Fitdays+ ("we," "us," or "our") respects your privacy. This Privacy Policy governs our handling of personal data ("your information") collected via online channels (e.g., our website) and offline channels (e.g., customer support) (collectively, the "Services"). It explains the types of personal data we collect, how we use and share such data, and your rights regarding our data handling practices.
By accessing the Services via any device, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using the Services.
We may modify this Privacy Policy at any time. The current version will be posted on our website with the last revised date. For material changes, we will provide additional notice. Your continued use of the Services after the revised policy is posted constitutes acceptance of the changes.

1. How We Collect Data

  • Information You Provide:When using the product, based on the BIA (Bioelectrical Impedance Analysis) principle, we collect your body parameters (height, gender, age, weight) to calculate metrics like body fat percentage, muscle mass, and metabolic rate via complex formulas. The birthday, height, and gender you submit during account registration are only used for these calculations. We minimize information collection and will not use this data for other purposes.
  • Information Collected During Service Use:Your email address serves as your login account. If you submit inquiries via App feedback, we will provide technical support via this email. We will not use your email for other purposes or share it with third parties.
  • Device Permission-Related Information: For some Android 6.0+ devices, Bluetooth functionality is linked to location services. To enable Bluetooth, we will request location service access (this permission is only used for Bluetooth and no other purposes);
  • Android 12 devices require "Nearby Device Permission" to use Bluetooth.
Transparent Statement on IoT Device Data Collection:The body fat scale (IoT device) associated with this App collects bioelectrical impedance data via BIA sensors. Data transmitted to the App is encrypted with AES-256 and not stored locally on the device during transmission. Original data generated by the device is only accessible to you (via account login) and authorized technical maintenance personnel who have signed a confidentiality agreement. Original bioelectrical impedance data will be anonymized within 72 hours after calculating health metrics, and only the calculated health indicator data will be retained.

2. Use of Personal Information

We collect information to provide better services to all users. The collected information is used to:
  1. Fulfil your requests for specific services or products;
  2. Provide you with App services/products, or send information from third-party partners via email (you may unsubscribe at any time);
  3. Generate aggregated user statistics (e.g., user count, demographics) to improve services or disclose to third parties for legitimate purposes (statistics are group-level, not individual).

3. Sharing and Disclosure of Personal Information

We will not share your personal information with unrelated third parties without your consent, except in the following cases:
  1. Some services are provided or co-provided by partners (e.g., technical service providers, logistics companies). We may share your information with partners to deliver these services; you may refuse the service to avoid sharing;
  2. We are required by laws, regulations, or government mandates to provide information to judicial or government authorities;
  3. To prevent serious harm to others' legitimate rights, public interests, or your legitimate rights;
  4. We detect that you have violated the Service Terms or caused significant harm to the App’s legitimate rights.

4. User Rights

You may query, supplement, correct, or request deletion of your personal information via your account at any time. You may also delete your account, but this will prevent you from logging in or using any App services.
You also have the following rights:
  1. Right to Data Portability:You have the right to request us to export your personal data in CSV format for transfer to another service provider. We will complete the export within 15 working days without additional charges (unless the request is excessively repetitive or complex);
  2. Right to Restrict Processing:You have the right to request us to restrict the processing of your personal data (e.g., when you dispute the accuracy of the data);
  3. Right to Object:You have the right to object to our processing of your personal data based on "legitimate interests" (e.g., user statistics);
  4. Right to Lodge a Complaint:If you believe our data processing activities violate EU data regulations, you may lodge a complaint with the data protection authority of your member state (e.g., BfDI in Germany, EDPS of the EU).

5. Information Security and Storage

  • Security Measures:Your account information is protected by password encryption; only you can access your personal information. We will not proactively request your password—please keep it secure.
  • Storage:Your data is stored in CSV format on Amazon servers located in the United States and Germany.
  • Retention Period:Your personal data will be retained for 24 months. After this period, we will securely delete or anonymize the data.
  • Risk Disclosure:Data transmission over the internet/wireless networks cannot be fully secured. While we strive to protect your information, we cannot guarantee the security of data transmitted to us. You assume the risk of such transmission; we will use reasonable efforts to secure our systems once we receive your data.

