This policy explains how r-Tag uses permissions, handles personal information, and protects your information security.

1. Permissions

r-Tag requests permissions only when you use the related feature. Bluetooth is used to scan, connect to, and control tag devices. On Android and iOS, notification access is requested only when you add a tag and choose to continue; it supports disconnect and find-phone alerts. Camera access is used only to take device photos. When you add a tag, the app requests When In Use location access to cache a recent location fix. Android 11 and earlier also require system location permission to scan for Bluetooth; the app requests it only after you tap Start Scanning. When a tag disconnects, the most recent fix from the past five minutes is attached to the record if available. Coordinates are stored locally; reverse geocoding to a street address may require an internet connection.

HarmonyOS version: the app requests Bluetooth access to scan, connect to, and control tags; precise and approximate location access only after you grant it on the Records page, for disconnect records; camera access only to take device photos; notification and vibration for disconnect and find-phone alerts; and network state to check Wi-Fi for WiFi Disturb. While a tag is connected, the app may request a background running task (Bluetooth interaction and audio playback) to keep the connection and play the find-phone ringtone in the background.

2. Data stored on this device

The app stores device names, Bluetooth identifiers, ringtone indexes, device images, connection records, disconnect records, and your settings locally. This data supports device display, connection, alerts, and history. We do not operate our own server to collect or store this data.

3. Photos

Photos you take or select through the system photo picker are used only to identify devices and are stored in local app data or the system photo library. The system picker handles photo selection; r-Tag does not request permission to read the entire photo library for this purpose.

On HarmonyOS, photos are saved to local app data and then written to the system gallery through the system's short-term gallery write authorization. Within the authorized period, subsequent photos can be saved without a separate save confirmation. The app does not read the entire gallery.

4. Third-party SDKs and map services

The Android app integrates map SDKs for map display and address lookup. These SDKs process information needed to provide the service only when you open a location record, view a saved location, or use address lookup. Map services may process coordinates in the request, IP address, device and app information, and service logs under their own policies. Location records remain on this device and are not sent to r-Tag servers.

(1) AMap Map SDK: Developer, Beijing AutoNavi Tuxiang Technology Co., Ltd.; purpose, display, zoom, and mark saved location records; information, coordinates in the location record you view and device, network, and app information needed by the map service. Privacy policy: https://lbs.amap.com/pages/privacy/
(2) Lightweight Map SDK: Developer, Beijing AutoNavi Tuxiang Technology Co., Ltd.; purpose, provide lightweight map components and map display; information, coordinates in the location record you view and device, network, and app information needed by the map service. Privacy policy: https://lbs.amap.com/pages/privacy/
(3) Google Maps SDK for Android: Developer, Google LLC; purpose, display maps where configured and available; information, coordinates required for map requests and device and network information. Privacy policy: https://policies.google.com/privacy

The iOS app uses Apple MapKit and system geocoding for maps and addresses. Apple Maps Privacy: https://www.apple.com/legal/privacy/data/en/apple-maps/

The HarmonyOS app uses Huawei Map Kit to display saved locations and the system location and geocoding service to resolve addresses. These services may process the requested coordinates, IP address, device and app information, and service logs under Huawei's privacy policy: https://consumer.huawei.com/cn/privacy/privacy-policy/. Location records remain on the device and are not uploaded to r-Tag servers.

When you open external navigation, the destination is shared with the map app you choose.

5. Information security

We use measures appropriate to the service to protect local data and device operations: the system app sandbox and access controls restrict app data to this app; iOS Data Protection and the HarmonyOS app sandbox protect local files; device records, photos, and settings are not sent over the network to r-Tag servers; permissions and SDK use are limited to feature needs; and code review, dependency checks, and pre-release security checks help reduce malicious code and unauthorized access risks. We continue to review permission calls and SDK use and will respond to security incidents as required by law.

6. Your choices

You can disable camera, Bluetooth, location, or notification access in system settings, and delete devices, clear records, or change Do Not Disturb and vibration settings in the app. Disabling a permission may affect its related feature but does not prevent use of features that do not depend on it. If you deny camera access, you can choose to open system settings; the app does not open settings automatically.

7. Contact and complaints

For questions, comments, or complaints about personal information handling, email [email protected]. We will review and respond as soon as reasonably possible.

8. Children

If you are a minor, use the app and read this policy with guidance from a guardian.

9. Policy updates

When this policy changes, we will update the date at the top and notify you in the app or settings page when the changes are significant.