Floeva Privacy Policy

Version: 3.2

Updated: September 4, 2026

Effective: September 4, 2026

Shenzhen Quxing Technology Co., Ltd. (“Floeva,” “we,” or “us”) respects your privacy. This policy applies to the Floeva mobile app, smart rings, website, and related services.

On the first launch of the China Android build, we show this policy and the Terms of Service before enabling business networking, third-party SDKs, Bluetooth services, or background work. Those capabilities start only after you actively select “Agree and continue.” Selecting “Reject and exit” closes the app without saving consent.

1. Information we process

You may provide account details, profile and wellness preferences, and support communications. After you pair and sync a ring, we process its ring Bluetooth MAC address (device MAC address), system connection identifier, model, firmware, battery and connection state, plus heart rate, HRV, blood oxygen, skin temperature, sleep, steps, activity, workout, and related measurements. The ring Bluetooth MAC address is used to discover, distinguish, connect, and maintain the correct binding for your ring. The app reads it locally through the system Bluetooth interface and, after you sign in, transmits it with device-binding or synchronization records to Floeva. We use these records to provide trends, Flow scores, and wellness insights; they are not medical diagnosis or treatment advice.

After consent, we may process app and operating-system versions, device model, language, time zone, network type, IP address, feature interactions, crash stacks, and diagnostic logs. Crash diagnostics may include an interface screenshot captured when an error occurs. Default PII sending is disabled, and we seek to exclude health content, passwords, and tokens from diagnostics.

Android_ID (Android ID): after consent, the China Android build processes Android_ID (Android ID) when recording a system time-zone change for diagnostics and when JPush/JCore (which a detection service may label “Jiguang Analytics+”) creates a de-identified device identifier for push delivery. We do not read Android_ID before consent.

Clipboard: while the app is in the foreground, Android system text controls may query clipboard metadata multiple times—such as whether content exists and its format—when a page shows a selectable legal document or input field, or when you select text, copy, or paste. This is used to determine and display available selection, copy, or paste actions. Floeva writes selected content only when you choose copy and reads and processes selected text only when you actively paste it. Text selection is disabled in legal documents shown before initial privacy consent, so those documents do not use clipboard capabilities. We do not automatically read clipboard contents in the background or collect or upload unrelated clipboard content.

2. Permissions

Bluetooth scan and connect permissions are requested only after you enter pairing or scanning and choose to continue. On Android 11 and earlier, location permission may be required by the operating system for Bluetooth scanning; Floeva does not request background location. Notification, camera, and photo permissions are requested only when you use the related feature. You may deny or later revoke permissions without affecting unrelated features.

3. How we use information

We use information to create and protect accounts, connect rings, synchronize and display wellness data, generate Flow scores, restore your choices, provide notifications and support, check updates, diagnose failures, secure the service, and comply with law. We do not sell personal information or use health data for third-party advertising profiles.

4. Third-party SDKs

The following SDKs are enabled only on applicable platforms and after the required consent.

JPush/JCore SDK (Jiguang Analytics+) — Shenzhen Hexun Huagu Information Technology Co., Ltd. Usage scenario and purpose: after consent, the China Android build uses the SDK while the app is in the foreground, registering for push, or receiving service notifications. It creates a de-identified terminal identifier, maintains the push connection, and measures API calls, delivery, and opens. Floeva does not use its profiling, targeted-marketing, or geofencing features. Information and scope: Android_ID (Android ID), OAID, AAID, Boot ID and similar device identifiers; device model, screen resolution, manufacturer, product name and storage capacity; OS version and language; network type, carrier, IP address, DHCP and Wi-Fi state; app package information; and push logs. Jiguang's SDK documentation identifies the device MAC address, installed-app list, and running-app list as optional or extension data, and an earlier YingYongBao report recorded related queries. Those categories are used to maintain a push connection, identify duplicate installations, and improve delivery; Floeva does not use them for profiles or advertising. This build uses SDK controls to disable optional collection or extensions involving phone IMEI, IMSI, device MAC address, SSID/BSSID, Wi-Fi lists, cell-tower information, link merging, smart push, data insights, geofencing, and auto-wakeup; Android permissions further limit accessible data. Processing method: the SDK reads applicable information on the device and transmits it to Jiguang over an encrypted network connection. The China Android build does not request permissions to read contacts, SMS, phone state, all installed apps, or external storage. A detection service may label this shared component “Jiguang Analytics+.” Privacy: https://www.jiguang.cn/license/privacy
Sentry SDK — Functional Software, Inc. Used for crash and error diagnostics. It may process crash stacks, error context, app/OS versions, device type, IP address, an internal account identifier, and enabled error screenshots. Data may be processed outside your country. Privacy: https://sentry.io/privacy/
Firebase Cloud Messaging — Google LLC. Used only in overseas Android builds that support Google services. It may process Firebase Installation ID, registration token, package/platform information, and delivery state. It is not enabled as the China Android push channel. Privacy and security: https://firebase.google.com/support/privacy
Yawell ring BLE SDK — Shenzhen Yawell Intelligent Technology Co., Ltd. Used after consent and entry into pairing, connection, or synchronization to discover and connect compatible rings, send ring commands, and read the ring Bluetooth MAC address (device MAC address), system connection identifier, firmware, battery, health, and activity measurements. The current integration uses the SDK for local phone-to-ring communication; Floeva controls whether synchronized records are uploaded to your Floeva account. Website: https://www.yawellfit.com/

