Privacy Policy

Effective Date: 09/01/2026

Last Updated: 09/01/2026

VAVA Music Player - MP3 Player, Volume Booster (hereinafter referred to as “we”, “us”, or “our”) prioritizes the protection of all users’ personal privacy and data security. This comprehensive Privacy Policy is applicable to all Android applications developed, published, and operated by us on the Google Play platform, including but not limited to volume booster, music player, and Mp3 cutter - ringtone maker applications (collectively referred to as “our Applications”).

This document elaborates on our full data operation rules, covering the collection, legitimate usage, authorized sharing, storage retention, and security protection of user data generated during your use of our Applications. It should be noted that each individual Application under our developer account only invokes partial functions, device permissions, and third-party toolkits stated in this policy based on its own service attributes. The actual data processing behaviors are subject to the specific functions you use and the configuration of each Application. If any Application provides independent in-app privacy reminders or supplementary notices, such contents shall be deemed as supplementary terms of this Privacy Policy and shall be read in conjunction herewith.

1. Automatically Collected Device and Usage Data

During your access and use of our Applications, we and our authorized third-party service providers will automatically collect non-user-initiated device information and service usage data to ensure the normal operation of product functions, optimize user experience, and maintain service security. The collected data scope includes your device model, operating system type and version, system language, regional and country settings, network service provider information, network connection mode (WiFi/cellular network), public IP address, unique device identifiers, official Android advertising identifiers (when device permission is granted), application operation records, user session logs, program crash data, system diagnostic information, and product performance monitoring data.

All the above data is processed exclusively for legitimate operational purposes: supporting the normal execution of Application core functions, conducting user behavior analysis, optimizing product performance and stability, delivering and evaluating advertising services, identifying and blocking fraudulent traffic behaviors, and safeguarding the overall security of our service system.

2. User-Active Submitted Information

Our Applications do not force users to submit any personal information. Partial functional modules may support voluntary user input and content submission, including user feedback and suggestions, customized audio editing content, and other user-generated data. We only process such actively submitted information when it is necessary to realize the corresponding service functions.

For Applications that do not equip with relevant interactive and submission functions, the data category specified in this clause will not apply, and we will not collect any active submission information from users correspondingly.

3. Application Device Permissions & Usage Purposes

To realize core audio processing, volume adjustment, music playback and ringtone production functions, our Applications will apply for necessary device permissions. All permissions are only invoked for corresponding service scenarios, and we will never abuse or overuse device access rights. The detailed permission types and functional purposes are specified as follows:

Storage, Photos & Videos Permission: Used to scan, read, identify and process local audio, video and image files on your device, support local music import, audio cutting, ringtone saving, and media file preview functions, as well as store user customized application settings.

Notification Permission: Responsible for pushing application running status reminders, functional update notifications, and service prompt messages, ensuring users can timely obtain core service feedback of the Applications.

Network Access Permission: Applied to realize online resource loading, advertising content display, product version update detection, and anonymous data statistics functions, supporting the normal network interaction of the Applications.

READ_PHONE_STATE Permission: We invoke this permission to obtain device identification information such as IMEI for anonymous user verification and application operation data analysis, so as to optimize product experience and fix operational bugs. We solemnly promise that we will not store, leak or use such identification information for any unauthorized purposes.

Other Auxiliary Permissions: Including system display, device operation and other basic permissions, which are used to adapt device screen display, ensure normal touch operation and stable running of application functions, and no additional user personal data will be collected through these permissions.

4. Local Data Processing, Transmission and Storage Rules

Most core service functions of our Applications (such as local audio editing, music playback, volume adjustment) adopt full local processing mode. All user media files, edited content and personalized settings are only stored locally on your mobile device, and will not be uploaded to our remote servers or third-party platforms in any form.

Only for functional scenarios such as anonymous product data statistics, online advertising delivery and version update detection, the necessary anonymous device data and usage logs will be encrypted and transmitted to our authorized service servers and qualified third-party service providers. All transmitted data will be stripped of real user identity information to the maximum extent. Users can completely clear local application data by clearing the application cache or uninstalling the software, so as to delete all local processed data.

