privacy policy
Update Date: April 1, 2025
Effective Date: April 1, 2025
Shenzhen BENIO IoT Technology Co., Ltd. (hereinafter referred to as 'BENIO IoT') places great importance on your personal information. This Privacy Policy outlines how we collect and utilize your data through various digital means. By accessing or using this mobile application or any other products or services provided in collaboration with 'BENIO IoT' ('this Platform') on your mobile device, you hereby agree to this Privacy Policy. 'BENIO IoT' reserves the right to amend this Privacy Policy at any time, with changes taking effect immediately upon publication. Your continued use of our products and services constitutes acceptance of this Privacy Policy and its updates. This Privacy Policy forms an integral part of the Terms of Use and is governed by them.
We place great importance on your privacy. This Privacy Policy outlines our privacy commitments regarding the 'BENIO' application. It has been developed with full consideration of your needs, ensuring you have a comprehensive understanding of our personal information collection and usage practices while maintaining complete control over the data provided to us—a fundamental requirement. The policy specifies how we collect, use, disclose, process, and store information you provide when using our 'BENIO' application (hereinafter referred to as the 'Application'). 'Personal Information' means data that can identify a specific individual either directly or through association with other information. We strictly adhere to this policy in handling such data. Ultimately, we strive to deliver the best user experience. If you have any questions about our personal information processing practices described herein, please contact us at service@benio.fit for assistance with your specific inquiries. We welcome your feedback.
。
1. Regarding Background Services and Auto-Startup
Even after closing this app, certain services continue running in the background to ensure stable Bluetooth connectivity between the phone and the device, forming an integral part of the device's full functionality.
Background Service Description:
Scenario: After binding your smartwatch, you can synchronize phone messages (WeChat, SMS, etc.) in real time.
Objective: To instantly push mobile phone notifications to the watch.
Rule: The background service activates only when the watch is connected via Bluetooth and stops automatically when disconnected.
Necessity: If background operation is prohibited, the watch cannot receive messages in real time.
II. How We Collect Information
1. The information you provided
When you use our services, we collect and store any information you provide to us, including your date of birth, height and weight, email address, profile picture, gender, specific location data (e.g., GPS coordinates), activity and exercise information, health records, and physiological parameters (such as heart rate and calorie expenditure).
Specifically, when you use our AI Health Assistant, sleep analysis, weekly reports, and other analytical services powered by large-scale model technology (hereinafter referred to as 'AI Analytical Services'), the following information you provide will be used for algorithmic analysis:
Your health and physiological data: such as age, height, weight, heart rate, calorie expenditure, etc.;
Your activity and exercise data: such as steps, movement paths, exercise types, and duration;
Your sleep data: including sleep duration, deep sleep/light sleep duration, etc.
The aforementioned information (hereinafter referred to as 'health analysis data') will be de-identified and transmitted securely via encrypted channels to third-party large-scale model API providers we collaborate with (including but not limited to ChatGPT, Gemini, Alibaba Cloud/Tongyi Qianwen, and DeepSeek) for generating personalized exercise and health recommendations tailored to your current activity profile. These analysis results are intended solely for reference purposes and do not constitute medical diagnosis.
2. Information We Collect from You Automatically
Whenever you interact with us or use our products and services, we may automatically collect information. For example, when your smart device (hereinafter referred to as the 'Device') is paired, authorized, and connected via Bluetooth to the 'Application,' we record the Device's Bluetooth MAC address as a unique identifier to link it to the Application. The Device will then automatically collect your step count, sleep data, and heart rate measurements, which are transmitted to the Application for storage. If you initiate heart rate monitoring, blood oxygen level measurement, or activity tracking on the Device, these data points will also be automatically sent to the Application upon completion of the operation.
These automatically collected data will be combined with the data you provide when using the AI Analysis Service for algorithmic analysis. Your use of the AI Health Assistant, Sleep, Weekly Report, and other AI Analysis Services constitutes consent to the collection of health analysis data from your device for use in these services.
3. Information collected from third parties
We also obtain information from third parties. We may combine the information you provide to us or that we collect with other information derived from mobile phone brands' own operational channels, transactions, and communications, which may include but are not limited to data from Apple Health, Huawei Health, Google Health, Samsung Health, WeChat Sports, QQ Sports, and Alipay. The combination of such data will be carried out only after we proactively seek your consent and obtain your authorization.
