Title: SDK Privacy Policy Locale: en URL: https://sensorswave.com/en/docs/data-integration/client-sdks/sdk-privacy-policy/ Description: SDK Privacy Policy # Sensors Wave SDK Privacy Statement **Sensors Wave SDK Privacy Statement** **Version Number:** 1 **Version Update Date:** February 11, 2026 **Version Effective Date:** February 11, 2026 **Contact Email:** wave-support@sensorsdata.com **Registered Address:** 5th Floor, Room 501, M18 Information Middle Road, Shangdi Information Industry Base, Haidian District, Beijing **Business Address:** 5th Floor, Room 501, M18 Information Middle Road, Shangdi Information Industry Base, Haidian District, Beijing We have formulated and updated the "Sensors Wave SDK Privacy Statement" based on business adjustments in accordance with relevant laws, regulations, and technical specifications. To better protect your personal information, we recommend that you carefully read this privacy policy, especially the clauses marked in bold/italic/underlined text. If you have any objections or questions regarding the provisions of this privacy policy, you may communicate with us through the contact information disclosed in Section 10 "How to Contact Us" of this privacy policy. ## Introduction Sensors Network Technology (Beijing) Co., Ltd. and its affiliated companies (hereinafter referred to as "we" or "us") act as the developers and operators of Sensors Wave SDK. We fully understand the importance of user information and respect and protect the security of user personal information. We comply with the "Cybersecurity Law of the People's Republic of China," "Data Security Law of the People's Republic of China," "Personal Information Protection Law of the People's Republic of China," and other laws and regulations regarding information protection in the Internet industry. We also refer to recommended national standards such as "Information Security Technology Personal Information Security Specification" (GB/T 35273-2020) to protect your and/or your end users' personal information. To assist developers and operators (hereinafter referred to as "developers") who integrate Sensors Wave SDK into products and/or services to carry out third-party SDK integration business in compliance with relevant laws, regulations, policies, and standards, and to better implement requirements related to personal information protection, while helping end users (hereinafter referred to as "end users") who use products and/or services integrated with Sensors Wave SDK to fully understand the purpose, methods, scope, and information security protection measures for developers' use of Sensors Wave SDK to "collect, use, store, share, and transfer" end users' personal information, as well as the rights and methods we provide you to access, correct, delete, and control personal information, we have formulated the "Sensors Wave SDK Privacy Statement" (hereinafter referred to as "this statement"). To facilitate your reading and understanding, we use language that is as simple and easy to understand as possible and have defined key terms. Please refer to Section 11 "Glossary" of this statement. This statement applies to the products and services we provide to you through Sensors Wave SDK Android version, Sensors Wave SDK iOS version, and other versions we may provide or update from time to time. If a specific version has special features or personal information processing activities that are inconsistent with this statement, we will provide notice. If our products and/or services have separate privacy policies/privacy agreements, those separate privacy policies/privacy agreements shall prevail over this statement; for matters not covered in separate privacy policies/privacy agreements, this statement shall apply. **Developers (hereinafter referred to as "you") integrating and using Sensors Wave SDK must carefully read this statement and confirm that you have read and fully understood all contents of this statement. In particular, you should focus on the important clauses involving personal information rights and interests marked by us in "bold/italic/underlined" text, and ensure that you fully understand and agree before starting to integrate and use the products and/or services provided by Sensors Wave SDK. If you do not understand part or all of the contents of this statement, we recommend that you contact us through wave-support@sensorsdata.com for relevant consultation.** **On the basis of fully understanding this statement, if you still do not agree to the provisions of this statement, we recommend that you immediately stop integrating and using the products and/or services provided by Sensors Wave SDK.** **Please carefully read and understand the details of specific products in this policy before using our products or services. We hope that when you use Sensors Wave products (and/or services), you will make informed decisions about providing your and/or your end users' personal information.** **If you do not agree to this policy, you should immediately stop using the products and/or services we provide.** **Special Notice:** When you use our products and services, we process two main categories of personal information: 1. Your personal information as a Sensors Wave developer customer; 2. Your end users' personal information, including device identifier information, device hardware information, operating system information, network information, application information, location information, and sensors. We process these categories of personal information differently because we have a direct contractual relationship with you, which is different from our indirect relationship with your end users. As our customer, if you use our products or services to provide services to your end users and collect information in the process, **you must separately agree on a privacy policy with your end users in accordance with applicable laws and regulations, promptly disclose the Sensors Wave SDK catalog and data processing situation, and ensure that your end users have agreed to the Sensors Wave SDK privacy policy; if you do not require your end users to agree to the contents of this privacy policy, you should stop using our products and/or services.