Document

Privacy Policy

Effective Date: October 8, 2024

This Privacy Policy (hereinafter referred to as this “Policy”) applies to [HFfit Pro] and its services (hereinafter referred to as “Products”) provided to you by [Shenzhen Ziyan Huihe Artificial Intelligence Co., Ltd.] (hereinafter referred to as “we” or “Ziyan”).

We value your privacy and understand the importance of your personal information. This Policy explains how this product will handle your personal information, how we will protect it, and your rights. Please read this Policy carefully and fully understand it before using the product . We have highlighted key points in bold and underlined for your attention . By using this product, you acknowledge that you fully understand and agree to our handling of your information in accordance with this Policy. If you disagree with the terms of this Policy, we will not be able to provide you with this product. Please immediately cease accessing/using this product.

This policy will help you understand the following:

How we collect and use your personal information
How we entrust the processing, sharing, transfer and public disclosure of your personal information
How we store your personal information
How we protect your personal information
How we use cookies and similar technologies
How do we handle personal information of minors?
How you exercise your rights to manage your personal information
How this policy is updated
How to contact us

It should be noted that this policy does not apply to software , products or services provided to you by other third parties ("other third parties" include your transaction counterparties outside of this product, any third-party websites, and third-party service providers, etc.). Third-party services are subject to their own privacy policies. Before choosing to use third-party services, you should fully understand the functions and privacy policies of the products/services of third-party services.

If you have any questions about this Privacy Policy while reading it, you can contact us through the contact information at the end of this Privacy Policy and we will respond to you as soon as possible.

How we collect and use your personal information

Personal information refers to all information related to an identified or identifiable natural person recorded electronically or otherwise, excluding anonymized information. We will only collect and use your personal information for the following purposes as described in this Policy:

Circumstances where your personal information must be collected and used to provide you with basic product functions

To enable the basic business functions of this product, we may need to collect personal information from you. The following details the basic business functions of this product and the personal information required to enable them. If you refuse to collect this information, you will not be able to use the basic functions of this product or service .

Basic business functions	Information to be collected	Purpose and method of processing information
Device Management	Device identifier (including MAC address), device hardware communication, device usage information, basic system information, and network information	The service provides users with the ability to establish Bluetooth connections, manage device configurations, perform software upgrades, display data sources, and count device activations. Through a user-friendly interface, users can easily pair devices, adjust configurations, remotely update device software, and obtain device data source information.
Sports data management	Exercise data (distance, exercise type, exercise duration, calories), location information (latitude and longitude)	This service also processes your location information, primarily for recording, backing up, and managing your exercise data. By collecting and analyzing location information, the system can provide you with accurate data display of movement trajectory, movement distance, and other data. It also supports cloud backup, ensuring that your exercise data is securely stored and effectively managed. When processing location information, the system strictly adheres to the privacy protection policy and only collects and uses data to the necessary scope to ensure your privacy and security.
Health Data Management	Health data (heart rate, steps, calorie consumption, blood pressure, sleep, exercise trajectory, blood oxygen saturation, blood pressure, exercise duration, body temperature)	When this service records, backs up, and manages your health data, specific personal information fields that may be involved include: heart rate, steps, calorie consumption, blood pressure, sleep, exercise trajectory, exercise duration, body temperature, and blood oxygen saturation. The system uses this data to provide you with health status analysis and supports data backup, ensuring that your health information is securely stored and managed. All data processing strictly adheres to privacy protection requirements and is collected and used only to the extent necessary.
Navigation function	Real-time GPS positioning information, current location, destination, driving path	Baidu Navigation calculates navigation routes by acquiring real-time location information. Device information and usage data are used to optimize system performance and enhance user experience. Some data is stored locally and in the cloud, providing data backup services. All information processing strictly complies with the privacy policy to ensure data security and user privacy protection.
Ride code function	The Alipay QR code feature collects user location information, device information (such as phone model and operating system), payment information (such as payment account, balance, or bank card information), and ride usage data (such as ride time, location, route, and QR code scan history) . This information is primarily used to ensure the proper functioning of the QR code feature, including generating QR codes, verifying user identities, and calculating fares.	Alipay uses location information and usage data collected to provide users with accurate ride-hailing services, calculating fares in real time and automatically deducting payments. Additionally, device information and payment data are used to enhance system security and prevent fraud. All personal information is handled in strict compliance with our privacy policy. Data is encrypted during the payment process and stored on secure servers to ensure user privacy and transaction security. Users can also review or delete their ride records and related data at any time.
User Personal Information	Avatar, nickname, gender, birthday, height, weight	Allows users to modify and update their personal data. This basic data (calories, height, weight, age, gender, stride length, gender, height) is used to calculate calorie consumption and stride length on the client side. It also displays personal information.

