Monthly Rose Third-Party Sharing List

Last updated: October 1, 2026

This list shows the third parties that process your personal information on our behalf to provide Monthly Rose (iPhone / Apple Watch, Android / Wear OS and HarmonyOS versions). They are bound by confidentiality and security obligations and may process the information only for the purposes below.

The app contains no advertising, analytics or tracking SDKs. The iPhone version uses only Apple's built-in system features; the HarmonyOS version uses only HarmonyOS system services (Kits); the Android version includes a few platform SDKs for sign-in, payments and push notifications — see section 7, "SDK list".

Sign-in, subscription entitlements, push notifications and forwarding of language-model requests are handled by the Yunci Account Center (id.iyunci.cn), which we operate ourselves (same operator: Xiamen Yunci Digital Technology Co., Ltd.). It is not a third party; the providers below serve both it and the app's backend.

1. Beijing Volcano Engine Technology Co., Ltd. (Volcano Engine)

• Database: stores data for the app and the Account Center. Information processed: backed-up records (encrypted by us before storage), Talk conversations and Rosie's notes (only when you keep them, or when a crisis is expressed; always encrypted), account numbers, encrypted phone numbers and their hashes, third-party sign-in identifiers (Apple, Huawei, WeChat, Google), subscription transactions, usage and abuse-prevention counters, crash reports, Circle posts and comments. Location: mainland China (Beijing).
• Text messaging: sends sign-in codes to your phone number. Information processed: phone number, code.
• Volcano Ark language model service: after your separate consent, generates answers from the de-identified cycle summary and the text you type. Information processed: the de-identified summary, what you type in Ask and Talk and Rosie's notes, and a sentence the AI assistant couldn't understand on your iPhone. Requests are forwarded by the Account Center without your account information; the service processes them only to generate an answer and doesn't keep them for us (we keep Talk conversations encrypted according to your settings; see the Privacy Policy). In addition, the text of posts and comments you publish in the Circle is sent to this service to judge whether it breaks the rules (content moderation), without information identifying you.
• Doubao speech synthesis: during a call with Rosie, turns what Rosie says (the AI answer or a fixed greeting) into speech. Information processed: only the text to be spoken, without your account, phone number or install ID; what you say is recognized on your iPhone and never sent to this service.
• Website: https://www.volcengine.com

2. Shenzhen Tencent Computer Systems Co., Ltd. (Tencent Cloud)

• Cloud servers: run the app's backend and the Account Center. Your requests (including the information listed above) are processed on these servers and then stored in the database; the servers don't keep it long-term. Location: mainland China.
• Website: https://cloud.tencent.com

3. Apple Inc.

• Sign in with Apple: confirms your identity. Information processed: the user identifier Apple provides (we don't request your name or email). When you delete your whole account, we ask Apple to revoke the app's sign-in authorization.
• In-app purchases: purchases, renewals and refunds are handled by Apple; we receive only Apple-signed transaction information and never see your payment details.
• Push notifications: after you sign in, we send a notification through Apple Push Notification service when someone replies to you in the Circle. Information processed: push token, notification content.
• Apple Health: with your permission, the app reads and writes Apple Health data on your iPhone. That data is managed by Apple's system and never passes through our servers.
• Device attestation (App Attest): when you use the AI free trial without signing in, the app asks Apple to attest that it is the genuine app on a real device, to count free uses. Information processed: an attestation generated by the device, with no identity information.
• Website: https://www.apple.com/legal/privacy/

4. Huawei Software Technologies Co., Ltd. (Huawei Mobile Services / HarmonyOS services)

Used only by the HarmonyOS version and the Android China version (on Huawei / Honor phones with Huawei Mobile Services).

• Sign in with HUAWEI ID (HarmonyOS): confirms your identity. Information processed: the user identifier Huawei provides (OpenID / UnionID).
• HUAWEI In-App Purchases (HarmonyOS): purchases, renewals and refunds are handled by Huawei; we receive only transaction information and never see your payment details.
• Huawei Push (HarmonyOS Push Kit; HMS Core Push Kit on Android China version): after you sign in, sends a notification when someone replies to you in the Circle. Information processed: push token, device model and OS version, notification content.
• HUAWEI Health (HarmonyOS Health Service Kit): with your permission, the app reads and writes HUAWEI Health data (periods, weight, temperature, sleep and so on) on your phone. That data is managed by Huawei's system and never passes through our servers.
• Device attestation (HarmonyOS Device Security Kit): when you use the AI free trial without signing in, attests that it is the genuine app on an untampered device. Information processed: a device integrity attestation, with no identity information.
• Huawei watch connection (Wear Engine): passes today's status and what you log on the watch between your phone and Huawei watch over Bluetooth, never through our servers.
• Website: https://consumer.huawei.com/en/privacy/

5. Shenzhen Tencent Computer Systems Co., Ltd. and Tenpay Payment Technology Co., Ltd. (WeChat)

Used only by the Android China version.

