This List is based on the current source code, packaging configuration, and server-side storage flow of SoloBox 1.0.1. A third party processes necessary information only when the corresponding feature is enabled or invoked.
This English version is provided for convenience. If it differs from the Chinese original, the Chinese version will prevail to the extent permitted by applicable law.
Pinata, some public IPFS gateways, and Google Fonts may be operated by entities or servers outside China. If a file is not encrypted before upload, a third party that obtains its CID may access it through a public gateway. Where personal information is provided overseas, we will obtain your separate consent as required by law.
1. Third-Party SDKs and Components
| SDK/component and entity | Purpose and trigger | Information that may be processed | Method | Policy |
|---|---|---|---|---|
| DCloud App Engine (uni-app/5+) Digital Paradise (Beijing) Network Technology Co., Ltd. (数字天堂（北京）网络技术有限公司) |
App runtime, cross-platform rendering, performance, and troubleshooting; when the app starts and runs. | Device brand and model, CPU, screen parameters, system name and version, network type, IP address, User Agent, language, time zone, anonymous device identifiers, app name/package/version/AppId, SDK information, error stack, launch time, and memory usage. | Automatically processed by the SDK | DCloud App Engine Privacy Policy |
| Getui Message Push SDK for Android (com.igexin.sdk) Developer: Daily Interactive Co., Ltd. (每日互动股份有限公司) |
Generate and recognize push-target and device identifiers (CID/GID), establish and maintain a push channel, deliver service notifications accurately, measure delivery, and troubleshoot failures; during SDK initialization and push-channel operation after privacy consent. | Device platform, manufacturer, brand, model, system version, OAID, AndroidID, Wi-Fi connection information (including SSID, the Wi-Fi network name, and BSSID, the MAC address of the Wi-Fi access point), carrier, DHCP, IP address, app information, and Getui client identifier. Access is limited by the platform, SDK version, and system restrictions. | The SDK automatically invokes system interfaces and processes information needed for push registration and message delivery through its service interfaces. | Getui Message Push SDK Privacy Policy |
| Mobile Intelligent Terminal Supplementary Device Identification System Unified Calling SDK (com.bun.miitmdid) Developer: China Academy of Information and Communications Technology (中国信息通信研究院) |
Invoke the supplementary device-identification system to obtain OAID; enabled with the push SDK according to actual configuration. | Device manufacturer, model, system version, OAID, app package name, and other information necessary to invoke the device-identification interface, as further described in the SDK privacy policy. | Automatically processed by the SDK | SDK Privacy Policy |
| DCloud functional modules Barcode, Camera, Fingerprint, FaceID, VideoPlayer |
QR scanning, photography, system biometrics, and local video playback; only when you use the corresponding feature. | Camera image or scan result, media files selected by you, and biometric success/failure status returned by the system. Fingerprint and facial templates are stored by the operating system and are not obtained by the app. | Local system interfaces and DCloud runtime modules | DCloud Module Compliance Information |
| Axios, hash-wasm, and proprietary UTS modules | Send requests to the SoloBox API, calculate content digests locally, select files, generate thumbnails, provide secure storage, and switch app icons. | Axios transmits request data only to endpoints designated by business code. hash-wasm and proprietary modules primarily process data locally and do not independently send personal information to their maintainers. | Business invocation or local processing | No independent data sharing; governed by the SoloBox Privacy Policy |
Android system interfaces invoked by this app
Android device and Wi-Fi information read by this app: After you agree to this Privacy Policy, when the app runs and queries device or network status, its embedded runtime components automatically invoke Android system interfaces to read the device MAC address, Wi-Fi network name (SSID), and Wi-Fi connection state. The MAC address supports device identification and runtime compatibility checks. The SSID and Wi-Fi connection state identify the current network connection, check network availability, and help troubleshoot upload, download, and connection failures. A MAC address identifies a network interface; an SSID is the name of the current Wi-Fi network. Access is limited by the operating-system version and system restrictions; fields that the system does not permit are not obtained. This describes the app invoking system interfaces and does not mean these fields are submitted as DCloud engine analytics data.
2. Third-Party Services and Network Resources
| Recipient/service | Purpose and trigger | Information provided or generated | May be overseas? | Policy or website |
|---|---|---|---|---|
| Pinata Technologies, Inc. Pinata IPFS storage and gateway |
Synchronize, pin, and retrieve files and thumbnails; after upload or when content is read through a Pinata gateway. | Uploaded files and thumbnails, file name, MIME type, CID/content digest, IP address, User Agent, request time, and gateway logs. | Yes | Pinata Privacy Policy / Terms |
| Public IPFS gateway operators dweb.link, w3s.link, nftstorage.link, ipfs.io |
Attempt to retrieve a file or thumbnail when the preferred gateway is unavailable. | Requested CID, IP address, User Agent, and network logs. If a file is not encrypted, the gateway processes the requested file content. | Yes | IPFS Legal and the rules displayed by each gateway |
| Google LLC Google Fonts |
Load font-style resources on certain pages. | IP address, User Agent, request time, font-resource request, and potentially the referring page. | Yes | Google Privacy Policy |
3. System Platform Capabilities
Apple iOS, Android/HarmonyOS, and device manufacturers provide system capabilities such as photo libraries, file pickers, camera, biometrics, system notifications, Keychain, and Keystore. The platform processes device-side data under its privacy rules. SoloBox receives only the result of biometric verification and does not obtain fingerprint or facial templates stored by the system.
4. Changes to This List
If we integrate a new third party or materially change a third party's processing purpose, method, or information type, we will update this List and fulfill applicable notice and consent obligations. You may contact support@solobox.com.cn with questions or objections.