** Disclosure example is as follows: **SDK Name: Sensors Wave SDK** Third Party Name: Sensors Network Technology (Beijing) Co., Ltd. Purpose of Use: Basic data collection and modeling to drive business decision analysis (please fill in according to specific usage purposes) Personal Information Collected: Device information (including Android ID, IDFA, IDFV, OAID, UUID, etc.), location information, unique application identifier. Based on different devices and systems (Android/iOS) and system versions, as well as the permissions determined by developers when integrating and using Sensors Wave SDK products, the device information collected will vary. Therefore, developers should explain to users the personal information actually collected. Privacy Policy: (please fill in the link to this statement) **This statement will help you understand the following:** 1. How we collect and use end users' personal information 2. How we use Cookies and similar technologies 3. How we share, transfer, and publicly disclose end users' personal information 4. How we store end users' personal information 5. How we ensure the security of end users' personal information 6. How we enable end users to have rights to manage personal information 7. How we handle minors' personal information 8. How we update and revise this statement 9. Other 10. How to contact us 11. Glossary ## How We Collect and Use End Users' Personal Information During your use of products and/or services integrated with Sensors Wave SDK, we strictly comply with the laws and regulations mentioned in the introduction, and collect and use information that you actively provide or that is generated because you use the services in the manner described below to provide services to you. Regardless of the above methods of collecting and using end users' personal information, we usually require developers to obtain end users' consent when collecting personal information, unless in certain circumstances, based on legal obligations or the need to protect the important interests of end users or others, we collect personal information. ### Your Personal Information as a Sensors Wave Developer Customer (or Potential Developer) Sensors Wave SDK will collect information from developer applications calling SDK interfaces, involving: device attribute information (Android ID/OAID/IDFA/IDFV/UUID), network information (network information), device hardware information (device model, screen resolution, hardware manufacturer, product name), operating system information (system name, system version, system language), and application information (time zone, app_id, application name, application version number). ### Your End Users' Personal Information #### Feature Introduction ##### Basic Tracking Functionality This Sensors Wave SDK provides user behavior analysis functionality. To achieve user behavior statistics and implement refined behavior data analysis, helping developers achieve refined operations, the above basic data analysis functions require the use of your end users' device identifiers (Android ID/IDFA/IDFV/UUID), network information (network type, carrier name, IP address), device hardware information (device model, device screen resolution, device hardware manufacturer, device product name), operating system information (system name, system version, system language), and application information (time zone, app_id, application name, application version number) to ensure service stability. ##### Extended Functionality To achieve activation statistics functionality and improve analysis accuracy, developers need to enable the collection of end users' location information (GPS location information) and sensors (screen orientation) through interfaces. #### Based on the needs of the above basic analysis functions and extended functions, we will collect and use your end users' personal information and their specific functions as follows: ##### **Personal Information** - Device identifiers (Android ID/IDFA/IDFV/UUID): Used for user identification to ensure accurate statistics; - Network information (network type, carrier name, IP address): Used to determine the network connection status between the SDK and the server, ensure service stability and continuity, and conduct user behavior analysis; - Device hardware information (device model, device screen resolution, device hardware manufacturer, device product name): Used to ensure service compatibility across different devices, provide statistical reports by device dimension, and achieve refined behavior data analysis of end users; - Operating system information (system name, system version, system language): Used to ensure service compatibility across different devices and achieve refined behavior data analysis of end users; - Application information (time zone, app_id, application name, application version number): Used to analyze data across different application versions and achieve refined behavior data analysis of end users. > Please note: > > - When Sensors Wave SDK collects anonymous IDs, it will by default collect device IDs such as Android ID and IDFA. > - Please note that based on different devices and systems (e.g., Android/iOS) and system versions, as well as the different permissions determined by developers when integrating Sensors Wave SDK products, the information collected by relevant products and/or services will vary. Therefore, developers should explain to end