xFit Privacy Policy

Updated Date: December 10, 2025
Release Date: December 10, 2025
Effective Date: December 10, 2025

"xFit" is a fitness guidance and health service application provided by TPV Display Technology (Xiamen) Co., Ltd. ("We," "Our," or "Us"). We deeply value your personal information and privacy protection. We will adhere to legal requirements and industry-standard security measures to provide appropriate safeguards for your personal data. Before accessing xFit or using our services, you must agree to the provisions outlined in this policy regarding how we collect, use, store, and share your information. If you disagree with any part of this Privacy Policy, please immediately cease using or accessing our products and services.

1. How We Collect and Use Your Personal Information

xFit strictly complies with national legal requirements and employs security technologies to ensure data protection.

 We prioritize your privacy rights and adhere to principles of legitimacy, lawfulness, transparency, and minimal necessity. We will only provide services and collect your relevant personal information after you have read and agreed to this privacy policy. If you do not agree to this privacy policy, we will not collect your personal information and will be unable to provide you with corresponding services.

1.1 What Personal Information We Collect

Business Scenario	Collection Purpose	Personal Information Type	Collection Method	Collection Scope
Homepage	To better recommend location-related content	Location Information	APP Collection	Location Coordinates
Device Management	To establish Bluetooth connections, manage device configurations, complete software upgrades, display data sources, statistically analyze ， device activation status, associate wearable devices for synchronous software installation, make and receive calls, and send and receive text messages	Device Identifier (including MAC address), device hardware information, device usage information, system basic information and network information, device serial number, software installation list, contacts, text messages	APP Collection	Device identifier (including MAC address), device model, device operation records, device usage time, battery level display, country code, screen size, system language configuration, switch configuration, Bluetooth configuration, and network connection status, device serial number, mobile phone software installation list, mobile phone contact information, mobile phone text message information
Personal Profile Management	To manage your personal profile data and enhance data accuracy	Personal Profile	APP Collection	Gender, date of birth, height, weight
Sports Data Management	To record, back up, and manage your sports data; step counting; sports state recognition; basic interaction adaptation	Sports Data, Location Information, Device Sensor Data (collected via accelerometer)	APP Collection	Sports trajectory, sports type, sports duration, running posture, step count, distance, calories burned, elevation gain, maximum oxygen uptake, speed, slope, cadence, power, etc.; the accelerometer only reads raw physical data without associating it with user identity; data is processed locally by default and not uploaded
Health Data Management	To record, back up, and manage your health data	Health Data	APP Collection	Relevant health data
Feedback	To provide feedback on issues or suggestions encountered during use	Device Information (system basic information, device name, device identifier, IMEI, MAC address, system logs, system usage information, device usage information, IMSI, Android ID, Android Advertising ID, OAID, hardware serial number, SIM card identifier, etc.), sports data, data you actively upload, your IP address, operating system, network access method, type, and status, operation logs, service logs	APP Collection	Sports type, sports duration, issue type, issue description or suggestion, device identifier, actively uploaded content, contact information, system logs, system usage information, device hardware information

1.2 How We Use Your Personal Data

1.2.1 Profile Management
To manage your profile data and improve workout data accuracy, we collect personal details such as gender, date of birth, height, weight, and workout settings.

 You can update this information under "My Profile." Failing to provide this data may affect workout calculation accuracy but will not impact local profile management.

1.2.2 Workout Data Management
To record, backup, and analyze your workout data, we collect location, route, type, duration, steps, distance, calories burned, elevation, speed, and other metrics.

 This enables us to provide comprehensive workout tracking and services.

· Outdoor workout trajectory providers include AutoNavi, TPV Display Technology (Xiamen) Co., Ltd., and Google. Using this service requires sharing your location data with map providers. Some maps may also request device identifiers and network info, governed by their respective privacy policies.

· Failing to provide this data prevents cloud backup of workout data, resulting in loss upon app uninstallation or device switch. However, local recording remains unaffected.

1.2.3 Health Data Management
To manage and display your health data, we collect some health information.

 This allows us to provide detailed health services.

· Failing to provide this data prevents cloud backup of health data, resulting in loss upon app uninstallation or device switch. However, local health management remains unaffected.

1.2.4 User Experience Improvement
To enhance product quality and user experience, we collect device identifiers (system info, device name, IMEI, MAC address, logs, usage data, IMSI, Android ID, advertising ID, OAID, hardware serial number, SIM card ID), system info, and usage data.

 This includes pages visited, buttons clicked, and device/app functionality to analyze usage patterns and improve services. Data is aggregated and anonymized after analysis.

· If you encounter issues, you can submit feedback via the "Feedback" section, including a description and contact info. We also collect system and hardware info to resolve problems. Failing to provide this data may hinder issue resolution but will not affect other services.

