MoYu Timer Privacy Policy

Last Updated: September 20, 2026. Effective upon publication.

This Privacy Policy is provided in English for users in the EU/EEA (GDPR) and California residents (CCPA/CPRA). A Chinese version is available for Chinese users (PIPL) and can be requested via lisongtao@appifun.com.

APPIFUN (hereinafter “we” or “us”) operates the MoYu Timer mobile application (hereinafter “the App” or “this App”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use this App. We are committed to protecting your privacy and complying with applicable data protection laws, including but not limited to the Personal Information Protection Law of the People’s Republic of China (PIPL), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and its amendment, the California Privacy Rights Act (CPRA).

By downloading, installing, or using this App, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent, we will request it separately through the App or the iOS system prompt. If you do not agree, please do not use the App. We may update this Privacy Policy from time to time and will notify you of significant changes via in-app announcements or other prominent means.

This Privacy Policy applies only to this App and does not cover information collected through other channels (e.g., our website or third-party services linked from the App).

1. Information We Collect

We process limited device, usage, and user-submitted information to provide, maintain, and improve the App, including analytics and advertising. Some core settings and timer data remain only on your device.

Categories of Personal Information Collected

Summary: We collect only the minimum information necessary to support the App’s functionality, understand usage, process feedback, and deliver advertisements. We do not request health data, biometric information, contacts, photos, microphones, or precise location. Work hours, salary or spending values, reminders, identity names, days off, and timer records are stored locally on your device or in the App Group shared with the App’s widget.

• Device Information: The App sends the Identifier for Vendor (IDFV) and operating-system type to APPIFUN for app-launch statistics. If you grant Apple’s App Tracking Transparency permission, the App may also process the Identifier for Advertisers (IDFA). Google Mobile Ads and AppsFlyer may process device identifiers, IP address, device model, operating-system version, app version, and similar technical information under their policies.
• Optional Device Security Analysis: Only after you enable “Device Security Analysis” in the App, DeviceDataIOSSDK processes and encrypts a limited diagnostic payload containing IDFV, app and system versions, device model, language and time zone, display parameters, network connection status, battery status, physical memory, processor count, thermal state, screen brightness, and protected-data availability. It sends that payload to APPIFUN’s security analysis service at de.dooxoop.online. It does not read photos, contacts, passwords, precise location, calendar event content, profile names, salary values, or timer records. Turning the feature off stops future collection by this feature.
• Usage and Interaction Data: App launches; selected profile type; timer start, pause, resume, and stop events; and ad impressions or clicks. This information supports attribution, analytics, troubleshooting, advertising measurement, and product improvement.
• Feedback: If you submit feedback, the text you enter is sent to the APPIFUN feedback service so that we can review and respond to product issues. Please do not include unnecessary sensitive personal information.
• Calendar Information: If you grant calendar permission, the App may read calendar event titles and dates to assist with displaying holidays and schedules. Calendar content is processed locally and is not uploaded to APPIFUN servers.
• Locally Stored Information: Identity names, work or study hours, salary or spending values, days off, reminders, timer records, theme, language, widget data, and Live Activity settings are stored on your device or in the App Group and are not uploaded to APPIFUN servers.
• No Sensitive Personal Information: We do not collect sensitive personal information, such as health data, biometric information, or precise geolocation, unless explicitly required and with your consent. Under CCPA/CPRA, sensitive personal information includes categories like race or religious beliefs, which we do not process.

We collect only the minimum personal information necessary to achieve the App’s purposes, adhering to PIPL’s data minimization principle. Information collection is based on your consent, obtained through in-app prompts.

How Information Is Collected

• Direct Collection: Information you submit, such as feedback, and the limited app-launch payload described above.
• Automated Collection: Through the App and SDKs used for advertising, consent management, attribution analytics, and—only when separately enabled—device security analysis.
• Third-Party Sources: Advertising networks or analytics providers may share aggregated data with us.

For PIPL (Chinese users), we ensure collection is lawful, necessary, and transparent. For GDPR (EU/EEA users), processing is based on consent or legitimate interests (e.g., ad delivery). For CCPA/CPRA (California residents), we declare that device IDs may be considered personal information and will not be “sold” without your opt-out consent.

2. How We Use Your Information

We use the collected personal information for the following purposes:

• App Functionality: To support core features, such as time tracking, salary calculations, reminders, widgets, calendar display, and Live Activities/Dynamic Island display.
• Analytics and Improvement: Device IDs and usage data are used to analyze performance, troubleshoot issues, and optimize user experience.
• Advertising: Device information (e.g., device ID and IP address) is used to provide personalized ads through third-party networks, including targeted ads based on your interactions and preferences.
• Compliance and Security: To comply with legal obligations, prevent fraud, and maintain data security.

Under PIPL, we process personal information only for specified purposes and obtain separate consent for non-essential uses (e.g., advertising). Under GDPR, the legal basis includes consent (for ads) and legitimate interests (for analytics). Under CCPA/CPRA, these are “business purposes,” and we will not use personal information for incompatible purposes without further notice.

