WayEcho · Privacy Policy

1. Scope and contact

This policy describes V1.5.2 of WayEcho and its official website. The developer and personal-information controller is Xiaohao Zhang; the legal contact region is Shanghai, China. Contact support@yiluhuikan.me. The current App supports place search, route editing, local route history and map viewing without an account. Earlier-version processing remains subject to the applicable policy and law. Reading this policy does not replace consent required for optional diagnostics.

The following server-verification processing applies to V1.5.3 and later versions that enable it; existing versions retain their actual functionality. Apple processes Pro payments; we do not receive your Apple Account email or full payment-card details. For membership verification, the App uses StoreKit and sends signed application/transaction proofs and App Attest device proofs to our Aliyun service. We independently verify them with Apple and retain pseudonymous purchase-account and device associations, transaction and original transaction identifiers, product, price/currency/offer, expiry, renewal, refund/revocation and verification/audit status to provide and restore membership, prevent misuse and handle refunds. No separate developer login is required. Subscription verification does not upload your routes or videos. Apple also sends signed purchase, renewal and refund notifications to our server to update orders and membership status; these notifications do not contain your routes or videos.

2. Routes stored on your device

Place names, country/city names, coordinates, node order and route preferences are stored in the App container. Saving, reordering or deleting a route does not upload a private route to a developer account or publish it. There is no developer-operated route cloud backup. System device backups may create separate copies under your system settings.

Flight videos are rendered on your device and are not uploaded to us. Only when you explicitly save a generated video do we request add-only access to Apple Photos. We do not read your existing photos or videos. You can decline that permission; previewing flights still works.

This random device-local UUID is stored in Keychain. Viewing it does not enable analytics. After explicit diagnostics consent, it is used for statistics deduplication and troubleshooting; it is not a login account and is not synced through iCloud. Clearing Keychain or resetting the device may change it.

The device-local Keychain identifier is also used to authenticate necessary content and membership requests. This service authentication is separate from optional analytics consent.

3. Search, maps and network requests

Search runs only when you press Search. Matching cities are returned from a bundled multilingual catalog; unmatched queries use Apple MapKit, which may process search text, coordinates and the displayed region. Native map tiles also use Apple services. The App does not request your device location for this route-building workflow. Developer resource/catalog requests can expose IP address, request time, resource path and ordinary HTTP headers needed for delivery and security. They are not an upload of your saved route.

4. Optional analytics and diagnostics

Umeng+ U-App and U-APM start only after explicit consent. They can process device/SDK identifiers, the App-generated UUID, device and OS/App versions, IP/network information and approximate region inferred from IP, sessions and basic interactions, crash logs, hangs, memory, launch/page performance and request URLs/status/timings. U-APM includes the Woodpecker/Yueying diagnostic component. See Third-party Data Collection in Settings for providers, detailed data categories and their policy links. Declining does not disable core features. Reconsidering a prior decline is available there; contact support for withdrawal or deletion assistance.

After startup and map loading, you may allow or refuse Umeng analytics and diagnostics. Umeng initializes only if you agree. Your choice does not affect route planning, flight or video saving. Event fields cover feature exposure and button actions such as route creation/switching and video saving, never route names, search text or coordinates. Apple Search Ads and SKAdNetwork attribution remain disabled.

5. Website and support

Website hosting providers may process IP addresses and ordinary access/security logs to deliver pages. Support processes the email address, issue description and attachments you choose to send. Provide only what is needed for your request; avoid unrelated identity documents, home addresses or private route details. We do not sell personal information or share it for cross-context behavioral advertising.

6. Storage, deletion and your choices

Deleting a route removes its route-history record; clearing downloaded data removes downloaded resources and keeps saved routes. Uninstalling removes the App container, but does not guarantee deletion of device backups or Keychain identifiers. Server-side logs and support records are kept only as necessary for the disclosed purpose and applicable obligations. Contact support for access, correction, deletion, restriction, objection, portability where applicable or consent-withdrawal requests. We verify only what is needed, respond within applicable legal periods and explain any lawful retention limits. Withdrawing consent does not affect earlier lawful processing or lead to unfair treatment.

Copies of a generated video saved to Photos or shared to another app are separate from route history and downloaded resources. Delete those copies in their destination; clearing App downloads does not delete them.

Uninstalling the App, clearing downloads or canceling auto-renewal does not automatically delete Apple transactions or our membership verification records. Contact support@yiluhuikan.me for requests about server-held subscription data. Necessary transaction, refund and security evidence may be retained for the disclosed purpose and applicable obligations; we explain any retention limits when handling a request.

7. Security and minors

We use access controls and encrypted transport appropriate to the risks; no storage or network method is completely secure. We respond to security incidents and give notices as required by law. Keep your device and private route information secure. The service is not directed at children under fourteen; minors should use it with required guardian guidance and consent. Guardians can contact support about unlawful processing of a child’s information; stronger applicable protections remain effective.

8. International processing and regional rights

Providers operate infrastructure in their own service regions; our Shanghai contact address does not mean all data is stored there. Transfers requiring safeguards or separate consent will follow applicable law. You can ask support about processing arrangements. Mandatory local privacy rights remain effective, including applicable California rights to know, access, delete, correct, opt out of sale or cross-context advertising sharing, limit certain sensitive-information uses and receive non-discriminatory treatment. We do not sell personal information or conduct that advertising sharing. Authorized agents may submit requests subject to necessary verification.

9. Updates, contact and applicable law

Changes will be dated; significant changes will be notified and new consent obtained when required. Contact support@yiluhuikan.me for privacy requests or complaints. Subject to mandatory privacy and consumer rights in your place of residence, this policy is governed by mainland Chinese law. First contact support@yiluhuikan.me to seek resolution. Unresolved disputes may be brought before a competent people's court in Shanghai, China to the extent legally permitted. Mandatory jurisdiction rules and non-excludable local remedies prevail.

Service and provider

Umeng+ U-App analytics and U-APM performance monitoring SDKs. Providers: 友盟同欣（北京）科技有限公司 and 北京锐讯灵通科技有限公司.

Information collected

Depending on enabled SDK functions, data may include device/SDK identifiers such as IDFV, the App UUID, device model, OS/App versions, IP/network information and approximate region inferred from IP, launches/sessions, crashes and diagnostic logs, hangs, memory, startup/page performance, and request URLs, statuses and timings. Network diagnostics may contain request-related information. The App can create a random device-local UUID on demand and store it in Keychain; viewing it does not enable reporting. Only after explicit diagnostics consent is that UUID sent for Umeng statistics deduplication and log troubleshooting. It is not a login account or hardware serial number and is not synced through iCloud.

After startup and map loading, you may allow or refuse Umeng analytics and diagnostics. Umeng initializes only if you agree. Your choice does not affect route planning, flight or video saving. Event fields cover feature exposure and button actions such as route creation/switching and video saving, never route names, search text or coordinates. Apple Search Ads and SKAdNetwork attribution remain disabled.

Crash monitoring partner

Umeng discloses the Woodpecker SDK (covered by the Yueying SDK privacy policy), provided by 广州市动景计算机科技有限公司, as a crash analysis component. It supports crash log backup, crash and compatibility analysis, and performance monitoring. Relevant information includes device identifiers and model, system and app versions, network information, timestamps and crash or diagnostic logs. See its privacy policy below.