Shokz

"Device or SIM-related information (only for specific services/functionalities): information related to your device. For example, IP address, IMEI number. The AndroidX Webkit SDK collects SSID, BSSID, MAC address, WIFI information, sensor, application list information, clipboard."

The app collects IMEI numbers, and a third-party SDK (AndroidX Webkit/Chromium) accesses clipboard contents, installed application lists, WiFi network identifiers, and sensor data — far beyond what a headphone companion app needs.

"In order to enable you to use the above services and features, our application may embed SDKs or other similar applications from licensed partners. We may embed the following third party SDKs: NetEase Yidun, AndroidX Webkit (chromium), jl_ota, Bugly SDK, Firebase Analytics, Firebase Crashlytics."

The app embeds at least six third-party SDKs that independently collect personal information ranging from advertising IDs and device models to MAC addresses and clipboard data, sharing user data broadly with companies like Google, Tencent, and NetEase.

"Name of the third party SDK: Firebase Analytics (Android). Company: Google LLC. Type of personal information collected: AD_ID, android ID. Purpose of use: Provide data analysis on the usage of the application."

Firebase Analytics collects the Android advertising ID (AD_ID) and Android device ID, which are persistent identifiers commonly used for cross-app and cross-service user tracking by Google's advertising ecosystem.

"Name of the third party SDK: AndroidX Webkit (chromium). Type of personal information collected: SSID, BSSID, MAC address, WIFI information, sensor, application list information, clipboard. Purpose of use: Use chromium as a built-in browser to access the browse webview page within the App."

Collecting WiFi SSIDs and BSSIDs enables precise location tracking, as WiFi access point identifiers can be mapped to physical locations — this goes well beyond what a built-in browser component requires.

"Personal information will be held for as long as it is necessary to fulfill the purpose for which it was collected, or as required or permitted by applicable laws. We shall delete personal information, or anonymise it, as soon as it is reasonable to assume that the purpose for which that personal information was collected is no longer being served by retention of the personal information."

The policy provides no concrete retention periods and uses subjective language like 'as long as necessary' and 'as soon as it is reasonable to assume,' giving the company broad discretion to retain data indefinitely.

"If we make a substantial change to this Policy, you will receive the corresponding notification required by applicable laws. If you continue to use this service, we confirm that you have read and understood the latest version of the Privacy Policy."

While substantial changes trigger notifications, continued use of the service is treated as acceptance of the new terms, giving users no meaningful mechanism to reject changes without abandoning the service entirely.

"If you would like to delete your entire User Account, you can apply to delete your account in the following ways: Log into the App and submit an account deletion application through 'Information-Register your product-Log In/Register-Personal Information-Edit Profile-Delete Account'; Send an email to privacy@shokz.com to get in touch with us to help and assist you in applying for deleting your account."

Account deletion is framed as an 'application' process rather than an immediate self-service action, and the email-based alternative requires contacting support, creating friction around deletion.