CAN-Control（以下简称“本应用”或“我们”）是一款用于连接、监控与配置 CAN 总线设备的工具。我们非常重视您的个人信息与隐私保护。本政策说明我们收集哪些信息、如何收集与使用、与谁共享，以及您对自己的信息享有哪些权利。
我们遵循最小必要原则，仅收集实现功能所必需的信息。
| 信息类型 | 具体内容 | 收集场景 |
|---|---|---|
| 账号信息 | 邮箱地址、密码（加密存储，我们无法看到明文） | 您在 App 内注册或登录时 |
| 微信账号信息 | 微信 OpenID、昵称、头像 | 您在微信小程序内使用微信登录时 |
| 设备备注信息 | 您为设备设置的自定义名称、图标、分组 | 您编辑设备信息时 |
| 图片 | 您从相册选择或拍摄的照片 | 您主动更换界面背景图或设备图标时（仅您选中的那一张，我们不会读取相册中的其他内容） |
| 信息类型 | 具体内容 | 用途 |
|---|---|---|
| 设备标识 | 由设备网卡 MAC 地址派生的设备 ID（不含您的个人身份信息） | 识别设备、绑定归属、下发配置 |
| 蓝牙信息 | 周边蓝牙设备的名称、信号强度、广播数据 | 发现并连接属于您的 CAN 设备 |
| 位置信息 | 手机 GPS 定位（经您授权后获取，并在您主动操作时通过蓝牙写入设备，用于设备定位） 设备自身的 GPS / 基站定位（由设备通过 4G 网络自动上报） |
记录并展示设备所在位置 |
| 设备运行数据 | 电压、电流、温度、开关状态、充电状态、固件版本、协议类型等遥测数据 | 在 App 内展示设备实时状态与历史曲线 |
| 日志信息 | 登录时间、设备上线/下线记录、操作记录、故障日志、IP 地址 | 设备排障、服务安全、异常访问识别 |
我们不会将您的信息用于广告投放、用户画像或与上述目的无关的用途。
我们不会出售您的个人信息。仅在以下情形下共享：
| 接收方 | 共享内容 | 目的 |
|---|---|---|
| 腾讯（微信） | 登录凭证（微信登录 code） | 在微信小程序内完成微信登录与身份校验 |
| 腾讯地图 | 地图展示所需的坐标参数 | 在 App 内展示设备位置地图 |
| 设备所有者 | 该设备的位置、运行数据、在线状态 | 设备在您授权后绑定给其他用户（如经销商、终端客户）时，对方可查看该设备数据 |
| 司法机关或监管机构 | 依法要求提供的信息 | 法律法规明确要求时 |
除上述情形外，我们不会向任何第三方提供您的个人信息。如发生合并、收购等变更，我们将要求承接方继续受本政策约束。
尽管我们采取了上述措施，但互联网环境并非绝对安全。如发生信息安全事件，我们将依法及时告知您。
您对自己的个人信息享有以下权利，我们为您提供了便捷的操作路径：
本应用面向工业设备的使用者与运维人员，不面向未满 14 周岁的儿童。我们不会主动收集儿童的个人信息。若您是未成年人，请在监护人的陪同下阅读本政策并使用本应用。
为保障功能正常运行，本应用会申请以下系统权限。所有权限均需您的明确授权后才会启用，您可以随时在系统设置中关闭：
| 权限 | 用途 | 可否拒绝 |
|---|---|---|
| 蓝牙 | 扫描并连接您的 CAN 设备，读取运行参数与下发配置 | 可（拒绝后仍可使用 4G 远程设备） |
| 位置（使用期间） | 获取手机 GPS 位置，并在您主动操作时通过蓝牙写入设备，实现设备定位。蓝牙扫描与连接本身也需要定位授权（在 Android 系统上，扫描低功耗蓝牙设备亦要求具备定位权限） | 可。拒绝后蓝牙本地连接将不可用（扫描、连接与控制均需定位授权）；但4G 远程设备不受影响，仍可正常连接与控制 |
| 相册 | 从相册选择图片，作为 App 界面背景或设备图标 | 可 |
| 相机 | 拍摄照片，作为 App 界面背景或设备图标 | 可 |
| 通知 | 接收设备告警与固件升级提醒 | 可 |
因此，定位授权是使用蓝牙本地功能的前提：若您拒绝或随后关闭定位权限，将无法扫描、连接与控制身边的 CAN 设备，但这不影响通过 4G 联网的远程设备。
本应用不申请麦克风、通讯录、日历、提醒事项、语音识别、本地网络、“始终允许”定位等与本应用功能无关的权限。
剪贴板不属于系统权限，无需授权即可访问。为避免误用，我们对剪贴板的使用严格限定在下表的场景内，且每一个读取动作都由您的操作触发（唯一例外已在表中单独标注）：
| 场景 | 读 / 写 | 触发方式 | 用途 |
|---|---|---|---|
| 导入设备配置码 | 读取 | 仅您主动点击「导入配置」类按钮时 | 解析剪贴板中的配置码，通过蓝牙写入您正在配置的设备 |
| 导入界面素材 | 读取 | 仅您主动点击时 | 解析剪贴板中的图片数据，作为界面背景或设备图标 |
| 商户查询设备密码 | 读取 | 在微信小程序内以商户身份登录并进入首页时自动检查 | 识别剪贴板中的设备 ID，向服务器校验权限后返回该设备密码 |
| 复制设备 ID / 密码 / 邀请码 | 写入 | 仅您主动操作时 | 便于您把信息转发给他人 |
我们不会分析剪贴板内容用于广告投放或用户画像，也不会上传剪贴板中的配置码与图片数据。上述「商户查询设备密码」场景中，被提交至服务器的仅是剪贴板中的设备 ID（用于校验您对该设备的查看权限），其余内容均不会被上传。在 iOS 系统中，任何剪贴板读取都会由系统向您显示提示，您可以据此拒绝。
如本政策发生重大变更，我们将在应用内以弹窗或公告方式提示您，并重新征得您的同意。您继续使用本应用即表示接受更新后的政策。