Circumstances where your personal information must be collected and used to provide you with product expansion and business functions

In order to provide you with better products and services, we need to collect relevant information. If you refuse to provide the following information, it will not affect your normal use of the basic business functions of the product described in item (1), but we will not be able to provide you with certain specific functions and services.

Expand business functions

Personal information to be collected

Purpose and method of processing information

Problem feedback

Device information (basic system information, device name, device identifier, IMEI, Mac address, system logs, system usage information, device usage information, IMSI, Android ID, Android advertising ID, OAID, hardware serial number, SIM card ID, etc.), exercise data (number of steps/exercise distance/exercise duration/calories/geographic location information), your IP address, operating system, network access method, type and status, operation logs, service logs

Feedback on problems or suggestions encountered during use

Circumstances in which we obtain your personal information indirectly from third parties

If we obtain your information indirectly from a third party, we will clearly request in writing that third party to explain the source of their personal information and whether they have obtained your legal authorization to collect, process, and provide us with your personal information before collection. Except where expressly permitted by law, we will only collect your personal information from a third party after confirming that the third party has obtained your authorization. If the scope of the third party's authorization does not cover our processing and use purposes, we will either obtain your consent ourselves or require the third party to obtain your consent before processing your personal information. We will protect indirectly obtained personal information using means and measures no less stringent than those we use to protect our own users' personal information.

We may obtain your authorized account information (nickname, profile picture) from a third party so that you can log in directly to our products or services through your third-party account. To do this, we require you to agree to this Policy and bind your third-party account to your account for this product. We will only collect and use your personal information within the scope of your authorization.

Device permission call

To provide you with convenient and high-quality services, we may invoke some of the permissions of your device. The following is a list of the device permissions we may invoke and the corresponding purpose of use. You have the right to choose to disable the authorization of the following permissions at any time, but this may affect your normal use of some or all of the functions of the relevant services or products.

You understand and agree that by enabling the following permissions, you consent to our collection and use of the personal information permitted by such permissions to implement the corresponding business functions. By disabling permissions, you withdraw your consent, and we will no longer collect and use such personal information. Your decision to disable permissions will not affect the processing of your personal information previously conducted based on your consent.

Device permissions	Purpose of calling permissions	Do you ask	Can I turn off permissions?	The impact of disabling permissions on corresponding functions
Storage permissions	When you use features such as sharing, vibration step counting, or account login, you can choose to enable this permission to read or write application usage information, images, videos, and intermediate step count data.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Camera permissions	When you connect a device, bind a bus card, or use group functions by scanning a QR code, we need to apply for and obtain this permission from you in order to complete the picture capture.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Location permissions	When you use features such as generating track images for a single workout, Bluetooth pairing, weather notifications, or other location-related searches, you can choose to enable this permission to determine your current location. This will also allow you to more accurately locate the earphones.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Bluetooth usage permission	Both location permissions and Bluetooth usage permissions are used to obtain the power of low-power Bluetooth headsets.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Access device information status	It actually verifies the user's device information (basic system information, device name, device identifier, IMEI, Mac address, system logs, system usage information, device usage information, IMSI, Android ID, Android advertising ID, OAID, hardware serial number, SIM card ID, etc.).	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Phone permissions	When you pair with an associated device, activate a card, or use functions such as making and receiving calls, rejecting calls, and receiving call information on the wearable device, you can choose to enable this permission to obtain the call status.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Microphone permissions	When you use a wearable device to issue voice commands, use the call function, or transmit data through the audio interface, some devices require access to the microphone.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Call log permissions	When you use a wearable device to push missed call numbers, control volume, and call channels, you can choose to enable this permission so that the missed call numbers can be displayed on the paired device and the call status of the phone can be synchronized.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
Contacts permissions	When you use the wearable device and group contact adding service, you can choose to enable this permission to quickly import your mobile phone address book into the wearable device to initiate calls or add group member information.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.
SMS permissions	When you use a wearable device to reject a call and send a text message, you can choose to enable this permission to send the text message to a specified contact.	yes	yes	If you do not need such services, you can turn off this permission at any time, which will not affect the use of other services.

