Welcome to the E-Health Now App (the "App"), which is provided and operated by Zhishu Huiyi Technology (Hangzhou) Co., Ltd. ("Zhishu Huiyi Technology," "we," "us," or "our"). We recognize how important your personal information is to you, and we are committed to protecting it. We handle your personal information in accordance with the principles of lawfulness, legitimacy, necessity, and good faith.
This Privacy Policy (this "Policy") is issued pursuant to the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Personal Information Protection Law of the People's Republic of China (the "PIPL"), and other applicable laws, regulations, and national standards. It explains how we collect, use, store, share, transfer, and disclose your personal information when you use the App, and how you may exercise your rights.
Please read this Policy carefully and in full before you use the App, paying particular attention to the provisions highlighted in bold that concern your material rights and interests. By tapping "Agree," you acknowledge that you have read and understood this Policy and that you consent to our processing of your non-sensitive personal information as described here. For sensitive personal information such as your health data, we will obtain your express, separate consent through a pop-up or other prominent notice at the point of first collection. We will never rely on implied or bundled consent for sensitive personal information.
Your acceptance of this Policy does not mean that we will process every category of information described here. We process personal information only when you actually use a particular feature, and only to the extent necessary for that feature (the data-minimization principle).
Once you pair your smart ring with the App, the ring continuously collects and transmits the following health and activity data to your mobile device:
Sensitive personal information notice: The health data above constitutes sensitive personal information as defined under Article 28 of the PIPL. If leaked or misused, it could harm your personal dignity or the safety of your person or property.
Why this data is necessary: This data is essential for the App to deliver its health-monitoring and display functions. Without data such as heart rate and blood oxygen, the App cannot perform its core functionality. If you decline to provide this health data, the App's core functions (health monitoring and display) will be unavailable.
Impact on your rights: Your health data is stored solely on your device (see Section 2). We do not upload it to any server, share it with any third party, or use it for automated decision-making. We will obtain your separate consent before first collection, and you may withdraw that consent at any time under "Settings → Authorization Management." Once you withdraw consent, we will stop reading data from your ring and will no longer collect new health data. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of your consent before the withdrawal.
During initial setup, you provide the following basic physical information:
This information is used to calculate reference health metrics (such as heart-rate zones and BMI). Although it is not sensitive personal information, it is necessary to ensure the accuracy of these reference calculations.
Regarding minors: If you are under 18 years of age, you and your legal guardian must read this Policy together, and you may use the App and provide personal information only with your guardian's consent. When a minor enters age information, it is deemed that both the minor and the guardian have read and understood this Policy, and that the guardian consents to and authorizes the minor's use of the App. This acknowledgment constitutes a representation and warranty by you and your guardian. The App is not directed at children under 14 (see Section 7).
To connect to and manage your smart ring, we collect:
The App does not collect any of the following:
We do not collect IP addresses or device network identifiers for the purpose of tracking or identifying you. When you view legal documents such as this Policy or the User Agreement within the App, the necessary network requests are handled by our content delivery network (CDN) provider, which may briefly log your IP address as an inherent part of network transmission. We do not use such logs to identify you or to associate them with your health data. The entrusted-processing arrangement is described in Section 2.
Because of the underlying architecture of the Android operating system, Bluetooth scanning requires the declaration of location permissions (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION). We state clearly: we do not read, collect, store, or upload your geographic location through the location permission. This permission exists solely to satisfy Android's underlying requirement for Bluetooth scanning. The iOS version does not require location permission for Bluetooth connectivity.
The Android version uses the physical activity recognition permission (ACTIVITY_RECOGNITION) to detect your activity state and to assist with step counting and activity calculation. This permission is used only to read motion-sensor data and does not involve GPS positioning.
The Android version uses the body sensors permission (BODY_SENSORS) to read the health and motion sensor data collected by the smart ring, enabling the calculation and display of metrics such as heart rate, blood oxygen, and steps. This permission is used solely to read sensor data from the smart ring.
In short: your health data stays on your phone. It is not uploaded to any server and is never used for advertising or analytics.
In the current version (1.0), your health data and physical profile are stored solely on your device:
The App makes network requests only when you view legal documents (this Policy, the User Agreement, and similar pages), loading the content through an in-app browser (WebView). This relies on content delivery services provided by our CDN provider. We entrust the relevant provider to process the data necessary for network transmission (including the IP address necessarily carried by that transmission) solely on our instructions and solely for the purpose of content delivery. We have agreed with the provider on the purpose, duration, and manner of processing, the categories of personal information, and the security measures to be applied, and we supervise the provider's processing activities. We require the provider not to process the data beyond the agreed purpose and manner, and to delete the relevant logs within a reasonable period. Your health data is not uploaded or transmitted externally as a result.
Your personal information is stored locally on your device from the date of collection until you uninstall the App, at which point the data is automatically deleted. We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy. Beyond that period, we will delete or anonymize your personal information in accordance with applicable law.
When you uninstall the App, the operating system clears the App's internal storage, and all of your health data and personal information is deleted.
Please note: your device's whole-device backup features (such as iCloud backup or PC-suite backups) may retain copies of the App's historical data. The storage and deletion of such backups are outside the App's control. To delete them completely, please remove the relevant backups in your system settings before uninstalling.
The App processes your information only for the following purposes, all performed locally on your device and without any remote-server processing:
Legal basis for processing: We process your personal information in accordance with Article 13 of the PIPL. We process sensitive personal information, such as your health data, on the basis of your separate consent. We process non-sensitive personal information that is necessary to deliver the App's core functions (such as the Bluetooth MAC address and your basic physical profile) on the basis that it is necessary for the performance of a contract to which you are a party.