CAN-Control (the “Application”, “we”, “us” or “our”) is a tool for connecting to, monitoring and configuring CAN bus devices. We take your personal information and privacy seriously. This policy explains what information we collect, how we collect and use it, with whom we share it, and what rights you have over your information.
We follow the principle of minimum necessity and collect only the information required to provide our features.
| Type | Details | When collected |
|---|---|---|
| Account information | Email address and password (stored encrypted; we cannot see your plaintext password) | When you register or sign in within the Application |
| WeChat account information | WeChat OpenID, nickname, avatar | When you sign in with WeChat inside the WeChat Mini Program |
| Device annotations | Custom names, icons and groups you set for your devices | When you edit device information |
| Images | Photos you select from your album or take with the camera | When you change the interface background or a device icon (only the single item you select; we do not read anything else in your album) |
| Type | Details | Purpose |
|---|---|---|
| Device identifier | A device ID derived from the device network adapter MAC address (contains no personal identity information) | Identify devices, bind ownership, deliver configuration |
| Bluetooth information | Names, signal strength and broadcast data of nearby Bluetooth devices | Discover and connect to CAN devices that belong to you |
| Location information | Phone GPS location (obtained with your authorisation and written to the device over Bluetooth when you actively request it, for device positioning) The device's own GPS / cell-tower positioning (automatically reported by the device over its 4G network) |
Record and display where the device is located |
| Device operating data | Telemetry such as voltage, current, temperature, on/off state, charging state, firmware version and protocol type | Display real-time device status and historical curves in the Application |
| Log information | Sign-in times, device online/offline records, operation records, fault logs and IP address | Troubleshooting, service security, identifying abnormal access |
We do not use your information for advertising, user profiling or any purpose unrelated to those listed above.
