Coday Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information when you use Coday applications and services.

Effective Date: November 7, 2026

1. Overview

We highly values your privacy protection. This privacy policy applies to Coday applications, websites, and related services. By using our services, you agree to this policy.

We are committed to complying with the Personal Information Protection Law, Cybersecurity Law, Data Security Law and other Chinese laws and regulations, as well as the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA) and other relevant laws.

2. Information Collection

To provide you with Coday services, we may collect the following types of personal information. We strictly follow the principle of 'minimum necessity' and only collect information necessary to achieve product functionality.

2.1 Information You Actively Provide

During your use of Coday services, you may actively provide us with the following information:

  • Account information: username, email address, phone number, password, etc.
  • Profile information: avatar, nickname, gender, age, region, etc.
  • Content information: content you create, upload, or publish when using our services
  • Payment information: payment-related information for subscription services (processed through third-party payment platforms)

2.2 Automatically Collected Information

To improve service quality and user experience, we may automatically collect the following technical information:

  • Device information: device model, operating system and version, device identifier, device serial number (SN), screen resolution
  • Network information: IP address, network type, network quality data
  • Application information: app version, crash logs, performance data, feature usage statistics
  • Location information: precise or approximate location information collected with your explicit authorization
  • Cookies and similar technologies: used to identify users, remember preferences, analyze usage patterns

2.3 Device Permissions and Sensors

Coday only uses the following device permissions or sensors when you use the corresponding feature, and does not use them continuously in the background. You can turn them off in system settings at any time; doing so only affects the corresponding feature.

  • Accelerometer: while the stock-level card for supplies is on screen and the app is in the foreground, Coday reads the tilt direction and shaking of your phone so the liquid in the card flows as you tilt it. Reading stops as soon as the card leaves the screen or the app goes to the background. The readings are used only on your device to draw this animation in real time; they are not stored, uploaded, or shared with any third party.
  • Camera: used only when you take a photo for an item's picture or use Scan barcode. A photo you take becomes that item's picture; when scanning a barcode, the camera image is recognized on your device in real time and is not photographed, recorded, stored or uploaded. The recognized barcode number is sent to third-party product databases (Open Food Facts, ApiZero) to look up the product name, picture and a reference price; the request carries only the barcode number, not your account or device information.
  • Microphone and speech recognition: used only when you use Voice entry, and only while the entry panel is open. Your speech is turned into text by the speech recognition service built into your phone's system, whose handling of speech is governed by that provider's privacy policy; Coday does not store or upload the recording, and only sends the recognized text to our server, where an AI model picks out the item name, price and date.
  • Photos: used only when you pick an item picture from your photo library; only the pictures you select are read.
  • Notifications and reminders: send the item reminders you set (expiry, renewal, restocking, etc.) at the times you choose, and reschedule them after the device restarts.
  • Clipboard: text on the clipboard is read only when you tap Paste, to fill in the redemption code, link or other content you copied.
  • Vibration: haptic feedback during interactions.
  • Network: features that need an internet connection, such as sign-in, cloud sync and membership purchases.

3. Information Usage

We use your information for the following purposes:

  • Provide, operate, and maintain the core functionality of Coday
  • Create and manage user accounts
  • Provide you with customer support and technical services
  • Analyze usage patterns to improve product functionality and user experience
  • Detect, prevent, and respond to security threats and fraudulent activities
  • Comply with applicable laws, regulations, and regulatory requirements
  • Process payments and manage subscription services

4. Information Sharing

陈晓明 commits not to sell, trade, or rent your personal information to third parties. We only share your information in the following limited circumstances based on legitimate purposes:

  • With your explicit consent, we may share your information with third parties. You have the right to withdraw consent at any time.
  • We may share necessary information with the following types of service providers:
  • Comply with applicable laws and regulations
  • To detect, prevent, and respond to fraud, security threats, or illegal activities, and to protect the safety of users and the public, we may need to share necessary information.
  • In the event of business transfers such as mergers, acquisitions, asset sales, or bankruptcy, your information may be transferred as part of the assets. We will notify you before the transfer and ensure that your information continues to be protected by privacy policies after the transfer.