4. We will collect the list of apps on your phone
The device you are using may have or enable the feature to receive notifications from your phone's notification bar. The app collects a list of installed apps on your device. If you allow notifications from current apps to be sent to this device, the app will retrieve them and forward them exactly as they are via Bluetooth.
5: Special Authorization for AI Algorithm Analysis Services (Separate Consent Required)
To help you better understand how your health data will be used in artificial intelligence algorithm analysis, we hereby provide the following explanation and request your explicit consent:
Our 'AI Analysis Service' is delivered by leveraging third-party large-scale model APIs (Application Programming Interfaces), with supported providers including but not limited to ChatGPT, Gemini, Alibaba Cloud's Tongyi Qianwen, and DeepSeek.
When using this service, your Health Analysis Data (specific types detailed in Section 1) will be de-identified and transmitted via API to the aforementioned service provider, where it will be processed by their large-scale model to generate personalized exercise and health recommendations.
Your data is encrypted during transmission and storage. We have signed a data processing agreement with the service provider, requiring them to handle the data strictly in accordance with our instructions and not use it for any other purposes.
III. How We Protect Your Personal Information
1. We have implemented industry-standard security measures to protect the personal information you provide, preventing unauthorized access, disclosure, use, modification, damage, or loss of data. We take all reasonable and feasible steps to safeguard your personal data: for example, ensuring data exchange between your browser and the Service is protected by SSL encryption; providing secure browsing via HTTPS; employing encryption technologies to ensure data confidentiality; utilizing trusted protection mechanisms against malicious attacks; implementing access control systems that restrict access to personal data only to authorized personnel; and conducting security and privacy training programs to enhance employees' awareness of the importance of data protection.
2. We employ various security measures, including encryption and authentication tools, to protect your information. For your personal data, we use secure servers. All personal data you provide will be transmitted using Secure Sockets Layer (SSL) technology and encrypted in our database.
3. We will take all reasonable and feasible measures to ensure that no irrelevant personal data is collected. We will retain your information only for the duration of your account validity or as necessary to provide you with services and technical support. We will also retain your personal information for as long as required to comply with applicable legal obligations, resolve disputes, and fulfill contractual obligations. If you request the deletion of your information, we will take appropriate action in accordance with our policies and applicable laws.
4. The internet is not an absolutely secure environment, and email, instant messaging, and communication methods with other users are not encrypted. We strongly advise against sending confidential information through these channels. Use strong passwords to help protect your account security.
5. We will regularly update and disclose relevant content in reports such as security risk assessments and personal information impact evaluations.
6. The internet environment is not 100% secure; we will make every effort to ensure the security of any information you send us. If our physical, technical, or administrative safeguards are compromised, resulting in unauthorized access, disclosure, alteration, or destruction of information that harms your legitimate rights and interests, we shall assume corresponding legal liability.
7. In the event of a personal information security incident, we will promptly inform you in accordance with legal requirements regarding: the basic details and potential impacts of the incident, the measures we have taken or plan to take, recommendations for you to mitigate risks independently, and remedial actions available to you. We will notify you of relevant developments via email, letter, telephone call, push notification, or other appropriate means; when it is impractical to notify each individual affected party individually, we will issue an official announcement through reasonable and effective channels.
IV. Your Rights
In accordance with the relevant laws, regulations, standards of China, as well as common practices in other countries and regions, we guarantee your right to exercise the following rights regarding your personal information:
1. Access Your Personal Information
You have the right to access the personal information you have provided to us, except as otherwise required by law. To exercise your data access rights, you can do so through the following options: Account Information – To view or edit your personal profile information and personal data, change your password, modify third-party account linking permissions, add security information, or close your account, please visit the 'Application' section.
If you cannot access this personal information as described above, send an email to service@benio.fit. We will respond to your request within 15 days.
2. Correct your personal information
If you find any errors in the personal information we have processed about you, you have the right to request corrections. You can submit a correction request using the methods listed under 'Access Your Personal Information'.
If you cannot correct this personal information using the above methods, you may use our 'User Feedback' feature or email service@benio.fit at any time. We will respond to your request within 15 days.
