1. Data controller and contact details
Service provider: Guilin Sanyu Technology Co., Ltd. ("we", "us").
Registered address: Room 102, Unit 2, Building 2, No. 34 Putuo Road, Qixing District, Guilin, China.
Contact email: contact@tricosmos.cn.
2. Scope
This policy applies to Carryon Book, provided by Guilin Sanyu Technology Co., Ltd.: iOS 4.0.0 and similar later versions (com.lupine.carryonbook), and Android 1.0.0 and similar later versions (cn.tricosmos.carryonbook), including Google Play and website APK channels. It provides personal income, expense, category and statistical records without a business account. It also applies to HarmonyOS 1.0.0 and later similar versions (cn.tricosmos.carryonbook.hmos). See the HarmonyOS section below for its payment, advertising and permission practices.
3. Local accounts and settings
Income, expenses, amounts, dates, categories, notes, currency and appearance settings stay in app storage. We operate no server receiving accounts, send no account entries, notes, amounts or categories to advertising services, and provide no automatic cross-device sync. iOS device backups may retain app data according to Apple settings; Android automatic backup is disabled.
4. Backup, restore and export
Only when you act are selected entries or backups passed through system file pickers or share sheets to your chosen destination or recipient. Backups can optionally use a separate password with AES-GCM encryption. Unencrypted backups and CSV, Excel and PDF exports can be read by anyone obtaining the files. Safeguard the password; the app cannot recover it. Restoration replaces the entire local ledger after confirmation. Cloud drives and other recipients apply their own policies.
5. App lock and permissions
App lock uses a separate numeric password or gesture and optionally iOS Face ID, Touch ID or Android biometrics. Verification material stays in Keychain or private app storage. The app receives only system verification results, not face or fingerprint templates. App lock controls access but does not encrypt the database with the app password. No contacts, camera, microphone or precise-location permissions are requested. File access is limited to files you choose.
6. Purchases and subscriptions
Apple App Store handles iOS Pro purchases, auto-renewing subscriptions and refunds; Google Play handles VIP monthly and annual subscriptions in its edition. The app reads store-verified transactions and expiry dates to provide and restore entitlements. We receive no card details or store passwords. The website APK is ad-supported without purchases or subscriptions. Uninstalling does not cancel subscriptions; manage them in the relevant store. Apple: https://www.apple.com/legal/privacy/ ; Google: https://policies.google.com/privacy .
7. Advertising and third-party SDKs
The free version includes Google Mobile Ads SDK (AdMob) and User Messaging Platform (UMP) for app-open ads when eligible and optional rewarded ads. Google may process IP and inferred approximate location, device or app identifiers, ad displays, clicks and interactions, crashes and performance diagnostics for ad delivery, measurement, analytics and fraud prevention. Account entries are not sent as ad request parameters. Google: https://policies.google.com/privacy ; iOS SDK: https://developers.google.com/admob/ios/privacy/data-disclosure ; Android SDK: https://developers.google.com/admob/android/privacy/play-data-disclosure . Google and its infrastructure may process ad data outside your device's country or region.
8. Privacy choices and advertising consent
Applicable privacy messages depend on region and SDK assessment. Ads load only when the SDK permits. If iOS advertising tracking identifiers are requested, system ATT authorization is obtained; refusal does not affect core bookkeeping. Manage choices in Advertising Privacy Options where applicable, iOS tracking settings or Android ad privacy and ID settings. Valid Pro users receive no ad requests or displays. Rewarded ads grant temporary access for the current operation only after a completion reward, not lasting membership or backup entitlements.
9. Retention and protection
Local records remain until you delete them, clear data or uninstall. iOS uses system file protection; Android uses private app storage and its sandbox. Manage exports, external backups and system backups separately. Google handles ad-data retention and deletion under its policy; we cannot access or delete all identifiers Google holds. No storage or transfer is absolutely secure. Do not put passwords or unrelated sensitive information in notes.
10. HarmonyOS services and privacy choices
The HarmonyOS edition uses IAP Kit and Ads Kit provided by Huawei Software Technologies Co., Ltd.; it does not integrate Google advertising. Local bookkeeping does not initiate payment or advertising network requests on first use. Payment services connect only after you consent on the Pro page. Huawei processes account, purchase, subscription and entitlement records; ODID, device model, language and region, carrier and network information, SSID, IP address, payment receipts, and app information and settings for purchases, restoration, entitlement checks and fraud prevention. This app reads verified transactions and entitlements, not bank card details, payment passwords or biometric templates. Huawei IAP privacy statement: https://privacy-dre.dbankcdn.com/agreement/scope/huawei/iap/privacy-statement/cn_b0_20241022_8/default/privacy-statement-zh-cn.htm. HarmonyOS Pro offers monthly and yearly auto-renewing subscriptions and a lifetime purchase. The store confirmation controls price and billing period. Cancel renewal in Huawei Account subscription management; uninstalling does not cancel a subscription. Non-personalized ads are requested only after you enable them in privacy settings or consent before a rewarded ad. Ads Kit may process OAID, device and app information, system settings, usage, network and carrier information, IP address, WLAN status, parameters and lists, sensor data (gyroscope, accelerometer, rotation vector, magnetometer and barometer), and ad interactions for delivery, measurement, attribution, fraud prevention and maintenance. We do not request advertising tracking, location, contacts, camera or microphone permissions, or send ledger content to Huawei. Ads Kit disclosure: https://developer.huawei.com/consumer/cn/doc/harmonyos-guides-V5/description-of-personal-date-V5. Ad privacy statement: https://legal.cloud.huawei.com/terms/scope/huawei/ads/privacy-statement.htm?code=CN&language=zh-CN&branchid=0&contenttag=default. Settings—Privacy Policy lets you disable future payment connections and ad requests separately; this does not cancel subscriptions. Records, password verification material and verified entitlement receipts remain in private app storage. HarmonyOS performs biometric checks, and file access uses the picker you operate. Clearing local data removes entries and categories and disables the app lock; uninstalling removes app-private data; external copies must be deleted separately. Third-party retention, potential cross-border processing and rights channels depend on the specific service and features you use. We do not operate a ledger server.
11. Your rights and contact
View, edit, delete and export accounts in the app and choose encrypted backups. No business account needs closure. For privacy and support, email contact@tricosmos.cn. Voluntary contact details and questions are used only to respond and handle requests. Do not send complete ledgers, passwords or payment credentials. Exercise rights concerning third-party data through their privacy-policy channels too.
12. Minors and policy updates
Carryon Book is a general bookkeeping tool, not designed specifically for children. Minors should use purchases, ads and file sharing with guardian guidance. Important processing changes are announced in the app or here; effective and updated dates distinguish versions.
← Back to Carryon Book