AMPPAL Privacy Policy
App name: AMPPAL
Service type: electric-vehicle charging station search, QR-code charging, orders, and digital wallet
Effective date: 10 September 2026
This Policy explains how Anfu New Energy (Hong Kong) Limited collects, uses, shares, stores, and deletes your personal data through AMPPAL (the “App”), and the rights you have. The App is published worldwide on Google Play. It also meets Google Play’s requirements for a privacy policy and the Data safety declaration, and follows Hong Kong’s Personal Data (Privacy) Ordinance (Cap. 486, the “PDPO”). If other mandatory privacy or data-protection laws apply where you live (for example the EU GDPR, UK GDPR, California CCPA/CPRA, or China’s Personal Information Protection Law), the rights those laws give you are not limited by this Policy. See section 16.
Please read it carefully before use. If you do not agree, do not register or use the App.
1. Data user and contact
| Item | Details |
|---|---|
| App name | AMPPAL |
| Data user (operator) | Anfu New Energy (Hong Kong) Limited |
| Contact email | xfj202309@gmail.com |
| In-app access | Profile → Legal agreements → Privacy Policy |
| Other requests | In-app “Contact us” |
Google Play requires a privacy policy to provide a publicly reachable contact. Please keep the email in the table above active.
2. What the App provides
AMPPAL is an electric-vehicle charging service app operated by Anfu New Energy (Hong Kong) Limited and offered to users worldwide. Main features include:
- find and browse charging stations and connector status
- show nearby stations on a map and open navigation
- start and stop charging by scanning the equipment QR code
- charging orders, occupancy fees, and history
- digital-wallet top-up, balance, and packages
- account registration and sign-in (email or third-party login such as Google / Facebook)
- vehicle information and charging IC-card management
- favorite stations, notices, and multiple languages
- optional biometric (password-free) sign-in
- in-app account deletion and customer support
We process personal data only as needed to provide these features, keep the service secure, and comply with the law.
3. Data we collect
3.1 Data you provide
| Data | When collected | Purpose |
|---|---|---|
| Email and phone number | Sign-up, complete profile, reset password | Create the account, verify identity, contact you |
| Login password | Sign-up and password change | Authentication (stored hashed/encrypted, never in plain text) |
| Nickname and similar profile details | When you edit your profile | Show account information |
| Third-party login authorization data | When you sign in with Google, Facebook, Apple, or Telegram | Quick sign-in and account linking (limited to what you authorize on that platform) |
| License plate, vehicle type, battery capacity | When you add or edit a vehicle | Vehicle management and charging |
| Charging IC card number | When you bind a card | Card charging and card management |
| Top-up amount and payment channel | Wallet top-up or order payment | Complete payment and bookkeeping |
| Name, email, WhatsApp, and message | When you use “Contact us” or file a complaint | Customer support |
Payments: the App records transaction data such as order ID, amount, and payment status. Card numbers, CVV, and full payment credentials are handled by the payment provider you choose, on its own page. The App does not store full card numbers or CVV.
3.2 Data collected automatically
| Data | How collected | Purpose |
|---|---|---|
| Device identifier (e.g. Android ID), brand, model, OS version, language | On launch or sign-in | Account security, device recognition, compatibility, troubleshooting |
| Network type and connectivity | When using online features | Keep charging status in sync and payments available |
| Precise / approximate location | After you grant location permission and open the map or nearby-stations view | Show nearby stations and calculate distance |
| Live camera preview | After you grant camera access and scan | Read a charger or login QR code |
| Charging-session data | After a session starts | Billing, orders, support, and reconciliation |
| Wallet ledger and orders | After top-up or charging settlement | Statements and refunds |
| Favorites, UI language, and similar preferences | When you use those features | Remember settings |
| Diagnostics (crashes, network errors, current screen, redacted error text) | When a failure occurs | Fix issues and improve stability |
Diagnostic reports strip sensitive fields such as passwords, login tokens, email addresses, and phone numbers before they are sent.
3.3 Location, biometrics, and payment data
Precise location, on-device biometric verification results, and payment / account transaction data are processed only as needed for charging, payment, and account security. Location and camera access are obtained through the system permission prompt; password-free sign-in is turned on with a feature switch. You may refuse; only that feature will be unavailable, and you can still browse public station information.
