MOVFIT Privacy Policy

Our Promise to You

This Privacy Policy sets out how Guangzhou DALWA Trading Co., Ltd and its affiliates (hereinafter referred to as "DALWA" or "we") collect, use, disclose, process and protect the information you provide to us when using the products and services provided by MOVFIT App; if we ask you to provide certain information in order to verify your identity when using products and services, we will only use this information in strict accordance with this Privacy Policy and/or our User Terms.

This Privacy Policy was developed with your needs in mind; it is important that you fully understand our personal data collection and usage practices and that you are confident that you can ultimately control the personal information you provide to XMAI.

In this Privacy Policy, "Personal Information" means data that can identify a specific individual by itself or when combined with other information about an individual that MOVFIT has access to. By using MOVFIT products and services, you are deemed to have read, acknowledged and accepted all of the terms described in this Privacy Policy, including any changes we make at any time. We are committed to protecting the privacy, confidentiality and security of your personal information in accordance with applicable laws (including data protection laws in your area). We also commit all of our employees and agents to fulfill these obligations.

1. How do we collect and use your information?

1.1 Types of Information Collected

In order to provide you with our services, we may collect, store and use the following information. If you refuse to provide it, we may not be able to provide you with our products or services:

1.1.1 Information You Provide

• 1.1.1.1 The personal information you provide to us when you register an account or use our services, such as your gender, age, height, profile picture, etc.
• 1.1.1.2 The shared information you provide to other parties through our services, and the information you upload, submit, store, send or receive when using our services.
• 1.1.1.3 We may use MOVFIT accounts to identify different users.

1.1.2 Information we obtain when you use our services

We will collect information about the services you use and how you use them, such as the relevant information that may be generated when you use the MOVFIT小米 App and post comments on MOVFIT小米. This information includes:

• 1.2.1 Device information: We will receive and record information about the device you are using, such as your device model, operating system version information, device settings, mobile device version, device identification code, screen resolution, device environment and other hardware and software feature information, and Android devices include obtaining Android_ID, device location information, such as IP address, GPS location, and WLAN access points, Bluetooth, base stations and other sensor information that can provide relevant information. If you refuse to grant us the corresponding permissions during installation and/or use, we will not record your corresponding information.
• 1.2.2 Data generated by the use of the device: your weight, BMI, fat, muscle, water and other body data, number of steps, heart rate, sleep, trajectory and other sports/activity data.
• 1.2.3 Network usage data: We may collect network types, network signals, IP addresses, etc. related to specific functions of MOVFIT App.
• 1.2.4 Camera and album permissions: When you upload pictures, we will access the camera-related permissions of your device and collect the picture and video information you provide and upload to us after taking/reading the pictures.
• 1.2.5 Bluetooth, GPS information: When you use MOVFIT Xiaomai settings, we need your Bluetooth permission. At the same time, Android also needs your GPS permission when connecting. At the same time, the mobile phone will upload MOVFIT Xiaomai device information via Bluetooth, such as device mac address, power, model, version, etc.
• 1.2.6 We may collect your end users' [system operation information, network status information, iOS advertising identifier (IDFA), MAC address, Android_ID, International Mobile Equipment Identity (IMEI), Anonymous Device Identifier (OAID), International Mobile Subscriber Identity (IMSI), application list information] through developer services [i.e. SMS verification (SMSSDK), deep linking (MobLink), message push (Jiguang Push), Google login, WeChat login] for security incident investigations, as well as for detecting and preventing fraudulent activities, in order to detect and prevent network attacks and abuse, and to ensure network security and operational security.

II. How we use your information

The purpose of collecting personal information is to provide you with products and/or services and to ensure that we comply with applicable laws. You hereby consent to our processing of personal information for the purposes set out in this Privacy Policy and to the disclosure of personal information to our affiliates (which are involved in communications, social media, technology and cloud businesses), third-party service providers (defined below). We may use your personal information for the following purposes:

• 2.1 Create an MOVFIT account. When creating an MOVFIT account, the information you fill in will be used to create your MOVFIT account and display relevant data in the MOVFIT App.
• 2.2 Determine whether your phone is supported. Information related to your phone will be used to determine whether your phone can use the MOVFIT App.
• 2.3 Providing network-related services. MOVFIT will prompt users when they need to use a certain amount of traffic for downloading based on different network types, network signals and other information.
• 2.4 Statistical Analysis: We will conduct statistical analysis on our services or equipment, and may share these statistics with the public or third parties to demonstrate usage trends of our products or services and optimize our products and services. For example, we may display rankings, etc.
• 2.5 Use device information to push messages, such as reminders, service information push, community messages, etc.

3. How do we use cookies and similar technologies?

Similar technologies are common technologies on the Internet. When you use MOVFIT related services, we may use related technologies to send one or more cookies or anonymous identifiers to your device to collect and store information when you visit and use XMAI. We use cookies and similar technologies mainly to achieve the following functions or services:

• 3.1 To ensure the safe and efficient operation of products and services, we may set cookies or anonymous identifiers for authentication and security, so that we can confirm whether you have logged into the service safely or whether you have encountered any illegal activities such as theft or fraud. These technologies will also help us improve service efficiency and increase login and response speed.
• 3.2 Help you get an easier access experience. Using this type of technology can help you save the steps and processes of repeatedly filling in personal information and entering search content, such as implementing a one-click login process and recording search history.

