I'm struggling to understand the following sentence:
You may not collect user or device data without prior user consent, and then only to provide a service or function that is directly relevant to the use of the Application.
What exactly does it mean? Does it mean:
You may not collect data without user consent. If the user agrees to allow you to collect data, you can only collect data to provide a service or function that is directly relevant to the use of the Application.
Why can the phrase “and then only” be used in such a way?