users the personal information actually collected. > - Separate device information, log information, location information, etc. cannot identify a specific natural person. If we combine the aforementioned information with other personal information to identify a specific natural person, or combine it with information that can identify natural person identity, then during the combined use period, in addition to obtaining end user authorization or unless otherwise provided by laws and regulations, developers should also anonymize and de-identify such personal information. ### Device Permission Call Description Please note and be aware that for Sensors Wave SDK to implement the above business functions and collect your end users' **device information** and **network information**, it is premised on **end user authorization and consent to enable** **device information permissions** and **network access permissions**. If your end users do not want the above information to be collected, they can do so by disabling **network access permissions** and **device information permissions**. When a user enables any permission, it represents authorization for us to collect and use relevant information to provide corresponding services. Once an end user disables any permission, it represents that the user has revoked authorization. We will no longer continue to collect and use relevant information based on the corresponding permission, and will be able to provide the service corresponding to that permission. #### **Android SDK Product Permission Description** To ensure normal customer data collection, Sensors Wave Android SDK requires the following system permissions: | **Permission** | **Purpose** | **Required** | **Notes** | | ---------------------- | ---------------------------------------- | ------------------------------------------ | ------------------------------------------------------------- | | INTERNET | Allow app to send statistical data | Required permission, SDK needs this to send tracking data | | | ACCESS_NETWORK_STATE | Allow app to check network status | Required permission, SDK selects whether to send data based on network status | | | READ_PHONE_STATE | Allow app to obtain device IMEI, MEID, and network type | Optional permission, used for in-app promotion and collecting $carrier property | Only used to obtain network type on higher system versions | #### **iOS SDK Product Permission Description** To ensure normal customer data collection, Sensors Wave iOS SDK requires the following system permissions: | **Permission** | **Purpose** | **Required** | | -------------- | --------------------------------- | -------------------------------------- | | Network | Allow app to send data | Required permission, SDK needs this to send tracking data | | IDFA | Allow app to obtain IDFA | Optional permission, used for in-app promotion | ## How We Use Cookies and Similar Technologies When end users use products and/or services integrated with Sensors Wave SDK through the Internet, including but not limited to various mobile terminal devices, to ensure normal system operation, we will store small data files called Cookies on end users' devices. Cookies typically contain identifiers, site names, and some numbers and characters. The main function of Cookies is to facilitate more thoughtful personalized services for end users and allow users to set specific service options. When end users use products and/or services integrated with Sensors Wave SDK, we will send Cookies to end users' devices. Cookies (or other anonymous identifiers) will be sent directly to the Sensors Wave cluster purchased by the developer. We will not use Cookies for any purpose other than those described in this statement. End users may manage or delete Cookies according to their preferences. End users can clear all Cookies saved on their computers. Most web browsers have functions to block Cookies. However, if end users do so, they will need to change their settings every time they visit products and services integrated with Sensors Wave SDK, but end users may be unable to log in or use services or functions provided by developers that rely on Cookies due to such modifications. ## How We Share, Transfer, and Publicly Disclose End Users' Personal Information When end users use products and/or services integrated with Sensors Wave SDK, the information collected through Sensors Wave SDK is stored in the Sensors Wave cluster purchased by the developer (including private deployment and SaaS versions). We do not have the right to access user personal data and do not involve the sharing, transfer, or public disclosure of end users' personal information. ## How We Store End Users' Personal Information We strictly comply with relevant laws and regulations and adopt reasonable and feasible measures recognized in the industry to provide developers with end user personal information protection capabilities to prevent information from being accessed, disclosed, used, or modified without authorization, and to avoid information damage or loss. ### Retention Period When end users use products and/or services integrated with Sensors Wave SDK, the Sensors Wave cluster purchased by the developer and its associated servers are responsible for storing end users' personal information. Developers should preserve information in accordance with the requirements of laws and regulations, and please ensure that information is deleted or anonymized after the retention period of end users' personal information has expired. ### Storage Location The personal information of end users collected by developers is stored on the Sensors Wave cluster purchased by the developer and its associated servers. **Developers should strictly store personal information in accordance with laws and regulatory requirements (e.g., storing personal information collected within China in China).