1. Data Operator

Pota AppWebCity (the "App" or "we") is operated by:

• Stonevally International Investment Corporation
  536 Front Rd N, Amherstburg, ON N9V 2V5, Canada

2. Information We Collect

Account Information

• Email address (via email registration or Google Sign-In)
• Name and profile photo (with your authorization via Google or Apple Sign-In)
• Unique user identifier (UID)

Usage Data

• Apps you add and the categories you assign them to
• Custom URL schemes you configure for apps

Device Information

• Device type and operating system version
• App version number and crash diagnostic data

Authentication Tokens

Encrypted tokens to maintain your login session. We do not store your password in plain text.

3. How We Use Your Information

• To provide and maintain the App's core features (app collection and category management)
• To sync your app library across multiple devices
• To authenticate your identity and secure your account
• To send password reset emails (email-registered users only)
• To analyze usage patterns and improve the user experience
• To comply with applicable laws and regulations

4. Third-Party Services

• Firebase (Google LLC) — User authentication and data sync/storage
• Google Sign-In (Google LLC) — Streamlined authentication
• Sign in with Apple (Apple Inc.) — Streamlined authentication

Note: Firebase and Google services are operated by Google LLC and their servers may be located outside mainland China. Availability in mainland China may be affected by local network conditions.

5. Data Storage and International Transfers

Your data is stored on Firebase (Google Cloud) servers, which may be located in the United States or other countries. We take reasonable security measures to protect data during international transfers and comply with applicable data transfer regulations.

6. Data Retention and Deletion

• We retain your personal information for as long as your account remains active.
• You may permanently delete your account and all associated data from within the App at Settings → Danger Zone → Delete Account.
• We will process deletion requests within 30 business days.

7. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such data, we will promptly delete it.

8. Your Privacy Rights

EU / EEA Users (GDPR)

Right of access, rectification, erasure, data portability, and restriction of processing.

California Users (CCPA)

Right to know, right to delete, right to non-discrimination.

Mainland China Users (PIPL)

Right to access and copy, correction, deletion, withdrawal of consent, and to file a complaint.

To exercise any of these rights, please contact us using the information below.

9. Data Security

• Encrypted data transmission (HTTPS/TLS)
• Firebase security rules to enforce access control
• Encrypted storage of authentication tokens

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting an in-app notification and updating the effective date above. Continued use of the App constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or wish to exercise your data rights, please contact:

Email: bangruifang@gmail.com

Stonevally International Investment Corporation
536 Front Rd N, Amherstburg, ON N9V 2V5, Canada

We will respond to your request within 30 business days.