5. Data Security

Protecting the security of your personal information is our important responsibility. We adopt technical and administrative measures that comply with industry standards to protect your information:

  • Data transmission and storage encryption
  • Strict access control and authentication
  • Network security protection
  • Regular security assessments
  • Employee security training

6. Data Retention

We adopt different retention periods based on information types:

  • Account information: Retained during account validity, deleted within 30 days after cancellation
  • Usage data: Typically retained for 12-24 months
  • Transaction records: Retained for 5-7 years according to tax law requirements
  • Legal compliance: Extended retention periods according to regulatory requirements

7. Your Privacy Rights

According to applicable laws, you have the following rights:

  • Right to know: Understand how we process your information
  • Right of access: Access and copy your personal information
  • Right of correction: Correct and supplement incorrect or incomplete information
  • Right of deletion: Request deletion of your personal information
  • Right to withdraw consent: Withdraw consent for specific processing activities
  • Right to restrict processing: Request restriction of processing your information
  • Right to data portability: Obtain a copy of your information
  • Right to complain: File complaints with regulatory authorities

8. Children's Privacy Protection

Coday is primarily designed for adult users. We do not knowingly collect personal information from children under 14 (under 13 in the United States). If children are involved, we will obtain guardian consent.

9. Cross-Border Data Transfer

To provide services, your information may need to be transferred between different countries. We take appropriate security measures and comply with the "Data Export Security Assessment Measures" and other relevant regulations.

10. Third-Party Services and Integration

Coday may integrate third-party services (such as social media login, payment processing, etc.). These services have their own privacy policies, and we are not responsible for their privacy practices.

10.1 Third-Party SDK Information

To provide you with a better service experience, Coday integrates third-party SDKs that may collect personal information. We strictly comply with relevant laws and regulations such as the Personal Information Protection Law, and clearly inform you of the purpose, method, and scope of personal information processing by third-party SDKs.

