Legal and Compliance

Privacy Policy

Effective date: May 15, 2026

This Privacy Policy explains how Jiangsu Leyun Shuchuang Technology Co., Ltd ("Leyun Shuchuang", "we", "our", or "us") collects, uses, stores, discloses, transfers, and protects personal data in connection with our website, software products, and mobile management applications published through app marketplaces.

1. Data Controller and Contact Information

Company name: Jiangsu Leyun Shuchuang Technology Co., Ltd

Office address: Room 803-3, Building 6, No. 6 Sanhong Road, Yuhuatai District, Nanjing, 210000, CN

Website: leyunshuchuang.com

Business support: support@leyunshuchuang.com

Key accounts: xuchen1@leyunshuchuang.com

2. Scope of This Privacy Policy

This Policy applies to:

1. Our corporate website and related web pages.

2. Mobile applications and software services distributed through Google Play, Apple App Store, and other app marketplaces.

3. Enterprise software, cloud services, digital consulting services, and customer support processes.

4. Advertising and monetization technologies integrated into our applications when enabled by the product owner.

3. Categories of Data We Process

Depending on product configuration and your interactions, we may process:

1. Account data: name, email, business organization, account identifiers.

2. Device and app data: device model, OS version, app version, language, region, timezone, crash logs, performance metrics, advertising identifiers.

3. Usage data: session events, feature interactions, workflow records, diagnostic telemetry.

4. Support data: communications with support teams and issue tickets.

5. Transaction and operational data: service subscription metadata, technical configuration records, and enterprise integration logs.

6. Compliance and security data: consent logs, fraud indicators, moderation logs, and audit trails.

We do not intentionally collect highly sensitive personal information unless explicitly required by enterprise project contracts and permitted by applicable law.

4. Legal Bases for Processing

Where required by law, we process personal data under one or more legal bases:

1. Performance of contract.

2. Legitimate interests (such as service security, fraud prevention, and product improvement).

3. Compliance with legal obligations.

4. Consent (including cookie/SDK consent and personalized advertising consent, where applicable).

5. Vital interests and public interest where legally recognized.

5. Purpose of Processing

We process personal data to:

1. Deliver cloud computing technology services.

2. Conduct big data technology research and development, consulting, and technical promotion.

3. Develop digital technologies, software, and AI application software.

4. Provide information system integration and data processing/storage support.

5. Produce digital content and provide enterprise digital transformation consulting.

6. Deliver design, branding, and marketing planning services.

7. Operate mobile management applications for enterprise workflows.

8. Support customer communications and key-account services.

9. Publish and maintain apps in app stores and ensure policy compliance.

10. Operate lawful sales and internet sales activities where legally permitted.

6. App Store Policy Adaptation

For applications distributed via app stores, we implement controls aligned with marketplace rules and disclosure obligations. This includes, where applicable:

1. Google Play Data Safety disclosures and user choice mechanisms.

2. Apple App Store privacy nutrition labels and tracking transparency requirements.

3. Policy implementation for Huawei AppGallery, Samsung Galaxy Store, Xiaomi GetApps, Amazon Appstore, OPPO App Market, and vivo App Store when those channels are used.

4. Disclosure of SDK categories, data collection behavior, data sharing behavior, and user rights pathways.

5. Incident response and policy update rollouts following marketplace guideline changes.

7. Advertising, Monetization, and SDK Compliance

Some mobile applications may integrate ad and monetization technologies. Ad integrations are implemented only when contractually requested and legally permitted.

Potential advertising and mediation platforms include, but are not limited to:

1. Google AdMob

2. Google Ad Manager

3. Meta Audience Network

4. AppLovin and AppLovin MAX

5. Unity Ads

6. ironSource LevelPlay

7. Mintegral

8. Liftoff Monetize (formerly Vungle)

9. Pangle (TikTok for Business)

10. InMobi

11. Chartboost

12. Smaato

13. Start.io

14. Digital Turbine / Fyber

15. Moloco Ads

16. Yandex Ads (where legally available)

Ad formats may include app open ads, rewarded video ads, interstitial ads, and banner ads. Native ads may also be used where policy and UI transparency requirements are met.

