Welmo Technology Third-Party Sharing & SDK List

This English version is a courtesy translation. In case of any discrepancy between the Chinese and English versions, the Chinese version shall prevail.

This list is the legal appendix to the Privacy Policy and enumerates every scenario in which Welmo Technology shares personal information with third parties on its websites and the WeChat Mini-Program "Welmo Perks", as well as the integrated third-party SDKs and recipients. The list is prepared in accordance with Article 5 of the Methods for Identifying Illegal Collection and Use of Personal Information by Apps and the Provisions on Necessary Personal Information Scope of Common Mobile Apps.

1. General Provisions

1.1 Sharing Principles

Welmo Technology follows these principles when sharing personal information:

1. No sale: Welmo Technology will never sell your personal information to any third party;
2. Minimization: Sharing is limited to what is necessary to provide the Service;
3. Purpose limitation: Specific purposes are agreed with third parties; super-purpose use is prohibited;
4. Equivalent protection: Third parties are required to adopt protections of the same level as Welmo Technology;
5. Traceability: Data processing agreements are signed with third parties, clearly defining responsibilities and breach liabilities;
6. Notification: This list informs you of all sharing recipients and content.

1.2 Sharing Categories

Based on the nature of sharing, third parties involved with Welmo Technology fall into three categories:

2. Complete List of Third-Party Recipients

Type A · Entrusted Processing (Infrastructure Providers)

A1. Alibaba Cloud (Hong Kong) — Cloud Server, Database, Object Storage

A2. Alibaba Cloud Number Authentication / SMS

Type B · Cooperative Fulfillment (Business Partners)

B1. SF Express — Logistics Delivery

B2. Zhengzhou Changxing Logistics Park — Warehousing & Shipping

B3. Douyin E-commerce / WeChat Pay Merchant System — Trial Cashback Processing

Type C · User-Initiated

C1. WeChat (Tencent) — Mini-Program Login

3. SDKs / Services We Do Not Integrate

For transparency, Welmo Technology proactively declares that the following SDKs and services are not currently integrated:

3.1 Analytics and User Behavior Tracking

• ❌ Google Analytics
• ❌ Mixpanel
• ❌ Segment
• ❌ Amplitude
• ❌ Umeng+ (CNZZ)
• ❌ Sensors Data
• ❌ TalkingData
• ❌ GrowingIO
• ❌ Baidu Statistics
• ❌ ByteDance Analytics (Volcano Engine, Tea SDK)

3.2 Crash Monitoring and Error Tracking

• ❌ Sentry
• ❌ Bugly (Tencent)
• ❌ Bugsnag
• ❌ Crashlytics (Google Firebase)

3.3 Advertising and Push

• ❌ Google AdMob / AdSense
• ❌ Facebook Audience Network
• ❌ Tencent Ads / Youlianghui
• ❌ JPush
• ❌ GeTui
• ❌ Xiaomi Push / Huawei Push / OPPO Push / vivo Push

3.4 Third-Party Login (Other Than WeChat)

• ❌ QQ Login
• ❌ Weibo Login
• ❌ Apple Sign-In
• ❌ Google Sign-In
• ❌ Facebook Login

3.5 Other

• ❌ AutoNavi / Baidu / Tencent / Google Maps SDK (Welmo Technology does not collect geolocation)
• ❌ Face Recognition SDK
• ❌ OCR SDK
• ❌ Hardening / Anti-Fraud SDK (e.g., NetEase Yidun, Alibaba Jiyu Security)

If new SDKs or services are integrated in the future, Welmo Technology will provide advance notice in this list and obtain your consent for any personal information processing involved.

4. Sub-Processor Management

4.1 Selection Criteria

Welmo Technology selects third-party recipients based on the following:

• Lawful qualifications (ICP, business license, data security certifications, etc.);
• Security capabilities meeting industry best practices;
• Acceptance of Welmo's due diligence and periodic audits;
• Willingness to sign data processing agreements compliant with PIPL.

4.2 Contract Terms

Welmo Technology has signed written agreements with all Type A and Type B third parties, specifying:

• Purpose, duration, method, categories of personal information, and protection measures;
• The third party's security obligations, confidentiality, and breach liability;
• The third party's obligation to permit Welmo's audit;
• Deletion or return of personal information upon termination of cooperation.

4.3 Ongoing Oversight

Welmo Technology continuously monitors third parties through:

• Periodic review of third parties' security qualifications and certifications;
• Receiving and responding to security incident notifications from third parties;
• Reassessing cooperation when third parties undergo material changes.

5. Your Choices

5.1 Consequences of Refusing Specific Sharing

• If you refuse sharing with Alibaba Cloud (infrastructure) → You will be unable to use the Service (because all data is stored on Alibaba Cloud Hong Kong).
• If you refuse sharing with SF Express / Changxing → You will be unable to claim benefits requiring physical delivery (e.g., Welmo Spices, LumaPet physical components).
• If you refuse sharing with Douyin / WeChat Pay → You will be unable to receive The Greens trial cashback.
• If you refuse WeChat login → You may still use the website's SMS or password login methods.

5.2 What You Can Do

• Withdraw the corresponding consent through this list or the Privacy Policy (Document 02);
• Email legal@welmotech.com to request deletion of information already shared with third parties (we will forward to the third party);
• Complain about misconduct of a third party (we will help you communicate with that third party).

6. Contact Us

For any questions about the third-party recipients in this list, please email legal@welmotech.com. We will respond within 15 business days.

Revision History

All rights of final interpretation reserved by Henan Welmo Technology Co., Ltd.

Document ID: WELMO-LEGAL-04 · Version v1.0 · April 7, 2026