Raw biometric templates are verified only by the Android system on the device and are not uploaded to our servers. We store only whether password-free sign-in is turned on.
3.4 Data we do not collect
- gallery, photos, videos, or media files on the device
- contacts, SMS content, or call recordings
- microphone audio or calendar
- a list of other installed apps
- raw biometric templates (fingerprint or face)
We do not sell personal data and do not use it for direct marketing, advertising profiling, or cross-app tracking unrelated to charging. If we later intend to use personal data for direct marketing, we will notify you and obtain consent as required by the PDPO.
4. Android permissions and sensitive data
The App requests permissions only when the related feature is actually needed. You may refuse; only that feature will be unavailable, and you can still browse public station information. You can revoke access at any time in system Settings → Apps → AMPPAL → Permissions.
| Permission / capability | Google Play sensitive-data type | Use | Not used for |
|---|---|---|---|
| Camera | Camera | Scan charger or login QR codes | Saving photos, uploading a gallery, collecting face templates |
| Flashlight | — | Help scanning in low light | — |
| Precise / approximate location | Location | Map search for stations and show distance | Background tracking or ads |
| Biometrics | Authentication information | Optional password-free sign-in | Uploading biometric data |
| Phone | — | Call the station or support | Reading call content |
| Network / Wi-Fi state | — | Know whether charging and payment can run | Identifying other people on nearby Wi-Fi |
| Vibrate | — | Scan and similar feedback | — |
| Wake lock | — | Keep the session from sleeping during a charge | — |
| Read account list (third-party login) | Personal info / accounts | Google, Facebook, and similar sign-in | Reading unrelated accounts |
| Read phone state | Device or other IDs | Build a device identifier and protect the account | Reading calls or IMEI (IMEI is not available on Android 10+) |
The App does not request read/write external storage or photo/video permissions, because it has no image-picker or gallery features.
When location and camera are collected: only in the foreground, when you actively use the map or scanner. Turning the permission off stops access immediately.
5. How we use data
We handle personal data in line with the PDPO’s Data Protection Principles: collection is for a lawful purpose directly related to the charging service, and the data are adequate but not excessive. Use is limited to the purposes in this Policy. If the purpose changes, we will tell you again and obtain prescribed consent where required.
| Purpose | Main data | Notes |
|---|---|---|
| Sign-up, sign-in, charging, and wallet | Account, orders, device, vehicle, card | Performance of the contract |
| Nearby stations and map | Location | Consent (system location permission) |
| Start charging via QR code | Live camera frames (not stored) | Consent (camera permission) |
| Password-free sign-in | On-device biometric result | Consent |
| Payment and refunds | Transaction data | Performance of the contract |
| Fraud prevention and account/transaction security | Device ID, sign-in and transaction records | Contract / legal obligation |
| Support, notices, complaints | Contact details and orders | Contract or your request |
| Diagnostics and product improvement | Redacted diagnostic logs | Keep the service stable and secure |
| Tax, accounting, and regulatory duties | Transaction records we must keep | Legal obligation |
We will not use data for purposes that are not described in this Policy and have no reasonable link to charging.
6. Sharing
We do not give your personal data to third parties except as follows.
| Recipient | What is shared | Why |
|---|---|---|
| Google (Maps, Sign-In, Play services, on-device QR scanning) | Location (when you use the map), login data you authorize, device environment | Map search for stations, Google Sign-In, QR reading |
| Meta (Facebook Login) | Account identifier and public data you authorize | Facebook Login |
| Apple | Login data you authorize | Sign in with Apple (if you use it) |
| Telegram | Identifier needed for login | Telegram login (if you use it) |
| Payment processors | Order ID, amount, and required transaction fields | Complete a top-up or payment |
| Charge-point / equipment operators | Device and session data needed to start or stop charging | Send commands to the charger |
| Cloud and infrastructure providers | Business data transmitted and stored with encryption | Host servers and databases |
| Administrative or judicial authorities | Only what the law expressly requires | Legal compliance |
Third parties process data under their own privacy policies. Before you use their login, maps, or payment pages, please also read:
- Google: https://policies.google.com/privacy
- Meta: https://www.facebook.com/privacy/policy
- Apple: https://www.apple.com/legal/privacy
- Telegram: https://telegram.org/privacy
If we merge with, are acquired by, or transfer assets to another organization, personal data may transfer with the business. We will require the recipient to protect the data at least to the standard of this Policy, or we will ask for your consent again.