Application auto-start and associated startup

To allow you to experience the offline reminder function of the APP message, experience the APP functions more comprehensively, and provide better service, after you agree to this privacy policy, the APP will enable the self-start or linked start function when necessary. After you use our APP and exit, to avoid missing important messages such as health reminders and call reminders, after you agree to this privacy permission, the APP may perform self-start or linked start after exiting to deliver important messages to you in a timely manner.

Exceptions to obtaining authorization to process your personal information

You fully understand that, in accordance with relevant laws and regulations, we do not need your authorization or consent to process (including collect , store, use, process, transmit, provide, disclose, delete, etc.) your personal information in the following circumstances :

Necessary for the performance of statutory duties or obligations;
It is necessary to respond to public health emergencies or to protect the life, health, and property safety of natural persons in an emergency;
Process your personal information that you have disclosed voluntarily or that has been legally disclosed within a reasonable scope in accordance with the provisions of the Personal Information Protection Law;
Necessary for the conclusion and performance of a contract to which you are a party, or necessary for the implementation of human resources management in accordance with legally formulated labor rules and regulations and legally signed collective contracts;
To process your personal information within a reasonable scope for news reporting, public opinion supervision, and other activities in the public interest; to process your personal information as necessary to maintain the safe and stable operation of this product and related services, such as discovering and resolving product or service failures;
Other circumstances stipulated by laws and administrative regulations.

Rules for the use of personal information

We will use the collected personal information in accordance with the provisions of this policy.
The personal information you provide in accordance with this policy or agree we collect will continue to be authorized for our use during your use of this product.
When we use your personal information for other purposes not stated in this Policy, or use information collected for specific purposes for other purposes, we will seek your consent in advance.

How we entrust the processing, sharing, transfer and public disclosure of your personal information
- Entrusted processing

Certain specific modules or features in our products are provided by external suppliers. For example, we may hire service providers to assist us in providing customer support.

For companies, organizations, and individuals that we entrust to process personal information, we will sign an agreement with them to stipulate the purpose, duration, processing method, type of personal information, protection measures, and the rights and obligations of both parties. We will require them to process personal information in accordance with our requirements, this Privacy Policy, and any other relevant confidentiality and security measures, and supervise the personal information processing activities of the trustees.

shared

We will not share your personal information with any company, organization or individual, except in the following circumstances:

Sharing with your prior explicit consent or authorization;
Sharing is required in accordance with applicable laws and regulations, legal procedures, mandatory requirements of government authorities or judicial decisions;
To the extent required or permitted by laws and regulations, it is necessary to provide information in order to protect the interests, property or safety of Ziyan, you and other users or the general public from damage;
Only by sharing your information can we realize the functions of our products or provide you with the services you need;
Sharing with our affiliates : Your personal information may be shared among our affiliates. We will only share necessary personal information, and such sharing is subject to the purposes stated in this Policy. If our affiliates want to change the purpose of processing your personal information, they will seek your authorization again.
Sharing with Authorized Partners : Certain of our services will be provided by authorized partners solely for the purposes stated in this Policy. We may share certain of your personal information with our partners to ensure the smooth delivery of the services we provide you. We will only share your personal information for legitimate, lawful, necessary, specific, and clear purposes, and only share the personal information necessary to provide the services. We will also sign strict confidentiality agreements with our partners, requiring them to handle your personal information in accordance with this Policy and any other relevant confidentiality and security measures. Our partners do not have the right to use shared personal information for any other purpose.

