目录

SDK Privacy and Security Statement

In the SDK Privacy and Security Statement (hereinafter referred to as this "Statement"), Huawei Software Technologies Co., Ltd. (hereinafter referred to as "Huawei", "we", "us", or "our") clarifies privacy- and security-related information about the Analytics SDK to developers and their users (end users), including the processing of personal data, purpose of processing, permission usage, and how to obtain the latest version of the Analytics SDK. For details about the rights of end users (data subjects) and how other HMS Core services collect and use personal data, please refer to the HMS Core Privacy Statement.

If you are a developer, make sure that before accessing and using the Analytics SDK and its services, your app provides end users with information about the SDK in its privacy policy. The SDK can only be accessed after obtaining end users' consent or other legal bases.

If you are an end user and want to use an app that has integrated the Analytics SDK, first carefully read the app's privacy policy and use the app only after you fully understand and agree to the policy.

Personal Data Processing

The Analytics SDK allows developers' apps to collect, manage, and analyze data in a quick, secure, and convenient manner.

To provide developers and end users with the SDK and its services, we will collect, use, and store necessary personal data, which is listed in the table below. Developers shall notify end users of such data collection.

The collected device information may vary depending on the device, OS (Android, HarmonyOS, iOS, or macOS), OS version, and permission that the developers have declared when integrating and using the SDK.

Personal Data Type

Personal Data to Be Collected

Purpose of Use

Retention Period

App information

AAID

To collect and analyze statistics (for example, the number of active users) for different apps. A unique AAID is allocated to each app on the same device, and personal data from different apps is isolated to protect user data privacy and security.

Analytics Kit retains statistical reports and some user-level activity data, which do not automatically expire unless:

  1. The developers have specified a data retention period. When enabling Analytics Kit, the developers can select the retention period of 6 months, 9 months, or 14 months (default). When the specified retention period ends, the data will be automatically deleted.
  2. The developers have deleted products from AppGallery Connect.

userAgent

To be used by Petal Ads to perform attribution analysis of the ad conversion effects based on the user agent information.

Basic app information

To support statistical analysis based on the app package name, app version, Analytics SDK name, Analytics SDK version, and Analytics SDK platform type.

Push switch status

To obtain the status of the notification pushing function.

Device information

Advertising ID

To function as a non-permanent device identifier of personalized ads. With advertising IDs, the developers will be able to provide personalized ads for users while protecting their personal data privacy.

Users have the right to disable personalized ads and reset their advertising IDs. Once an advertising ID is reset, a new one will be generated.

Personalized ads switch

To check whether the function of recommending personalized ads to users based on their preferences is enabled. Users have the right to disable personalized ads. Once a user toggles off the personalized ads switch, they will not receive personalized ads anymore. However, they may still receive ads, but the ads will be less personalized.

IP address

  1. To obtain the country or region of the app user, which is determined based on the IP address of the network equipment that connects to the Analytics Kit server.

    To be used by Petal Ads to perform attribution analysis of the ad conversion effects.

  2. The Analytics Kit server provides data processing location policies. If you select the policy to let services match data processing locations based on the active regions of users, Huawei will determine active regions of users based on global routing rules. If no location is obtained from the operating system of a user's device, we will try to use the country/region to which the device IP address belongs as the active region of the user. For details about global routing rules, please refer to Exceptions to the Selection of Data Location.

Country/Region code

The Analytics Kit server provides data processing location policies. If you select the policy to let services match data processing locations based on the active regions of users, Huawei will determine active regions of users based on global routing rules. If the MCC country fails to be obtained or the user device does not have a SIM card, we will check the country information set in the operating system on the user device to obtain the country. For details about global routing rules, please refer to Exceptions to the Selection of Data Location.

ROM version, EMUI version, OS, OS version, device model, hardware manufacturer, device type, screen width, screen height, system language, font family, font size, font weight, font style, device nickname, total memory size, remaining memory size, total storage space, remaining storage space, remaining battery power, and charging status

To support statistical analysis and service improvement.

Network information

Network connection status

To obtain the mode in which a user device connects to the network, for example, Wi-Fi or 5G.

App usage information

Channel information

To be used for source channel analysis based on the installation source configured in the AndroidManifest.xml file.

Event information

To support statistical analysis based on event information, for example:

  • User order event: User transaction order information (order ID, purchased product name, currency, and price) provided by IAP is used to generate an IAP revenue report, helping you understand the revenue of the IAP channel.
  • Time of first app launch: timestamp when the event indicating the first app launch is reported.
  • Marketing activity participation: information about a user's marketing activity participation (for example, the marketing activity ID), which is used for marketing activity effect evaluation.

For more information, please refer to Automatically Collected Events.

Crash logs

To be used for crash analysis based on the crash logs automatically generated by the client upon an app crash.

NOTE:

This item is involved only when Crash is integrated.

If you are a developer, make sure that before accessing and using the Analytics SDK and its services, your app provides end users with the following information about the Analytics SDK in its privacy policy: SDK name, SDK provider name, categories of personal data to be collected, purposes for the use of such data, and a link to this Statement. Your app shall only allow end users to access the SDK after obtaining their consent or other legal bases. You can display the aforementioned SDK information in either of the following forms:

Required Permissions

The Analytics SDK requires the permissions listed below, which are preset in AndroidManifest.xml and do not need to be applied for separately by developers.

Permission

Description

Purpose of Use

android.permission.INTERNET

Permission to access the network.

To connect to the network.

android.permission.ACCESS_NETWORK_STATE

Permission to obtain the network connection status.

To check whether the current network connection is valid.

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

Permission to query the channel ID of HUAWEI AppGallery.

To query the channel ID of HUAWEI AppGallery.

com.google.android.gms.permission.AD_ID

Permission to obtain the Google Advertising ID.

To provide you with basic services such as marketing analysis reports and conversion event reporting related to ad placement.

Associated App Startup

Using the Analytics SDK for an app running on Huawei devices may cause HUAWEI AppGallery to start, while using it for an app running on non-Huawei devices may cause HMS Core (APK) to start. If you are a developer, inform users of this in your privacy policy, and obtain users' consent or other legal bases. You can notify users as follows:

Delayed SDK Initialization

The Analytics SDK may be initialized and collect personal data before the end user gives their consent to the app integrated with the SDK. To prevent this from happening, the SDK provides the getInstance API, which can be called to initialize the SDK only after the app has obtained the end user's consent.

Data Security

The SDK encrypts the collected data locally and reports the data to the collection server over HTTPS.

Version Updates

To provide developers with the latest and secure services, we will update the Analytics SDK from time to time. We strongly recommend developers to integrate and use the latest version of the SDK, which can be downloaded by clicking here.

Operating Mode

The Analytics SDK, a mobile SDK, is loaded to an app during app packaging. It starts when the app is launched and stops as soon as the app is closed, without performing any additional operations in the background.