YuanPan

Privacy Policy

Last updated: August 19, 2026  |  Effective: August 19, 2026

“YuanPan” (the “App”, “we”, “us”, or “our”) takes your privacy seriously. This Policy explains how we collect, use, store, share, and protect your personal information, and the rights you have. Please read it carefully before using the App.

1. Information We Collect

To provide core features and advertising, we may collect the following information:

1.1 Account information

• Username and password (stored in encrypted form);
• Registration email (collected at sign-up for password recovery and account security notices);
• Phone number (if you choose to provide, bind, or use SMS sign-in);
• Apple Sign In identifiers (necessary user identifiers stored after server-side token verification);
• Google Sign In identifiers (where applicable, after server-side token verification);
• Nickname, avatar, and other profile details you choose to provide.

1.2 Usage information

• Chart / casting records (chart type, title, and data you submit);
• Feedback content you submit.

1.3 Device and app information

• Device identifiers, app version, and platform (for update checks and service security);
• Access time and operation logs for security and stability.

1.4 Advertising identifiers and ad-related data (Android / iOS)

• With your authorization, iOS may use the Identifier for Advertisers (IDFA); Android may use the Advertising ID (GAID);
• Ad request, impression, click, and related data used for delivery, measurement, and fraud prevention (processed by Google AdMob and similar services);
• You can manage tracking permission or limit ad personalization in system settings. If you deny tracking permission, non-personalized ads may still be shown.

2. How We Use Information

We use the information we collect to:

• Provide registration, login, authentication, and account management;
• Match a username to the registered email and send a password-reset link to that email;
• Save and sync chart records;
• Handle feedback you submit;
• Check for app updates;
• Show ads via Google AdMob; when you authorize tracking, support ad personalization and measurement;
• Prevent fraud, abuse, and security risks;
• Improve product experience and service quality;
• Comply with applicable laws and regulatory requirements.

3. Third-Party SDKs and Sharing

The Android / iOS clients of YuanPan integrate the Google AdMob SDK. We do not sell your personal information. To provide accounts, network services, and ads, we may process or share necessary information as follows:

3.1 Our servers

• Recipient: our backend (domains including api.cnwh.top and cnwh.top);
• Data: account info (including username and registration email), in-app device ID, chart/feedback business data, app version and platform;
• Purpose: authentication, sync, feedback, update checks, matching username to email and sending password-reset links, and security;
• Method: HTTPS; networking and related identifiers are enabled only after you agree to this Policy.

3.2 Google AdMob (Android / iOS)

• Recipient: Google LLC;
• Data: advertising identifiers after authorization (iOS IDFA / Android GAID), coarse device and ad-request data, ad interaction data;
• Purpose: serving ads, personalization (when tracking is authorized), fraud prevention, and measurement;
• When: after you agree to this Policy and use an ad-supported client build; membership / ad-free rules follow in-app terms if offered;
• Note: on iOS we request App Tracking Transparency (ATT) permission. Denying it does not block core features; ads may be non-personalized;
• Privacy policy: https://policies.google.com/privacy

3.3 SMS verification (server-side only; not embedded as a client SDK)

• Recipient: SMS verification provider called by our servers;
• Data: phone number;
• Purpose: send login and similar SMS verification codes;
• When: only when you request SMS verification.

3.4 Email delivery (server-side only; not embedded as a client SDK)

• Recipient: email delivery service called by our servers;
• Data: registration email and necessary password-reset information (such as a reset link);
• Purpose: send password-reset links and similar account-security notices to the registered email;
• When: only when you request password recovery or similar actions.

3.5 Sign in with Apple (iOS only)

• Recipient: Apple Inc.;
• Data: Apple identity token; may include email / name under Apple’s rules;
• Purpose: complete Sign in with Apple;
• When: only when you choose Apple Sign In;
• Privacy policy: https://www.apple.com/legal/privacy/

3.6 Google Sign-In (where applicable, mainly Android)

• Recipient: Google LLC;
• Data: Google ID token and necessary account data to complete login;
• Purpose: complete Google account login;
• When: only when you choose Google Sign-In;
• Privacy policy: https://policies.google.com/privacy

Except as required by law or with your separate consent, we will not use the above information for purposes other than those stated. If we add SDKs or sharing scenarios, we will update this Policy and the in-app third-party sharing list.

4. Tracking and Advertising Identifiers

1. iOS: We may request tracking permission to access IDFA. You may deny it, and you can change the setting later in system settings.
2. Android: We may use the Advertising ID (GAID). You can limit ad personalization or reset the Advertising ID in system settings.
3. Denying or limiting these options does not block core App features, but ads may not be personalized to your interests.

5. Storage and Security

1. Your personal information is stored on servers in the People’s Republic of China (Alibaba Cloud ECS / RDS).
2. Ad-related requests are sent to Google’s advertising services and are subject to Google’s privacy policy and applicable law.
3. We use reasonable safeguards such as password encryption, access control, and HTTPS.
4. We retain information only as long as needed for the stated purposes. After account deletion, we delete or anonymize your account and related business data, except where law requires otherwise.

6. Sharing, Transfer, and Disclosure

We do not sell your personal information. We may share, transfer, or disclose information only when:

• We have your clear consent;
• Required by law, litigation, arbitration, or competent authorities;
• Necessary to protect your, our, or other users’ lawful rights;
• Necessary to provide advertising via Google AdMob and similar providers (see Section 3);
• In a merger, acquisition, or bankruptcy, with continued protection under this Policy where required.

7. Your Rights

Subject to applicable law, you may:

• Access / copy: view account information in the App;
• Correct: update your profile in the App;
• Delete: delete your account and related data via in-app account deletion;
• Withdraw consent: stop using related features, turn off tracking / ad personalization in system settings, or delete your account;
• Complain: contact us via in-app feedback or email.

8. Children’s Privacy

We care about children’s privacy. If you are under 14, please use the App only with a guardian’s consent and guidance. Guardians who believe we collected a child’s information without consent may contact us for deletion.

9. Cookies and Similar Technologies

The App is primarily a mobile client. Our APIs may use tokens to maintain login. Advertising SDKs may use similar technologies for delivery and measurement. These static legal pages do not use cookies to track your browsing.

10. Changes to This Policy

We may update this Policy from time to time. We will notify you via in-app notice, website posting, or other reasonable means. Continued use of the App after an update means you accept the updated Policy.

11. Contact Us