Account connection and sessions
At first launch, the system displays the standardized privacy statement hosted by Huawei. Accept to enter the app; declining exits it. The same statement is available from the app’s About page.
After consent to the system privacy statement, the app automatically uses the current HUAWEI ID to establish a business session. Account Kit supplies an authorization code; the server exchanges tokens and maps the identifier to an internal account without storing a plain-text UnionID. The app does not receive Huawei passwords or request phone numbers, contacts or addresses. Session tokens stay in secure device storage and do not sync across devices.
Credits and ad rewards
The server stores internal-account credit events, calculation reservations and settlements to sync credits and prevent duplicate deductions or rewards, together with necessary account mappings, ad-reward records, usage events and fault codes. It does not receive questions, result text, history text or notes.
Ads Kit is triggered only by your choice. After confirmation of ad completion and the reward request, the server records credits and checks the ad placement, event identifier, completion facts and necessary anti-abuse signals to prevent duplicate rewards. OAID is not a permanent account identifier.
Permissions and optional processing
Network access is used for account sessions, credit sync, calculation settlement, ad-reward confirmation, fixed-field product events and diagnostics. First use requires consent to the system privacy statement; new results and credit sync require an account and a connection.
Location is requested only when you enable True Solar Time. Calculation remains local; coordinates are neither stored nor uploaded and location is not tracked continuously. You can revoke location permission in system app settings.
Non-personalized ads are requested only when you choose to watch. OAID is processed when the service needs it and system permission is granted. You may decline without affecting calculations using available credits or local history. Huawei advertising data processing is explained below.
Local records and diagnostics
History and notes are encrypted on the device, up to 100 records, and can be deleted in the app. Standard time, corrected time, the True Solar Time setting and correction minutes stay local without upload. Raw coordinates are not persistently stored. Correction minutes combined with a date may indicate approximate longitude. Deleting local history does not delete server credit records.
The separate encrypted local diagnostic queue holds up to 100 entries for no more than 7 days: component, operation, fixed error code, time, app/API version and optional request ID. Queued entries are sent after connectivity and account access resume. Server diagnostics expire after 90 days and are removed by daily cleanup.
Diagnostics do not contain raw errors, stacks, account identifiers, OAID, location, questions, notes or result text. Failure to send does not affect credits or history.
Product events and security logs
There is no separate third-party Analytics SDK. Allowlisted product events and fixed-code diagnostics go to our own service for feature statistics and troubleshooting, without questions, notes or result text. Product events cannot add credits or replace ad-reward confirmation.
Necessary app, security and access logs are retained for 183 days, including request IDs, routes, status, duration, fixed fault codes and irreversible references. They do not contain passwords, tokens, full callback parameters or sensitive content.
Storage location and backups
Our online database and routine application backups are stored on the same instance in Ulanqab, Inner Mongolia, China. This does not describe data stored independently by Huawei; see each Huawei service statement.
Routine backups rotate daily and are retained for about 14 days, up to about 16 days depending on the cleanup cycle. Access is restricted to fault recovery. Before restoring service from a backup, previously completed deletion or restriction requests are reapplied.
Retention periods
Product events expire 365 days after occurrence and server diagnostics after 90 days. Daily cleanup may add up to one day. Business sessions are valid for 30 days; expired or revoked sessions are retained for a further 7 days before daily cleanup. Security and access logs rotate daily and are kept for about 183 days.
Account mappings and available credits are retained while providing the relevant service, supporting continued use and credit sync. Verified deletion or account-closure requests remove deletable business data. Necessary security records are retained only for storage and protection; we explain the specific basis, period and scope.
Access, correction, deletion and account closure
Email the existing support address support@bonnwl.com, specifying HarmonyOS and the scope of your request. We complete verification and processing within 15 working days of receiving the request and explain the result.
When handling a request, support may ask you to generate a privacy-request verification code via About → Privacy and data → Privacy information → Generate verification code (关于→隐私与数据→隐私说明→生成核验码). It is valid for 7 days and confirms that the request belongs to you. Share it only with official support; generating it does not submit a deletion request. If you cannot sign in, contact support for alternative verification. We do not ask for passwords, session tokens, identity documents.
Deleting local history, withdrawing consent and closing business data are separate actions. We do not promise one-tap erasure of all server records. Before handling a request, we explain its effects on credits, future service and any records that must remain.
Withdrawing consent
About → Privacy and data → Withdraw consent (关于→隐私与数据→撤回同意) attempts to revoke the current server session and reports a failure if online revocation cannot complete. After withdrawal, account, product-event and diagnostic requests stop on this device, and its session and queued diagnostics are cleared. This does not sign out of the system HUAWEI ID or automatically delete local history or server credits. Server-data deletion requires a separate request.
On the next launch after withdrawal, the system requests consent again; declining exits the app. Location permissions and system advertising privacy settings can be managed separately in device settings.
Minors
Online services are not offered to children under 14. Users aged 14–17 need guardian consent; the initial explanation states this. The app does not collect dates of birth or identity documents for this purpose.
If a child's information has been collected in error, a guardian can contact support@bonnwl.com for verification and deletion. Also consult the separate rules for Huawei account and advertising services.
Updates and security
We use HTTPS, necessary access restrictions and encrypted local storage. Changes to processing purposes, categories or methods will be reflected here and, when needed, explained again or subject to renewed consent. Questions and complaints can be sent to the existing support address.
Platform capabilities and third-party services
The app uses native HarmonyOS Account Kit for system account access, Ads Kit for user-selected ads and identifiers, and Location Kit for optional one-time location. Their purposes and app-side processing are described above.
NetworkKit, ArkData, AssetStoreKit and PerformanceAnalysisKit are system networking, storage and diagnostic capabilities, not separate embedded analytics SDKs. For Huawei's own processing, also read its official statements and the privacy information shown by device services.
Account Kit · HUAWEI ID
Provider: 华为软件技术有限公司 (Huawei Software Technologies Co., Ltd.).
After consent to the system privacy statement, the app automatically uses the current HUAWEI ID to establish a business session. Account Kit supplies an authorization code; the server exchanges tokens and maps the identifier to an internal account without storing a plain-text UnionID. The app does not receive Huawei passwords or request phone numbers, contacts or addresses. Session tokens stay in secure device storage and do not sync across devices.
Ads Kit · Petal Ads
Provider: 华为软件技术有限公司 (Huawei Software Technologies Co., Ltd.).
Your request loads a non-personalized ad with a business binding identifier for reward verification, not a phone number. Advertising identifiers (OAID) are processed only when you choose an ad, the service needs them and system permission is granted. You can decline permission without affecting basic functionality.
Non-personalized ads still process data. Huawei uses device/system, basic app/usage, network/carrier/IP and sensor data for ad delivery; fraud prevention, attribution and operations may also involve ODID, OAID, device identifiers and install/uninstall events, depending on the function and permissions. Huawei's HarmonyOS ad statement explains its processing, retention and data rights. This app does not send questions, result text, notes or coordinates to the advertising platform.
Location Kit · One-time location
Platform provider: Huawei, through the HarmonyOS system location service.
Enabling True Solar Time requests approximate and precise location permissions for a low-power, one-time fix. Longitude and accuracy are used locally for time correction; raw coordinates are not stored or uploaded. Saved history retains corrected time and correction minutes locally without upload. The app does not use geocoding, reverse geocoding, geofences, activity recognition or ongoing background location. See Huawei's native location data statement; its optional geofence features are outside this app's use.
Location Kit · One-time location · Huawei privacy information