Currently, our authorized partners include the following types:

Suppliers, service providers, and other partners. We share information with suppliers, service providers, and other partners who support the functionality of our products. This support includes providing technical infrastructure services, data processing, marketing activities, logistics delivery, service quality monitoring, analyzing how our services are used, measuring the effectiveness of advertising and services, providing customer service, facilitating payments, or conducting academic research and surveys.
Authorized partners providing advertising and analytics services. Unless we have your permission, we will not share your personally identifiable information (information that can identify you, such as your name or email address, which can be used to contact or identify you) with partners providing advertising and analytics services. We will provide these partners with information about their advertising reach and effectiveness, but not your personally identifiable information, or we will aggregate and process this information so that it does not identify you personally.

In order to enable you to use the various services and features under this Policy, we may access software development kits (SDKs) or other similar applications provided by third parties. If you use such services provided by third parties, you agree that they will directly process your information. We will conduct strict security monitoring of the SDKs used by our partners to obtain personal information to protect the security of your personal information. You can view the third party's personal information protection rules through the relevant links as follows:

SDK name	SDK development entity name	Purpose of use/Function	Types of Personal Information	Privacy Policy Link
Alibaba Cloud Object Storage OSS SDK	Alibaba Cloud Computing Co., Ltd.	The user information collected by the Alibaba Cloud Object Storage SDK is primarily used to improve the user experience and facilitate data storage and transmission. This includes collecting device-related data, such as model and operating system, to enhance service functionality. In addition, network access and file management permissions are used to upload and download files.	Device model/device operating system	https://terms.alicdn.com/legal-agreement/terms/privacy_policy_full/20240202100310511/20240202100310511.html
APP payment client SDK	Alipay (Hangzhou) Information Technology Co., Ltd.	We use the Alipay SDK in our app to support features like payment codes and ride codes, ensuring a secure and efficient payment process. The information collected is used to enable a smooth transaction experience, such as facilitating payments and accessing transportation services. Data is processed with extreme caution and strictly used to provide these basic features.	Device information (such as device identifier, Bluetooth connection status) and transaction data related to the watch (such as payment information, transaction history)	https://opendocs.alipay.com/open/54/01g6qm#%E6%94%AF%E4%BB%98%E5%AE%9D%20App%20%E6%94%AF%E4%BB%98%E5%AE%A2%E6%88%B7%E7%AB%AF%20SDK%20%E9%9A%90%E7%A7%81%E6%94%BF%E7%AD%96
Crash SDK	Guangzhou Dongjing Computer Technology Co., Ltd.	Used to count the reasons for App crashes, so as to facilitate analysis and problem solving	Device information, such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information.	https://yueying-docs.effirst.com/privacy.html
QQ Interconnect SDK (Android version)	Shenzhen Tencent Computer Systems Co., Ltd.	Use QQ account for quick login	Device information, such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information. Location information, external storage, application list	https://wiki.connect.qq.com/qq%e4%ba%92%e8%81%94sdk%e9%9a%90%e7%a7%81%e4%bf%9d%e6%8a%a4%e5%a3%b0%e6%98%8e
U-Link Android SDK	Shenzhen Tencent Computer Systems Co., Ltd.	Advertising, advertising attribution, anti-fraud, advertising analysis	Location information, device information, such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information	https://e.qq.com/dev/help_detail.html?cid=5005&pid=5983
Huawei Unified Scan SDK (Android version)	Huawei Software Technologies Co., Ltd.	The app provides the function of scanning QR code to connect to the watch device	Device information, such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/device sensor list/telecom operator software and hardware feature information.	https://developer.huawei.com/consumer/cn/doc/HMSCore-Guides/sdk-data-security-0000001050043971
Umeng+ Application Performance Monitoring SDK	Umeng Tongxin (Beijing) Technology Co., Ltd.	Provide equipment application performance monitoring services	Device information, such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information.	https://www.umeng.com/page/policy
Umeng+ Mobile Statistics SDK	Umeng Tongxin (Beijing) Technology Co., Ltd.	Provide statistical analysis services	Device information, such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information.	https://www.umeng.com/page/policy
Number Verification-Android	Alibaba Cloud Computing (Beijing) Co., Ltd.	Mobile third-party quick login	Device information, such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information.	https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112211045_86198.html?spm=a2c4g.11186623.0.0.727039eb0HflH4
WeChat OpenSDK Android	Shenzhen Tencent Computer Systems Co., Ltd.	Help users log in to WeChat, use WeChat sharing functions, and help users use WeChat payment services	Payment acceptance terminal information, unique device identification code (such as the device's MAC, IMEI, etc.) information), hardware device model, terminal system type, software installation information, software version information used, software language setting information, Internet Protocol address (IP address), mobile network information (such as Wi-Fi information), device location information, region, network logs and network usage habits, and records of your operations using Tenpay services.	https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8
