Last updated: March 29, 2026

Introduction and Applicability

Welcome to LastWords. We understand the importance of your privacy, which is why we have created this Privacy Policy to explain how we collect, use, store, and protect your personal information.

By using this application, you agree to all terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use this application.

This application is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If such information is discovered, we will delete it promptly. If you are a guardian and discover your child has provided information without your consent, please contact us.

1. Information We Collect

1.1 Account Information

Email Address: Used for account registration, login, and identity verification

Password: Encrypted and stored for account security

Avatar: Profile images you upload (including auto-generated thumbnails), used for profile display and Starlight Messages author/commenter avatars

1.2 Content Information

Whispers: Whispers, titles, and related descriptions you create

Recipient Information: Names and email addresses of recipients

Delivery Settings: Delivery conditions, trigger methods, and configuration

1.3 Usage Information

Activity Records: Used to determine account activity status

Login Records: Login times, IP addresses (for security protection)

Operation Logs: Records of creation, editing, deletion operations

Starlight Messages Interactions: User IDs and action records for likes, comments, reports, used for feature provision and compliance

Language and Region Preferences: Used for interface display and content presentation

1.4 Android app permissions (Google Play)

On Android we may request permissions needed for features: network access to sync with our services; camera and photos or media access to capture or pick images and videos for your content and avatar; microphone access when voice-related features are used. System labels vary by Android version. You can allow or deny them in Settings; denying may limit those features. The app is built with uni-app (DCloud); device identifiers may be used as described in the first-launch notice and the linked DCloud app engine privacy policy.

2. How We Use Your Information

We collect information solely for the following purposes:

• To provide and maintain LastWords service features

• To verify user identity and protect account security

• To deliver your whispers to recipients under your specified conditions

• To monitor activity status and trigger automatic delivery mechanisms

• To improve application experience and optimize service quality

• To comply with legal and regulatory requirements

3. Information Storage and Security

3.1 Encryption Protection

• Your whispers are encrypted using AES-256-CBC military-grade encryption

• Passwords are hashed using bcrypt (irreversible encryption)

• All data transmission uses HTTPS encrypted channels

3.2 Access Control

• JWT (JSON Web Token) for identity authentication

• Strict access control - only you can access your own whispers

• System logs record all sensitive operations for security audits

3.3 Data Backup

• Regular data backups to ensure no data loss

• Backup data is also encrypted and stored securely

4. Information Sharing and Disclosure

We promise:

• We will never sell your personal information to any third party

• We will never rent your personal information to any third party

• We will only share information in the following circumstances:

- With your authorization, to deliver your whispers to designated recipients

- To comply with laws, court orders, or government requirements

- To protect the rights, property, or safety of LastWords, users, or the public

5. Your Rights

You have the following rights:

Access Right: View your personal information and whispers at any time

Modification Right: Modify your account information and whispers at any time

Deletion Right: Delete your whispers or deactivate your account at any time

Export Right: Request to export all your data (feature coming soon)

Note: After account deactivation, all your data will be permanently deleted and cannot be recovered, except for emails already sent.

6. Cookies and Tracking Technologies

This application uses minimal local storage technologies:

• Store login credentials (Token) to maintain login status

• Store user preferences (such as language selection)

We do not use any third-party tracking or analytics tools

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted within the application with the last updated date at the top. Significant changes will be notified through in-app notifications or email.

Continued use of this application indicates your acceptance of the updated Privacy Policy.

8. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy, please contact us:

• Email: privacy@lastwords.app

We will respond to your request within 7 business days of receipt.

Thank you again for trusting LastWords. We promise to do our utmost to protect your privacy and data security.