3. Information Sharing and Disclosure

We may share your personal information with the following entities:

• Google Mobile Ads SDK (version 12.14.0): Used for ad loading, display, measurement, and fraud prevention. Google’s processing is governed by the Google Privacy Policy.
• Google User Messaging Platform (version 3.1.0): Included as a Google Mobile Ads dependency to present and manage advertising privacy and consent choices where applicable.
• AppsFlyer SDK (version 6.17.8): Used for install attribution and usage analytics. AppsFlyer may process device identifiers, IP address, app information, and app events under its Privacy Policy.
• DeviceDataIOSSDK (version 1.0.0): An optional APPIFUN device diagnostics component. When you enable Device Security Analysis, it encrypts and sends the limited device and diagnostic information described in Section 1 to APPIFUN’s security analysis service for environment diagnostics and abnormal-risk analysis.
• Lottie (version 4.5.2): Used only to render bundled animation assets locally. We do not use Lottie to upload or collect personal information.
• Affiliated Companies: Our related companies, for operational purposes.
• Legal Authorities: As required by law, subpoenas, or to protect our rights (e.g., fraud investigations).
• Business Transfers: In the event of a merger, acquisition, or asset sale.
• Google Mobile Ads: Depending on region, consent status, and device settings, Google and its advertising partners may use permitted device and ad interaction information to deliver and measure personalized or non-personalized ads.

We do not sell your personal information to unrelated third parties. However, under CCPA/CPRA, sharing device IDs with advertising networks for personalized ads may be considered “selling” or “sharing.” You may opt out through device settings or by contacting us.

For international data transfers:

• Data may be transferred outside China (for PIPL users) or the EEA (for GDPR users), such as to the United States (where Google AdMob servers are located). We use Standard Contractual Clauses (SCCs), security assessments (e.g., PIPL-required data export security assessments), or adequacy decisions to ensure data protection complies with applicable laws.
• For CCPA/CPRA, we will notify you of such transfers and ensure compliance with California privacy laws.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of device ID transmission and storage, access controls, and regular security audits. However, no system is completely secure, and we cannot guarantee absolute security. In the event of a data breach, we will notify affected users and relevant authorities via email or in-app announcements, in accordance with PIPL (within a reasonable time, typically within 3 business days), GDPR (within 72 hours), and CCPA/CPRA (if there is a risk of harm).

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined or as required by law. For example:

• APPIFUN app-launch, optional device security analysis, and feedback data: Retained only for as long as reasonably necessary for statistics, security, feedback processing, legal compliance, and dispute resolution, then deleted or anonymized where appropriate. You may request deletion by contacting us.
• Locally stored settings and timer data: Remain on your device until you delete the App, clear its data, or reset the relevant settings.
• Third-party SDK data: Retained according to Google’s and AppsFlyer’s applicable retention settings and privacy policies.

We comply with PIPL, GDPR, and CCPA/CPRA retention rules, deleting or anonymizing personal information upon request or when no longer needed.

6. Your Rights

Depending on your location, you have the following rights regarding your personal information:

• PIPL Rights (Chinese Users): Access, correction, deletion, withdrawal of consent, explanation of processing, and portability. Please exercise these rights through the contact methods provided, and we will process requests promptly, typically within 15 business days (per PIPL requirements).
• GDPR Rights (EU/EEA Users): Access, rectification, deletion (“right to be forgotten”), restriction, portability, objection (e.g., to advertising), and withdrawal of consent. We will process requests within one month, extendable to two months in complex cases.
• CCPA/CPRA Rights (California Residents): Know the personal information collected, deletion, opt-out of sale/sharing (e.g., “Do Not Sell or Share My Personal Information”), correction of inaccurate information, and restriction of sensitive personal information use. We will respond within 45 days (extendable to 90 days) and will not discriminate against you for exercising these rights.

Please exercise your rights by contacting us via email at lisongtao@appifun.com or phone at +8618986000384. Privacy complaints may also be submitted to lmjwzklsjlstcz@gmail.com. To verify your identity, we may request only the information reasonably necessary to match and process your request. If a request is denied, you may appeal through the same contact methods. You can manage tracking permission in iOS Settings under Privacy & Security > Tracking.

7. Children’s Privacy

This App is not directed to children under 16 years of age (per GDPR consent age requirements; PIPL requires 14, COPPA requires 13, with the specific age determined by applicable local law). We do not knowingly collect personal information from children. If we discover that a child’s personal information has been collected, we will delete it immediately. Parents or guardians may contact us (see Section 10, “Contact Us”) to review or delete such data.

8. Cookies, Trackers, and Advertising Technologies

This App uses SDKs for advertising, consent management, and attribution analytics. You can manage tracking permission in iOS Settings, and consent options may be presented where required by law. Under GDPR and PIPL, we request consent for non-essential tracking where required. Under CCPA/CPRA, you may opt out of sale or sharing and targeted advertising through applicable in-app or device controls, or by contacting us.

9. Changes to This Privacy Policy

We may update this policy due to operational or legal requirements. We will notify you via in-app announcements, email, or other prominent means. The updated policy takes effect upon publication.

10. Contact Us

For questions, complaints, or to exercise your rights, please contact:

Under PIPL, our personal information protection officer can be reached via the above email or phone. Under GDPR, our data protection officer can be contacted through the same methods. Under CCPA/CPRA, you may also contact the California Attorney General.

We publish App Privacy disclosures in App Store Connect describing the App’s data collection and use. You can view the available disclosures on the App’s App Store product page. For further details, please contact us.

11. Liability Statement

This Privacy Policy applies to APPIFUN, which acts as the data controller or personal information processor for this application. APPIFUN is solely responsible for the collection, use, disclosure, and protection of personal information as described in this policy and bears all related legal liabilities. For any questions or to exercise your rights, please contact APPIFUN directly (see Section 10, "Contact Us").