Account connection and sessions
At first launch, the system displays the standardized privacy statement hosted by Huawei. Accept to enter the app; declining exits it. The same statement is available from the app’s About page.
Account Kit provides an authorization code. The server exchanges tokens and maps the account identifier to an internal account; the database does not retain plaintext UnionID. The app does not receive your HUAWEI ID password or request unrelated phone, contacts, address or invoice information. The business-session token uses secure device storage and does not sync across devices.
Credits, purchases and reward verification
The server keeps credit events and reservation/settlement facts tied to the internal account to sync balances and prevent duplicate charges or grants. It does not receive your question, result text or notes.The server also retains necessary account mappings, credits and entitlements, transactions and refunds, ad rewards, usage events and error codes. Casting content, results, history text and notes are not uploaded.
When you purchase, IAP Kit handles products, orders and purchase credentials. The server verifies orders, status and revocation events before confirming permanent access. Purchase credentials are excluded from analytics events and client logs.
Ads Kit is triggered by your choice. The server verifies ad placement, platform event ID, completion and necessary abuse-prevention signals. Client playback completion alone cannot grant credits. OAID is not a permanent account key.
Permissions and optional processing
Network access supports account connection, credit sync, cast settlement, purchase/reward verification and limited-field events and diagnostics. An account connection is required for new online results and entitlement sync. First use requires acceptance of the system privacy statement.
Location is requested only when you enable True Solar Time. Calculation remains local; coordinates are neither stored nor uploaded and location is not tracked continuously. You can revoke location permission in system app settings.
Non-personalized ads are requested only when you choose to watch an ad. The app itself does not directly read the advertising identifier (OAID). Choosing not to watch ads does not affect casting, history or purchased permanent access. See below for Huawei advertising service data processing.
Local records and diagnostics
History and notes use an encrypted local database limited to 100 records and can be deleted in the app. Records keep standard time, corrected time, True Solar Time settings and correction minutes locally without upload, but not raw coordinate fields. Correction minutes together with the date can reveal approximate longitude. Deleting local history does not delete server entitlements.
The separate encrypted local diagnostic queue holds up to 100 entries for no more than 7 days: component, operation, fixed error code, time, app/API version and optional request ID. Queued entries are sent after connectivity and account access resume. Server diagnostics expire after 90 days and are removed by daily cleanup.
Diagnostics exclude raw errors, stack traces, account identifiers, OAID, orders, location, questions, notes and result text. A failed upload does not change credits, purchases or history.
Product events and security logs
There is no separate third-party Analytics SDK. Limited-field product events and fixed-code diagnostics go to our own service for usage statistics and troubleshooting. They exclude questions, notes and result text and cannot grant credits or replace purchase verification.
Necessary application, security and access logs follow the existing 183-day policy. They contain request ID, route, status, duration, fixed error codes and irreversible references, not passwords, tokens, purchase credentials, full callback parameters or sensitive content.
Storage location and backups
Our online database and routine application backups are stored on the same instance in Ulanqab, Inner Mongolia, China. This does not describe data stored independently by Huawei; see each Huawei service statement.
Routine backups rotate daily and are retained for about 14 days, up to about 16 days depending on the cleanup cycle. Access is restricted to fault recovery. Before restoring service from a backup, previously completed deletion or restriction requests are reapplied.
Retention periods
Product events expire 365 days after occurrence and server diagnostics after 90 days. Daily cleanup may add up to one day. Business sessions are valid for 30 days; expired or revoked sessions are retained for a further 7 days before daily cleanup. Security and access logs rotate daily and are kept for about 183 days.
Account mappings, available credits and permanent entitlements are retained while providing the relevant service, enabling ongoing use and restoration. Verified deletion or account-closure requests remove deletable business data. Legally required transaction or security records are retained only for storage and necessary security protection; we explain the specific basis, period and scope to you.
Access, correction, deletion and account closure
Email the existing support address support@bonnwl.com, specifying HarmonyOS and the scope of your request. We complete verification and processing within 15 working days of receiving the request and explain the result.
