Privacy Policy

We understand the importance of your information and will do our best to keep it secure and reliable. We are committed to maintaining your trust and protecting your information in accordance with principles such as consistency of rights and responsibilities, clear purpose, consent, data minimization, security, individual participation, and transparency. We also commit to adopting industry-standard security measures to protect your information.

This Policy is closely related to your use of our products or services. For terms we believe are material to your rights and interests, we highlight them in bold. Please read and understand this Policy in full before using our products or services.

By starting to use our products or services, you acknowledge that you understand and agree to this Policy and to the collection and use of personal information necessary to provide those services. If you have any questions, comments, or suggestions, please contact us using the methods in Section 9 of this Policy.

Key points:

1. We collect and use your information in accordance with this Policy and will not force bundling of all personal information solely because you agree to this Policy.
2. We explain the types of personal information we collect and the corresponding purposes so you can understand what is collected for a specific feature, why, and how.
3. You may access, correct, or delete your personal information, change the scope of your consent, and request account deletion. We provide channels for you to exercise these rights.
4. Unless we obtain your consent again, we will not use your personal information for purposes not stated in this Policy.

1. How We Collect and Use Your Information

1.1 Information Collected and Used When You Use Our Products or Services

We collect and use your information only for the business functions described in this Policy, in order to provide products or services. You may choose whether to provide information; however, in most cases, if you do not provide it, we may be unable to provide the corresponding services or respond to your issues.

When you use our services, we may collect:

1. Account information: mobile phone number and login credentials (SMS verification code or password), used for registration, login, identity verification, and account security.
2. Profile information: nickname, avatar, gender, height, weight, and age (or related date-of-birth information), used to complete your profile, assess exercise capacity, and display personalized workout suggestions.
3. Health, physiological, and workout information: heart rate, steps, workout tracks (including location and time series), course/training records, distance, pace, calories, and other workout statistics, used to show workout status, generate reports, health evaluation, and related services.
4. Device information: identifiers of your bound Bluetooth devices (such as device name and MAC address), connection status, and battery level, used for device binding, connection management, and workout data sync.
5. Shipping address information (if you use related features): recipient name, phone number, administrative region, and detailed address, used for logistics and delivery.
6. Logs and network information: device model, OS version, network status, app version, and necessary operation/fault logs, used to keep services stable, troubleshoot issues, and protect security.

We use the information collected to provide identity verification, customer service, security protection, device connection, workout courses, activity display, and physical training records.

The information you provide remains authorized for our use while you use the Services. After you delete your account or stop using related services, we will stop using and delete or anonymize the related information in accordance with this Policy and applicable laws (unless otherwise required by law).

We will de-identify or anonymize collected information as required by law. Information that cannot identify a natural person alone or in combination with other information is not personal information under the law. If we combine non-personal information with other information in a way that identifies you, we will treat and protect such information as your personal information under this Policy during such combined use.

If we need to collect, use, or process information beyond the scope described above, or use collected information for purposes not stated in this Policy, we will notify you within a reasonable time after collection or before processing and obtain your consent.

1.2 Exceptions Where Consent Is Not Required

Please understand that, under applicable laws and standards, we may collect and use your information without your consent in the following circumstances:

1. directly related to national security or national defense;
2. directly related to public security, public health, or major public interests;
3. directly related to criminal investigation, prosecution, trial, and judgment enforcement;
4. necessary to protect your or others’ significant lawful rights and interests in life or property where it is difficult to obtain consent;
5. information you have disclosed to the public yourself;
6. information collected from lawful public disclosures, such as lawful news reports or government information disclosure;
7. necessary to enter into or perform a contract at your request;
8. necessary to maintain the secure and stable operation of the software and related services, such as detecting and handling faults;
9. other circumstances provided by laws and regulations.

1.3 Device Permissions

To provide products and/or services, we may request system permissions on your device. We request them only when related features need them. You may disable them in system settings; after disabling, the corresponding features may become unavailable, without affecting other basic features (unless those features depend on the permission).

