Voyage Third-Party Information Sharing List

Overview

This list sets out the third-party SDKs integrated into the Voyage toolbox, as well as the main third-party services that individual tools connect to directly when you use them. This list forms part of the Privacy Policy. This English version is provided for reference only; the Simplified Chinese version prevails.

Third-party SDKs and services process your information independently and are subject to their own privacy policies. We will update this list promptly when an SDK is updated or added.

1. Third-Party SDKs

Apex Advertising SDK

• Provider: ApexAdx
• Use case: Rewarded video ads and the splash ad at cold start. Initialized only after you agree to the ad service; it is not loaded if you do not agree.
• Information processed: Device identifiers (OAID, Android ID), device brand, model, system version, screen parameters, network type, carrier, IP address, app package name and version, ad impression and click records, and information within the scope of permissions you have already granted to other features, such as location and phone state.
• Purpose of processing: Ad delivery, ad performance measurement and anti-fraud. Personalized ad recommendations are enabled.
• Information we provide: The rewarded video and splash ad slots, a signed account number (used to grant viewing rewards and tell accounts apart), and the display scenario.

Partner Channel SDKs of Apex Advertising

The Apex advertising SDK is built on the ToBid mediation SDK and dispatches ads to the SDKs of the following channels according to its own strategy. These SDKs are likewise initialized only after you agree to the ad service. The information they process and the purposes are the same as in the previous item; their respective privacy policies govern:

• ToBid mediation SDK and Sigmob advertising SDK, provider: 北京创智汇聚科技有限公司
• Pangle (GroMore) advertising SDK (穿山甲), provider: Beijing Ocean Engine Network Technology Co., Ltd. (北京巨量引擎网络技术有限公司)
• Tencent Ads (优量汇) advertising SDK, provider: Shenzhen Tencent Computer Systems Co., Ltd. (深圳市腾讯计算机系统有限公司), privacy policy: https://e.qq.com/dev/help_detail.html?cid=2005&pid=5983
• Kuaishou advertising SDK, provider: 北京快手广告有限公司, privacy policy: https://u.kuaishou.com/home/detail/1290
• Baidu Baiqingteng (百青藤) advertising SDK, provider: Beijing Baidu Netcom Science and Technology Co., Ltd. (北京百度网讯科技有限公司)
• BeiZi advertising SDK (AdScope), provider: 北京倍孜网络技术有限公司
• ZJ advertising SDK (ZJSDK)
• Jianxin (简信) advertising SDK
• JY advertising SDK

The privacy policy links for each channel are as provided in Apex's personal information protection rules.

Mobile Security Alliance OAID Component (Android_CN_OAID)

• Use case: After you agree to the ad service, reads the device's Open Anonymous Device Identifier (OAID) for use by the advertising SDKs, and as one of the sources of the App's device identifier.
• Information processed: OAID.
• Processing method: Read on your device by calling interfaces provided by the device manufacturer; the component itself does not connect to the internet.

Umeng+ Analytics SDK (友盟+统计 SDK)

• Provider: Umeng Tongxin (Beijing) Technology Co., Ltd. (友盟同欣（北京）科技有限公司)
• Use case: Collects statistics on how the App is used, including the number of launches, usage time, pages visited, tools opened, and the distribution of versions and channels, to improve the product. Initialized only after you agree to this Policy. You can turn it off in "Settings → Privacy → Usage statistics"; once it is off, the SDK is no longer initialized.
• Information processed: Device identifiers (OAID, Android ID and the device identifier generated by Umeng), device brand, manufacturer, model, system version and build information, processor architecture, screen resolution, network type, carrier, IP address, app version and channel, usage time and page visit records; after you sign in, also your account number (not your account name, phone number or email address). We have turned off the collection of IMEI, IMSI, ICCID, Wi-Fi MAC address and the list of installed apps.
• Purpose: Statistical analysis.
• Privacy policy: https://www.umeng.com/page/policy

Umeng+ Application Performance Monitoring SDK (友盟+应用性能监控 SDK)

• Provider: Umeng Tongxin (Beijing) Technology Co., Ltd. (友盟同欣（北京）科技有限公司)
• Use case: Finds and fixes faults and performance problems in the App, including crashes, freezes (ANR), stutters, startup time, memory usage, power consumption and network request performance. Initialized only after you agree to this Policy. It shares the "Settings → Privacy → Usage statistics" switch with the Umeng+ Analytics SDK; once it is off, the SDK is no longer initialized from the next launch.
• Information processed: Device identifiers (OAID, Android ID and the device identifier generated by Umeng), device brand, model, system version, processor architecture, screen resolution, remaining storage space, network type, carrier, IP address, app version and channel; when a crash or stutter occurs, thread stacks, excerpts of system logs, memory and battery status, the page in use and recent actions; for sampled network requests, the address, duration and status code; warning and error logs written by the App (kept on your device and uploaded only when we request them to investigate a fault).
• Purpose: Stability and performance analysis.
• Privacy policy: https://www.umeng.com/page/policy

