EXOSTRIDE
Privacy Policy / 隐私政策
本政策由 张爱生（以下简称“我们”）制定，说明我们在提供 EXOSTRIDE APP、兼容运动辅助设备连接及相关服务时如何处理个人信息。
一、我们处理的信息
- 账号与联系信息：邮箱、用户名、昵称、用户 ID、注册与登录状态。
- 用户主动提交的信息：头像、意见反馈及反馈附件。
- 运动与目标信息：运动时长、步数、运动目标、运动记录、设备模式和助力配置。
- 设备信息：运动设备序列号、型号、固件版本、连接状态，以及手机系统版本、设备型号、应用版本和屏幕信息。
- 诊断信息：错误信息、调用堆栈、同步状态以及为排查故障所需的日志信息。
我们不会将上述信息用于跨应用或跨网站的广告跟踪，也不会出售个人信息。
二、处理目的
我们仅在提供服务所需范围内处理信息，用于注册和身份验证、同步个人资料、连接及管理运动辅助设备、保存和展示运动记录、计算目标进度、处理意见反馈、维护账号与设备安全、诊断故障及改进产品。
三、系统权限
- 蓝牙：扫描、连接兼容设备，并在运动过程中接收设备数据。
- 后台蓝牙：在锁屏或切换到其他应用时维持必要的设备连接和运动数据接收。
- 相机与相册：仅在您主动拍摄或选择个人头像时使用。
拒绝可选权限不会影响与该权限无关的功能。您可以在 iPhone“设置”中随时调整权限。
四、存储、跨境与安全
账号和同步数据会传输至我们的服务器。当前业务服务器部署在新加坡，因此您的信息可能被传输并存储在新加坡。本机也可能保存登录状态、已连接设备信息和待同步运动记录。
我们采取访问控制、传输保护、权限管理和必要的日志审计措施保护信息。跨境处理将在适用法律要求的范围内采取相应措施，并仅限于实现本政策所述目的。
五、保存期限
只要账号未注销，我们会持续保存提供服务所必需的账号、设备和运动记录。用户注销账号的请求处理成功后，我们会立即删除与账号关联的相关数据；法律要求保留的数据除外。
超过必要保存期限后，我们将删除或匿名化处理相关信息；依法必须保留的数据除外。
六、共享和第三方服务
除为提供服务所必需、履行法律义务、保护用户或公众安全，或取得您的另行同意外，我们不会向第三方披露个人信息。如正式版本接入云服务、对象存储、邮件、崩溃分析等第三方服务，我们会在上线前补充服务商、处理目的、数据类型和处理地区。
七、您的权利
您可以查看或修改个人资料、管理系统权限、退出登录，并通过“我的”页面删除账号。账号删除成功后，与账号关联且无法律保留义务的数据将被删除或匿名化，旧登录凭证将失效。如需查询、更正或删除信息，也可以通过下方联系方式联系我们。
八、未成年人
如果您未达到所在地法律规定的独立同意年龄，应在监护人阅读并同意本政策后使用服务。我们发现未经有效同意处理了未成年人信息时，将依法采取删除或其他保护措施。
九、政策更新
本政策发生重大变化时，我们会通过 APP 内提示、网站公告或其他合理方式通知您。更新版本会标明新的生效日期。
十、联系我们
This policy is issued by Aisheng Zhang (“we”, “us”, or “our”). It explains how we process personal information when providing the EXOSTRIDE app, compatible exercise-assistance device connectivity, and related services.
1. Information We Process
- Account and contact information: email address, username, nickname, user ID, registration, and sign-in status.
- Information you submit: profile photo, feedback, and feedback attachments.
- Exercise information: duration, steps, goals, records, device mode, and assistance settings.
- Device information: exercise-device serial number, model, firmware, connection status, phone OS version, phone model, app version, and screen information.
- Diagnostics: errors, stack traces, synchronization status, and logs needed to troubleshoot faults.
We do not use this information for cross-app or cross-website advertising tracking, and we do not sell personal information.
2. Purposes
We process information only as needed to provide registration and authentication, synchronize profiles, connect and manage exercise-assistance devices, store and display exercise records, calculate goal progress, process feedback, maintain account and device security, diagnose faults, and improve the product.
3. Device Permissions
- Bluetooth: scans for and connects to compatible devices and receives exercise data.
- Background Bluetooth: maintains necessary connectivity and data reception while the phone is locked or another app is active.
- Camera and Photos: used only when you choose to take or select a profile photo.
Denying an optional permission does not affect unrelated features. You can change permissions at any time in iPhone Settings.
4. Storage, International Transfers, and Security
Account and synchronized data are sent to our servers. Our current service servers are located in Singapore, so your information may be transferred to and stored in Singapore. Sign-in state, connected-device information, and pending exercise records may also be stored on your device.
We use access controls, transport protection, permission management, and necessary logging safeguards. International processing will be handled as required by applicable law and limited to the purposes described in this policy.
5. Retention
We retain the account, device, and exercise records needed to provide the service while your account remains active. After an account-deletion request is successfully processed, we will immediately delete the data associated with that account, except where retention is required by law.
When information is no longer needed, we delete or anonymize it unless retention is required by law.
6. Sharing and Service Providers
We do not disclose personal information except where necessary to provide the service, comply with law, protect users or the public, or with your separate consent. Before release, any cloud, object-storage, email, or crash-analysis providers used in production must be identified here with their purpose, data types, and processing locations.
7. Your Choices and Rights
You can view or edit your profile, manage system permissions, sign out, and delete your account from Profile. After successful deletion, information linked to the account that is not legally required to be retained will be deleted or anonymized, and old credentials will be invalidated. You may also contact us to request access, correction, or deletion.
8. Children
If you are below the age at which you can independently consent under applicable law, use the service only after your parent or guardian has reviewed and agreed to this policy. If we learn that a child’s information was processed without valid consent, we will take appropriate deletion or protective measures.
9. Changes
We will provide notice of material changes through the app, our website, or another reasonable channel. An updated policy will state its new effective date.