SDK NameDeveloperPurposeUsage ScenarioPermission DescriptionPersonal Information Collection Types and MethodsPrivacy Policy LinkFrequency
Google Mobile Ads SDK (AdMob)Google LLCProvide advertising display services and optimize ad delivery effectivenessDisplay advertising content within the applicationNetwork access permission, device information reading permissionDevice identifiers (IMEI, Android ID, device MAC address), device model, operating system version, screen resolution, network type, IP address, sensor list, installed applications list, application usage, location information (if authorized)https://policies.google.com/privacyWhen the application starts and when ads are displayed
JPush SDK (JPush, JCore)Shenzhen Hexun Huagu Information Technology Co., Ltd. (Aurora Mobile)Provide the push channel for wishlist price-drop and target-price alertsAfter you turn on a price-drop or target-price alert for a wish, price alert notifications are pushed to your device (iOS and the mainland China Android version)Android: network access (INTERNET), network state (ACCESS_NETWORK_STATE), notifications (POST_NOTIFICATIONS), JPush custom permission (JPUSH_MESSAGE); iOS: network access, with notification permission requested by Coday from the system. Phone state, location, Wi-Fi state, installed-apps and storage permissions are not requestedDevice identifiers (Android: Android ID, OAID, GAID, UAID, AAID, Boot ID; the iOS version uses the SDK build without IDFA and does not collect IDFA), device hardware information (model, screen resolution, manufacturer, product name, storage), operating system information (version, name, language), network information (network type, carrier, IP address, DHCP, Wi-Fi state), push logs; collected by the SDK. We have disabled JPush's optional data collection and its extended features (user segmentation, geofencing, app self-start, link regulator / associated start, user insights, app active-time statistics), so IMEI, IMSI, MAC address, location, Bluetooth and installed-app information are not collectedhttps://www.jiguang.cn/license/privacyInitialized only after you are signed in, use the Simplified or Traditional Chinese interface, and turn on at least one price-drop or target-price alert (on Android, only after you accept this Privacy Policy); after that it connects on each app launch. Push stops when you turn off all alerts, sign out or switch to another language, and the SDK is initialized once at that point to close the push channel
Huawei Push Kit (HMS Push SDK)Huawei Software Technologies Co., Ltd.Deliver wishlist price alerts through the system push channel on Huawei devices (integrated via JPush vendor channel plugin)Receive notifications on Huawei devices with the mainland China Android version after you turn on price-drop or target-price alertsNetwork access, network state; Huawei launcher badge (com.huawei.android.launcher.permission.CHANGE_BADGE); app-defined permissions (PROCESS_PUSH_MSG, PUSH_PROVIDER)Basic app information, device model, operating system information, system settings, network information, carrier information, SSID, IP address; system settings, carrier information, SSID and IP address are processed only on the device and are not uploaded to Huawei servers; collected by the SDKhttps://developer.huawei.com/consumer/cn/doc/HMSCore-Guides/sdk-data-security-0000001050042177Initialized together with JPush; requests a push token on Huawei devices after you turn on an alert, and never requests one automatically before you accept this Privacy Policy
Xiaomi Push SDKBeijing Xiaomi Mobile Software Co., Ltd.Deliver wishlist price alerts through the system push channel on Xiaomi devices (integrated via JPush vendor channel plugin)Receive notifications on Xiaomi devices with the mainland China Android version after you turn on price-drop or target-price alertsNetwork access, network state, notifications, vibration (VIBRATE); app-defined permission (MIPUSH_RECEIVE)App information (package name, version, running state); device information (manufacturer, model, memory, OS version, Xiaomi Push SDK version, device region (country or region), SIM carrier name, current network type, Wi-Fi state; network type and SIM carrier name are read only on the device); notification settings (whether notifications are blocked, whether lock-screen pop-ups are allowed, etc.); message creation, delivery and click times, with message content stored for 30 days; collected by the SDKhttps://dev.mi.com/console/doc/detail?pId=1822Initialized together with JPush; registers on Xiaomi devices after you turn on an alert
OPPO Push SDK (OPPO PUSH)Guangdong Huantai Technology Co., Ltd.Deliver wishlist price alerts through the system push channel on OPPO, OnePlus, realme and other supported devices (integrated via JPush vendor channel plugin)Receive notifications on devices that support OPPO Push with the mainland China Android version after you turn on price-drop or target-price alertsPermissions to receive push messages (com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE, com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE)RegisterId, appKey, appSecret, MCS app package name, app package name, app version, push SDK version; collected by the SDKhttps://open.oppomobile.com/documentation/page/info?id=11228Initialized together with JPush; registers on supported devices after you turn on an alert
vivo Push SDKVivo Mobile Communication Co., Ltd.Deliver wishlist price alerts through the system push channel on vivo and iQOO devices, and measure push SDK API call success rates (integrated via JPush vendor channel plugin)Receive notifications on vivo devices with the mainland China Android version after you turn on price-drop or target-price alertsvivo launcher badge permissions (com.vivo.notification.permission.BADGE_ICON, com.vivo.abe.permission.launcher.notification.num)Basic app information (appid, appkey, package name, app version, push SDK version), in-app device identifier (vivo push regId), device hardware information (device type), basic system information (system type and version); collected by the SDKhttps://developers.vivo.com/doc/d/23807c559e844cbeb06049ee69e71833Initialized together with JPush; registers on vivo devices after you turn on an alert
HarmonyOS Push Kit (system capability)Huawei Software Technologies Co., Ltd.Provide the system push channel for wishlist price-drop and target-price alerts in the HarmonyOS versionThe HarmonyOS version obtains a push token and receives notifications after you turn on a price-drop or target-price alert, and deletes the token when the conditions no longer applyNo additional sensitive permissions; whether notifications are shown follows your system notification settingsDevice identifier (Push Token), basic app information, AAID (anonymous application identifier, used only to request the Push Token and not stored), app messages (cached for redelivery while the device is offline); processed by the system push servicehttps://developer.huawei.com/consumer/cn/doc/harmonyos-guides/push-personal-dataA push token is requested only after you are signed in, have accepted this Privacy Policy, use the Simplified or Traditional Chinese interface, and turn on at least one price-drop or target-price alert; the token is deleted when you turn off all alerts, sign out or switch languages

10.2 Application Auto-Start and Associated Start

To ensure the normal operation of application functions, third-party SDKs integrated by Coday may trigger auto-start or associated start. The following describes auto-start behaviors introduced by third-party SDKs:

Auto-Start Behavior Introduced by AdMob SDK

Google Mobile Ads SDK (AdMob), as a third-party advertising SDK, internally uses the AndroidX WorkManager component to manage background tasks. This component listens to the system time setting broadcast (android.intent.action.TIME_SET) to reschedule background tasks to ensure the normal operation of advertising services. This broadcast receiver is introduced by the AdMob SDK and is not used by the Coday application itself.

