Legal

Privacy Policy

Effective Date: 2026-05-15. This Privacy Policy applies to the website and mobile applications operated, distributed, and maintained by Henan Youzhen Cang Tie Technology Co., Ltd.

1. Data Controller

Controller: Henan Youzhen Cang Tie Technology Co., Ltd
Office Address: No. 6992, 5th Floor, Building A1, Zone D, E-commerce Industrial Park, 100 meters south of the intersection of Zhongyuan Road and Ankai Road, Puyang, 457000, CN
Website: youzhencang.com
Business Support: support@youzhencang.com
Key Account: wangtong1@youzhencang.com

2. Scope of This Policy

This policy covers:

  • Our corporate website and web-based service pages.
  • Mobile applications published on Google Play, Apple App Store, and other legally compliant application marketplaces.
  • Business operations connected to supply chain management, warehousing services, consulting, e-commerce operations, and related digital support systems.
  • Operational and support communications for enterprise clients and end users.

3. Categories of Data We Process

3.1 Data You Provide

  • Contact details: name, company, email address, phone number, and business role.
  • Service inquiries and contract communication records.
  • Support tickets, feedback, and issue reports.

3.2 Data Collected Automatically

  • Device data: device model, operating system version, app version, language, and timezone.
  • Log data: IP address, event logs, crash logs, diagnostics, and performance metrics.
  • Usage analytics: page views, feature interactions, session duration, and campaign attribution signals.
  • Approximate location inferred from IP when required for fraud prevention, legal compliance, or localization.

3.3 Data from Business Integrations

  • Warehouse operations records, task workflows, and process status data.
  • Supply chain and logistics event records provided by enterprise customers or partners.
  • Commercial planning data relevant to channel and operational consulting.

4. Purposes, Legal Bases, and Use Principles

4.1 Purposes

  • Provide and operate supply chain management and warehousing related services.
  • Deliver and maintain mobile management applications and associated platform features.
  • Perform customer support, service diagnostics, fraud prevention, and system security monitoring.
  • Provide consulting outputs, operational reporting, and service quality improvements.
  • Serve advertising where enabled and legally permitted.
  • Comply with legal obligations, app store requirements, and regulator requests.

4.2 Legal Bases (where applicable, such as GDPR/UK GDPR)

  • Contract necessity for delivering requested services and app functionalities.
  • Legitimate interests for service security, performance analysis, and operational continuity.
  • User consent for specific processing, including non-essential cookies, personalized ads, and certain analytics where required.
  • Compliance with legal obligations under applicable laws and regulations.

4.3 Data Minimization and Purpose Limitation

We limit personal data collection to information reasonably necessary for defined service, legal, security, and product obligations. We do not process personal data for unrelated purposes without legal basis.

5. App Store Compliance Statements

5.1 Google Play

  • We maintain Data Safety disclosures aligned with actual collection and sharing practices.
  • We declare advertising SDK and data usage behavior where required.
  • We implement policy controls for restricted permissions, background data access, and sensitive APIs.
  • For apps targeting children or mixed audiences, we follow Google Play Families policies and limit personalized ads where required.

5.2 Apple App Store

  • We maintain App Privacy labels and data type disclosures in App Store Connect.
  • Where required, tracking permissions are requested via AppTrackingTransparency (ATT).
  • We align with Apple Human Interface and platform privacy requirements, including purpose strings and permissions minimization.

5.3 Other App Marketplaces

  • We comply with local marketplace requirements related to data declarations, user notices, and age appropriateness.
  • Regional legal updates are reviewed and integrated into release and policy governance workflows.

6. Advertising, Monetization, and Ad-Tech Compliance

Some applications may include advertising and monetization modules. Ad serving and measurement are implemented in compliance with applicable law, platform policy, and user consent obligations.

6.1 Typical Ad Formats in Our Apps

  • App open (splash) ads.
  • Rewarded video ads.
  • Interstitial ads.
  • Banner ads.
  • Native ads (where enabled by product design).

6.2 Representative Ad Monetization and Mediation Platforms

  • Google AdMob and Google Ad Manager.
  • AppLovin and AppLovin MAX mediation.
  • Meta Audience Network.
  • Unity Ads / Unity LevelPlay (including ironSource technologies).
  • Liftoff Monetize (formerly Vungle).
  • Chartboost.
  • InMobi.
  • Mintegral.
  • Pangle (ByteDance).
  • Smaato.
  • Start.io.
  • Digital Turbine (including Fyber offerings where deployed).
  • PubMatic and other demand partners integrated through compliant mediation channels.

6.3 Ad Data and Identifiers

  • Advertising ID (for example, GAID/AAID on Android where available and permitted).
  • Device/IP and coarse geolocation signals used for anti-fraud, delivery, and frequency capping.
  • Ad interaction events such as impressions, clicks, completed views, and reward claims.
  • Diagnostics and attribution data supporting campaign and revenue analytics.

