Lvbu WePower Privacy Policy
Jiangxi Lvbu Technology Co., Ltd. (“we,” “us,” or “our”) values the security of your personal information and privacy. Please read this Policy carefully before using the App, especially the text in bold. We process only the information necessary for the purposes listed in this Policy, following the principles of lawfulness, fairness, necessity, and good faith. If you do not agree, you may choose not to enter the App. Except for information necessary to provide a basic feature, refusing other information will not affect unrelated features.
1. Scope and Controller
This Policy applies to the mainland China version of the Lvbu WePower mobile App. It does not apply to products or services independently provided by a third party after you leave the App.
- Personal information controller: Jiangxi Lvbu Technology Co., Ltd.
- Registered/contact address: No. 106–108 Pedestrian Street, Xinjian District, Nanchang, Jiangxi, China
- Email: help@lvbu.tech
- Customer service: 4008123491
- Website: www.lvbu.tech
2. How We Collect and Use Personal Information
The information below is collected or processed only when you use the corresponding feature. Information marked “required” is needed to provide that feature. Refusal will make that feature unavailable but generally will not affect other features.
| Scenario | Information | Purpose and processing | Required? |
|---|---|---|---|
| First launch and local settings | Privacy consent status, language, measurement unit, vehicle and control settings, tutorial status, and connected-device records | Stored locally on your device to remember choices, restore settings, and avoid repeated prompts | Partly required; delete by clearing App data or uninstalling the App |
| Searching for, connecting to, and controlling a smart kit | Nearby Bluetooth device name, Bluetooth address (MAC), signal strength, and connection status; kit model, serial number, hardware/software/firmware version, operating data, settings, and fault information | Discover, identify, and connect to the kit you select; read status; send control or configuration commands; diagnose faults | Required |
| Account registration and sign-in | Email address, email verification code, nickname (if provided), and sign-in status | Create and verify an account, sign you in, and maintain session status. An unregistered email may be used to create an account after you confirm verification-code sign-in | Required for account features; local features not dependent on an account remain available without signing in |
| Device and dealer binding | Email address, kit Bluetooth address, device note, dealer code, and binding relationship | Display and manage devices associated with your account and bind/unbind a device or dealer | Required for this feature |
| Lost-device registration and unlock verification | Email address, kit Bluetooth address, App type and language, hardware/firmware/App version, and information you submit on the lost-device page | Verify lost-device status and complete registration, recovery, or unlocking | Required for this feature |
| Firmware and App updates | Kit Bluetooth address, model, hardware/software/firmware version; App package name, version, App type, system platform, and language | Check for compatible firmware or App versions, download update files, perform firmware updates, and open the relevant app store after you choose to update the App | Required for this feature |
| Troubleshooting, logs, and security | App version, system platform/version, device brand/model, App language, network status, kit Bluetooth address and versions, operation/configuration results, error stack, crash time, and diagnostic logs | Diagnose crashes and connection failures, protect service security, and improve compatibility. This normally excludes contacts, messages, photos, precise location, and similar unrelated information. Please do not include unrelated sensitive information in feedback or logs | Necessary for reliable operation; diagnostics initialize only after you agree to this Policy |
| Network communication | IP address, access time, request result, and similar server access logs | Communicate with our servers, transmit the business requests described above, prevent attacks, and troubleshoot network failures. We do not use IP addresses to build location profiles | Required for online features |
Special Notice About Location
Kit Control Data
Real-time kit status, control settings, and commands are primarily transmitted locally between your phone and kit over Bluetooth. Data necessary for a particular online function is sent to our servers only when checking versions, binding a device, verifying lost status, troubleshooting, or when you actively use another online feature. We do not create advertising profiles, make automated marketing decisions, or sell your personal information.
3. Device Permissions
After you agree to this Policy, we request a system permission only when you use the relevant feature and first provide a separate explanation of its purpose. You may refuse or later disable it under Settings > Apps > Lvbu WePower > Permissions on your phone.
| Permission | Purpose | Effect of refusal |
|---|---|---|
| Nearby devices/Bluetooth scan and connect (Android 12+) | Search for, connect to, and manage nearby smart e-bike kits | The App cannot search for, connect to, or control a kit |
| Location (Android 11 and earlier only) | Satisfy the operating system requirement for Bluetooth Low Energy scanning; not used for positioning | The App cannot search for nearby kits on these Android versions |
| Bluetooth (iOS) | Search for, connect to, and manage nearby kits | The App cannot search for, connect to, or control a kit |
Internet access, network-state access, keeping the device awake, and foreground services are normal system capabilities or permissions. They do not independently read your contacts, call records, messages, photos, microphone, camera, or calendar. The App currently does not request these unrelated sensitive permissions.