· We may occasionally send surveys to improve our product. Participation is voluntary, and you can opt out without affecting normal usage.

· To opt out of commercial ads, navigate to "Settings > Ad Preferences > Personalized Ads > Disable."

1.3 How We Use Your Personal Data

1.3.1 xFit Device Management
To manage xFit devices (including our and third-party wearables like earbuds, smartwatches, and fitness trackers), we collect device identifiers (system info, device name, IMEI, MAC address, logs, usage data, IMSI, Android ID, advertising ID, OAID, hardware serial number, SIM card ID), hardware info, usage data, system info, and network info.

 This enables Bluetooth pairing, device configuration, software updates, data source display, and activation tracking.

· To sync wearable/earbud data with your phone, we read calendar events and system info. Data is collected via Bluetooth, and you can terminate this by disconnecting or unbinding the device.

· After pairing, your gender, age, height, and weight from "My Profile" will sync to the device (e.g., smartwatches).

· Wearables with call functionality may display phone contacts and call history for seamless communication.

· For TPV-manufactured devices, xFit provides firmware updates. Device info is uploaded to TPV servers for activation tracking and troubleshooting. Refer to our User Agreement & Privacy Statement for details.

· Paired third-party apps can access your device’s random identifier (resettable per app), name, hardware info, and status. With explicit consent, they may also access sensor data, workout type,wear status, logs, location data, and device info.

· If your wearable supports weather updates, we share your location with weather providers to display local forecasts. You can disable this feature in device settings.

· We automatically collect usage details (login ID, IP address, browser type, operator, network environment, language, access time, duration, refresh records) for network logging.

1.3.2 Device Permission Requests

· Storage Permission: Required for sharing, vibration-based step counting, or login. Enables reading/writing app data, images, videos, and step logs. Optional and can be revoked.

· Camera Permission: Needed for QR code scanning, bus card binding, or group features. Optional and can be revoked.

· Location Permission: Required for trajectory mapping, Bluetooth pairing, weather updates, or location-based searches. Optional and can be revoked.

· Bluetooth Permission: Used for low-power earbud battery level access.

· Network Permission: Essential for error logging, version updates, activation, and login.

· Device Info Access: Verifies system info, device name, identifiers, IMEI, MAC address, logs, usage data, IMSI, Android ID, advertising ID, OAID, hardware serial number, SIM card ID.

· Phone Permission: Needed for pairing, SIM card activation, calls, and call status sync. Denying this may affect motion health features.

· Microphone Permission: Required for voice commands, calls, or audio data transfer on certain devices. Optional and can be revoked.

· Call History Permission: Needed for missed call notifications, volume control, and call channel sync. Optional and can be revoked.

· Contacts Permission: Needed for importing contacts to wearables for calls or group additions. Optional and can be revoked.

· SMS Permission: Needed for rejecting calls and sending texts via wearables. Optional and can be revoked.

1.3.3 Auto-Start or Associated Start Instructions
To ensure your basic user experience, this APP will only use auto-start/associated start capabilities in the following necessary scenarios, and only after you have explicitly agreed to this privacy policy. The specific scenarios, purposes, rules, and necessity explanations are as follows:

(1) Push Message-Related

· Scenario and Purpose: To ensure that you can still normally receive message pushes, activity notifications, and other client-pushed broadcast information when the APP is closed or running in the background, this application needs to use auto-start capability to wake up the APP through system-sent broadcasts to ensure the normal functioning of push features.

· Rules and Necessity: Auto-start/associated start behavior will only be triggered after you actively enable push permissions and explicitly agree to receive message pushes. If you do not agree or turn off push permissions, this application will not perform related wake-up operations.

(2) Download and Update-Related

· Scenario and Purpose: When you initiate file downloads, version updates, or other tasks within the APP, to ensure that download tasks are not interrupted due to application exit, system restart, or application switching, this application needs to maintain background process operation and use auto-start capability to resume download tasks and handle HTTP connection status changes to ensure successful downloads. After task completion, to guide you in installing update packages, associated jumps may be triggered.

· Rules and Necessity: This only takes effect for download/update tasks that you actively initiate. Related processes will automatically terminate after task completion. You can cancel download/update tasks at any time to terminate related auto-start behavior.

(3) Desktop Widget-Related

· Scenario and Purpose: If you use this APP's desktop widget function, to achieve real-time refresh of widget data (such as status synchronization, information updates), this application needs to listen to system broadcasts and use auto-start capability to wake up widget-related services to ensure normal data display on widgets.

· Rules and Necessity: Auto-start behavior will only be triggered after you actively add and use desktop widgets. If you do not use or remove widgets, this application will not perform related wake-up operations.

