1. Third-Party SDK Sharing List

SDK Name: WeChat Open SDK
Provider: Shenzhen Tencent Computer Systems Co., Ltd.
Package: com.tencent.mm.opensdk
Scenario: Login and payment
Collection method: Automatic collection by calling system interfaces after integration and authorization where required
Information types: Common device information, network information, and stored files where necessary
Personal information fields: Device identifiers such as IMEI, Android ID, MAC, OAID-related information; app information such as app crash information, notification status, and installed app list; device parameters and system information; network information such as IP address, Wi-Fi information, and base station information
Purpose: WeChat login and WeChat payment
Necessary: Yes, when you use WeChat login or payment
Processing method: De-identification or masking where appropriate
Privacy policy: https://weixin.qq.com/cgi-bin/readtemplate?lang=en_US&t=weixin_agreement&s=privacy

SDK Name: Umeng Analytics
Provider: Umeng Tongxin (Beijing) Information Technology Co., Ltd.
Package: com.umeng.*
Scenario: Analytics and performance monitoring
Collection method: Automatic collection by calling system interfaces
Information types: Common device information and network information
Personal information fields: Device identifiers such as OAID, Android ID, MAC address, IMSI, IMEI; hardware model, operating system version, device configuration, SD card data, SN; network information such as IP address, access method, and BSSID
Purpose: App statistics, usage analysis, performance monitoring, and product optimization
Necessary: Yes for statistics and stability analysis where enabled by the app/channel
Processing method: De-identification or masking where appropriate
Privacy policy: https://www.umeng.com/page/policy

SDK Name: Tencent Youlianghui Ads
Provider: Shenzhen Tencent Computer Systems Co., Ltd.
Package: com.qq.e.*
Scenario: Advertising and revenue support
Collection method: Automatic collection by calling system interfaces
Information types: Common device information, network information, and app information
Personal information fields: Device identifiers such as OAID, Android ID, MAC address, IMSI, IMEI; hardware model, operating system version, device configuration, ICCID, BSSID; network type and IP address; installed app list and app usage behavior where supported and permitted
Purpose: Advertising display, revenue support, effectiveness measurement, and anti-fraud
Necessary: Yes where the advertising feature is enabled
Processing method: De-identification or masking where appropriate
Privacy policy: https://www.tencent.com/en-us/privacy-policy.html

SDK Name: ByteDance Pangle Ads
Provider: Beijing ByteDance Technology Co., Ltd. or its affiliates
Package: com.bytedance.*
Scenario: Advertising and revenue support
Collection method: Automatic collection by calling system interfaces
Information types: Common device information, network information, and app information
Personal information fields: Device identifiers such as OAID, Android ID, MAC address, IMSI, IMEI; hardware model, operating system version, device configuration, ICCID, BSSID; network type and carrier information; installed app list and app usage behavior where supported and permitted
Purpose: Advertising display, revenue support, effectiveness measurement, and personalized recommendation where permitted
Necessary: Yes where the advertising feature is enabled
Processing method: De-identification or masking where appropriate
Privacy policy: https://www.pangleglobal.com/privacy

SDK Name: Huawei AppGallery Connect / Joint Operations Capabilities
Provider: Huawei Technologies Co., Ltd.
Package: com.huawei.agconnect
Scenario: AppGallery joint operation statistics and channel services
Collection method: Automatic collection by calling system interfaces
Information types: Common device information
Personal information fields: Android ID, hardware model, operating system version, device configuration, ICCID, BSSID, MAC address, IMSI, IMEI, and similar device information
Purpose: Channel operation statistics and AppGallery-related service requirements
Necessary: Yes for Huawei channel builds where enabled
Processing method: De-identification or masking where appropriate
Privacy policy: https://consumer.huawei.com/en/privacy/privacy-policy/

SDK Name: Tencent Bugly Crash Reporting
Provider: Shenzhen Tencent Computer Systems Co., Ltd.
Package: com.tencent.bugly.crashreport
Scenario: Crash monitoring and performance analysis
Collection method: Automatic collection by calling system interfaces
Information types: Common device information and app information
Personal information fields: Android ID, hardware model, operating system version, device configuration, ICCID, BSSID, MAC address, IMSI, IMEI; crash stack, error logs, running status, memory usage, CPU usage, and other performance data
Purpose: Crash monitoring, performance analysis, and problem diagnosis
Necessary: Yes for stability and troubleshooting where enabled
Processing method: De-identification or masking where appropriate
Privacy policy: https://bugly.qq.com/docs/

2. Open-Source Component Libraries (No User Data Collection or Sharing by the Libraries Themselves)

The App uses open-source libraries to improve feature stability. These libraries are used inside the App and do not independently collect or share user data.

Network communication: android-async-http, cos-android-nobeacon, okhttp3
Information involved: Network information, IP address, MAC address where required by network communication
Permissions: Network and storage where needed
Function: Asynchronous HTTP requests and Tencent Cloud object storage SDK capabilities
Providers: GitHub and Tencent Cloud open-source communities

Image processing: Glide, Photoview, cropiwa
Information involved: Stored files selected by you
Permissions: Storage and network where needed
Function: Image loading/caching, gesture zoom, and image cropping
Providers: GitHub, bumptech, and open-source communities

Multimedia processing: ijkplayer-java, FFmpeg
Information involved: Stored files selected by you
Permissions: Storage
Function: Video playback, editing, processing, and conversion
Providers: bilibili and the FFmpeg open-source community

UI components: DialogX, QMUI, MultiSlider, ColorPicker, MultiTouchImage
Information involved: Stored files where used by UI preview components
Permissions: Storage where needed
Function: Dialogs, UI components, sliders, color picker, and multi-touch image controls
Providers: GitHub, Tencent QMUI team, and open-source communities

Utility libraries: ButterKnife, Gson, GreenDao, EventBus, MMKV, Share2, LeakCanary
Information involved: Stored files or local app data where used by the App
Permissions: Storage where needed
Function: View injection, JSON parsing, database ORM, event bus, key-value storage, sharing, and memory leak detection
Providers: Jake Wharton, Google, greenrobot, Tencent, Square, and open-source communities

Open-source privacy note: These components are used for local feature implementation. File operations are performed on files selected by you and are not uploaded to our servers by these libraries. Network components require basic network permission but do not independently collect user privacy data.

3. Principles and Measures for Information Sharing

• Necessity: We share only information necessary to achieve the service purpose.
• Lawfulness: We require information sharing to comply with applicable laws and platform rules.
• Minimization: We limit the scope and amount of shared information where possible.
• Encrypted transmission: Shared information is protected during transmission where technically feasible.
• Contractual restrictions: We require third parties to comply with data processing, confidentiality, and security obligations.
• Security assessment: We evaluate third-party SDKs for security and privacy risks.

4. Third-Party SDK Management

• Due diligence: We review third-party providers before integration where appropriate.
• Periodic review: We periodically review SDK privacy policies and usage.
• Technical controls: We use technical measures to limit SDK access to information where possible.
• Version updates: We update SDKs to safer versions where feasible.

5. User Controls

• Personalized recommendation: You may enable or disable personalized recommendation in settings where the App provides such a switch.
• Advertising settings: You may limit ad tracking in your device system settings where supported.
• Permission management: You may manage app permissions in system settings.
• Information inquiry: You may contact us to understand how we share information with third parties.

6. Contact Us

If you have questions about this Third-Party SDK Sharing List, contact us at: feedback@hshstech.com

Hushan Hushan (Shenzhen) Technology Co., Ltd.