If the purpose or scope of an SDK changes materially, we will update this list and request renewed consent where required.

5. Sharing and international processing

We disclose information only to listed processors, health platforms you choose to connect, or where required by law or necessary to protect vital interests. Providers may process information only under our instructions and contractual safeguards. China account and health service data is generally stored in China. Services such as Sentry may involve international processing of diagnostics; we apply required safeguards and obtain separate consent where applicable.

6. Retention and security

We retain account and wellness information while your account is active and for the minimum period needed to provide the service. After account deletion, information is deleted or anonymized within legal and backup-cleanup periods, except records we must retain by law. We use transport encryption, access controls, least privilege, audit logs, and protected backups, but no system can guarantee absolute security.

7. Your rights

You may access and correct your profile, manage permissions and notifications, delete eligible records, request an available export, and ask for an explanation, correction, deletion, restriction, withdrawal of consent, or submit a complaint. We generally respond within fifteen business days after verifying identity.

In-app deletion: after signing in, open “Profile — Account & Security — Delete Account,” review the deletion notice, select “Continue Delete,” enter “DELETE” for the second confirmation, and then select “Delete Account.” After deletion succeeds, the app signs out and clears account data stored on the device.

Web deletion: if you cannot use the app, visit https://getfloeva.com/account-deletion or https://floeva.cn/account-deletion, sign in with your existing Floeva email and password, acknowledge permanent deletion, and complete the request.

Email request: if neither self-service method is available, send a deletion request from your registered email address to privacy@getfloeva.com. Do not send your password; we will process the request after verifying account ownership.

After deletion, profile information, wellness records, Flow analysis, device history, AI data, feedback, and authorization credentials associated with the account are deleted or anonymized, except information that must be retained by law or remains temporarily in the backup-cleanup cycle. Deletion cannot be undone, but the same email address may be used to register again.

8. Children

The service is not directed to people under 18. If we learn that we processed a minor’s information without valid guardian consent, we will delete it or take other measures required by law.

9. Updates

We update the version and date when this policy changes. Material changes to purposes, data types, or SDKs are presented prominently, and renewed consent is requested where law requires it.

10. Contact

Controller: Shenzhen Quxing Technology Co., Ltd.

Privacy: privacy@getfloeva.com

Support: support@getfloeva.com

Website: https://floeva.cn

Floeva 隐私政策

版本：3.2

更新日期：2026 年 9 月 4 日

生效日期：2026 年 9 月 4 日

深圳市趣兴科技有限公司（以下简称“Floeva”或“我们”）重视您的个人信息和隐私。本政策适用于 Floeva 移动应用、智能戒指、网站及相关服务。

首次打开中国区 Android 版本时，我们会在启用业务网络、第三方 SDK、蓝牙服务和后台任务前展示本政策与《用户协议》。只有在您主动点击“同意并继续”后，相关能力才会启动。若您点击“拒绝并退出”，App 将退出，且不会写入同意记录。您可以在系统权限设置中撤回单项权限，也可以通过注销账户或联系我们撤回对相应处理活动的同意；撤回不影响撤回前处理活动的合法性。

1. 我们处理的信息

1.1 您主动提供的信息

账户信息：姓名、电子邮箱、密码的加密凭据。
个人资料：出生日期、性别、身高、体重、单位偏好、健康目标。
您主动提交的反馈、客服沟通和其他内容。

1.2 戒指和健康信息

当您主动绑定并同步戒指后，我们会处理戒指蓝牙 MAC 地址（设备 MAC 地址）、系统连接标识、型号、固件版本、电量、同步状态，以及戒指测得的心率、心率变异性、血氧、皮肤温度、睡眠阶段、步数、活动、运动等数据。戒指蓝牙 MAC 地址用于发现、区分、连接您的戒指并维持正确的设备绑定关系；由 App 通过系统蓝牙接口在本机读取，并在您登录后随设备绑定或同步记录传输至 Floeva 服务。我们据此生成 Flow 评分、趋势和健康洞察。这些结果仅供健康管理参考，不构成医疗诊断或治疗建议。