6.4 Consent and Controls

  • Consent management interfaces are implemented where required by law, including EEA/UK consent scenarios.
  • Users may reset or limit ad identifiers in device settings.
  • Where required, users can withdraw consent for personalized advertising and non-essential tracking.
  • Child-directed and teen-sensitive contexts may enforce non-personalized ad treatment or ad limitation.

6.5 app-ads.txt

We support app-ads.txt governance to improve authorized digital advertising inventory transparency.

7. Age Requirements and Children Privacy

  • Our business services are intended for enterprise and professional usage contexts.
  • Where an app is not directed to children, users under legally required age must not submit personal data without guardian authorization.
  • For U.S. children privacy compliance, we align with COPPA obligations when applicable and restrict data processing/ads for child-directed experiences.
  • For EEA/UK contexts, we apply age-sensitive consent and processing controls according to local digital consent thresholds.
  • If we learn that children data was collected in violation of applicable law, we will delete or de-identify the data promptly.

8. Country and Region-Specific Privacy Adaptation

8.1 European Economic Area (EEA)

  • GDPR rights include access, rectification, erasure, restriction, objection, and data portability.
  • Where required, we rely on consent for non-essential tracking and personalized advertising.
  • Data transfers outside EEA are supported by recognized legal safeguards such as SCCs where needed.

8.2 United Kingdom

  • UK GDPR and Data Protection Act principles are observed, including lawful basis and user rights handling.
  • International transfers are managed using lawful transfer mechanisms and risk assessments where required.

8.3 United States

  • State law adaptation includes obligations under laws such as CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and UCPA (Utah), where applicable.
  • Eligible users may request access, deletion, correction, or opt-out choices as required by local law.
  • We process and disclose data categories consistent with legally required notices.

8.4 Canada

  • We align with PIPEDA principles and applicable provincial privacy obligations for notice, purpose limitation, and safeguards.

8.5 Australia and New Zealand

  • We align with applicable privacy principles including transparency, access handling, and security safeguards.

8.6 Singapore and Other APAC Jurisdictions

  • We adapt practices to applicable personal data and consent requirements, including transfer and notification obligations.

8.7 China (Controller Jurisdiction Context)

  • Operational governance considers applicable PRC legal requirements where relevant to processing operations.
  • Cross-border and security controls are evaluated according to legal and contractual obligations.

9. Data Security and Retention

  • We implement technical and organizational controls including access limitation, transport security, and operational monitoring.
  • Data is retained only as long as necessary for service delivery, legal obligations, dispute handling, and security requirements.
  • Retention periods vary by data category, contractual commitments, and legal obligations.
  • When retention is no longer needed, data is deleted, anonymized, or securely archived according to governance controls.

10. International Data Transfers

Because we serve global operations and use international technology providers, data may be processed in countries other than the user location. Where required by law, we apply transfer safeguards such as Standard Contractual Clauses, equivalent legal instruments, and vendor risk assessments.

11. Third-Party SDK and Service Provider Management

  • Analytics, cloud hosting, messaging, crash reporting, and advertising SDKs may process relevant technical and usage data.
  • Providers are selected based on legal compliance, security commitments, and business necessity.
  • We maintain internal records and review mechanisms for SDK inventory, permissions, and policy consistency.

12. Your Rights and How to Exercise Them

  • You may request data access, correction, deletion, objection, restriction, portability, or consent withdrawal where applicable.
  • You may request opt-out choices for targeted advertising where required by local law.
  • Identity verification may be required before request fulfillment.
  • You may appeal a denied request where applicable law provides appeal rights.

13. Cookies and Similar Technologies

  • We use essential cookies for security, session continuity, and service stability.
  • Where permitted by law and user settings, we may use analytics and performance cookies to improve service quality.
  • Advertising or measurement technologies are deployed only when legally permitted and consistent with declared purposes.
  • Users may manage cookie preferences through browser settings or consent interfaces where available.

14. Automated Decisions and Profiling

We may use limited automated logic for fraud detection, service security, and system reliability scoring. We do not rely solely on automated decision making that produces legal or similarly significant effects without appropriate safeguards where required by applicable law.

15. Representative and Complaint Channels

  • Where required by local law, users may contact designated representatives or authorized privacy contacts.
  • Users in relevant jurisdictions may submit complaints to competent supervisory or regulatory authorities.
  • Before escalation, we encourage direct contact so we can investigate and resolve concerns efficiently.

16. Contact and Policy Updates

For privacy inquiries, send a request to support@youzhencang.com. For enterprise matters, you may also contact wangtong1@youzhencang.com. We may update this Privacy Policy to reflect legal, operational, or platform requirement changes. Material updates will be published with a revised effective date.