6. Disclaimer

We are not liable for:
  1. Information disclosure required by laws, regulations, or government mandates;
  2. Information disclosure resulting from your sharing of account credentials;
  3. Information disclosure, loss, theft, or tampering caused by force majeure (e.g., hacking, virus attacks, government-mandated network outages).

7. Third-Party Integrations

This section specifically describes how Fitdays+ accesses, uses, stores and shares your Google user data obtained through GoogleFit and Google Health APIs. All processing of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

HealthKit:Scale data (weight, body fat, BMI, lean mass) will be synced to Apple Health after each measurement; authorization is prompted on first homepage access (no sync in guest/experience mode); you may modify authorization in system settings.

  • GoogleFit- Access: Fitdays+ requests your explicit authorization to access your GoogleFit health data, including body measurement records generated from our connected body fat scale. We only request scopes necessary to support health record synchronization.- Use: Your GoogleFit data is used exclusively to import historical health records into Fitdays+ and upload new body composition measurements from Fitdays+ to your GoogleFit account. We do not use GoogleFit data for advertising, profiling, or any purpose other than this health record sync function.- Storage: We do not store persistent copies of your GoogleFit source data on our servers. GoogleFit data is only temporarily loaded in memory to complete the synchronization task. Temporary sync state markers are retained for up to 7 days solely for automatic retry of failed sync tasks and are purged afterward.- Sharing: We will not share any GoogleFit user data with third parties, partners or affiliates.Scale data will be synced to GoogleFit after each measurement; authorization is prompted on first homepage access (no sync in guest/experience mode); you may modify or revoke Fitdays+ access to GoogleFit at any time via your Google Account Security settings.Google Health- Access: Fitdays+ requests your explicit authorization to access your Google Health health metrics and nutrition data, only with the minimum required API scopes for synchronization. Access is only enabled after you grant permission.- Use: We integrate with Google Health solely for synchronizing your body composition measurements from the Fitdays+ smart scale and manually entered nutrition records between Fitdays+ and Google Health, allowing you to view and manage your unified health and nutrition records. Google Health data will not be used for ad targeting, user profiling, or any unrelated purpose.- Storage: We do not keep permanent copies of your Google Health data on our servers. Google Health payloads are processed temporarily during sync transmission. Short-lived sync tracking logs may be stored for a maximum of 7 days to handle sync retries and are automatically deleted.- Sharing: We will not disclose, sell or share any Google Health user data to any third party.All data exchanged between Fitdays+ and Google Health is transmitted over TLS 1.2+ encrypted channels following Google Health API security specifications.Data deletion pathways for Google Health:1. Revoke access: You may stop all synchronization and revoke Fitdays+’s permission to access Google Health at any time via Google Account > Security > Third-party apps with account access.2. Delete individual records: Delete the corresponding measurement or nutrition entry inside Fitdays+. Deletion will be sent to Google Health following Google’s sync protocol.3. Delete Fitdays+ account: Account deletion terminates all ongoing Google Health synchronization and removes all stored sync state linked to your account.Facebook:You may log in using Facebook (we use your public profile as credentials via your authorization); you may delete the account (and associated data) created via Facebook in "Account Management."

8. Data or Account Deletion

  • Delete Data:Right-click on entries in the "All Data" list to delete records;
  • Delete Account:Go to "Mine" → "Account Management" → "Account Delete."

9. Legal Basis and Cross-Border Data Transfer

  • Legal Basis for Processing:The legal bases for us to process your personal data include: Your explicit consent (e.g., authorizing sync with HealthKit/GoogleFit, providing body parameters);
  • Performance of the service agreement with you (e.g., completing account registration, providing health calculation services);
  • Compliance with legal obligations (e.g., responding to government regulatory requirements).
  • Cross-Border Data Transfer:Your data is stored on Amazon servers in Germany (within the EU, complying with data localization requirements) and the United States. The cross-border transfer to the U.S. server has been certified under the EU-U.S. Data Privacy Framework, ensuring compliance with data transfer regulations.

10. Amendments and Interpretation

This Privacy Policy may be amended irregularly.If we make changes that alter how Fitdays+ accesses, uses, stores or shares your Google user data obtained from GoogleFit or Google Health APIs, we will provide you with a prominent advance notice via in-app notification and registered email before such changes take effect.For other material changes to this Privacy Policy, we will notify you via email or in-app message before amendments take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.Guangdong ICOMON Technology Co.,Ltd. retains the right to revise and interpret this policy.