3. Delete your personal information
You may request the deletion of your personal information under the following circumstances: if our processing of personal information violates laws or regulations; if we collect or use your personal information without obtaining your consent; if our processing of personal information breaches any agreement with you; if the personal information has reached the retention period agreed upon between you and us; or if we cease providing you with products or services. If we decide to comply with your deletion request, we will also notify the entities from which we obtained your personal information and require them to delete the data promptly, unless otherwise required by law or they have obtained separate authorization from you.
4. Change the scope of your authorized consent
Each business scenario requires certain basic personal information to function (see Part 1 of this Privacy Policy). For the collection and use of personal information beyond the minimum required set, you may at any time grant or withdraw your consent. Upon withdrawal of consent, we will cease processing the corresponding personal information. However, your decision to withdraw consent does not affect prior personal information processing conducted with your authorization. If you do not wish to receive commercial communications from us, you may cancel your consent at any time through the following methods:
①Turn off system notification permissions;
②Unsubscribe from the subscription SMS.
5. Account cancellation by the personal information subject
You may cancel your previously registered account at any time. After cancellation, we will cease providing you with products and services and will delete your personal information upon your request, unless otherwise required by law or regulations.
6. Constraints on Automatic Decision-Making in Information Systems
In certain business scenarios, decisions may be made solely based on automated decision-making mechanisms such as information systems or algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to request an explanation from us, and we will provide appropriate remedies, unless otherwise provided by law or regulation.
7. In response to your above request
To ensure security, you may need to submit a written request or provide other proof of identity. We may require you to verify your identity before processing your request. We will respond within 15 days.
For reasonable requests, we generally do not charge any fees; however, for repeated requests that exceed reasonable limits, we may charge appropriate costs as appropriate. We may refuse requests that are unwarranted, require excessive technical effort (e.g., developing new systems or fundamentally altering established practices), pose risks to others' privacy rights, or are highly impractical (e.g., involving information stored on backup tapes). In the following circumstances, we cannot respond to your request in accordance with legal requirements:
① Related to national security and defense security;
② Related to public safety or significant public interests;
③ Related to criminal investigation, prosecution, and adjudication;
④ The data controller has sufficient evidence that responding to the data subject's request would cause serious harm to the legitimate rights and interests of the data subject or other individuals or organizations.
IV. How We Handle Children's Personal Information
Our products, website, and services are primarily intended for adults. Children may not create user accounts without parental or guardian consent. When collecting children's personal information with parental consent, we will only use or disclose such information when permitted by law, with explicit parental or guardian consent, or necessary for child protection. Although definitions of children vary across local laws and customs, we consider any individual under the age of 14 to be a child. If we have collected children's personal information without verifiable parental consent in advance, we will delete the relevant data promptly.
5. How Your Personal Information Is Transferred Globally
Since we deliver products and services through a global network of resources and servers, your personal information may be stored in jurisdictions outside the country or region where you use our products/services—or accessed from such jurisdictions—after obtaining your consent. These jurisdictions may have varying data protection laws or none at all.
VI. How This Policy Is Updated
Our privacy policy may be amended. Without your explicit consent, we will not revoke any rights you are entitled to under this policy. Any changes to the privacy policy will be published on this page. For significant amendments, we will provide more prominent notifications—including email alerts for certain services specifying the specific changes. Significant amendments to this policy include, but are not limited to:
1. Our service model has undergone significant changes, including the purposes of processing personal information, the types of personal information processed, and the methods of using such information;
2. Significant changes have occurred in our ownership structure, organizational framework, and other aspects, such as ownership changes resulting from business adjustments, bankruptcy, mergers, or acquisitions;
3. The primary recipients of personal information disclosure have changed;
4. There has been a significant change in your rights regarding personal information processing and the manner in which you exercise those rights;
5. When there are changes to the department responsible for handling personal information security, contact details, or complaint channels;
6. When the Personal Information Impact Assessment Report indicates a high risk.
We will also archive the previous version of this privacy policy for your reference.
7. How to Contact Us
If you have any questions, comments, or suggestions regarding this Privacy Policy, please contact us at service@benio.fit. We will respond within 15 days.
8. Purpose of Personal Information Collection by This Software
We will use your information for the following purposes:
1. Enable you to use this software product and the related services provided by smart wearable devices properly
2. Provide software verification and upgrade services
3. When providing specific services in response to special user requests, you must provide the information to our affiliated companies, third parties, or other users.
4. Other circumstances that benefit both users and the application operator without violating any mandatory laws or regulations
5. Involve you in surveys about our products and services