1.3 App、设备和诊断信息

在您同意本政策后，我们可能处理 App 版本、手机型号、操作系统版本、语言、时区、网络类型、IP 地址、功能交互、崩溃堆栈和诊断日志。崩溃诊断可能包含发生异常时的界面截图；我们已关闭默认个人身份信息发送，并尽量避免在诊断内容中包含健康正文、密码或令牌。

Android_ID（Android ID）： 中国区 Android 版本会在您同意后，在两个明确场景处理 Android_ID（Android ID）：

系统时区发生变化时，作为诊断事件中的设备关联字段，帮助排查跨时区数据偏移和重复事件；
极光推送/JCore SDK（检测平台可能显示为“极光统计+”）为生成脱敏的终端设备标识并保障推送送达而按其规则处理。

我们不会在您同意本政策前读取 Android_ID（Android ID）。

剪切板信息： App 前台运行期间，当页面展示支持文本选择的法律文档或输入框，或者您主动选择文本、复制、粘贴时，Android 系统文本控件可能多次查询剪切板元数据（例如是否存在内容及内容格式），用于判断并展示可用的选择、复制或粘贴操作。只有在您点击“复制”时才会写入所选内容，只有在您主动粘贴时才会读取并处理所选文本。首次隐私同意前展示的法律文档已关闭文本选择，不会调用剪切板能力。我们不会在后台自动读取剪切板正文，也不会收集或上传与当前操作无关的剪切板内容。

2. 系统权限及调用时机

蓝牙扫描和连接： 当您进入配对或扫描流程并主动继续后，用于发现、绑定和同步戒指。Android 12 及以上申请蓝牙扫描与连接权限；不申请蓝牙广播权限。
位置权限（仅 Android 11 及以下）： 旧版 Android 将蓝牙扫描与位置权限绑定，因此仅在配对/扫描场景申请。我们不申请后台定位，也不基于此生成运动轨迹。
通知权限： 当您启用通知相关功能时申请，用于健康提醒、同步状态和服务消息。
相机或相册： 仅在您主动选择头像、扫码或上传图片的功能中申请。

拒绝非必要权限不会影响与该权限无关的功能。您可以随时在系统设置中关闭权限。

3. 我们如何使用信息

我们将信息用于创建和保护账户、连接戒指、同步和展示健康数据、生成 Flow 评分、恢复用户选择、提供通知与客服支持、检查更新、排查故障、维护服务安全，以及履行法律义务。我们不会出售您的个人信息，也不会将健康数据用于第三方广告画像。

4. 第三方 SDK 清单

第三方 SDK 仅在适用平台和功能中启用。中国区 Android 首次同意前不会初始化下列 SDK。

4.1 极光推送/JCore SDK（极光统计+）

服务主体：深圳市和讯华谷信息技术有限公司。
使用场景和目的：向中国区 Android 设备发送服务通知，生成脱敏的终端设备标识以维持推送连接，并统计推送接口调用、送达和打开情况。应用宝等检测平台可能将该公共组件标识为“极光统计+”。Floeva 不使用其用户画像、精准营销或地理围栏功能。
可能处理的信息及范围：Android_ID（Android ID）、OAID、AAID、Boot ID 等设备标识，设备型号、屏幕分辨率、制造商、产品名称、存储空间、操作系统版本与语言、网络类型、运营商、IP 地址、DHCP、Wi-Fi 状态、应用包信息和推送日志。极光 SDK 文档将设备 MAC 地址、软件安装列表和软件运行列表列为可选或扩展信息，旧版应用宝检测报告曾记录相关查询；这些信息用于维护推送长连接、识别重复安装并提升消息送达率，Floeva 不将其用于用户画像或广告营销。本版本已通过 SDK 控制关闭手机 IMEI、IMSI、设备 MAC 地址、SSID/BSSID、Wi-Fi 列表、基站、链路合并、智能推送、数据洞察、地理围栏和自动唤醒等可选采集或扩展能力，实际可访问范围还受 Android 系统权限限制。
触发时机：仅在您同意本政策后，于 App 前台运行、注册推送或接收服务通知时初始化和处理；首次同意前保持关闭。通知权限另在系统要求的功能场景申请。
处理方式：SDK 在设备端读取上述信息，并通过加密网络连接传输至极光服务。中国区 Android 版本不授予读取通讯录、短信、通话状态、全部已安装应用或外置存储的权限。
隐私政策：https://www.jiguang.cn/license/privacy
合规说明：https://docs.jiguang.cn/jpush/client/jghgzy_a_i_h