Google Analytics for Firebase

• Provider: Google LLC
• Use case: Collects statistics on how the App is used outside mainland China and on devices with Google Play services, including the number of launches, usage time, pages visited, tools opened, and the distribution of versions and regions, to improve the product. Initialized only after you agree to this Policy. It shares the "Settings → Privacy → Usage statistics" switch with the Umeng+ Analytics SDK; once it is off, collection stops immediately. We have turned off advertising ID collection and ad personalization signals.
• Information processed: Firebase installation ID and app instance ID, device model, system version, language, country or region inferred from the IP address, app version, sessions and page visits, tools opened; after you sign in, also your account number (not your account name, phone number or email address).
• Purpose: Statistical analysis. The information is processed by Google on servers outside the People's Republic of China.
• Privacy policy: https://firebase.google.com/support/privacy

Firebase Crashlytics

• Provider: Google LLC
• Use case: Finds and fixes crashes in the App, including crashes in native code. Initialized only after you agree to this Policy. It shares the "Settings → Privacy → Usage statistics" switch with the Umeng+ Analytics SDK; once it is off, uploads stop and crash reports not yet uploaded are deleted. After you agree to this Policy, it also reports, once, up to 20 crash records kept on your device from the 30 days before you agreed.
• Information processed: Firebase installation ID, device model, system version, processor architecture, screen orientation, free memory and storage, whether the device is rooted, app version; at the time of a crash, thread stacks, the page in use, the tool opened most recently and warning and error logs written by the App; after you sign in, also your account number.
• Purpose: Stability analysis. The information is processed by Google on servers outside the People's Republic of China.
• Privacy policy: https://firebase.google.com/support/privacy

Firebase Performance Monitoring

• Provider: Google LLC
• Use case: Finds performance problems in the App, including startup time, UI stutters and network request performance. Initialized only after you agree to this Policy. It shares the "Settings → Privacy → Usage statistics" switch with the Umeng+ Analytics SDK.
• Information processed: Firebase installation ID, device model, system version, network type, carrier, country or region inferred from the IP address, app version; startup and rendering times; for network requests, the address (with query parameters and credentials removed), method, status code, payload sizes and duration.
• Purpose: Performance analysis. The information is processed by Google on servers outside the People's Republic of China.
• Privacy policy: https://firebase.google.com/support/privacy

Firebase Cloud Messaging

• Provider: Google LLC
• Use case: Sends update, event and announcement notifications to devices with Google Play services. Initialized only after you agree to this Policy. You can turn off the App's "Push messages" notification category in system settings. Devices without Google Play services do not receive push messages.
• Information processed: Firebase installation ID, push token, device model, system version and app version. The push token is not uploaded to our servers.
• Purpose: Push messaging. The information is processed by Google on servers outside the People's Republic of China.
• Privacy policy: https://firebase.google.com/support/privacy

AMap Location SDK (高德定位 SDK)

• Provider: AutoNavi Software Co., Ltd. (高德软件有限公司)
• Use case: Compass shows your coordinates and current address. Initialized only when you grant location permission and use Compass.
• Information processed: Location information (latitude and longitude), device information (device brand, model, system version, device identifier), network information (IP address, Wi-Fi information, cell tower information), and sensor information.
• Purpose of processing: Positioning and address resolution.
• Privacy policy: https://lbs.amap.com/pages/privacy/

QQ Connect SDK

• Provider: Shenzhen Tencent Computer Systems Co., Ltd. (深圳市腾讯计算机系统有限公司)
• Use case: QQ sign-in, QQ registration and linking QQ. Initialized only when you tap QQ sign-in.
• Information processed: Device model, system version, network information, and the OpenID and access token returned after you authorize in QQ.
• Purpose of processing: Completing QQ authorized sign-in.
• Privacy policy: https://wiki.connect.qq.com/qq互联sdk隐私保护声明

Google sign-in (Android Credential Manager, Google Play services)

• Provider: Google LLC
• Use case: Google sign-in, Google registration and linking Google. Called only when you tap Google sign-in or linking. The option is hidden on devices without Google Play services.
• Information processed: The Google account you choose, and the identity token issued by Google (containing your Google account identifier, name, profile picture URL and email address).
• Purpose of processing: Completing Google authorized sign-in.
• Privacy policy: https://policies.google.com/privacy

Google ML Kit

• Provider: Google LLC
• Use case: Text recognition (Question Search and others), object detection, date and contact information extraction in Voice Todo, and document scanning.
• Information processed: Images and text are recognized on your device and are not uploaded. ML Kit may send diagnostic information such as the device model, system version, app package name, SDK version and performance metrics to Google.
• Privacy policy: https://developers.google.com/ml-kit/android-data-disclosure

Google Play Services (Activity Recognition) and ARCore

• Provider: Google LLC
• Use case: "Start automatically in a vehicle" in Motion Sickness Relief detects whether you have entered a vehicle; AR Measure uses ARCore for plane detection and tracking.
• Information processed: Motion sensor data and camera frames, processed on your device by Google Play services.
• Privacy policy: https://policies.google.com/privacy

Shizuku and libsu

• Use case: After you grant authorization through Shizuku or a root manager, performing elevated-privilege operations such as app management, SIM region changing and band locking.
• Processing method: Runs entirely on your device, does not connect to the internet, and does not collect information.

