization when required by iOS and needed by the ad configuration; the app follows the system tracking status and the Limit Personalized Ads setting.
Each provider processes information under its own terms and privacy policy. Ad requests, analytics/diagnostic collection, and demand-source features are controlled by applicable primary privacy consent, advertising consent, UMP, ATT rules where applicable, app configuration, and release configuration; Firebase Analytics/Crashlytics controls are evaluated separately from ATT. Some SDK base instances, consent management, system diagnostics, or vendor-automatic behavior may exist or run earlier depending on version, platform, and network state; this policy does not guarantee zero SDK activity before consent. The Global build does not load domestic-market commerce or advertising SDKs. The actual data scope of advertising and analytics SDKs varies by region, consent, ATT, app configuration, account status, and version; this policy does not promise a fixed third-party retention period, cross-border route, or automatic field set.
5. Sharing, International Processing, Retention and Security
We do not sell your personal information. We share information only as needed with the providers described above, hosting and security providers, professional advisers, authorities where legally required, or a successor in a lawful business transfer. Information may be processed outside your country or region, subject to applicable contractual, technical and organizational safeguards. TopOn’s primary processing locations are described below, Pangle operates under its regional policies, and Google uses global infrastructure. Provider policies describe their processing locations, sharing and safeguards.
We retain information only as reasonably necessary for service, legal, dispute-resolution, security and fraud-prevention purposes. We use encrypted transport and reasonable access-control, logging, backup and security measures, but no system can guarantee absolute security.
Provider Privacy Policies
Current official policy links are Firebase privacy information, Google Ads privacy policy, iOS UMP privacy guidance, the TopOn current privacy policy and TopOn terms, and the Pangle regional entity/policy map. These policies describe possible device/app information, IP address, network state, advertising or installation identifiers, ad requests and ad interactions, and security, anti-fraud, or diagnostic signals; they do not prove that every listed field is collected by this app. Processing and retention depend on the services you use, applicable privacy choices, current provider policies, contracts and legal obligations; there is no universal deletion deadline for every SDK or data category.
TopOn service entities and processing
The TopOn advertising-services policy dated 2026-07-10 assigns U.S. citizens and entities organized under U.S. law to Ascent Pro Technology Limited, and other cases to TOPON PTE. LTD., subject also to applicable service agreements. This identifies TopOn itself, not every indirect component's recipient.
TopOn describes IP, device/ad identifiers, device/network/app information, ad interactions, diagnostics and consent information for mediation, measurement and anti-fraud. Actual processing depends on version, configuration and applicable choices; not every listed field is collected by this app. TopOn names Singapore and the United States as primary processing locations, with possible other partner locations. Its general retention is up to two years from collection, subject to necessity and legal/contractual obligations. This is not a universal deletion deadline for app feedback or other SDKs. TopOn privacy requests: privacy@toponad.net.
Privacy Choices and Withdrawal
Use the app's Privacy Choices/Privacy Management entry in Settings to review or make a choice. If you previously gave explicit consent, confirm “Withdraw Privacy Consent” before switching to Basic Services; canceling that confirmation leaves the existing choice unchanged. Choosing again requires your explicit consent before the optional features can resume. Withdrawal cancels current ad preparation and pending presentation; it does not replay prior ad requests or impressions. It stops new advertising requests and disables optional analytics and diagnostics controlled by the app; basic features remain available. SDK base instances, consent-management components, system diagnostics, or vendor-automatic behavior may still exist or run; this does not mean all SDKs automatically stop and is not a guarantee of zero SDK activity before consent. Withdrawal does not affect processing already lawfully completed and does not automatically delete submitted feedback or other previously processed information.
The app's main privacy choice is separate from advertising-privacy choices. UMP appears only where applicable and when the required conditions are met; it is not a universal global prompt and does not replace the main privacy choice. On iOS, ATT applies only to cross-app tracking/IDFA where applicable and does not replace the app-level privacy, analytics, or diagnostic choice.
6. Your Choices and Rights
You may manage privacy consent and personalized-ad settings in the app, manage tracking and photo access in iOS Settings, sign out, edit supported account details, delete an account through Mine > Settings > Delete Account, or submit a web deletion request at https://woolmate.cn/apps/woolmate/account-deletion.
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent by contacting contact@chenghanbowen.com.
7. Children, Changes and Contact
The Global app is not directed to children under 13 or the minimum age required in the user's jurisdiction. We may update this Policy as the app, providers, law, or platform requirements change, and will provide appropriate notice where required.
For privacy questions or requests, contact contact@chenghanbowen.com.