Kuaishou Alliance (Android)	Beijing Kuaishou Technology Co., Ltd.	Ad placement, ad attribution, anti-fraud, security, ad interaction	Basic information such as device brand, model, software system version resolution, network signal strength, IP address, device language, sensor information, Android ID, wireless network SSID name, WiFi router MAC address, device MAC address, device identifiers (such as IMEI, AID, IMSI, ICCID, GAID (GMS service only) MEID, device serial number build serial application information: application name, application package name, version number, application foreground and background status, advertising information, location information, performance data, operator information, device time zone	https://u.kuaishou.com/home/detail/1290
Baidu Android Map SDK (walking and cycling navigation version)	Beijing Baidu Netcom Technology Co., Ltd.	We implement navigation functionality through the Baidu Map SDK, aiming to provide users with accurate, real-time route planning and navigation services. By collecting users' real-time location information and combining it with Baidu Map's high-precision positioning technology, the app can dynamically adjust routes to avoid congestion, ensuring users can reach their destination quickly and safely.	Device information, such as IMEI/Android ID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information. Location information (may include latitude and longitude, device signal strength information, and sensor information (acceleration, gyroscope, direction, pressure, rotation vector, lighting, magnetometer)). Network type (such as mobile network, WiFi network)	https://lbs.baidu.com/index.php?title=openprivacy
Baidu Android Maps SDK	Beijing Baidu Netcom Technology Co., Ltd.	We implement navigation functionality through the Baidu Map SDK, aiming to provide users with accurate, real-time route planning and navigation services. By collecting users' real-time location information and combining it with Baidu Map's high-precision positioning technology, the app can dynamically adjust routes to avoid congestion, ensuring users can reach their destination quickly and safely.	Device information, such as IMEI/Android ID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information. Location information (may include latitude and longitude, device signal strength information, and sensor information (acceleration, gyroscope, direction, pressure, rotation vector, lighting, magnetometer)). Network type (such as mobile network, WiFi network)	https://lbs.baidu.com/index.php?title=openprivacy
Baidu Android Positioning SDK	Beijing Baidu Netcom Technology Co., Ltd.	We implement navigation functionality through the Baidu Map SDK, aiming to provide users with accurate, real-time route planning and navigation services. By collecting users' real-time location information and combining it with Baidu Map's high-precision positioning technology, the app can dynamically adjust routes to avoid congestion, ensuring users can reach their destination quickly and safely.	Device information, such as IMEI/Android ID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information. Location information (may include latitude and longitude, device signal strength information, and sensor information (acceleration, gyroscope, direction, pressure, rotation vector, lighting, magnetometer)). Network type (such as mobile network, WiFi network)	https://lbs.baidu.com/index.php?title=openprivacy
Baidu Mobile Ads SDK	Beijing Baidu Netcom Technology Co., Ltd.	Provide advertising delivery, advertising monitoring, advertising attribution, and anti-cheating functions to ensure stable and secure services	Basic information such as device brand, model, software system version resolution, network signal strength, IP address, device language, sensor information, Android ID, wireless network SSID name, WiFi router MAC address, device MAC address, device identifiers (such as IMEI, AID, IMSI, ICCID, GAID (GMS service only) MEID, Device serial number build serial, application information, application foreground and background status, advertising information, location information, performance data, operator information, device time zone	https://union.baidu.com/bqt/#/legal/policies
Pangolin Advertising SDK-Android	Beijing Bytedance Network Technology Co., Ltd.	Advertising, advertising attribution, anti-fraud, advertising analysis	Basic information such as device brand, model, software system version resolution, network signal strength, IP address, device language, sensor information, Android ID, wireless network SSID name, WiFi router MAC address, device MAC address, device identifiers (such as IMEI, AID, IMSI, ICCID, GAID (GMS service only) MEID, Device serial number build serial, application information, application foreground and background status, advertising information, location information, performance data, operator information, device time zone	https://www.csjplatform.com/privacy
iFLYTEK Voice Dictation (Streaming Version) SDK	iFLYTEK Co., Ltd.	Provide online speech synthesis services	Device number (IMEI number), device code (IMSI code), IP address, Android ID, China Mobile UAID , OAID, UUID 、MAC address	https://www.xfyun.cn/doc/asr/voicedictation/online_iat_sdkprivacy.html
Positioning SDK	AutoNavi Software Co., Ltd.	We collect and use personal location information through the AutoNavi Map SDK to provide accurate location-based services in our app's sports features, such as outdoor running and hiking. This information enhances the user experience by providing real-time data and customized routes. We ensure that all data collection complies with legal regulations and that users have full control over their privacy settings.	Device information such as IMEI/AndroidID/IDFA/OPENUDID/GUID/OAID/device MAC address/telecom operator software and hardware feature information. Location information (may include latitude and longitude, device signal strength information, and sensor information (acceleration, gyroscope, direction, pressure, rotation vector, light, magnetometer)). Network type (such as mobile network, WiFi network)	https://lbs.amap.com/pages/privacy/

