Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

Phone number or email address - Account registration and login verification (Required)
Username / profile information - Account identification (Optional)
Payment information - Subscription and credits purchase (processed by Stripe; we do not store card details) (For paid features)
Support inquiries - Customer service and issue resolution (When you contact us)

1.2 Information Collected Automatically

Device information (brand, model, OS version, screen resolution) - Ensuring compatibility and optimizing task execution
App usage data (features used, task types, frequency) - Service improvement and analytics
Crash logs and error reports - Bug fixing and stability improvement
IP address and approximate location (country/region level) - Service optimization, fraud prevention, and legal compliance
Language preference - Providing localized user experience

1.3 Information Collected During Task Execution

When you initiate an automation task, the following data is temporarily processed:

Your text instructions - Sent to LLM service for intent understanding (Retained for task duration + 24 hours for debugging)
UI accessibility tree data - Screen state analysis for task execution (Not retained after task completion)
Screenshots - Sent to you as task progress feedback (Stored temporarily; auto-deleted within 24 hours)
Task execution logs - Debugging, error recovery, and checkpoint persistence (Retained for 7 days, then auto-deleted)

1.4 Information We Do NOT Collect

Passwords or authentication credentials - the App never reads, records, or stores passwords you enter in any application
Financial information - credit card numbers, bank accounts, or payment details entered in other apps are never captured
Continuous screen monitoring - we do NOT monitor your screen when no task is active
Keylogging - we do NOT record keystrokes outside of task execution
Contacts, call logs, or SMS - we do NOT access your phone's contact list, call history, or messages
Camera or microphone data - the App does NOT access your camera or microphone
Biometric data - no fingerprint, face, or voice data is collected

2. How We Use Your Information

Service Delivery - Processing your instructions, executing automation tasks, and delivering results.
Account Management - Creating and maintaining your account, managing subscriptions and credits.
Service Improvement - Analyzing usage patterns (in aggregate) to improve App features, performance, and reliability.
Customer Support - Responding to your inquiries, troubleshooting issues, and providing technical assistance.
Communication - Sending important service notifications, security alerts, and (with your consent) promotional updates. You may opt out of promotional communications at any time.
Security and Fraud Prevention - Detecting, preventing, and addressing technical issues, fraud, or abuse.
Legal Compliance - Complying with applicable laws, regulations, and legal processes.

3. Third-Party Data Sharing

3.1 LLM Service Providers

Your text instructions are sent to third-party large language model providers for processing. These providers include but are not limited to Zhipu AI, Moonshot, DeepSeek, Alibaba Cloud, and MiniMax.

What is shared: Your text instructions and relevant device context (e.g., screen state summary, app name).
What is NOT shared: Your personal identity, phone number, email, payment information, or any data from apps not relevant to the current task.

3.2 Payment Processor

Stripe, Inc. processes all payment transactions. When you make a purchase, your payment information is collected and processed directly by Stripe. We receive only a transaction confirmation and do not have access to your full card details. Stripe's privacy policy is available at stripe.com/privacy.

3.3 Messaging Channel Providers

When you use messaging channels (DingTalk, Feishu/Lark, Discord, QQ) to send instructions, your messages are transmitted through these platforms. These platforms' own privacy policies govern how they handle your data.

3.4 Analytics Providers

We may use third-party analytics services to understand App usage patterns. Data shared with analytics providers is aggregated and anonymized.

3.5 We Do NOT:

Sell your personal data to any third party
Share your personal data for advertising or marketing purposes with third parties
Provide your personal data to data brokers
Use your data to train AI models (your instructions are used only for real-time task execution)

4. Data Storage and Security

Storage Location: Your account data is stored on secure cloud servers. The specific storage location depends on your region to comply with local data residency requirements.
Encryption: All data transmitted between the App and our servers is encrypted using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256 encryption.
Access Control: Access to personal data is restricted to authorized personnel who require it for service operations, and all access is logged and audited.
Local Device Data: Task checkpoints and preferences stored locally on your device use MMKV encrypted storage. This data remains on your device and is not transmitted to our servers unless required for task recovery.