4. Third-Party Services and Software Components
The App uses the third-party open-source components below for Bluetooth, firmware updates, system information, and page display. They run locally when invoked by the App. Unless expressly stated below, the component provider does not independently receive your personal information merely because the component runs. We assess components before release and require information to be handled consistently with this Policy and applicable law.
| Component/service | Purpose | Information or permission potentially processed | Recipient/notes |
|---|---|---|---|
| FlutterBluePlus | Bluetooth Low Energy scanning, connection, and communication | Nearby Bluetooth device name, Bluetooth address, signal strength, and Bluetooth permission | Processed locally and not independently collected by the provider; documentation |
| Nordic DFU | Update kit firmware over Bluetooth | Connected-device information, firmware file, and Bluetooth connection status | Processed locally and not independently collected by the provider; documentation |
| device_info_plus, package_info_plus, and connectivity_plus | Compatibility checks, version checks, and network-state detection | Device brand/model, system platform/version, App package/version, and network connection status | Read locally; only fields necessary for a scenario in Section 2 are transmitted; documentation |
| permission_handler | Check and request Bluetooth and other system permissions | Permission status | Processed locally and not independently collected by the provider; documentation |
| Catcher2 | Capture crashes and generate diagnostic reports | Error stack, App/system version, kit Bluetooth address and versions, and related diagnostic data | Reports are sent only to the troubleshooting server of Jiangxi Lvbu Technology Co., Ltd., not to the component provider; documentation |
| WebView and system browser/app store services | Display this Policy, help, and lost-device pages; open an app-store update page after you choose to do so | IP address necessary for page requests and App/kit version parameters; an app store may process device and account information under its own rules | We process requests to our pages. The handset maker or app store independently processes information after the redirect; please review its privacy policy |
The App does not integrate the AMap Maps SDK or AMap Location SDK. If we later add a third-party SDK that independently collects personal information, or change the purpose, method, or scope of processing, we will update this Policy and obtain consent again where required by law.
5. Entrusted Processing, Sharing, Transfer, and Public Disclosure
- Entrusted processing: We may engage cloud hosting, email verification delivery, operations, or customer-support providers to process information only as necessary to provide their services. We contractually define the purpose, term, method, information types, and security duties and supervise their processing.
- Sharing: We do not provide your personal information to another controller unless we obtain your separate consent or applicable law permits it, such as to meet a legal obligation or protect life, health, or significant property interests.
- Transfer: If a merger, division, restructuring, asset transfer, or insolvency involves personal information, we will notify you of the recipient's name and contact details and require it to remain bound by this Policy. Consent will be obtained again as required if the purpose or method changes.
- Public disclosure: We generally do not publicly disclose personal information. If disclosure is necessary, we will tell you the purpose and information types and obtain separate consent unless the law provides otherwise.
6. Retention Period and Location
- Local preferences and kit settings: until you clear App data or uninstall the App.
- Account and binding information: until account cancellation, device unbinding, or the information is no longer necessary for the relevant purpose. We process a valid deletion or cancellation request within 15 working days unless retention is required by law.
- Crash, diagnostic, and server access logs: generally no longer than 180 days. They may be retained only as long as necessary for a security investigation, dispute resolution, or legal obligation.
We keep information for the shortest period necessary. Personal information collected and generated in mainland China for users there is generally stored in mainland China. If a future cross-border transfer is necessary, we will satisfy applicable security assessment, certification, or standard-contract requirements; notify you of the overseas recipient, purpose, method, information types, and how to exercise your rights; and obtain separate consent where applicable.
7. Information Security
We use access controls, authentication, transmission protection, least-privilege access, log audits, backups, and employee confidentiality controls to protect information against unauthorized access, disclosure, alteration, loss, or misuse. No internet environment can be absolutely secure. If personal information is or may be leaked, altered, or lost, we will promptly take remedial action and notify regulators and affected users as required by law.
8. Your Rights
To the extent provided by applicable law, you may access, copy, correct, supplement, or delete your personal information; withdraw consent; cancel your account; restrict or object to processing; and ask us to explain this Policy.
- Manage permissions: Disable Bluetooth/Nearby devices or the legacy Android Location permission in your phone's system settings.
- Withdraw privacy consent: Use Settings > Privacy Settings > Withdraw Privacy Policy Consent in the App. The App will stop processing based on consent and exit, except for processing required to complete deletion, auditing, or legal duties. Withdrawal does not affect the lawfulness of prior processing.
- Correction, deletion, or cancellation: Submit a request through help@lvbu.tech or customer service. State the email address used and the specific request. We may perform identity verification necessary to protect account security.
We normally respond within 15 working days, unless another legal period applies. We may lawfully refuse a request that is unreasonably repetitive, requires disproportionate technical measures, may harm another person's lawful rights, or need not be answered under applicable law, and will explain the reason.
9. Protection of Minors
The App is primarily for smart e-bike kit users with full civil capacity and is not directed to children under 14. If you are under 14, please read this Policy with your guardian and obtain guardian consent before using features that process personal information. If we learn that we collected a child's personal information without guardian consent, we will promptly delete or anonymize it.
10. Changes to This Policy
We may update this Policy when our features, processing practices, or legal obligations change. The updated Policy will be published in the App or on the relevant page. If a change materially affects your rights—for example, a new category of personal information, a changed purpose, or a new third party that independently receives data—we will notify you prominently, such as through a pop-up, and obtain consent again where required by law. We will not reduce your rights under this Policy without your express consent.
11. Contact Us
For questions, rights requests, or complaints about this Policy or our processing, contact:
- Jiangxi Lvbu Technology Co., Ltd.
- Address: No. 106–108 Pedestrian Street, Xinjian District, Nanchang, Jiangxi, China
- Email: help@lvbu.tech
- Telephone: 4008123491
After verifying your identity, we will process your request promptly and normally respond within 15 working days. If you are dissatisfied with our response, you may complain to a regulator responsible for personal information protection or bring a claim before a court with jurisdiction as permitted by law.