7. International transfers
The App is operated by a company incorporated in Hong Kong and is offered to users worldwide. Business data may be stored or processed in Hong Kong and in other countries or regions where we, our cloud providers, or the third parties in section 6 operate (including the United States, because of services such as Google, Meta, and Apple). Your personal data may therefore be transferred outside the country or region where you live.
We protect the data through reasonable measures such as encryption in transit and contractual safeguards. Where the law requires it (for example when transferring data out of the EEA, the UK, or Switzerland), we will use legally recognised safeguards such as the EU Standard Contractual Clauses or an equivalent mechanism.
8. Retention and security
Retention
- Account and profile: for the life of the account; after deletion, erased or anonymized except where the law requires keeping records
- Orders, top-ups, and invoices: kept for the periods required by Hong Kong tax law and any tax, accounting, or consumer-protection rules that apply where you live, then deleted or anonymized
- Location: processed only while you use the map or nearby-stations feature; we do not build a long-term movement profile
- Scanner frames: processed in real time; we do not save photos or videos
- Diagnostics: kept only as long as needed to investigate issues
- Biometrics: raw templates stay in the device OS; we store only whether password-free sign-in is turned on
When the retention period expires, or the purpose of collection has been fulfilled, cannot be fulfilled, or is no longer necessary, we will delete or anonymize the personal data unless the law provides otherwise.
Security
We implement security measures consistent with the PDPO, including:
- Internet traffic over HTTPS; charger channel over encrypted WebSocket (WSS)
- Passwords are never stored in plain text
- Optional login credentials in the Android system Keystore; reading them requires fingerprint, face, or the device lock
- Least-privilege permissions; no gallery or storage access
- Internal access limited by role
No system is perfectly secure. Keep verification codes and passwords private, and do not enable password-free sign-in on someone else’s device.
9. Your rights
Under the PDPO, you may:
- be informed of the purpose and use of the personal data we collect
- make a data access request to confirm whether we hold your personal data and obtain a copy
- make a data correction request to correct inaccurate data
- withdraw consent for optional features (for example by turning off location, camera, or biometrics)
- delete your account (see section 10)
- learn whether data is shared and with whom
- object to use of data for purposes not directly related to charging (including direct marketing)
- lodge a complaint with the Privacy Commissioner for Personal Data, Hong Kong
Local law where you live may give you additional rights (for example erasure, restriction, portability, or objection to processing based on legitimate interests). How to exercise them is described below and in section 16.
How to exercise them
- view or edit profile, vehicles, and cards: in the corresponding screens in the App
- revoke permissions: Android system settings
- turn off password-free sign-in: security options in Profile
- delete the account: Profile → Delete account (completed inside the App)
- access / correction and other requests: in-app “Contact us”, or send email to the address in section 1
We will handle requests within a reasonable time and as required by the PDPO and any other law that applies where you live. To prevent impersonation, we may need to verify your identity. Records we must keep by law, or that relate to an open transaction or dispute, may not be erased immediately.
Complaints: Office of the Privacy Commissioner for Personal Data https://www.pcpd.org.hk . Other regulators are listed in section 16.
10. After account deletion
Sign-in ends at once, and the account can no longer be used to charge or pay. We delete or anonymize profile, vehicles, favorites, and IC-card bindings. Order and financial records that the law requires us to keep are deleted when that period ends. Wallet balance is handled under the in-app refund / closure rules. Deletion cannot be undone.
11. Children
The App is an electric-vehicle charging service for people who can use charging and payment independently. It is not directed at children under 13, and we do not knowingly collect their personal data. If you believe we have collected a child’s data by mistake, contact us using section 1 and we will delete it.
Users under 18 should use the App with a parent or guardian’s consent. In parts of the EEA the digital age of consent is 13 to 16; below that age, a guardian’s consent is required. For users in mainland China, we will obtain guardian consent as required by law before processing personal data of a child under 14.
12. Third-party pages
Payment, third-party login authorization, and system map navigation may open external pages or apps. Data processing there is governed by the other party’s policy. We do not control those pages.
