Welcome to LecoLauncher ("the Product"), developed and operated by Zhenxiong Leco Software Studio ("we", "us"). We understand the importance of your personal information and in-vehicle data. This Privacy Policy explains how we collect, use, store, and protect your information, as well as your legal rights.
[Special Notice & Language Disclaimer] This Privacy Policy is originally drafted in Chinese and translated into English for international users' convenience. In the event of any conflict, ambiguity, or discrepancy between the English version and the Chinese version, the Chinese version shall prevail. By agreeing or using the Product, you acknowledge that you have read, understood, and agreed to all contents of this Privacy Policy.
1. How We Collect and Use Your Personal Information
We collect and use only the necessary information that you actively provide or generate during use for the following purposes:
1. Account Registration and Login
- Email Registration/Login: We collect your email address and verification code to create an account, verify logins, and deliver service notifications.
- Third-Party Login (Google Login, WeChat QR Scan): Upon your consent, we obtain your public profile information (avatar, nickname, unique OpenID/UID) for quick login and account binding.
2. Device and Hardware Information (Uploaded to Cloud)
- To provide device authorization, adaptive screen resolution, and system compatibility diagnostics, we collect your car Android ID, MAC address, device UUID, car brand/model, screen resolution, processor/chipset model, and OS version.
3. Driving, Trip Auxiliary & Cloud Synchronization Data
- Real-time Speed & Dashboard Display: To display dynamic speed on the dashboard, the Product reads real-time speed data via in-car USB serial communication (OBD/CAN box) or GPS sensors.
- Basic Location Data (GPS): We require your precise GPS location to: ① dynamically calculate vehicle speed; ② retrieve local real-time weather forecasts; ③ link with navigation apps.
- [Special Service] Trip Recording & Trajectory Cloud Sync (Explicit Opt-In Required):
- Explicit Opt-in Consent: Trip cloud synchronization is disabled by default. The Product will only collect and upload trip data when you manually turn on the "Upload/Sync Trip Record" toggle in desktop settings. Manually enabling this toggle constitutes your explicit understanding and consent to this Privacy Policy and the trip data collection terms. If disabled, no trip data will ever be uploaded to the cloud.
- Data Types Collected: Upon activation, we collect your driving speed, GPS coordinates (latitude and longitude traces), and physical departure/waypoint/destination addresses.
- Purpose: Data is exclusively used to provide you with trip route playback, driving trajectory review, and mileage/speed statistical analytics.
- High-Standard Encryption AES Encrypted: To ensure the strictest level of privacy, all uploaded GPS coordinates and physical address records are encrypted at rest using industry-standard AES encryption algorithms, strictly preventing unauthorized data interception or leakage.
4. Order and Payment Information
- When you request technical support, customized themes, or donations, we support transactions via WeChat Pay and PayPal. We only record order ID, transaction amount, timestamp, and purchased item to confirm fulfillment. We NEVER collect or store sensitive payment credentials such as credit card numbers or payment passwords.
2. Android Sensitive Permissions Application and Usage
To ensure core launcher operations and trip logging, the Product requests the following permissions when triggered. You can manage or revoke them in your car system settings at any time:
| Permission | API / Constant | Purpose & Scenario |
|---|---|---|
| Query Installed Apps | QUERY_ALL_PACKAGES / GET_INSTALLED_PACKAGES |
Core Launcher Essential Permission. Used to read, display, categorize, and launch all third-party applications (e.g., navigation, music) installed on your head unit. |
| Precise Location | ACCESS_FINE_LOCATIONACCESS_COARSE_LOCATION |
Used to obtain weather info, calculate GPS speed, and record trajectory coordinates when trip recording is enabled. |
| Storage / File Read & Write | READ/WRITE_EXTERNAL_STORAGE |
Used to download and extract themes, cache wallpapers, load custom backgrounds, and cache offline trip data locally. |
| Overlay / Draw Over Apps | SYSTEM_ALERT_WINDOW |
Used to maintain persistent desktop floating widgets, mini control bars, and dynamic lyrics over other applications. |
| Bluetooth | BLUETOOTH / BLUETOOTH_CONNECT |
Used to connect to the vehicle's Bluetooth module and display phone Bluetooth music track titles and artist names in real time. |
3. Third-Party SDKs and Data Sharing Directory
To maintain product stability, we integrate certain third-party SDKs that have undergone strict security assessments:
| SDK / Library | Provider | Data / Permissions Collected | Purpose |
|---|---|---|---|
Tencent Location SDKTencentLocationSdk |
Tencent Technology Co., Ltd. | Location data (coordinates, WiFi info), device identifier | Provides in-car positioning, weather matching, and route geocoding services. |
Google Play Authplay-services-auth |
Google LLC | Basic Google profile, network status | Enables one-tap quick authentication for international users. |
Car USB Serial Libraryusb-serial-for-android |
Open Source (mik3y) | USB hardware peripheral access | Communicates with vehicle OBD/CAN bus protocol boxes to read real-time speedometer data. |
Network & MultimediaOkHttp, Glide, Media3 ExoPlayer |
Square / Google / Open Source | Network access, local storage read/write | Ensures stable theme delivery, efficient wallpaper loading, and video playback. |
4. Data Storage and Security Protection
- Storage Location: All user personal data and uploaded trip records collected in Mainland China are strictly stored on secure servers located within Mainland China and will never be transferred abroad.
- 90-Day Retention Policy & Automated Physical Deletion:
- 90-Day Full Retention: Uploaded detailed trip trajectory records (including GPS coordinate traces and specific addresses) are retained for a default of 90 days from creation, allowing you to replay map routes during this window.
- Automatic Physical Deletion After 90 Days: When trip records exceed 90 days, our system automatically initiates irreversible physical deletion of all GPS coordinates and physical address records. Map playback will no longer be available for these trips.
- Statistical Summary Archiving: After trajectory purging, the system permanently retains only non-sensitive summary aggregates (total mileage, average speed, and trip duration) for your long-term vehicle usage tracking.
- Security Measures: We employ end-to-end SSL/TLS encryption; store sensitive trip fields with AES symmetrical encryption; and utilize robust firewall permissions to guarantee your travel records remain free from breach or tampering.
5. Your Rights (Access, Correction, Account & Data Deletion)
You have full control over your personal data and driving logs:
- Disable Trip Upload at Any Time: You can turn off the "Upload Trip Record" toggle in desktop settings at any moment, stopping immediate data collection and syncing.
- Delete Account & Clear Data: You may navigate to [Settings] > [Account Security] > [Delete Account] or [Clear Data] on the head unit. This permanently removes local caches, cloud account bindings, and all historical cloud trip logs.
- Revoke Permissions: You can revoke location, storage, or overlay permissions via your car system's Permission Manager.
6. Protection of Minors
This Product is intended for licensed motor vehicle drivers. We do not knowingly collect personal data from minors. If a guardian discovers that a minor has provided information without consent, please contact us for prompt verification and deletion.
7. Policy Updates and Revisions
We may update this Privacy Policy periodically. For significant changes, we will notify you via in-app pop-ups or desktop announcements upon startup.
8. Contact Us
If you have any questions, feedback, or complaints regarding this Privacy Policy or personal data protection, please contact us via:
- Developer Entity: Zhenxiong Leco Software Studio
- Customer Support / Privacy Email: lecoauto@foxmail.com
We typically respond within 15 business days after verifying your identity.