IMPORTANT: SECURITY LIMITATIONS

While we take reasonable measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. You acknowledge and accept that: (a) data transmitted to third-party LLM providers traverses networks beyond our control; (b) on-screen data accessed during task execution may include information from other applications; (c) the inherent nature of device automation means the App interacts with data visible on your screen.

WE CANNOT AND DO NOT GUARANTEE ABSOLUTE SECURITY OF YOUR DATA. BY USING THE APP, YOU ACKNOWLEDGE THESE LIMITATIONS AND ACCEPT THE ASSOCIATED RISKS.

5. Data Retention

Account information - Until account deletion + 30 days
Task execution logs - 7 days, then auto-deleted
Screenshots (task feedback) - 24 hours, then auto-deleted
LLM instruction logs - 24 hours, then auto-deleted
Payment transaction records - As required by applicable tax and financial laws (typically 3-7 years)
Aggregated analytics data - Up to 2 years (anonymized)

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to Access - You may request a copy of the personal data we hold about you.
Right to Rectification - You may request correction of inaccurate or incomplete personal data.
Right to Erasure - You may request deletion of your personal data, subject to legal retention requirements.
Right to Data Portability - You may request your data in a structured, commonly used, machine-readable format.
Right to Restrict Processing - You may request that we limit the processing of your personal data under certain circumstances.
Right to Object - You may object to the processing of your personal data for certain purposes, including direct marketing.
Right to Withdraw Consent - Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us through the in-app feedback channel. We will respond to your request within 30 days.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
When we transfer data internationally, we implement appropriate safeguards including standard contractual clauses, data processing agreements, and encryption to ensure your data is protected.

8. Children's Privacy

ApkClaw is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.
If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete such information promptly.
If you believe a child under 16 has provided us with personal data, please contact us through the in-app feedback channel.

9. Regional Privacy Provisions

9.1 European Economic Area (EEA) - GDPR

If you are in the EEA, the legal bases for processing your data are:

Contract performance (Article 6(1)(b)) - for account management and service delivery
Legitimate interests (Article 6(1)(f)) - for service improvement, security, and fraud prevention
Consent (Article 6(1)(a)) - for promotional communications and optional data collection
Legal obligation (Article 6(1)(c)) - for compliance with applicable laws

You may lodge a complaint with your local data protection authority.

9.2 California - CCPA/CPRA

If you are a California resident, you have additional rights under the CCPA/CPRA:

Right to Know - categories and specific pieces of personal information collected
Right to Delete - request deletion of personal information
Right to Opt-Out of Sale - we do NOT sell personal information
Right to Non-Discrimination - we will not discriminate against you for exercising your rights

9.3 Brazil - LGPD

If you are in Brazil, you have rights under the LGPD including access, correction, anonymization, data portability, deletion, and information about sharing.

9.4 Japan - APPI

If you are in Japan, we handle your personal information in accordance with the Act on the Protection of Personal Information (APPI).

10. Accessibility Service Data Disclosure

In accordance with Google Play requirements:

Purpose: ApkClaw uses Accessibility Service solely to execute user-initiated automation tasks by interacting with on-screen UI elements.
Data accessed through Accessibility Service:
- On-screen text content and UI element properties (for screen understanding during active tasks only)
- App package names and activity names (to verify correct app context)
- Screen layout and element coordinates (for executing tap, swipe, and input actions)
Data NOT accessed through Accessibility Service:
- Passwords, PINs, or sensitive authentication inputs
- Data from apps not relevant to the current task
- Any data when no task is actively running
Data handling: Accessibility data is processed in real-time during task execution and is NOT stored, transmitted to third parties, or used for any purpose other than executing the user's requested task.

11. Cookies and Tracking

The App itself does not use cookies. If you access our website, we may use essential cookies for functionality. We do not use advertising or tracking cookies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and through in-app notifications.
The "Last Updated" date at the top of this Privacy Policy indicates when it was last revised.
Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the in-app feedback channel.

Lucky Days Co. LTD

ApkClaw Privacy Policy