5. Legal Usage Scope of User Data

All user data collected and processed by us will only be used within the legitimate scope announced in this Privacy Policy, and we will never expand the usage scope without user authorization. The specific usage scenarios are as follows: First, maintain and optimize the core functions of all Applications under our account, ensure stable service operation and continuously upgrade user experience; Second, conduct anonymous data statistics and behavioral analysis to locate product defects, repair program crashes and technical faults, and improve product performance; Third, provide standardized user consultation and after-sales support services to respond to user feedback and questions in a timely manner; Fourth, deliver safe and compliant advertising content, monitor advertising delivery effects, control advertising display frequency, and identify and prevent advertising fraud and invalid traffic; Fifth, perform security risk detection to protect the normal operation of our service system and avoid network security threats; Sixth, abide by the mandatory provisions of applicable national and regional laws and regulations, and complete legal data compliance obligations.

6. Integrated Third-Party SDKs and Service Specifications

To enrich product functions, optimize advertising monetization effects and improve product operation quality, our Applications integrate a variety of professional third-party SDK tools for data statistics, performance monitoring and compliant advertising services. It is clarified that not all SDKs are integrated in every Application, and the actual access situation depends on the functional configuration of each product. All third-party SDK providers process user data in strict accordance with their independent privacy policies, and we will strictly supervise their data compliance behaviors. The detailed introduction of all integrated SDKs is as follows:

Umeng Common SDK: Serving as the basic statistical tool for product operation, it is mainly used for application initialization configuration, user usage behavior statistics, product operation quality monitoring, crash and ANR fault collection and analysis. It may process anonymous device identifiers, device operating information, network status data and application usage logs. Its privacy policy: https://www.umeng.com/page/policy

Google AdMob & Google User Messaging Platform (UMP): AdMob is used for multi-form advertising monetization (including banner advertising, interstitial advertising, reward video advertising, native advertising and open-screen advertising), which processes IP addresses, anonymous device information, advertising identifiers and ad interaction data to realize accurate ad delivery, effect measurement, frequency control and fraud prevention. UMP is specially used to manage user privacy authorization options, meet GDPR, CCPA and other global privacy compliance requirements, and record user's advertising permission selection records. Its privacy policy: https://policies.google.com/privacy

Unity Ads: A professional advertising service SDK, which processes user IP addresses, device basic information, advertising identifiers and application interaction data, and is used for compliant advertising delivery, advertising effect optimization, traffic fraud identification and advertising data statistics. Its privacy policy: https://unity.com/legal/game-player-and-app-user-privacy-policy

AppLovin: Used for advertising resource matching and advertising mediation service, it can obtain device network information, anonymous advertising identifiers and ad click interaction data, so as to realize intelligent advertising selection, delivery optimization and data effect analysis. Its privacy policy: https://legal.applovin.com/privacy/

InMobi SDK: Provides professional mobile advertising platform services, collects anonymous device information, network data, ad interaction records and approximate regional location information (derived from IP addresses), and is used for personalized advertising delivery, advertising campaign measurement and traffic security detection. Its privacy policy: https://www.inmobi.com/privacy-policy

Media.net SDK: Focuses on contextual and personalized advertising services, processes user IP addresses, device browser information, advertising identifiers and page interaction data, and is applied to advertising delivery optimization, fraud detection and business data analysis. Its privacy policy: https://www.media.net/privacy-policy/

Mintegral SDK: Provides integrated advertising and data analysis services, covering device identification information, network status, application usage behavior and ad interaction data, which is used for accurate advertising targeting, campaign effect attribution and product service optimization. Its privacy policy: https://www.mintegral.com/en/privacy

Other Compliant Third-Party Advertising SDKs: Our Applications also integrate multiple industry-standard advertising service tools including AdColony, Chocolate Platform, ENGINE Media Exchange, Equativ, Fluct, Improve Digital, Index Exchange, Liftoff Monetize, Meta Audience Network, Mobfox, OneTag Exchange, OpenX, Pangle, PubMatic, Magnite, Sharethrough, Smaato, Sonobi, Tapjoy, Triplelift, UnrulyX, Verve Group and Yieldmo. All these SDKs are used exclusively for compliant advertising delivery, traffic optimization and data statistical analysis, and their specific data processing rules are subject to their official released privacy policies.

We will timely update this Privacy Policy once any third-party SDK access or data processing rules are adjusted, to ensure full transparency of user data processing.

7. Personalized Advertising Service Rules

Partial functions of our Applications will display compliant advertising content provided by the above-mentioned third-party advertising partners. All advertising service providers may obtain anonymous user data such as public IP addresses, Android advertising identifiers, device basic information and ad interaction records, to complete advertising delivery, effect evaluation, repeated delivery restriction and invalid traffic filtering. The approximate geographic location of users inferred from IP addresses will only be used for regional advertising matching, and no precise user location data will be collected or stored.