13. Local storage
The App uses on-device storage for sign-in state, language, the password-free sign-in switch, and similar settings so they persist the next time you open the App. This data is not used for advertising tracking. You can clear the App’s data in system settings; you will need to sign in again afterwards.
14. Changes to this Policy
We may update this Policy. We will revise the effective date at the top and publish the new version on this page. If a change expands collection, adds new recipients, or alters the main purpose, we will also notify you in the App. Continued use after an update means you accept the revised Policy. If you do not agree, stop using the App and delete your account.
15. Governing law
This Policy is governed by the laws of Hong Kong (including the PDPO) and Google Play’s User Data policy. This does not affect any mandatory consumer or data-subject protections that apply in your place of habitual residence. If a translation conflicts with the English text, the English text controls.
16. Additional information for users worldwide
The App is offered worldwide. As a Hong Kong data user we primarily follow the PDPO. If mandatory law where you live says otherwise, the rule that is more protective of you, or that the law requires us to apply, prevails. To exercise the rights below, use the email in section 1 or in-app “Contact us”. If the law requires us to appoint an EU, UK, or other regional representative, we will publish the details in this Policy; until then, use the contact in section 1.
16.1 EEA, United Kingdom, and Switzerland
If the GDPR, UK GDPR, or Swiss law applies to you, Anfu New Energy (Hong Kong) Limited is the controller. The main legal bases for the purposes in section 5 are:
| Processing | GDPR basis |
|---|---|
| Sign-up, charging, wallet, payment, support | Performance of a contract (Art. 6(1)(b)) |
| Map location, camera for scanning, password-free sign-in | Consent (Art. 6(1)(a)); you may withdraw at any time, without affecting processing before withdrawal |
| Fraud and account security; redacted diagnostics | Legitimate interests (Art. 6(1)(f)): keeping transactions and the service safe and stable |
| Keeping transaction records as required by law | Legal obligation (Art. 6(1)(c)) |
We do not upload raw biometric templates. Optional password-free sign-in is verified on the device by the system. We do not profile you for advertising.
In addition to section 9, you may access, rectify, erase, restrict, receive a portable copy, object to processing based on legitimate interests, withdraw consent, and lodge a complaint with your local authority (an EU member-state data protection authority, the UK Information Commissioner’s Office https://ico.org.uk , or the Swiss FDPIC). When transferring data out of the EEA, the UK, or Switzerland, we will use Standard Contractual Clauses or an equivalent safeguard where the law requires it.
16.2 California, United States
If the California Consumer Privacy Act (CCPA, as amended by the CPRA) applies to you:
- Categories we collect are described in section 3 and mainly include: identifiers (email, phone, device ID, account), customer records, commercial / transaction information, precise geolocation, and internet or electronic-device information (diagnostics, language, and similar). Sensitive personal information may include account log-in data and precise geolocation. Raw biometric templates do not leave your device.
- We use and disclose this information for the purposes in sections 5 and 6 — providing charging, security, and compliance — not for cross-app advertising.
- We do not sell personal information and do not share it for cross-context behavioural advertising as those terms are used in the CCPA. We also do not use sensitive personal information to infer characteristics.
- You may: know, delete, correct, opt out of sale/sharing (this does not currently apply, because we do not sell or share), limit the use of sensitive personal information, and not be discriminated against for exercising these rights.
- We may need to verify your identity. You may submit a request through an authorised agent.
16.3 Mainland China
If the Personal Information Protection Law applies to you, Anfu New Energy (Hong Kong) Limited is the personal-information processor. Precise location, payment and account transaction data, and biometric-related data may be sensitive personal information under that law; see section 3.3. Using services such as Google or Meta may transfer related data outside mainland China. Where the law requires it, we will inform you and obtain separate consent, and we will use measures such as encryption in transit and contractual safeguards. You may access, copy, correct, delete, or withdraw consent, or complain to the Cyberspace Administration of China and other competent authorities (https://www.cac.gov.cn).
16.4 Other countries and regions
You may have further rights under local law, for example Brazil’s LGPD, the Philippines’ Data Privacy Act of 2012, Singapore’s PDPA, or Australia’s Privacy Act. Contact us using section 1 to exercise them. We will handle requests as required by applicable law.