transfer

We will not transfer your personal information to any company, organization or individual, except in the following circumstances:

Obtain your explicit consent or authorization in advance;
Transferring in accordance with applicable laws and regulations, legal process requirements, mandatory requirements of government authorities, or judicial decisions;
When personal information needs to be transferred due to mergers, divisions, dissolutions, or bankruptcy, we will inform you of the name and contact information of the recipient and require the new company or organization holding your personal information to continue to be bound by this Policy. If the recipient changes the original processing purpose or method, we will require the company or organization to re-request your authorization and consent.

Public Disclosure

We will only disclose your personal information in the following circumstances:

Obtain your explicit consent or authorization in advance;
In accordance with applicable laws and regulations, legal procedures, mandatory requirements of government authorities, or judicial decisions, we may disclose your personal information based on the requested type of personal information and disclosure method. In such cases, we will require the party requesting disclosure to produce corresponding valid legal documents and implement security measures for the disclosed information that comply with laws and industry standards.

How we store your personal information

Storage location

In accordance with the requirements of laws and regulations, we will store personal information collected and generated within the territory of the People's Republic of China ....

Because Ziyan is a global organization with business processes, resources, and technical systems spread across the globe, your personal information may be transferred outside the People's Republic of China, where permitted by law or with your authorization and consent. In such cases, we will ensure that your personal information receives the same level of protection as within the People's Republic of China. For example, we will request your consent for the cross-border transfer of personal information, or implement security measures such as data de-identification before cross-border data transfer.

Storage time

We will only retain your information for as long as your account is active or as needed to provide you with product-related services and technical support, unless a longer retention period is necessary for legitimate reasons or permitted by law. We will also retain your personal information for as long as necessary to comply with applicable legal obligations, resolve disputes, and enforce our agreements.

We will immediately delete or anonymize personal information that exceeds the necessary period, unless otherwise provided by laws and regulations.

How we protect your personal information

We have implemented industry-standard security measures to protect the personal information you provide and prevent it from unauthorized access, disclosure, use, modification, damage, or loss. We will take all reasonable and feasible measures to protect your personal information. For example, when transmitting sensitive information, we use encryption to protect the security of your information; we use trusted protection mechanisms to prevent malicious attacks on data; we deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we hold security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information.

The internet is not a completely secure environment. No product, service, or data transmission can be guaranteed to be 100% secure . Despite this, we will do our utmost to protect your personal information. In the event of a user information security incident, we will immediately activate our emergency response plan in accordance with its requirements and strive to prevent the escalation of the impact and consequences of such incidents. In the unfortunate event of a personal information security incident, we will promptly inform you of the following: the basic details of the security incident and its potential impact, measures we have taken or will take to address it, suggestions for self-prevention and risk reduction, and remedial measures for you, in accordance with laws and regulations. We will promptly inform you of the incident by email, letter, phone call, push notification, or other means. If it is difficult to inform each individual subject of personal information, we will use reasonable and effective means to issue an announcement. We will also proactively report the handling of personal information security incidents to regulatory authorities as required.