We do not use your information for:
The App does not integrate any of the following third-party services:
SDK used by the App:
E-Health Now Smart Ring Companion SDK (built into the App; no separate permission required)
This SDK is a dedicated companion component for the smart ring, performs no network communication, and its data processing is governed by this Policy.
Under applicable law, you have the following rights with respect to your personal information:
| Right | Description | How to exercise |
|---|---|---|
| Right to access | Know about and view all personal information we hold about you | All health data is displayed in the App and available at any time |
| Right to copy and portability | Obtain a copy of your personal information, or have it transferred to another personal information processor of your choice | Submit a request through customer service. Where technically feasible, we will provide it in a structured, commonly used format |
| Right to rectification | Correct inaccurate or incomplete personal information | Your physical profile can be edited in the App at any time |
| Right to erasure | Request deletion of your personal information | Uninstalling the App deletes all data. To delete a specific category of data, contact customer service |
| Right to restriction | Request restriction of the processing of your personal information | Withdraw the relevant authorization under "Settings → Authorization Management," or contact customer service |
| Right to withdraw consent | Withdraw consent previously given for the collection of personal information | Withdraw data-collection authorization under "Settings → Authorization Management." After withdrawal, the App stops reading data from your ring. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal |
| Rights of next of kin following death | Following your death, your next of kin may, for their own lawful and legitimate interests, exercise rights of access, copying, rectification, and erasure with respect to your relevant personal information, unless you made other arrangements during your lifetime | Next of kin may apply through customer service upon providing the necessary proof |
| Right to lodge a complaint | Complain or report our processing activities to the competent authority | Contact customer service below, or complain to the authority discharging personal information protection duties |
How to exercise your rights: You may submit a written request to us through the contact details in Section 10. After verifying your identity, we will respond within 15 business days. We do not charge for reasonable requests. For repetitive requests that manifestly exceed reasonable limits, we may charge a reasonable cost-based fee or decline to act as permitted by law, and we will explain our reasons. If we decline your request, we will tell you why.
Regarding identity verification: Because the App does not collect direct identifiers such as your name, mobile number, or email, when you exercise these rights through customer service we may ask you to provide indirect information related to your device or usage to confirm your control over the data — for example, the Bluetooth MAC address of your paired ring (viewable under "Settings → Device Information"), the approximate range of a given health data point (such as your total sleep duration on a particular day), or a proof of purchase. We use this information solely for the verification, and we will delete the relevant verification records within 7 business days of completion, except where the law requires otherwise or where a dispute is pending.
Technical measures:
Organizational measures: We provide strict confidentiality training to development and testing personnel who may access on-device data, and we require them to sign confidentiality agreements. Because your data is fully localized, the risk of disclosure is limited to the security of your own device.
Security incident response: In the event of an actual or potential personal information security incident (such as device loss or a malware attack), we will take immediate remedial action and notify the authority discharging personal information protection duties in accordance with Article 57 of the PIPL. Unless the measures we take effectively prevent harm to you as the data subject, we will also notify you of the basic facts and potential impact of the incident, the remedial measures we have taken or will take, suggestions for preventing and reducing risk, and our contact details. You may delete all of your personal information at any time by uninstalling the App. We maintain an internal incident response plan and will handle incidents in accordance with applicable law.
The App is not directed at children under 14. If you are under 14, please do not use the App. We do not knowingly collect personal information from children under 14. Because the App is not directed at this group and does not actively collect their information, we do not issue a separate special rule for the personal information of minors under 14.
If you are 14 or older but under 18, you and your legal guardian must read this Policy together, and you may use the App and provide personal information only with your guardian's consent. When a minor taps "Agree," it is deemed that the guardian consents to the minor's use of the App and acceptance of this Policy and accepts responsibility for supervising the minor's use. If you are a guardian and you allow a minor under your guardianship to use the App, you agree to be bound by this Policy and to be responsible for that minor's use.
If you are a guardian and become aware that a child under 14 is using the App, or that we have inadvertently collected a child's personal information, please notify us through the contact details in Section 10. We will delete the relevant information within 15 days of verification.
We may revise this Policy as laws, regulations, or product features change.
Non-material changes (such as wording corrections, updates to contact details, or notes on bug fixes): the updated version will be posted with notice in the App, and your continued use constitutes acceptance.
Material changes (including, without limitation, any of the following) will require us to re-obtain your express consent through a prominent means such as a pop-up; we will not rely on implied consent:
In all cases, we will update the version number and effective date at the top of this Policy and make prior versions available within the App.
In the current version (1.0), all data is processed solely on your device, and no cross-border transfer takes place.
If future product enhancements involve the cross-border transfer of your personal information, we will complete the compliance procedures required under Article 38 of the PIPL (passing a security assessment organized by the national cyberspace authority, concluding a standard contract with the overseas recipient as prescribed by the national cyberspace authority, or obtaining personal information protection certification from a qualified institution). We will separately inform you of the overseas recipient's name, contact details, processing purposes and methods, and categories of personal information, as well as how you may exercise your rights under this Policy against the overseas recipient, and we will obtain your separate consent.
Personal information processor: Zhishu Huiyi Technology (Hangzhou) Co., Ltd.
If you have any questions, suggestions, or complaints regarding this Policy or our processing of your personal information:
If you are not satisfied with our response — in particular, if you believe that our processing of your personal information has infringed your lawful rights and interests — you have the right to lodge a complaint with the authority discharging personal information protection duties or to bring proceedings before a competent people's court.