1.4 We Do Not Send Commercial Ads Based on This Policy

We currently do not create indirect user profiles based on your browsing or search history to send commercial advertisements. If we offer such services in the future, we will obtain your consent separately and provide an unsubscribe method.

1.5 Security Protection

To improve the security of our services and protect you, other users, or the public from risks such as phishing, fraud, vulnerabilities, malware, and network attacks, we may use or combine your user information, device information, network logs, and information lawfully obtained from affiliates or partners to assess account risk, verify identity, detect and prevent security incidents, and take necessary recording, auditing, analysis, and handling measures as required by law.

2. Cookies and Similar Technologies

2.1 Cookies

To ensure websites or related pages work properly, we may store small data files called Cookies on your computer or mobile device. Cookies usually contain identifiers, site names, and some numbers or characters, and can store your access preferences.

We will not use Cookies for purposes other than those stated in this Policy. You may manage or delete Cookies according to your preferences. Most browsers allow you to block Cookies; if you do so, you may need to manually change settings each time you visit.

2.2 Web Beacons and Pixel Tags

In addition to Cookies, we may use web beacons, pixel tags, and similar technologies on websites or in emails to understand product preferences and improve customer service. If you do not want your activity tracked in this way, you may unsubscribe from mailing lists where applicable.

2.3 Do Not Track

Many browsers offer a Do Not Track feature. Major internet standards organizations have not yet established policies on how websites should respond. If your browser enables Do Not Track, we will respect your choice.

3. How We Share, Transfer, or Publicly Disclose Your Information

3.1 Sharing

We will not share your information with any other company, organization, or individual, except in the following cases:

1. With your explicit consent: after obtaining your explicit consent, we may share your information with others.
2. Legal or government requirements: we may share your information as required by laws or mandatory requirements of competent authorities.
3. With affiliates: your information may be shared with our affiliates. We will only share necessary information and subject to the purposes stated in this Policy. If an affiliate changes the processing purpose, it will seek your consent again.
4. With authorized partners: solely to achieve the purposes stated in this Policy, certain services may be provided by authorized partners. We will share information only for lawful, legitimate, necessary, specific, and explicit purposes, and only to the extent necessary to provide the service.

Authorized partners include:

For companies, organizations, and individuals with whom we share information, we will enter into strict confidentiality agreements and require them to process information in accordance with our instructions, this Policy, and other confidentiality and security measures.

3.2 Transfer

We will not transfer your information to any company, organization, or individual, except:

1. with your explicit consent;
2. in the event of a merger, acquisition, or bankruptcy liquidation involving transfer of user information, we will require the new holder to continue to be bound by this Policy, or otherwise seek your consent again;
3. where required by applicable laws, legal procedures, or mandatory administrative or judicial requirements.

3.3 Public Disclosure

We will publicly disclose your information only:

1. with your explicit consent; or
2. based on law: where required by laws, legal procedures, litigation, or mandatory requirements of competent authorities.

3.4 Exceptions to Prior Consent for Sharing, Transfer, or Public Disclosure

Please understand that, under applicable laws and standards, we may share, transfer, or publicly disclose your information without your consent in circumstances including those directly related to national security, public security, criminal investigation and enforcement, protection of significant lawful rights and interests where consent is difficult to obtain, information you have made public yourself, and information collected from lawful public disclosures.

Under the law, sharing or transferring de-identified personal information where the recipient cannot restore and re-identify the individual does not constitute sharing, transfer, or public disclosure of personal information, and such storage and processing does not require separate notice and consent.

3.5 Third-Party SDKs

To ensure stable operation of unishape and related features, the app embeds software development kits (SDKs) or similar components from business partners. We strictly monitor SDKs that obtain information and require them to process personal information in accordance with this Policy and related confidentiality and security measures. Details:

Note: Device firmware / Bluetooth communication components provided by partners are used only for device connection and workout data collection, and not for purposes not stated in this Policy.