How we use cookies and similar technologies

(1) Cookies

To help you have a better website experience, Ziyan uses cookies, such as DoubleClick cookies, to store and help track information about you. Cookies are small data files sent from a web server to your browser and stored on your computer or mobile device. They typically contain an identifier, site name, and some numbers and characters. With cookies, we can save your relevant data so that you don't have to re-enter it every time you visit. At the same time, we may also use the traffic patterns, access patterns, and other information obtained by the above technologies to simplify website browsing and help design our website to make your experience more efficient and enjoyable.

We will not use cookies for any purpose other than those described in this policy. You can manage or delete cookies according to your preferences. Most web browsers have the function of blocking cookies. You can clear all cookies saved on your computer through the browser settings, or use the browser's incognito browsing settings to visit our website. However, if you do this, you may need to personally change your user settings every time you visit our website; at the same time, disabling cookies may affect your use of all or part of the features of certain services.

How do we handle personal information of minors?

We attach great importance to protecting the personal information of minors. If you are a minor aged 14 or above, please read this policy in the presence of your guardian before using this product. You must obtain your guardian's explicit consent before using this product and providing us with your personal information. If the personal information of minors is collected through the use of our products or services with the guardian's consent, we will only use or disclose this information when permitted by laws and regulations, with the guardian's explicit consent, or when necessary to protect the minor.

Ziyan does not seek to collect information from minors under the age of 14. Users under the age of 14 should not provide any information through this product. If Ziyan learns that a minor under the age of 14 has submitted personal information through this product, we will take appropriate steps to delete the information as soon as possible and will not use the information for any purpose.

How you exercise your rights to manage your personal information

(1) In accordance with the requirements of laws, regulations and relevant national standards, we guarantee that you can exercise the following rights with respect to your personal information:

Query, correct and supplement your personal information.

Unless otherwise provided by laws and regulations, you have the right to access your personal information at any time. If you find that there is an error in the personal information we process about you, you have the right to request us to make corrections. You can access and modify your personal information in the following ways:

You can access your profile on the "My" page of the APP by clicking on your profile picture and modify the following information: profile picture, nickname, gender, birthday, height and weight.

Deleting your personal information

You can directly delete your relevant personal information through the following methods.

You can go to the "My" page of the APP, click on the avatar to enter your personal profile, and delete account information such as avatar, nickname, gender, birthday, height and weight.

In the following circumstances, we will proactively delete your personal information; if we do not delete it, you may request us to delete your personal information:

If our processing purposes have been achieved, cannot be achieved or are no longer necessary for the fulfilment of processing purposes;
If we stop providing products or services, or the shelf life has expired;
If you withdraw your consent;
If we are determined by law enforcement or judicial authorities to have processed your personal information in violation of laws, administrative regulations, or in violation of the agreement;
Other circumstances stipulated by laws and administrative regulations.

After confirming your reasonable request and verifying your identity, we will respond to your deletion request within fifteen business days. If we decide to respond to your deletion request, we will also notify the entities that obtained your personal information from us and request that they delete it promptly, unless otherwise provided by laws and regulations, or such entities have obtained your independent authorization.

After you or we assist you in deleting information from our products, due to applicable laws and security technology restrictions, we may not immediately delete the corresponding information from the backup system, but we will delete the information when the backup is updated.

Change the scope of your authorization or withdraw your authorization

Generally speaking, each business function requires some basic personal information to complete (see Article 1 of this Policy). You can grant or withdraw your authorization by deleting information, disabling specific functions, or adjusting privacy settings. You can also contact us using the contact information listed in this document.

Please understand that once you withdraw your consent or authorization, we will no longer be able to provide you with the services corresponding to the withdrawal of consent or authorization, and we will no longer process your corresponding personal information. However, your decision to withdraw your consent or authorization will not affect the processing of your personal information previously carried out based on your authorization.