** ## How We Ensure the Security of End Users' Personal Information ### Product Security Measures 1. In the product development process, we strictly follow secure development lifecycle process management, embed security and privacy requirements into every stage of product development, and effectively reduce the number of product security vulnerabilities and minimize actual security risks by implementing various security control measures, thereby building safer products. 2. In addition to regularly conducting security tests on products, we also invite professional security companies in the industry to conduct crowdsourced testing and actual attack and defense drills, discovering potential product security vulnerabilities from multiple dimensions and perspectives, improving overall product security, and bringing value to customers. ### Vulnerability Management Measures We have a comprehensive vulnerability management strategy. We monitor internal/external security vulnerabilities and threat intelligence through various means, evaluate and dispose of product vulnerabilities and threat intelligence involved, and strictly follow the process mechanism of "responsibility to individuals,时效催促, and process visualization" for full lifecycle vulnerability management to ensure all vulnerabilities can be resolved in a timely manner. ### Personal Information Security Around the collection, transmission, storage, use, and deletion lifecycle of personal information processing, Sensors Wave products provide a series of technical means such as delayed initialization, data encryption, data watermarking, and data masking to ensure the security and compliance of personal information. Developers can select appropriate protection means when integrating Sensors Wave SDK to safeguard the security of end customer personal information. ### Security Incident Response 1. We will strive to ensure the security of Sensors Wave products and the security of end users' personal information collected using Sensors Wave SDK, but please understand that due to technical limitations and various malicious means that may exist in the Internet industry, it is impossible to always guarantee 100% information security. To prevent security incidents, we will formulate network security incident emergency plans, promptly assist developers in handling security risks such as system vulnerabilities, computer viruses, network attacks, and network intrusions, and take corresponding remedial measures to strive to minimize losses. 2. In the unfortunate event of a personal information security incident, we recommend that developers inform end users of the basic situation and possible impact of the security incident in accordance with legal and regulatory requirements, the handling measures taken or to be taken by the developer, suggestions for risks that end users can prevent and reduce on their own, and remedial measures for end users, etc. Developers should promptly inform users of incident-related information through in-app notifications, SMS notifications, phone calls, emails, and other contact methods reserved by end users. When it is difficult to inform individually, developers should take reasonable and effective methods to issue public announcements. 3. At the same time, developers should proactively report the handling of personal information security incidents in accordance with regulatory requirements and closely cooperate with the work of government agencies. ## How We Enable End Users to Have Rights to Manage Personal Information We attach great importance to developers' and end users' concern about personal information, and hereby: ### For Developers Given that developers are directly obligated to respond to user personal information requests, developers should: **provide and clarify to users the functions and channels for accessing, copying, modifying, deleting personal information, withdrawing consent, transferring personal information, restricting personal information processing, obtaining copies of personal information, and canceling accounts based on their actual integration of Sensors Wave SDK.** ### For End Users Since end users are not our direct users and there is no direct interactive function interface between them and Sensors Wave SDK, to protect the realization of your rights, we have required third-party developers to commit to providing easy-to-operate user rights realization functions and channels. If you need to access, copy, modify, delete their related personal information, withdraw consent, restrict personal information processing, obtain copies of personal information, and cancel accounts, you can realize your personal information needs through the above functions provided by third-party developers. Please note that we cannot control the behavior of third-party developers. If developers fail to provide as promised, you may contact us through the means in Section 10 of this statement, and we will do our best to coordinate, support, and safeguard the realization of end users' rights. ## How We Handle Children's Personal Information We attach great importance to protecting the personal information of minor users. **Sensors Wave SDK products and/or services are mainly oriented toward enterprises and adults.