• Sign in with WeChat: confirms your identity. Information processed: the WeChat authorization code, and the user identifier (OpenID / UnionID), nickname and avatar WeChat provides.
• WeChat Pay: buying Plus (a one-month or one-year pass that doesn't renew automatically). Payment is handled by Tenpay; we receive only the order and payment result and never see your bank card details.
• Website: https://weixin.qq.com

6. Google LLC

Used only by the Android Google Play version (for users outside mainland China); related information may be processed outside mainland China.

• Sign in with Google: confirms your identity. Information processed: the user identifier and email address Google provides.
• Google Play Billing: purchases, renewals and refunds are handled by Google; we receive only the purchase token and never see your payment details.
• Firebase Cloud Messaging (FCM): after you sign in, sends a notification when someone replies to you in the Circle. Information processed: push token, Firebase installation ID, notification content. Firebase auto-initialization and analytics are turned off.
• Play Integrity: when you use the AI free trial without signing in, asks Google to attest that it is the genuine app on a real device. Information processed: a device integrity verdict, with no identity information.
• Health Connect: with your permission, the app reads and writes Health Connect data on your phone, never through our servers.
• Wear OS Data Layer: passes today's status and what you log on the watch between your phone and Wear OS watch.
• Website: https://policies.google.com/privacy

7. SDK list (Android)

| SDK | Provider | Version | Purpose | Information processed |
|---|---|---|---|---|
| WeChat OpenSDK (com.tencent.mm.opensdk) | Shenzhen Tencent Computer Systems Co., Ltd. | Android China version | WeChat sign-in and WeChat Pay | WeChat authorization code, payment orders; checks whether WeChat is installed |
| HMS Core Push Kit (com.huawei.hms:push) | Huawei Software Technologies Co., Ltd. | Android China version (phones with Huawei Mobile Services) | Remote push | Push token (AAID / token), device model, OS version, network type |
| Firebase Cloud Messaging (com.google.firebase:firebase-messaging) | Google LLC | Android Google Play version | Remote push | Push token, Firebase installation ID, device model, OS version |
| Google Play Billing Library (com.android.billingclient) | Google LLC | Android Google Play version | Buying Plus | Purchase token |
| Credential Manager / Google Identity Services (androidx.credentials, googleid) | Google LLC | Android Google Play version | Sign in with Google | Google user identifier, email |
| Wearable Data Layer (play-services-wearable) | Google LLC | Android (phones with Google services) | Talking to the Wear OS watch | Status and records passed between phone and watch |
| Play Integrity (com.google.android.play:integrity) | Google LLC | Android Google Play version | Device attestation (counting AI free uses per device when not signed in) | A one-time nonce from the platform and Google's integrity verdict; no identity information |
| Health Connect client (androidx.health.connect) | Google LLC | Android | Reading and writing system health data | Read and written on the phone only, never uploaded |
| sherpa-onnx offline speech recognition (com.k2fsa.sherpa.onnx, open source, Apache-2.0; includes ONNX Runtime, MIT) | k2-fsa open-source project | Android China version (when the phone has no built-in on-device recognition) | Turning speech into text on the phone for Talk, calls and the AI assistant | Microphone audio is processed only on the phone, with no network access and nothing uploaded; the recognition model ships with the app |

The iPhone and HarmonyOS versions include no third-party SDKs; they call only built-in system services (see sections 3 and 4).

8. Beijing Feishu Technology Co., Ltd. (Feishu / Lark)

• Internal operations alerts: subscription starts, renewals, refunds and similar events are posted to our staff's Feishu group so we can handle problems promptly. Information processed: product name, amount, first 8 characters of the account number; no phone number or other identifying information.
• Website: https://www.feishu.cn

9. Contact us

Operator: Xiamen Yunci Digital Technology Co., Ltd. (厦门云磁数字科技有限公司)
Address: Building C04, Phase III, Xiamen Software Park, Xiamen, Fujian, China
Email: jubao@iyunci.cn