4. How We Protect Your Information

1. We use industry-standard security measures to protect your information against unauthorized access, disclosure, use, modification, damage, or loss. For example, data exchanged between your browser or client and the Services is protected by encryption; we use encryption to keep data confidential; we deploy access controls so only authorized personnel can access user information; and we strengthen employee awareness of information protection.
2. We take all reasonably practicable measures to avoid collecting irrelevant information. We retain your information only for as long as needed to achieve the purposes stated in this Policy, unless a longer retention period is required or permitted by law.
3. The internet is not an absolutely secure environment. Emails, instant messages, and communications with other users may not be encrypted. We strongly recommend that you do not send sensitive information through such channels.
4. We will do our best to ensure the security of information you send us. Even with reasonable and necessary measures, we cannot completely eliminate the risk of unlawful access, theft, alteration, or destruction of your information. Please understand and voluntarily assume such network risks.
5. If a user information security incident occurs, we will promptly inform you as required by law of the basic facts and possible impact, measures we have taken or will take, suggestions for you to mitigate risk, and remedies available to you. We may notify you by email, letter, phone, push notification, or other means; where individual notice is difficult, we will use reasonable and effective public announcements. We will also report the handling of the incident to regulators as required.
6. If you find that your personal information, especially your account or password, has been leaked, please contact us immediately so we can take appropriate measures upon your request.
7. Please note that information you voluntarily share or publicly disclose while using our services may involve your or others’ personal information, including sensitive personal information. Please consider carefully before sharing or publicly disclosing such information.
8. Please use a strong password and keep your account credentials safe to help us protect your account.

5. How You Can Manage Your Personal Information

In accordance with applicable laws, regulations, and standards, we protect your rights regarding your information as follows:

5.1 Access Your Information

You have the right to access your information, except as otherwise provided by law. You may access it via: unishape — Me — Personal Information.

If you cannot access your information through the above path, email service@unishapetech.com. We will respond within 30 days.

5.2 Correct Your Information

If you find that the information we process about you is incorrect, you have the right to request correction. You may request correction through the methods in Section 5.1 or contact us using the methods in this Policy. We will respond within 30 days.

5.3 Delete Your Information

You may request deletion of your information in the following circumstances:

1. our processing of information violates laws or regulations;
2. we collected or used your information without your consent;
3. our processing violates our agreement with you;
4. you no longer use our products or services, or you have deleted your account;
5. we no longer provide products or services to you.

We will assess your deletion request and take appropriate steps if requirements are met. We may ask you to verify your identity to protect account security. After information is deleted from our services, due to applicable law and security technology, we may not immediately delete it from backup systems; we will securely store it until backups can be cleared or anonymized.

5.4 Change the Scope of Your Consent

1. You may change the scope of consent or withdraw authorization by adding or deleting information, changing privacy settings, enabling or disabling device features/permissions, or contacting us as stated in this Policy.
2. Please understand that products or services often require certain permissions and necessary personal information. If you withdraw consent, we will be unable to continue providing the corresponding products or services, without affecting processing already conducted based on your prior authorization.

5.5 Account Deletion

You may request deletion of your registered account via:

unishape — Me — Settings — Account & Security — Delete Account

You may also email service@unishapetech.com to request account deletion.

After verifying your identity, we will complete account deletion processing within 15 business days, and delete or anonymize your information as requested and as required by law (unless otherwise provided by law). After successful deletion, you may lose access to data in the account. Please proceed with caution.

5.6 Automated Decision-Making

In some features, we may make decisions solely based on non-human automated decision-making mechanisms such as information systems or algorithms. If such decisions significantly affect your lawful rights and interests, you have the right to request an explanation, and we will provide appropriate remedies.

5.7 Responding to Your Requests

For security, you may need to submit a written request or otherwise prove your identity. We may verify your identity before processing your request. We will respond within thirty days or within the period required by law.

We generally do not charge for reasonable requests. For unfounded, repetitive, or excessive requests, we may charge a reasonable cost.