When handling a request, support may ask you to generate a privacy-request verification code via About → Privacy and data → Privacy information → Generate verification code (关于→隐私与数据→隐私说明→生成核验码). It is valid for 7 days and confirms that the request belongs to you. Share it only with official support; generating it does not submit a deletion request. If you cannot sign in, contact support for alternative verification. We do not ask for passwords, session tokens, identity documents or full order screenshots.
Deleting local history, withdrawing consent, closing business data and handling transaction records are separate actions. We do not promise one-tap erasure of all server records or automatic refunds. Before handling purchased access, we explain effects on service and restoration, and records that must remain.
Withdrawing consent
Using About → Privacy and data → Withdraw consent (关于→隐私与数据→撤回同意) first attempts to revoke the current server session and reports a failure if online revocation cannot complete. After withdrawal, subsequent account, product-event and diagnostic requests stop on this device, and its session and queued diagnostics are cleared. This does not sign out of the system HUAWEI ID. It does not automatically delete history or purchased permanent access. Server-data deletion requires a separate request.
On the next launch after withdrawal, the system requests consent again; declining exits the app. Location permissions and system advertising privacy settings can be managed separately in device settings.
Minors
Online services are not offered to children under 14. Users aged 14–17 need guardian consent; the initial explanation states this. The app does not collect dates of birth or identity documents for this purpose.
If a child's information has been collected in error, a guardian can contact support@bonnwl.com for verification and deletion. Also consult the separate rules for Huawei account, payment and advertising services.
Updates and security
We use HTTPS, necessary access restrictions and encrypted local storage. Changes to processing purposes, categories or methods will be reflected here and, when needed, explained again or subject to renewed consent. Questions and complaints can be sent to the existing support address.
Platform capabilities and third-party services
The app uses native HarmonyOS Account Kit (connection), IAP Kit (purchase and restoration), Ads Kit (voluntary ads and identifiers) and Location Kit (optional one-time location). App-side purposes and data are explained above.
NetworkKit, ArkData, AssetStoreKit and PerformanceAnalysisKit are system networking, storage and diagnostic capabilities, not separate embedded analytics SDKs. For Huawei's own processing, also read its official statements and the privacy information shown by device services.
Account Kit · HUAWEI ID
Provider: 华为软件技术有限公司 (Huawei Software Technologies Co., Ltd.).
After you agree to connect, an authorization code establishes a business session. The server maps the Huawei identifier to an internal account for credits and permanent access. Huawei handles sign-in and account security; this app does not receive your Huawei password. Huawei's own account, device and network processing is described in its statement.
IAP Kit · In-app purchases
Provider: 华为软件技术有限公司 (Huawei Software Technologies Co., Ltd.).
purchasing or restoring access involves products, orders, purchase credentials, status and revocation data. Our server verifies the purchase before granting access. Huawei also handles account, device, network and transaction data for payment and fraud prevention as described in its statement. The app does not receive your payment password.
Ads Kit · Petal Ads
Provider: 华为软件技术有限公司 (Huawei Software Technologies Co., Ltd.).
Your request loads a non-personalized ad with a business binding identifier for reward verification, not a phone number. The app itself does not directly read the advertising identifier (OAID).
Non-personalized ads still process data. Huawei uses device/system, basic app/usage, network/carrier/IP and sensor data for ad delivery; fraud prevention, attribution and operations may also involve ODID, OAID, device identifiers and install/uninstall events, depending on the function and permissions. Huawei's HarmonyOS ad statement explains its processing, retention and data rights. This app does not send questions, result text, notes or coordinates to the advertising platform.
Location Kit · One-time location
Platform provider: Huawei, through the HarmonyOS system location service.
Enabling True Solar Time requests approximate and precise location permissions for a low-power, one-time fix. Longitude and accuracy are used locally for time correction; raw coordinates are not stored or uploaded. Saved history retains corrected time and correction minutes locally without upload. The app does not use geocoding, reverse geocoding, geofences, activity recognition or ongoing background location. See Huawei's native location data statement; its optional geofence features are outside this app's use.
Location Kit · One-time location · Huawei privacy information