3. Data Sharing

We will not share your personal information with companies, organizations or individuals outside of DALWA, except in the following circumstances:

• 1. Sharing with prior authorization: obtain your explicit consent or authorization in advance, such as Huawei Health;
• 2. Sharing in accordance with legal circumstances: Sharing your personal information externally when necessary in accordance with applicable laws and regulations, legal process requirements, mandatory administrative or judicial requirements;
• Sharing with our affiliates: We may share your personal information with our affiliates, but we will only share necessary personal information and it will be subject to the purposes stated in this Privacy Policy. If our affiliates want to change the purpose of processing personal information, they will need to seek your consent again.
• 3. Sharing with partners and other third parties: We only share your personal information for legitimate, proper, necessary, specific and clear purposes, and only share the personal information necessary to provide services. Our third-party service providers have no right to use the shared personal information for any other purpose. Our partners include the following types:
• 4. Service providers. We may share your personal information with suppliers, service providers and other partners who support our business, including supplying us with goods or providing technical infrastructure services, providing customer service, logistics and delivery services, payment services, data processing, etc. We share your personal information to enable the core shopping functions of our products and/or services. For example, we must share your order number and order amount with a third-party payment institution so that it can confirm your payment instructions and complete the payment.
• 5. Partners who entrust us to conduct promotions. We may provide promotional services to user groups who use our products and/or services on behalf of other companies. However, we will only provide these partners with information on the coverage and effectiveness of the promotion, and will not provide your personally identifiable information, or we will aggregate this information so that it does not identify you personally. For example, we may provide partners with statistical information that cannot identify individuals to help them understand their audience or customers. For companies, organizations and individuals with whom we share your personal information, we will sign strict data protection agreements with them and require them to fill out security questionnaires and process your personal information in accordance with our instructions, this privacy policy and any other relevant confidentiality and security measures.

Access third-party SDK services and share certain of your information collected by us in accordance with this policy with the third-party service in order to provide better customer service and user experience:

At present, the third-party service providers we access mainly include the following types:

• 1. Used for message push functions, including collecting manufacturer push notifications, specific event reminders, etc.;
• 2. Used for payment related services, including order payment, etc.;
• 3. Used to obtain device location permissions, collect device information and log information, etc. with your consent;
• 4. Used for third-party authorization services, including third-party account login, sharing of relevant content to third-party products, etc.; wait.

We will only share your information for legitimate, necessary and specific purposes. We will require third-party service providers with whom we share information to fulfill relevant confidentiality obligations and take appropriate security measures.

Third-party social media or other services are operated by the relevant third parties. Your use of such third-party social media services or other services (including any information you provide to such third parties) is subject to the third party's own terms of service and information protection statement (not this policy), and you need to read their terms carefully. This policy only applies to personal information collected by us and does not apply to any services provided by any third party or the third party's information use rules. If you find that these third-party social media or other services have risks, it is recommended that you terminate the relevant operations to protect your legal rights and interests.

9. Protection of Minors

We attach great importance to the protection of minors' personal information. If you are a minor under the age of 18, we will not process your personal information without your or your guardian's consent. If you are the guardian of a minor, please contact us through "Message-Customer Service Help" when you have questions about the personal information of the minor you are protecting.

10. Retention Policy

We will retain personal information as long as it is necessary to achieve the purpose for which it was collected or as required or permitted by applicable law. We will no longer retain personal information or eliminate the means of associating personal information with a specific individual if it can be reasonably concluded that retaining the personal information is no longer necessary to achieve the purpose for which it was collected.

11. Account cancellation

You can apply to cancel your MOVFIT account in the following ways. Once you cancel your MOVFIT account, you will not be able to use the MOVFIT APP services with this account, and the sports data and personal account information data generated during the use of the MOVFIT APP services will be cleared. The above cancellation behavior and consequences are irreversible, so please operate with caution. The following methods can be used to cancel:

IV. How do we protect your information?

1. To protect your information security, we will follow industry standards and take reasonable physical, electronic and management security measures to protect your information, and make every reasonable effort to prevent your information from being leaked, damaged or lost, including but not limited to SSL, information encryption storage, and data center access control. Access to your personal information is limited to personnel who need to process your personal information to complete work tasks or perform technical maintenance work in accordance with this privacy policy.

2. Although the above reasonable and effective measures have been taken and the standards required by relevant laws and regulations have been complied with, please understand that due to technical limitations and various possible malicious means, in the Internet industry, even if we do our best to strengthen security measures, it is impossible to always guarantee 100% security of information. We will try our best to ensure the security of the personal information you provide to us. You confirm that you know and understand that the system and communication network you use to access our services may have problems due to factors beyond our control. Therefore, we strongly recommend that you take active measures to protect the security of your personal information, including but not limited to using complex passwords, changing passwords regularly, and not disclosing your account password and other personal information to others.

3. We will formulate emergency response plans and immediately implement emergency response plans when user information security incidents occur, and strive to prevent the impact and consequences of such security incidents from expanding. After the unfortunate occurrence of a user information security incident (leakage, loss, etc.), we will promptly inform you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, your own suggestions for preventing and reducing risks, and your remedial measures. We will inform you of the relevant circumstances of the incident by email, letter, telephone, push notification, etc. When it is difficult to inform the subject of personal information one by one, we will take reasonable and effective means to issue an announcement. At the same time, we will also report the handling of personal information security incidents in accordance with the requirements of the regulatory authorities.