Privacy Policy

Special Notice: This application ("PACAU") is a professional management tool designed for self-service vending machine operators, used for remote monitoring of device status, managing product inventory, handling transaction anomalies, and performing remote maintenance operations. Please read and fully understand all contents of this Privacy Policy carefully. By clicking "Agree" or starting to use this application, you confirm that you have fully understood and accepted all terms of this agreement.

I. Information Collection and Use

The core functionality of this application is to help operators efficiently manage their network of self-service vending machines, including real-time machine status monitoring, restocking reminders, fault diagnosis, and more. To achieve the above functions, we will invoke relevant device permissions after obtaining your authorization.

Certain permissions (such as reading media files) are used to support product image uploads and content management. If you decline authorization, the corresponding upload functionality will be restricted. At the same time, this application will collect the administrator's basic identity information (name, email, user ID) and the vending machine's transaction financial data based on operational needs. Please refer to the Data Disclosure section above for detailed types.

II. Detailed Description of Data Types

To fully meet the data security and transparency requirements of various app stores, this application explicitly declares the collection of the following data types, which are directly linked to your administrator identity:

• Personal Information (name, email, user ID) — used for identity verification and operational management
• Financial Information (transaction records, payment information) — used for operational reconciliation and settlement
• Photos and Videos (product images, fault photos) — used for content management and remote diagnosis
• Files and Documents (reports, logs, firmware) — used for data export and device configuration
• Device Identifiers (IMEI/Android ID/OAID/MAC, etc.) — used for device binding and network diagnostics
• Email — used for important notifications and alerts

The specific use, collection method, and retention period for each type of data are explained below to ensure full compliance.

III. Collection of Device Identifier Information (Based on uni-app Framework)

This application is developed based on the uni-app (DCloud 5+ App Engine) framework. To ensure stable operation of the basic runtime environment, optimize the management experience, and perform necessary compatibility analysis, the uni-app framework automatically collects the following device identifier information in the background:

• IMEI / Android ID / DEVICE_ID: Used to uniquely identify the management terminal device, prevent duplicate logins from multiple devices, and verify the binding relationship with vending machines.
• OAID (Open Anonymous Device Identifier): Used for device identification under compliance conditions, supporting statistical analysis (e.g., response time of different phone models when managing vending machines).
• SIM IMSI: Only read when checking SIM card status, used for network switching optimization (e.g., helping to select the carrier network with stronger signal for sending commands).
• MAC Address, BSSID: Assists in locating Wi-Fi network quality, used to diagnose the connection stability between vending machines and the backend.

The above information is collected solely for device binding, network diagnostics, anomaly location, and operational auditing, and will not be used for any personalized advertising or user profiling. You can disable access to certain device identifiers through your phone's system settings (specific path depends on the phone model), but this may affect the accuracy of device authentication or network diagnostics.

IV. Permission Usage Description

To perform specific vending machine management tasks, this application may need to invoke certain permissions on your device. The specific permission names, triggering scenarios, and purposes are as follows:

V. Other Means of Information Collection

1. Device and Network Information: Automatically collects the management terminal's device model, operating system version, IP address, Wi-Fi signal strength, etc., to establish a trusted device inventory.
2. Operation Logs: Records the operational commands you issue to vending machines (e.g., restarting vending machines, setting temperature, unlocking pickup doors) and operation times, for operational auditing and fault tracing.
3. Location Information: With your authorization, the application may collect the GPS location of the management terminal to correlate with the geographic distribution of nearby vending machines for rapid fault machine location (you may disable this permission at any time).
4. Device Identifiers (Supplementary): As described in Section III, the uni-app framework may collect OAID, IMEI, Android ID, MAC address, etc., for device identity recognition and network environment diagnostics. These identifiers are only processed locally or encrypted and uploaded to your designated server, and will not be shared with third-party advertising platforms.
5. File and Document Collection Note: When you export operational reports, restocking lists, or device diagnostic logs, the relevant files may be temporarily stored locally on the device or encrypted and uploaded to the designated server, solely for operational analysis and archiving.

VI. Third-Party SDKs and Data Sharing

1. No Advertising SDKs: This application does not integrate any advertising platforms or analytics third-party SDKs.
2. DCloud SDK (uni-app Runtime): This application is developed based on uni-app, and its underlying engine may collect device identifier information (see Section III for details) to ensure stable framework operation and provide standard API capabilities. DCloud does not use the above data for its own commercial purposes. For details, please refer to the DCloud Privacy Policy.
3. Data Storage: All vending machine transaction data (including transaction records and user payment information in financial information), operational logs, and product inventory information are encrypted and uploaded to the operator's designated server (private deployment or encrypted cloud service). The application developer has no authority to view specific business data.
4. Necessary Service Providers: If push notification services (e.g., Firebase Cloud Messaging or APNs) are used to send alert notifications to administrators, the SDK may collect device identifiers. Please refer to the respective SDK privacy policies for details.
5. Special Note on Financial Information: This application will not share any transaction records or user payment information with unauthorized third parties. All financial data is solely used for internal operator reconciliation, settlement, and dispute resolution, and strictly complies with relevant data protection regulations.

VII. Data Storage and Security

1. Storage Location: Data is stored on the operator's designated server (typically an internal data center or compliant cloud service provider), in compliance with relevant data protection laws and regulations.
2. Security Measures: All communications use TLS encryption. The management terminal must be authenticated through dynamic tokens or certificates to access the backend system. For sensitive data such as financial information and device identifiers, additional field-level encryption is implemented.
3. Data Retention:
   • Operation logs are retained for 90 days;
   • Device binding information is retained until the vending machine exits the operational network;
   • Transaction records are retained for at least 3 years according to the operator's internal financial policy, and user payment information is retained in a desensitized form during the reconciliation period.

VIII. Your Rights

This application is an internal management tool for vending machine operators. Your personal information (name, email, user ID) and operational behavior are protected by the operator's internal data governance policies. You enjoy the following rights:

• Access and Correction: You have the right to access personal information and operational records linked to your employee ID and request correction if errors are found.
• Data Deletion: You have the right to request deletion of non-essential operational records or financial details linked to your employee ID (except those subject to financial regulatory retention periods).
• Data Export: You have the right to export transaction details or operational reports related to you.
• Account Cancellation: If you need to cancel your management account, please contact your operations team administrator or send an email to wangfei1@shengmakeji.com to submit a cancellation request. We will complete account cancellation and associated data cleanup within 15 business days (excluding data required to be retained by laws and regulations).

You may also send an email to wangfei1@shengmakeji.com to submit any data subject requests, and we will assist in processing within 15 business days.

IX. Protection of Minors

This application is intended solely for adult employees or authorized partners of self-service vending machine operators and is not directed at general consumers or minors. We do not knowingly collect any personal information from individuals under the age of 18. If such information is inadvertently collected, please contact us promptly for deletion.

X. Changes to the Privacy Policy

This policy may be revised based on feature updates, regulatory requirements, or app store policy changes. Significant changes will be notified through in-app pop-ups or internal operator notifications. Continued use will be deemed as acceptance of the new version. Subsequent adjustments will update the version date.

XI. Contact Us

If you have any questions about this Privacy Policy, need to exercise your data rights (access, correction, deletion of personal information / financial data, account cancellation), or have any suggestions regarding the types of data collected, please contact:

Hebei Shengma Electronic Technology Co., Ltd.
Contact Email: wangfei1@shengmakeji.com
Address: 10th Floor, Building 2, Area B, Jiacun Xincun, Yuhua District, Shijiazhuang City
Postal Code: 050000