Chính sách bảo mật LecoAuto

Welcome to LecoLauncher ("the Product"), developed and operated by Zhenxiong Leco Software Studio ("we", "us"). We understand the importance of your personal information and in-vehicle data. This Privacy Policy explains how we collect, use, store, and protect your information, as well as your legal rights.

1. How We Collect and Use Your Personal Information

We collect and use only the necessary information that you actively provide or generate during use for the following purposes:

1. Account Registration and Login

• Email Registration/Login: We collect your email address and verification code to create an account, verify logins, and deliver service notifications.
• Third-Party Login (Google Login, WeChat QR Scan): Upon your consent, we obtain your public profile information (avatar, nickname, unique OpenID/UID) for quick login and account binding.

2. Device and Hardware Information (Uploaded to Cloud)

• To provide device authorization, adaptive screen resolution, and system compatibility diagnostics, we collect your car Android ID, MAC address, device UUID, car brand/model, screen resolution, processor/chipset model, and OS version.

3. Driving, Trip Auxiliary & Cloud Synchronization Data

• Real-time Speed & Dashboard Display: To display dynamic speed on the dashboard, the Product reads real-time speed data via in-car USB serial communication (OBD/CAN box) or GPS sensors.
• Basic Location Data (GPS): We require your precise GPS location to: ① dynamically calculate vehicle speed; ② retrieve local real-time weather forecasts; ③ link with navigation apps.
• [Special Service] Trip Recording & Trajectory Cloud Sync (Explicit Opt-In Required):
  • Explicit Opt-in Consent: Trip cloud synchronization is disabled by default. The Product will only collect and upload trip data when you manually turn on the "Upload/Sync Trip Record" toggle in desktop settings. Manually enabling this toggle constitutes your explicit understanding and consent to this Privacy Policy and the trip data collection terms. If disabled, no trip data will ever be uploaded to the cloud.
  • Data Types Collected: Upon activation, we collect your driving speed, GPS coordinates (latitude and longitude traces), and physical departure/waypoint/destination addresses.
  • Purpose: Data is exclusively used to provide you with trip route playback, driving trajectory review, and mileage/speed statistical analytics.
  • High-Standard Encryption AES Encrypted: To ensure the strictest level of privacy, all uploaded GPS coordinates and physical address records are encrypted at rest using industry-standard AES encryption algorithms, strictly preventing unauthorized data interception or leakage.

4. Order and Payment Information

• When you request technical support, customized themes, or donations, we support transactions via WeChat Pay and PayPal. We only record order ID, transaction amount, timestamp, and purchased item to confirm fulfillment. We NEVER collect or store sensitive payment credentials such as credit card numbers or payment passwords.

2. Android Sensitive Permissions Application and Usage

To ensure core launcher operations and trip logging, the Product requests the following permissions when triggered. You can manage or revoke them in your car system settings at any time:

3. Third-Party SDKs and Data Sharing Directory

To maintain product stability, we integrate certain third-party SDKs that have undergone strict security assessments:

4. Data Storage and Security Protection

• Storage Location: All user personal data and uploaded trip records collected in Mainland China are strictly stored on secure servers located within Mainland China and will never be transferred abroad.
• 90-Day Retention Policy & Automated Physical Deletion:
  • 90-Day Full Retention: Uploaded detailed trip trajectory records (including GPS coordinate traces and specific addresses) are retained for a default of 90 days from creation, allowing you to replay map routes during this window.
  • Automatic Physical Deletion After 90 Days: When trip records exceed 90 days, our system automatically initiates irreversible physical deletion of all GPS coordinates and physical address records. Map playback will no longer be available for these trips.
  • Statistical Summary Archiving: After trajectory purging, the system permanently retains only non-sensitive summary aggregates (total mileage, average speed, and trip duration) for your long-term vehicle usage tracking.
• Security Measures: We employ end-to-end SSL/TLS encryption; store sensitive trip fields with AES symmetrical encryption; and utilize robust firewall permissions to guarantee your travel records remain free from breach or tampering.

5. Your Rights (Access, Correction, Account & Data Deletion)

You have full control over your personal data and driving logs:

• Disable Trip Upload at Any Time: You can turn off the "Upload Trip Record" toggle in desktop settings at any moment, stopping immediate data collection and syncing.
• Delete Account & Clear Data: You may navigate to [Settings] > [Account Security] > [Delete Account] or [Clear Data] on the head unit. This permanently removes local caches, cloud account bindings, and all historical cloud trip logs.
• Revoke Permissions: You can revoke location, storage, or overlay permissions via your car system's Permission Manager.

6. Protection of Minors

This Product is intended for licensed motor vehicle drivers. We do not knowingly collect personal data from minors. If a guardian discovers that a minor has provided information without consent, please contact us for prompt verification and deletion.

7. Policy Updates and Revisions

We may update this Privacy Policy periodically. For significant changes, we will notify you via in-app pop-ups or desktop announcements upon startup.

8. Contact Us

If you have any questions, feedback, or complaints regarding this Privacy Policy or personal data protection, please contact us via:

• Developer Entity: Zhenxiong Leco Software Studio
• Customer Support / Privacy Email: lecoauto@foxmail.com

We typically respond within 15 business days after verifying your identity.