When required by law and platform policy, we provide consent collection and preference management for advertising identifiers, tracking, and personalization. Users can withdraw consent through in-app settings, device settings, or legal request channels, depending on technical architecture.

8. Cookies, SDK Signals, and Similar Technologies

Our website and applications may use cookies, software development kits, local storage, pixels, and analytics tags to enable core features, security, diagnostics, and optional advertising functions.

We classify technologies by purpose (strictly necessary, analytics, personalization, advertising) and implement region-appropriate consent controls where required.

9. Regional and Country Policy Adaptation

We align privacy handling to applicable laws in the jurisdictions where our services are offered. Depending on region, this may include:

1. European Union and EEA: GDPR, ePrivacy requirements.

2. United Kingdom: UK GDPR and Data Protection Act 2018.

3. United States: CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), and other state privacy laws where applicable.

4. Brazil: LGPD.

5. Canada: PIPEDA and applicable provincial laws.

6. Japan: APPI.

7. Singapore and Thailand: PDPA frameworks.

8. Republic of Korea: PIPA.

9. Australia: Privacy Act and Australian Privacy Principles.

10. South Africa: POPIA.

11. India: Digital Personal Data Protection Act, where applicable.

Where legal obligations conflict, we apply the stricter requirement to the extent commercially and technically feasible.

10. Age and Child Protection

Our enterprise services are intended for business users and are not directed to children. We do not knowingly collect personal data from children below the age threshold defined by applicable law.

For consumer-facing app modules, we apply age-gating, content controls, and ad-treatment restrictions according to platform and legal requirements, including COPPA-related controls in the United States where relevant.

If we discover data collected from a child without required authorization, we will delete it promptly and take corrective actions.

11. International Data Transfers

We may process data across borders to operate global services. For transfers from jurisdictions that require safeguards, we use legally recognized transfer mechanisms such as standard contractual clauses, contractual controls, and security assessments where required.

12. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, for contractual commitments, legal obligations, audit requirements, dispute handling, and security analysis.

Retention periods vary by data category and service context; data may be anonymized or deleted when no longer required.

13. Security Measures

We use administrative, technical, and organizational security measures, including access control, encryption in transit where applicable, logging, secure development workflows, and incident response procedures. No system is completely risk-free, and we continuously improve our controls.

14. Data Sharing and Third Parties

We may share data with service providers, infrastructure operators, analytics vendors, advertising networks, legal advisors, auditors, or authorities where legally required and contractually controlled. We do not sell personal data in the ordinary business model of our enterprise services.

Where "sale" or "sharing" has a legal definition in local law, we provide region-specific controls to exercise opt-out rights where applicable.

15. Data Subject Rights

Depending on jurisdiction, you may have rights to access, correction, deletion, portability, restriction, objection, withdrawal of consent, and non-discrimination for exercising rights.

To submit a request, contact support@leyunshuchuang.com and include sufficient details for identity verification and request scope validation.

16. Do Not Track and Regional Preference Signals

Where required by law, we evaluate browser and platform preference signals (such as Global Privacy Control) in context of technical compatibility and legal applicability, and we implement region-appropriate behavior for opt-out signals.

17. Policy Updates

We may update this Policy to reflect legal changes, app store requirement changes, technical changes, and service evolution. Material updates will be communicated through in-product notice, website posting, or contract notice channels as required.

18. Contact for Privacy Requests

Privacy and compliance contact: support@leyunshuchuang.com

Key accounts and enterprise cooperation: xuchen1@leyunshuchuang.com

Postal contact: Room 803-3, Building 6, No. 6 Sanhong Road, Yuhuatai District, Nanjing, 210000, CN

19. Privacy Operations Data Map

Core Compliance Domains

  • App store disclosures, SDK transparency, and consent state records
  • Data minimization, retention controls, and transfer safeguards
  • Age-related policy treatment and sensitive audience restrictions

Operational Oversight

  • Vendor due diligence for analytics, cloud, and ad monetization tools
  • Regional legal requirement tracking and policy revision workflows
  • Request-handling channels for access, deletion, correction, and objection