We do not sell your personal information. We share it only in the following circumstances:
| Recipient | What is shared | Purpose |
|---|---|---|
| Tencent (WeChat) | Sign-in credential (WeChat login code) | To complete WeChat sign-in and identity verification inside the WeChat Mini Program |
| Tencent Maps | Coordinate parameters required to render the map | To display the device location map within the Application |
| Device owner | The device's location, operating data and online status | When you authorise the device to be bound to another user (for example a dealer or end customer), that party can view the device data |
| Judicial or regulatory authorities | Information lawfully requested | Where explicitly required by laws and regulations |
Other than in the circumstances above, we will not provide your personal information to any third party. In the event of a merger or acquisition, we will require the successor to remain bound by this policy.
Despite these measures, the internet is not absolutely secure. In the event of a security incident we will notify you promptly in accordance with the law.
You have the following rights over your personal information, and we provide convenient ways to exercise them:
This Application is intended for users and maintenance personnel of industrial equipment and is not directed at children under 14. We do not knowingly collect personal information from children. If you are a minor, please read this policy and use the Application together with your guardian.
To keep its features working, this Application requests the following system permissions. Every permission is enabled only after you explicitly authorise it, and you can turn any of them off at any time in your system settings:
| Permission | Purpose | Can I refuse? |
|---|---|---|
| Bluetooth | Scan for and connect to your CAN devices, read operating parameters and deliver configuration | Yes (you can still use 4G remote devices) |
| Location (while in use) | Obtain the phone's GPS location and, when you actively request it, write it to the device over Bluetooth for device positioning. Bluetooth scanning and connection themselves also require location authorisation (on Android, scanning for Bluetooth Low Energy devices requires location permission) | Yes. If you refuse, Bluetooth local connections will be unavailable (scanning, connecting and controlling all require location authorisation); however, 4G remote devices are unaffected and can still be connected to and controlled |
| Photo album | Select an image from the album to use as the Application background or a device icon | Yes |
| Camera | Take a photo to use as the Application background or a device icon | Yes |
| Notifications | Receive device alerts and firmware upgrade reminders | Yes |
Accordingly, location authorisation is a prerequisite for the Bluetooth local features: if you refuse or later disable location, you will not be able to scan, connect to or control nearby CAN devices, but this does not affect remote devices connected over 4G.
This Application does not request the microphone, contacts, calendar, reminders, speech recognition, local network or “Always allow” location permissions, which are unrelated to its features.
The clipboard is not a system permission and can be accessed without authorisation. To avoid misuse, our use of the clipboard is strictly limited to the scenarios in the table below, and every read is triggered by your own action (the single exception is marked in the table):
| Scenario | Read / Write | How it is triggered | Purpose |
|---|---|---|---|
| Importing a device configuration code | Read | Only when you actively tap an “Import configuration” button | Parse the configuration code on the clipboard and write it over Bluetooth to the device you are configuring |
| Importing interface assets | Read | Only when you actively tap | Parse image data on the clipboard to use as the interface background or a device icon |
| Merchant device-password lookup | Read | Automatically checked when you sign in as a merchant inside the WeChat Mini Program and open the home screen | Recognise the device ID on the clipboard and, after verifying your permission with the server, return that device's password |
| Copying device ID / password / invite code | Write | Only when you actively act | Convenient for forwarding the information to others |
We do not analyse clipboard content for advertising or user profiling, and we do not upload configuration codes or image data from the clipboard. In the “Merchant device-password lookup” scenario above, the only thing submitted to the server is the device ID on the clipboard (used to verify your permission to view that device); nothing else is uploaded. On iOS, every clipboard read causes the system to show you a prompt, which you can use to refuse.
If this policy changes materially, we will notify you inside the Application by pop-up or announcement and obtain your consent again. Your continued use of the Application constitutes acceptance of the updated policy.
Email: cxjdwx@foxmail.com
Website: https://cancontrol.cn
Response time: we will reply within 15 business days of receiving your request.