4.2 Sentry SDK

服务主体：Functional Software, Inc.（Sentry）。
使用目的：发现、定位和修复 App 崩溃与运行异常。
可能处理的信息：崩溃堆栈、错误上下文、App/系统版本、设备类型、IP 地址、用户账号的内部数字标识，以及启用的异常现场截图。
触发时机：您同意本政策后随完整 App 运行时初始化。
处理方式：通过 SDK 加密传输至 Sentry 服务；其服务可能在境外处理信息。
隐私政策：https://sentry.io/privacy/

4.3 Firebase Cloud Messaging SDK

服务主体：Google LLC。
使用目的：仅在支持 Google 服务的海外 Android 版本中发送推送消息；中国区 Android 不启用该通道。
可能处理的信息：Firebase Installation ID、推送注册令牌、应用包名、平台信息和消息送达状态。
触发时机：适用版本完整启动后。
处理方式：通过 SDK 进行网络传输，并可能在 Google 全球基础设施中处理。
隐私与安全说明：https://firebase.google.com/support/privacy
产品说明：https://firebase.google.com/docs/cloud-messaging

4.4 雅为戒指 BLE SDK

服务主体：Shenzhen Yawell Intelligent Technology Co., Ltd.（深圳市雅为智能技术有限公司，硬件及 SDK 提供方）。
使用目的：在 Android 设备上通过蓝牙发现、连接兼容戒指，读取固件、电量和健康测量数据，并向戒指发送必要指令。
可能处理的信息：戒指蓝牙名称、戒指蓝牙 MAC 地址（设备 MAC 地址）、系统连接标识、型号、固件、电量、连接状态及戒指产生的健康和运动数据。
触发时机：您同意本政策并进入戒指配对、连接或同步场景后。
处理方式：当前集成用于手机与戒指之间的本地蓝牙通信；由 Floeva App 决定是否将同步数据上传至您的 Floeva 账户。
官网：https://www.yawellfit.com/

开源或系统基础组件（例如 Flutter、Android 系统蓝牙接口、Apple Health 系统接口）不因集成而独立取得您的个人信息；若其处理范围或目的发生变化，我们会更新本清单并按法律要求重新征得同意。

5. 信息共享、委托处理与转移

除本政策列明的服务提供商、您主动连接的健康平台、履行法律义务或保护生命财产安全所必需的情形外，我们不会向第三方提供您的个人信息。服务提供商只能按我们的指示和合同约束处理信息。

中国用户的账户和健康业务数据原则上存储在中国境内。Sentry 等境外服务可能涉及跨境处理诊断信息；我们将根据适用法律采取必要保护措施，并在需要时另行取得单独同意。

6. 信息保存与安全

账户存续期间，我们按提供服务所需期限保存账户与健康信息。账户注销后，我们将在法律允许和备份清理周期内删除或匿名化相关信息；依法必须保存的记录除外。我们采用传输加密、访问控制、最小权限、日志审计和备份保护等措施，但任何系统都无法保证绝对安全。

7. 您的权利

您可以在 App 中查阅和更正个人资料、管理权限和通知、删除部分数据、导出依法可提供的数据，也可以要求解释、更正、删除、限制处理、撤回同意或投诉。我们通常会在验证身份后的十五个工作日内答复。

App 内注销：登录后依次进入“我的—账号与安全—删除账号”，阅读删除提醒并点击“继续删除”，输入“DELETE”完成二次确认，再点击“删除账号”。注销成功后，App 会退出当前账号并清理本机账号数据。

网页注销：如果您无法使用 App，可以访问 https://getfloeva.com/account-deletion 或 https://floeva.cn/account-deletion，使用现有 Floeva 邮箱和密码登录，确认永久删除后完成注销。

邮件申请：如果以上自助方式均无法使用，可以通过注册邮箱向 privacy@getfloeva.com 发送注销申请。请勿在邮件中提供密码；我们会在核验账号归属后处理申请。

账号注销后，与账号关联的个人资料、健康记录、Flow 分析、设备历史、AI 数据、反馈和授权凭据将被删除或匿名化；依法必须保存以及仍处于备份清理周期内的数据除外。注销是不可恢复的，但原邮箱可用于重新注册。

8. 未成年人保护

我们的服务不面向 18 周岁以下未成年人。若我们发现未取得有效监护人同意而处理了未成年人信息，将依法删除或采取其他保护措施。

9. 政策更新

如处理目的、信息类型或第三方 SDK 发生重大变化，我们会更新版本和日期，并通过显著方式提示；依法需要重新同意的，我们会在继续处理前再次征得您的同意。

10. 联系我们

个人信息处理者：深圳市趣兴科技有限公司

隐私咨询：privacy@getfloeva.com

客户支持：support@getfloeva.com

网站：https://floeva.cn

如您对我们的答复不满意，您可以向有管辖权的网信、工信、市场监管或其他个人信息保护主管部门投诉。

Privacy Policy 隐私政策