In response to the requirements of global privacy laws and regulations such as GDPR, we rely on Google UMP tool to provide independent privacy authorization options for users. Users can freely turn off personalized advertising functions through the privacy setting entrance in the Applications, or modify the advertising tracking permission through the system privacy settings of Android devices to refuse personalized ad delivery.

8. Data Sharing and Transaction Specifications

We strictly abide by global privacy laws and regulations, and will never sell any user personal data for commercial profit. We only authorize third-party service providers (including advertising service providers, data statistics institutions and technical maintenance vendors) to obtain necessary anonymous data when it is necessary to provide normal services, so that they can complete their entrusted service functions.

Under the definition of partial regional privacy laws, the authorized data sharing for advertising services may be deemed as "cross-context behavioral advertising sharing". For such scenarios, we have reserved legal opt-out channels for users to protect their independent data rights. Except for the service providers specified in this policy, user active authorization requirements and legal mandatory disclosure scenarios, we will not disclose any user data to irrelevant third parties without legitimate reasons.

9. User Data Security Protection Measures

We have formulated standardized technical and organizational security protection mechanisms for user data, adopting encrypted data transmission protocols, strict server access control rules, real-time data monitoring systems and other security measures to prevent unauthorized access, disclosure, tampering and loss of user data.

At the same time, we clearly stipulate data security obligations for all cooperative third-party service providers through legal agreements, requiring them to comply with global data compliance standards. It is hereby clarified that no network transmission and electronic storage technology can achieve absolute security. We will try our best to protect user data security, but do not guarantee absolute invulnerability of data security.

10. Data Retention and User Deletion Rights

We only retain user data within the reasonable time required to realize the service purposes specified in this policy, and the retention cycle is subject to the needs of product operation, legal compliance, dispute resolution and security risk prevention. The data retention rules of third-party SDKs are subject to their independent privacy policies.

Users have the right to apply for access to, correction and deletion of their personal data processed by us. You can submit relevant rights applications by sending emails to our official privacy contact mailbox. For local data generated during the use of the Applications, users can completely delete it by clearing the application cache or uninstalling the software. We will retain partial data as required by law only for anti-fraud, security protection and legal compliance purposes, and will not use it for other commercial purposes.

11. Subscription Service Rules

Individual Applications under our account may provide in-app subscription and paid functional services. All paid transaction businesses are fully processed through Google Play official billing system. We do not directly collect, record or store users' bank card, payment password and other sensitive payment information. All payment data processing behaviors are subject to Google Play's official privacy rules and compliance standards.

12. Global User Privacy Rights (GDPR & CCPA Compliance)

12.1 GDPR Compliance Provisions (EEA Users)

For users located in the European Economic Area (EEA), our data processing behaviors strictly comply with the General Data Protection Regulation (GDPR). We process user personal data based on multiple legal bases including user explicit consent, contract performance needs, legal obligation fulfillment and legitimate business interests.

EEA users enjoy complete data subject rights: the right to access personal data, the right to correct inaccurate data, the right to delete invalid data, the right to restrict data processing, the right to object to partial data processing behaviors, and the right to data portability. Users can withdraw the previously authorized data processing consent at any time through the application privacy settings or by contacting our official mailbox. The withdrawal of consent will not affect the legality of data processing behaviors completed before the withdrawal. We use Google UMP tool to complete GDPR-compliant user consent management.

12.2 CCPA/CPRA Compliance Provisions (California Users)

In compliance with the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), California resident users have the right to know the scope, purpose and sharing objects of their personal data processed by us, and can apply for data correction and deletion. We do not conduct monetary sales of user personal data. The data sharing behaviors for advertising services defined by CCPA/CPRA can be opted out by users through application privacy settings or official email applications. We will not discriminate against any user who exercises legal privacy rights.

13. Policy Update and Revision Notice

We reserve the right to update and revise this Privacy Policy irregularly according to legal policy adjustments, third-party service changes and product function upgrades. All revised policies will be published on the official disclosure page, and the latest update date will be marked at the top of the document. Users are recommended to check this policy regularly to timely understand the latest data protection rules. Your continued use of our Applications after the policy update is deemed as your recognition and acceptance of the revised terms.

14. Contact Information

Developer Name: VAVA Music Player - MP3 Player, Volume Booster

Privacy Contact Email: VAVAapps@gmail.com

If you have any questions, suggestions or rights applications about this Privacy Policy and our data processing behaviors, please contact us through the above email address. We will reply and handle your legitimate demands within a reasonable time.