Open Source Components Running on Your Device

The following components run entirely on your device and do not send your information to any server: sherpa-onnx (speech recognition and synthesis), LiteRT and LiteRT-LM (on-device AI models), FFmpeg (audio and video processing), OpenCV (image processing), BirdNET (bird sound identification model), and libtorrent (magnet downloads). Some components and models are downloaded from GitHub the first time they are used. All open source components and their licenses can be viewed in "About → Open source licenses".

2. Our Servers

• Service: Aegis account and app service, at aegis.karpov.cn, with network acceleration and security protection provided by Cloudflare.
• Use cases: Accounts, membership, points, payment orders, ad service choices, app updates, announcements and notifications, and favorite feature sync.
• Information processed: See Part 1 of the Privacy Policy.

3. Third-Party Services That Tools Connect to Directly

The following services are accessed only when you actively use the corresponding tools. The App sends requests directly to these services, without passing through our servers. These services receive your IP address and the content of the request.

Services Involving Location

• Open-Meteo (open-meteo.com): weather and cloud cover in Photography Assistant, and altitude in Compass; receives your coordinates.
• Sunrise-Sunset (sunrisesunset.io): sunrise and sunset times in Photography Assistant; receives your coordinates.
• Norwegian Meteorological Institute (api.met.no): weather forecasts in Photography Assistant; receives your coordinates.
• BigDataCloud (bigdatacloud.net): place name resolution for Photography Assistant, Fuel Prices, and the start and end points of speedometer trips; receives your coordinates.
• OpenStreetMap Overpass: road speed limits in the speedometer; receives your coordinates.
• OpenFreeMap (tiles.openfreemap.org): base maps for speedometer trip routes; receives the displayed map area.

Services Involving Images

• trace.moe, AnimeTrace: Anime Search by Image; receive the images you select or capture.
• img.scdn.io: Image Hosting; receives the images you choose to upload.
• uapis.cn: Smart Cutout receives the images you select; some lookup tools send it the query content you enter.

Services Involving Device Information

• maclookup.app: vendor lookup in the Network Address tool; receives the MAC address you look up.

AI and Speech Services (Configured by You)

• Cloud large language models for AI Chat, Moments text rewriting and Voice Todo: OpenAI, Anthropic, Google Gemini, DeepSeek, Alibaba Cloud Model Studio (阿里云百炼), Volcano Engine Ark (火山方舟), Zhipu AI (智谱), Moonshot AI (月之暗面), SiliconFlow (硅基流动), OpenRouter, xAI, Groq, Mistral, or a compatible endpoint and MCP servers you enter. They receive your conversation content, attachments and tool call results.
• Cloud speech recognition (Alibaba Cloud Model Studio (阿里云百炼)) and cloud speech synthesis (OpenAI-compatible endpoints, SiliconFlow (硅基流动)) in Voice Todo: receive audio or text only after you choose cloud services.
• System speech recognition service: voice input in AI Chat, processed by the provider of the system speech recognition service on your device.

Third-Party Platform Accounts

• Cloud drives (Alibaba Cloud Drive (阿里云盘), Quark, UC, 115, 123 Cloud Drive (123 云盘), Tianyi Cloud Drive (天翼云盘), China Mobile Cloud Drive (移动云盘), Weiyun (微云), Xunlei Cloud Drive (迅雷云盘) and others): receive your sign-in credentials and the files you upload.
• Video parsing accounts, Ximalaya, VALORANT (WeGame), Chinese Chess and others: receive your sign-in credentials or cookies for the corresponding platform.
• AI Watermark Parser (Doubao, Qwen, Yuanbao, Tongyi): receives the cookies obtained after you sign in through a built-in web page, used to read your own materials.

Content and Lookup Services

Tools such as Video Parser, Music Parser, Online Video, Online Short Dramas, Online Novels, Online Comics, Online Audiobooks, Online Music, IPTV Live, Question Search, Magnet Search, Package Tracking, Fuel Prices, Exchange Rates, Weather, Food Barcode (Open Food Facts) and bird information (iNaturalist) send the links, keywords or query conditions you enter to the corresponding websites or APIs. The specific sources are as shown by the source names displayed in each tool.