We may be unable to respond to requests that: relate to our legal obligations; are directly related to national security, defense, public security, public health, or major public interests; are directly related to criminal investigation, prosecution, trial, and enforcement; involve clear malice or abuse of rights; are necessary to protect significant lawful rights and interests of users or others where consent is difficult to obtain; would seriously harm the lawful rights and interests of you or others if fulfilled; or involve trade secrets.

6. Children’s Personal Information

Our products, websites, and services are primarily designed for adults. Without parental or guardian consent, minors must not create accounts on their own. If a minor’s personal information is collected with parental consent, we will use or disclose it only as permitted by law, with explicit consent of the parent or guardian, or as necessary to protect the minor. We treat individuals under 18 as minors, regardless of local definitions.

If you are a minor and your parent or guardian does not agree to your use of our services or provision of information under this Policy, please stop using our services immediately and notify us so we can take measures such as deleting information.

If we learn that we have collected a minor’s personal information without verifiable prior parental consent, we will use our best efforts to delete the information promptly.

7. Storage and Cross-Border Transfer

In principle, user information collected and generated within the People’s Republic of China is stored within the People’s Republic of China.

We retain your information only for the period needed for the purposes stated in this Policy and the shortest period required by law. After that period, we will delete or anonymize your information as required by applicable law, unless a longer retention is required by law, for public interest or scientific/historical research, or with your separate consent.

Because we may provide products or services through resources and servers worldwide, with your authorization, your information may be transferred to or accessed from jurisdictions outside the country/region where you use the products or services. Those jurisdictions may have different data protection laws. In such cases, we will ensure your information receives protection essentially equivalent to that within mainland China, for example by seeking your consent to cross-border transfer or by implementing de-identification and other security measures before transfer.

8. Updates to This Policy

Our Privacy Policy may change. Without your explicit consent, we will not reduce the rights you should enjoy under this Policy. We will post any changes on this page.

For material changes, we will also provide more prominent notice. Material changes include, without limitation:

1. major changes in our service model, such as the purposes of processing, types of information processed, or ways information is used;
2. major changes in ownership or organizational structure, such as owner changes due to business adjustment, bankruptcy, or M&A;
3. changes to the main recipients of information sharing, transfer, or public disclosure;
4. major changes to your rights regarding information processing and how those rights are exercised;
5. changes to the department responsible for information security, contact methods, or complaint channels;
6. when a personal information security impact assessment indicates high risk.

We will also archive previous versions of this Policy for your reference.

9. Contact Us

If you have any questions, comments, or suggestions about this Privacy Policy, please contact us:

Email: service@unishapetech.com

Phone: 18112602031

In general, we will reply within thirty days.

If you are not satisfied with our response, especially if our personal information processing harms your lawful rights and interests and we still refuse to improve after your feedback, you may seek resolution by filing a lawsuit with a court of competent jurisdiction at the domicile of Yue Di Mei Si Health Technology (Wuxi) Co., Ltd.

10. Governing Law, Jurisdiction, and Other Terms

Yue Di Mei Si Health Technology (Wuxi) Co., Ltd. (Registered address: Room D1502-03, Cygnus, Wuxi Software Park, No. 111 Linghu Avenue, Xin’an Street, Xinwu District, Wuxi City, China) is the operator of the unishape APP.

The formation, performance, interpretation of this Policy, and dispute resolution shall be governed by the laws applicable in mainland China (excluding conflict-of-law rules). If any term conflicts with applicable law, that term shall be reinterpreted in accordance with the law, and the remaining valid terms shall continue in effect.

Disputes arising from this Policy or your use of unishape services shall first be resolved through communication and negotiation. If negotiation fails, both parties agree that the people’s court at the domicile of Yue Di Mei Si Health Technology (Wuxi) Co., Ltd. shall have jurisdiction.

Section headings are for convenience only and have no independent meaning. If any provision is invalid or unenforceable for any reason, the remaining provisions remain valid and binding.