Broadcast Receiver: androidx.work.impl.background.systemalarm.RescheduleReceiver (introduced by AdMob SDK)

Purpose: AdMob SDK uses this broadcast receiver to reschedule background work tasks to ensure advertising services can continue to run normally after system time changes

Auto-Start and Associated Start Introduced by Push Services

Coday uses remote push only for wishlist price-drop and target-price alerts. The push SDKs are initialized only after you are signed in, use the Simplified or Traditional Chinese interface, and turn on at least one price-drop or target-price alert; on Android and HarmonyOS devices, you must also have accepted this Privacy Policy. Before that, the push services do not register the device or obtain a push identifier. The Google Play version contains no push SDK.

JPush: to keep the push connection alive and handle incoming pushes, the JPush SDK runs its push service (cn.jpush.android.service.PushService, DataProvider) in a separate process (:pushcore) and uses AlarmReceiver and SchedulerReceiver to maintain the connection on a schedule; once you turn on an alert, these components may be started in the background. We have disabled JPush's app self-start and link regulator (associated start) features, and removed the JPush component that initializes on every app process start (InitProvider).

Phone vendor push channels: on Huawei, Xiaomi, OPPO and vivo devices, price alerts are delivered through the vendor's system push service. When a push arrives or you tap a notification, the system push service may wake Coday's related components to receive, display or handle the notification, and open the relevant page in Coday after you tap it. These components include Xiaomi Push's XMPushService, XMJobService, PingReceiver (running in the :pushservice process), PushMessageHandler and NotificationClickedActivity; OPPO Push's DataMessageCallbackService, CompatibleDataMessageCallbackService and DataMessageReceivingService; vivo Push's CommandClientService; Huawei Push's PushReceiver, PushMsgReceiver, HmsMsgService (running in the :pushservice process) and PushProvider; and JPush's notification-click relay JNotifyActivity.

com.huawei.hms.aaid.InitProvider and com.huawei.agconnect.core.provider.AGConnectInitializeProvider, which ship with the Huawei Push SDK, are created with the app process. We have disabled Huawei Push auto-initialization, so no push token is requested before you turn on an alert.

The HarmonyOS version uses the system push service (Push Kit); notifications are delivered by the system and Coday runs no resident push process.

When you turn off all price-drop and target-price alerts, sign out or switch to another language, we stop push and unregister this device, and no further price alerts are sent to it.

We promise that all auto-start and associated start behaviors are based on application scenarios necessary for services, and will not perform unnecessary auto-starts without your consent.

11. Privacy Policy Changes

We may update this privacy policy. Significant changes will be notified to you through in-app notifications, emails, and other means. Updated policies will take effect 30 days after publication.

12. Regional-Specific Rights

California Resident Rights (CCPA/CPRA)

California residents have rights including the right to know, right of access, right of deletion, right to opt-out, right of correction, and right to limit use of sensitive information.

EU Resident Rights (GDPR)

EU residents have rights including transparency, right of access, right of correction, right of deletion, right to restrict processing, right to data portability, and right to object.

Mainland China Resident Rights

According to the Personal Information Protection Law, mainland China residents have rights including the right to know and decide, right to access and copy, right to correct and supplement, right of deletion, right to withdraw consent, and right to restrict processing.

13. Contact Us

If you have any questions about this privacy policy or need to exercise your rights, please contact us through the following methods:

Contact Information

Privacy Protection Email: saviourdog@gmail.com

Customer Support: saviourdog@gmail.com

Product Name: Coday

Response Time

General Inquiries: Response within 7 business days

Rights Exercise Requests: Processed within 15 business days

Emergency Security Issues: Response within 24 hours

Regulatory Complaints

If you are dissatisfied with our privacy protection practices, you can file complaints with relevant regulatory agencies:

Mainland China:

Cyberspace Administration of China

Provincial and Municipal Cyberspace Administrations

California, USA:

California Attorney General

Privacy Rights Clearinghouse

Last Updated: November 7, 2026

© 2026 陈晓明. All rights reserved.