Right of reproduction

If you require a copy of your personal information, you can contact us using the contact information provided in this Policy. Subject to legal requirements and technical feasibility, we will provide you with a copy of your personal information (including basic information and identity information) in our services within fifteen business days of receiving your contact and after verifying your identity, unless otherwise provided by laws and regulations or otherwise agreed upon in this Privacy Policy.

Right of portability

Where permitted by law, you may request that your personal information be transferred to a designated personal information processor, and you may also request an explanation of our rules for handling your personal information. You may exercise the above rights by contacting us using the contact information published in this Policy. Subject to legal requirements and technical feasibility, we will process your request within fifteen business days of receiving your contact, after verifying your identity, unless otherwise provided by laws and regulations or otherwise agreed upon in this Privacy Policy.

Rights of close relatives

If you unfortunately pass away, your immediate family members may exercise the rights stipulated in this Privacy Policy to review, copy, correct, and delete your relevant personal information for their own legal and legitimate interests, unless you have made other arrangements during your lifetime.

Feedback and right to complain

If you believe that your personal information rights may be infringed, or if you discover any clues of infringement, you can contact us using the contact information in Article 9 of this Policy. We will provide you with timely feedback after verification.

(II) How we respond to your above requests

In addition to the above methods, you can also make the above requests to us through the methods listed in "How to Contact Us".

To ensure security, you may need to provide a written request or prove your identity in other ways. We will process your request within fifteen working days after receiving your request and verifying your identity.

In principle, we do not charge fees for reasonable requests. However, we may charge a fee for repeated requests that exceed reasonable limits. We may deny requests that are unreasonably repetitive, require excessive technical means (for example, developing new systems or fundamentally changing existing practices), pose a risk to the legitimate rights and interests of others, or are extremely impractical (for example, involving backup information).

In the following circumstances, we will be unable to respond to your request in accordance with laws and regulations:

Related to our fulfillment of obligations stipulated by laws and regulations;
Directly related to national security and national defense security;
Directly related to public safety, public health, and major public interests;
Directly related to criminal investigation, prosecution, trial, and execution of judgment;
There is sufficient evidence to show that you have subjective malice or abuse of rights;
To protect the important legal rights and interests of the personal information subject or other individuals, such as their declarations and property, but it is difficult to obtain their consent due to objective conditions;
Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations;
Involving trade secrets.

How this policy is updated

We reserve the right to update or modify this Policy from time to time based on business adjustments, changes in laws, regulations, or policies. We will not reduce your rights under this Policy without your explicit consent. If we make any material changes to this Policy, we will notify you via client push notifications, pop-up windows, or email before the changes take effect so that you are aware of them promptly.

Major changes referred to in this policy include but are not limited to:

Our products or service models undergo significant changes, such as product business functions, the purpose of processing personal information, the types of personal information processed, and how personal information is used;
We have major changes in our ownership structure, organizational structure, etc., such as changes in ownership due to business adjustments, bankruptcy, mergers and acquisitions, etc.;
There are significant changes in your rights to participate in the processing of personal information and how to exercise them;
When our responsible department for handling personal information security, contact information, and complaint channels change;
When the personal information security impact assessment report indicates a high risk.

If you disagree with the revised Policy, you have the right and must immediately cease using the products or services. Your continued use of our products and services constitutes your full understanding and acceptance of the changes we have made to the relevant terms of this Policy. We will archive previous versions of this Policy for your review.

How to contact us

If you have any questions, comments or suggestions about this policy, you can contact us in the following ways:

Send an email to: appios01@iwhop.com
Please send your letter to: Room 4202, Building A, Longhua District Digital Innovation Center (Hongrongyuan North Station Center), North Station Community, Minzhi Street, Longhua District, Shenzhen, Postal Code: 518000.

We have established a dedicated department for personal information protection, and will promptly address your questions, comments, or suggestions upon receipt. Generally, we will respond within 15 business days.

Our registered address is: Room 4202, Building A, Longhua District Digital Innovation Center (Hongrongyuan North Station Center), North Station Community, Minzhi Subdistrict, Longhua District, Shenzhen. If you are not satisfied with our response, especially if our processing of personal information has harmed your legal rights and interests, you may also seek a solution by filing a lawsuit in a court with jurisdiction over the defendant's place of residence .