Privacy Policy

Important Notice: This app ("Vending Machine Management Console") is a professional management tool designed specifically for vending machine operators to remotely monitor equipment status, manage product inventory, handle transaction exceptions, and perform remote maintenance operations. Please read and fully understand the entire content of this Privacy Policy. By tapping "Agree" or starting to use this app, you indicate that you have fully understood and accepted all terms of this agreement.

I. Information Collection and Use

The core function of this app is to help operators efficiently manage their vending machine network, including real-time monitoring of machine status, restocking reminders, fault diagnosis, and more. To enable these features, we will request relevant device permissions after obtaining your authorization.

Certain permissions (such as reading media files) are used to support product image uploads and content management. If you decline authorization, the corresponding upload features will be limited. Additionally, this app collects basic identity information of admins (name, email, user ID) and vending machine transaction financial data as required for operations. For detailed types, please refer to the App Store Privacy Label Disclosure section above.

II. App Store Privacy Label Data Type Descriptions

To fully comply with the mandatory requirements of Apple App Store for data security and transparency, this app explicitly declares the collection of the following data types, which are directly linked to your admin identity:

• Personal Information (name, email, user ID) — Used for identity verification and operations management
• Financial Information (transaction records, payment info) — Used for operations reconciliation and settlement
• Photos and Videos (product images, fault images) — Used for content management and remote diagnosis
• Files and Documents (reports, logs, firmware) — Used for data export and device configuration
• Device Identifiers (IMEI/Android ID/OAID/MAC, etc.) — Used for device binding and network diagnostics
• Email — Used for important notifications and alerts

The specific purpose, collection method, and retention period for each data type are explained individually below to ensure full compliance.

III. Device Identifier Collection (Based on uni-app Framework)

This app is developed based on uni-app (DCloud 5+ App engine). To ensure stable basic runtime environment, optimize the management console experience, and perform necessary compatibility analysis, the uni-app framework automatically collects the following device identifier information in the background:

• IMEI / Android ID / DEVICE_ID: Used to uniquely identify the management terminal device, prevent duplicate logins across multiple devices, and verify the binding relationship with vending machines.
• OAID (Open Anonymous Device Identifier): Used for device identification under compliance conditions, supporting statistical analysis (such as response time for managing vending machines on different phone models).
• SIM Card IMSI: Read only when detecting SIM card status, used for network switching optimization (such as helping select a carrier network with stronger signal for issuing commands).
• MAC Address, BSSID: Assists in locating Wi-Fi network quality, used for diagnosing connection stability between vending machines and the backend.

The collection of the above information is used solely for device binding, network diagnostics, anomaly localization, and operations audit. It is not used for any personalized advertising or user profiling. You can disable access to some device identifiers through your phone system settings (the exact path varies by phone model), but this may affect the accuracy of device authentication or network diagnostics.

IV. Permission Usage Descriptions

To perform specific vending machine management tasks, this app may need to access certain permissions on your device. The specific permission names, trigger scenarios, and purposes are as follows:

V. Other Methods of Information Collection

1. Device and Network Information: Automatically collects device model, operating system version, IP address, Wi-Fi signal strength, etc., of the management terminal to establish a trusted device inventory.
2. Operation Logs: Records operation commands you issue to vending machines (such as restarting the vending machine, setting temperature, unlocking the pickup port) and operation times for operations audit and fault tracing.
3. Location Information: After obtaining your authorization, the app may collect the GPS location of the management terminal to associate with the geographic distribution of nearby vending machines, enabling quick localization of faulty machines (you can disable this permission at any time).
4. Device Identifiers (Supplementary Description): As described in Section III, the uni-app framework may collect OAID, IMEI, Android ID, MAC address, etc., for device identification and network environment diagnostics. These identifiers are only processed locally or encrypted and uploaded to your designated server, and are not shared with third-party advertising platforms.
5. Files and Documents Collection Description: When you export operations reports, restock lists, or device diagnostic logs, related files may be temporarily stored locally on the device or encrypted and uploaded to the designated server, used solely for operations analysis and archiving.

VI. Third-Party SDKs and Data Sharing

1. No Advertising SDKs: This app does not integrate any advertising platforms or analytics third-party SDKs.
2. DCloud SDK (uni-app Runtime Library): This app is developed based on uni-app. Its basic engine may collect device identifier information (see Section III for details) to ensure stable framework operation and provide standard API capabilities. DCloud does not use the above data for its own commercial purposes. For details, please refer to the DCloud Privacy Policy.
3. Data Storage: All vending machine transaction data (including transaction records and user payment information in financial information), operations logs, and product inventory information are encrypted and uploaded to the operator's designated server (private deployment or encrypted cloud service). The app developer has no right to view specific business data.
4. Necessary Service Providers: If using push services (such as Firebase Cloud Messaging or Apple Push Notification Service) to send alert notifications to admins, the SDK may collect device identifiers. Please refer to the respective SDK privacy policies for details.
5. Special Note on Financial Information: This app will not share any transaction records or user payment information with unauthorized third parties. All financial data is used solely for internal reconciliation, settlement, and dispute resolution by the operator, and strictly follows relevant data protection regulations.

VII. Data Storage and Security

1. Storage Location: Data is stored on servers designated by the operator (usually internal data centers or compliant cloud service providers), in compliance with relevant data protection laws and regulations.
2. Security Measures: All communications use TLS encryption. Management terminals must pass dynamic token or certificate authentication to access the backend system. For sensitive data such as financial information and device identifiers, additional field-level encryption is implemented.
3. Data Retention:
   • Operation logs are retained for 90 days;
   • Device binding information is retained until the vending machine is removed from the operations network;
   • Transaction records are kept for at least 3 years according to the operator's internal financial policy. User payment information is retained in a desensitized form for the reconciliation period.

VIII. Your Rights

This app is an internal management tool for vending machine operators. Your personal information (name, email, user ID) and operational activities are protected by the operator's internal data governance policy. You have the following rights:

• Access and Correction: You have the right to access personal information and operation records associated with your employee ID, and apply for correction if there are errors.
• Deletion of Data: You have the right to request deletion of non-essential operation records or financial details associated with your employee ID (except where restricted by financial law retention periods).
• Export Data: You have the right to export transaction details or operations reports related to you.
• Account Deletion: To delete your management console account, please contact your operations team administrator, or send an email to wangfei1@shengmakeji.com to submit a deletion request. We will complete account deletion and associated data cleanup within 15 business days (except for data required to be retained by laws and regulations).

You may also send an email to wangfei1@shengmakeji.com to submit any data subject requests, and we will assist in processing within 15 business days.

IX. Protection of Minors

This app is intended for use only by adult employees or authorized partners of vending machine operators. It is not directed at general consumers or minors. We do not knowingly collect personal information from anyone under 18 years of age. If such information is inadvertently collected, please contact us to delete it.

X. Changes to the Privacy Policy

This policy may be revised due to feature updates, regulatory requirements, or App Store policy changes. Material changes will be notified through in-app pop-ups or internal operator notifications. Continued use constitutes acceptance of the new version. This version supplements disclosures in response to App Store privacy label requirements, and subsequent adjustments will update the version date.

XI. Contact Us

If you have any questions about this Privacy Policy, need to exercise your data rights (access, correction, deletion of personal/financial information, account deletion), or have any suggestions regarding data collection types, please contact:

Hebei Shengma Electronic Technology Co., Ltd.
Contact Email: wangfei1@shengmakeji.com
Address: 10th Floor, Building 2, Jiacun Xincun B District, Yuhua District, Shijiazhuang
Zip Code: 050000