PrimiLab Personal Information Collection List

Effective date: 2026-08-24 · Last updated: 2026-08-27

This list accompanies the PrimiLab Privacy Policy. It sets out, item by item, the types of personal information the "Micca" app (the "App") actually collects, the scenarios and purposes of collection, how it is collected, and whether each item is required for the corresponding function.

We follow the principle of "minimum necessary": we collect personal information only within the smallest scope needed to provide you with the relevant function. Declining to provide items marked "Optional" will not affect your use of the App's main functions.

Where this list is inconsistent with the Privacy Policy, the wording more favourable to you prevails. Our sharing of personal information with third parties is described separately in the Third-Party Personal Information Sharing List.

1. Account and Identity Information

Information	Scenario and purpose	How collected	Required?
Mobile phone number	When you choose "log in with a phone verification code", to create and identify your account, send the code and protect account security	You provide it actively	Required for this login method
WeChat OpenID, UnionID, nickname, avatar, gender, region	When you choose "log in with WeChat", to create and identify your account	Returned by the Weixin Open Platform after your authorization	Required for this login method
Nickname and avatar	To display your identity in the App so that collection members can recognize you	You provide it, or it is synced from third-party login	Required (editable at any time)

2. Content You Actively Create and Upload

The following is generated by your own actions and is used to deliver the App's core functions: creating stickers, co-building collections and interacting with friends. This content is visible only to you and to the members of the collections you belong to.

Information	Scenario and purpose	How collected	Required?
Photos and videos	When you capture or pick material from your album to make stickers or set a collection background	You capture or select it actively	Required for this function
Stickers, collages and their covers	To store and display the content you create within collections	Generated by your creative actions	Required for this function
Audio	The audio track captured alongside a video sticker you record	You record it actively	Optional (declining the microphone produces a silent video sticker; publishing still works)
Chat messages, comments and reactions	To interact with members inside a collection	You send it actively	Required for this function
Collection details, invitation codes, membership and following relationships	To enable collection co-building, invitations and social relationships	Generated by your use of the App	Required
Report reasons and evidence images	When you report content, to receive and handle your report	You provide and upload it actively	Required for this function

Note: subject cutout for stickers (separating the subject from a photo) runs locally on your device. Your images are not uploaded to any third party for that processing.

3. Location Information

Information	Scenario and purpose	How collected	Required?
Approximate location (city/district level, about 1 km accuracy) and place name	When publishing a sticker, you may choose to record where it was taken and show it to collection members	Provided by the system location service after your authorization	Optional (if you decline or positioning fails, no location is recorded and publishing is unaffected)
System region setting (country or region code)	To provide services and content that comply with the laws of your region	Read from your system settings	Required (does not involve location permission and is not used to obtain precise location)

We request only the approximate location permission. We neither request nor collect precise location.

4. Device and Log Information

To keep the service running reliably, deliver notifications and protect account security, we collect the following when your device reports to our servers.

Information	Scenario and purpose	How collected	Required?
Android ID (SSAID)	When the device registers with or reports device information to our servers, for device registration and push identification, and to keep multiple accounts on the same device separate	The app reads the system Android ID and reports it to our servers; not shared with any third party. Retained while the account exists and the device is still used to receive notifications; deleted or anonymized after account cancellation or deletion of the device record	Required
OAID (anonymous device identifier, Android only)	When the app launches and initializes the Umeng+ analytics SDK, for usage analytics and crash attribution by that SDK	Read on-device by the Umeng+ analytics SDK and transmitted to Umeng Tongxin (Beijing) Technology Co., Ltd. We do not use it for device registration or push, and we do not retain it ourselves on a long-term basis. Umeng's retention period is as stated in its published privacy policy	Collected for analytics
Push credential issued by the operating system, device platform, application package name, last report time	To identify the device for notification delivery	Collected automatically and reported to our servers	Required
Device brand, device model, OS version, app version	To adapt behaviour across devices and OS versions, and to diagnose crashes, stutters or malfunctions you encounter	Collected automatically	Required
Notification permission status	To diagnose why notifications cannot be delivered	Read from system notification settings	Required
App interface language and system language preference list	To make notifications and in-app messages match your interface language, and to analyse language usage when deciding which languages to support next	Read from your system settings	Required
Time zone identifier and offset from UTC	To keep calendar-day archiving, collage timestamps and notification times consistent with your time zone	Read from your system settings	Required
IP address	To detect abnormal logins and guard against account theft and abuse	Recorded by the server when your device reports device information	Required (we do not log the IP address of every request you make)

5. Sensor Information

The following sensor information is processed only on your device. It is not uploaded to our servers and is not provided to any third party.

Information	Scenario and purpose	How collected	Required?
Device physical orientation (portrait/landscape or rotation state)	When you enter the capture screen to take a photo or video sticker, to correct the preview and the captured result so content is not inverted	Read from the system orientation sensor and processed only on-device; reading stops when you leave the capture screen. Not uploaded or stored	Read when you use capture; not uploaded

6. Device Permissions

Each system permission below is requested only when you first use the corresponding function, never all at once on launch. You can revoke any of them in system settings at any time; doing so affects only the related function.

Permission	When and why it is used	If you decline
Camera	When you actively open the capture screen to take a photo or video for a sticker	You cannot capture in-app, but can still pick material from your album
Microphone	To capture the audio track while you record a video sticker	Automatically falls back to a silent video sticker; publishing is unaffected
Photos / media library	When you pick images to make stickers or set a background, and when you save a generated share image to your album	You cannot pick local material or save share images
Approximate location	Optionally records the city/district where you publish a sticker	Location is silently omitted; publishing is unaffected
Notifications	To deliver collection activity, comments, chat and other notifications	You will not receive notifications; other functions are unaffected

7. Retention Period

•The personal information above is retained for as long as your account exists, so that we can keep providing the service.
•After you cancel your account, we delete or anonymize your personal information, including account details, device records (including Android ID / SSAID), uploaded content and interaction relationships, except where laws and regulations require retention.
•OAID is collected by the Umeng+ analytics SDK and transmitted to Umeng; we do not retain it ourselves on a long-term basis. Umeng's retention period is as stated in its published privacy policy.
•Storage location: by default, servers within the territory of the People's Republic of China.

8. How to Manage This Information

•Access and correction: view and edit your nickname, avatar and other details on the "Profile" page.
•Withdraw authorization: turn off camera, microphone, photos, location or notification permissions in system settings.
•Delete content: delete the stickers, collages, comments and chat messages you have published.
•Cancel your account: go to "Profile → Account & Security → Delete Account"; after a second confirmation we delete your account and related information.
•Other rights: you may also use the contact details below to request a copy of your personal information, restrict its processing, or learn about our processing rules.

9. Contact Us

If you have any questions, comments or complaints about this list or our processing of personal information, please contact us:

•Operator: Beijing Prime Beyond Technology Co., Ltd
•Email: privacy@primilab.com
•We will respond within 15 business days after receiving your request and verifying your identity.