** We do not accept children registering to become our users, and in principle we also do not accept you providing personal information of end users under the age of 14. Please be careful and cautious when providing. Although laws and customs in different places define children differently, we treat any person under the age of 14 as a child. If we collect personal information from children under the age of 14 without our knowledge, we will promptly delete the relevant information unless the law requires us to retain such information. If you believe we have incorrectly or accidentally collected information from a child under the age of 14, please contact us promptly: wave-support@sensorsdata.com. If your application is designed and developed for children under the age of 14, please ensure that your end users are guardians who have read and agreed to the application's privacy policy and authorized consent to provide children's personal information to us to implement the relevant functions of the application. ## How We Update and Revise This Statement We reserve the right to update this statement from time to time. Without your explicit consent, we will not change the rights you are entitled to under this statement. If this statement is updated due to Sensors Wave SDK functionality or other reasons, we will notify you through website announcements, etc., so that you can promptly understand any changes made to this statement. **If you are a third-party developer, when the updated statement has major changes to the handling of end users' personal information, you should update your privacy policy in a timely manner and inform end users such as App through pop-ups and other methods. If end users do not agree to accept the modified privacy policy, please ask end users to stop using products and/or services integrated with Sensors Wave SDK.** If end users continue to use products and/or services integrated with Sensors Wave SDK, it will be deemed as accepting the modifications we made to the relevant provisions of this statement. ## Other The "Privacy Policy" of Sensors Network Technology (Beijing) Co., Ltd. is the general privacy provision uniformly applicable to our products and services. The user rights and information security protection measures stipulated therein are applicable to Sensors Wave SDK users. When you use the products and/or services provided by Sensors Wave SDK, if there are any inconsistencies or contradictions between the "Privacy Policy" and this statement, this statement shall prevail. ## How to Contact Us We have established a dedicated privacy protection institution and privacy protection officer. If you have any comments or suggestions regarding this statement, or even if any disputes arise from this statement, you may contact our privacy protection institution through **wave-support@sensorsdata.com**. We will arrange dedicated personnel to promptly provide you with consultation or coordinate to resolve your complaints and appeals. **Under normal circumstances, we will reply within fifteen working days.** To ensure we efficiently handle your issues and provide you with timely feedback, you need to submit valid identity proof, valid contact information and written requests and relevant evidence to us. We will process your request after verifying your identity. If you are not satisfied with our response or handling opinion, you hereby agree to apply for arbitration from the **Beijing Arbitration Commission**, which excludes the jurisdiction of the court. ## Glossary Specific terms used in this statement have the following meanings: 1. **Affiliated Companies:** Any company entity within the consolidated scope of Sensors Network Technology (Beijing) Co., Ltd., any of the above companies that is now or in the future controlled, controlled by, or under common control with others. 2. **Control:** Means having the ability to directly or indirectly influence the management of the mentioned company, whether through ownership, shares with voting rights, contracts, or other legally recognized methods. 3. **You:** Refers to registered users who use our products and/or services, including developers and operators who integrate products and/or services of Sensors Wave SDK, and end users who use products and/or services integrated with Sensors Wave SDK. 4. **Personal Information:** Refers to various information recorded electronically or by other means that can identify a specific natural person's identity or reflect a specific natural person's activity situation, alone or in combination with other information. Personal information includes personal basic information, personal identity information, personal biometric information, network identity information, personal health and physiological information, personal education and work information, personal property information, personal communication information, contact person information, personal online records, personal commonly used equipment information, personal location information, etc. For avoidance of doubt, personal information includes but is not limited to personal sensitive information. 5. **Personal Information Subject:** Refers to the natural person identified by personal information. 6. **Personal Sensitive Information:** Refers to personal information that, once leaked, illegally provided, or abused, may endanger personal and property safety and easily lead to damage to personal reputation, physical and mental health, or discriminatory treatment. Personal sensitive information includes personal property information, personal health and physiological information, personal biometric information, personal identity information, network identity information, etc. 7. **De-identification:** Refers to the process of technically processing personal information so that it cannot identify the personal information subject without additional information. 8. **Anonymization:** Refers to the process of technically processing personal information so that the personal information subject cannot be identified and the processed information cannot be restored. 9. **China or Within China:** Refers to the mainland of the People's Republic of China, for the purposes of this statement only, excluding the Hong Kong Special Administrative Region, Macau Special Administrative Region, and Taiwan region.