(4) Permission Control Instructions
You can turn off this application's auto-start and background operation permissions at any time in your mobile phone's system settings. After turning them off, functions relying on auto-start (such as background push, download resumption, widget refresh) will not work properly, but this will not affect the basic core function operation of the APP.

1.4 How We Share, Transfer, or Disclose Your Personal Information

(1) Sharing
We do not share your personal data with third parties except in the following cases:

· With Your Consent: If you explicitly agree to share data with third-party merchants, we will share your personal info, order details, and transaction-related data to fulfill purchases and enable after-sales support.

· With Explicit Authorization: If you consent to third-party services, we will share your data with them. Refusing may prevent service delivery.

· Legal Requirements: We may share data to comply with laws, regulations, or legal proceedings.

· With Affiliates: Your data may be shared with affiliates to provide services, subject to your consent. We only share necessary data and adhere to this policy’s purposes.

· With Service Providers: We engage authorized partners to provide services on our behalf. Data is shared strictly for legitimate, necessary, and specific purposes under contractual agreements.

(2) Transfer
We do not transfer your personal data to third parties except:

· With Your Consent: If you explicitly agree, we may transfer your data to other parties.

· Merger/Acquisition: In the event of a merger, acquisition, or bankruptcy, we will require the new entity to comply with this policy or seek your consent.

(3) Public Disclosure
We only disclose your personal data publicly in the following cases:

· With Your Consent: If you explicitly agree.

· Legal Obligations: If required by law, legal proceedings, or government authorities.

(4) Exceptions to Consent Requirements
The following scenarios do not require prior consent:

· Fulfilling legal obligations.

· Complying with legal procedures, lawsuits, or government requests.

· Protecting your or others’ life, property, or safety when consent is unattainable.

· Publicly disclosed data by you.

· Data related to national security or defense.

· Data collected from legally public sources (e.g., news reports, government disclosures).

De-identified data that cannot be re-identified does not constitute sharing, transfer, or public disclosure, and no additional notice is required.

2. How We Protect Your Personal Information

We attach great importance to the security of personal data. We adopt industry-standard practices to safeguard your personal data against unauthorized access, disclosure, use, modification, damage, or loss. We will take all reasonably feasible measures to protect your personal data. For instance, we employ encryption technologies to ensure data confidentiality; we utilize trusted protection mechanisms to prevent data from malicious attacks; we deploy access control mechanisms to ensure that only authorized personnel can access personal data; and we conduct security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal data.

We will take all reasonably feasible measures to ensure that we do not collect irrelevant personal data. We will only retain your personal data for the period necessary to achieve the purposes outlined in this policy, unless an extension of the retention period is required or permitted by law. We will make every effort to protect your personal data; however, please note that no security measure can be completely foolproof.

In the unfortunate event of a personal information security incident, we will promptly inform you in accordance with legal and regulatory requirements, providing details such as the basic situation of the security incident and its potential impacts, the measures we have taken or will take to address it, suggestions for you to independently prevent and mitigate risks, and remediation measures for you. We will promptly notify you of the relevant details of the incident via email, letter, phone call, push notification, etc. When it is difficult to notify each individual data subject one by one, we will adopt reasonable and effective means to issue public announcements. Meanwhile, we will also proactively report the handling situation of the personal information security incident to regulatory authorities as required.

3. Protection of Minors

This policy defines a "child" as anyone under 14 years old.

 Children cannot create accounts without parental or guardian consent. If you are a minor, have your parent or guardian review this policy and the Children’s Privacy Rules & Guardian Guidelines before using our services.

· We only use, share, transfer, or disclose minor data as permitted by law, with parental consent, or to protect the minor. If we unintentionally collect child data without verifiable parental consent, we will delete it promptly.

4. Accessing or Modifying Your Personal Data

To conveniently access, correct, or delete your data, we provide the following tools:

4.1 Accessing Personal Data
You can view workout and health data via data cards and the "Devices" page. Your nickname, avatar, gender, date of birth, height, weight, and workout settings are available under "My Profile."

4.2 Updating Personal Data
You can edit your nickname, avatar, gender, date of birth, height, and weight under "My Profile." Data automatically collected from your device or phone cannot be manually edited.

5. Data Storage and Retention

Your data is stored on servers within the People’s Republic of China.

 We retain your data only as long as necessary to fulfill the purposes outlined in this policy and delete or anonymize it thereafter, unless required by law.

· Your xFit data is encrypted and bound to your account.

· Questionnaire and device upgrade data is retained for six (6) months or until account deletion.

· User experience improvement data is retained for six (6) months.

· Feedback logs are retained for seven (7) days; other feedback data for two (2) years.

· Activity data is retained for six (6) months post-event; lottery-related data for two (2) years.

6. Contacting Us

For privacy policy inquiries or complaints, contact our Data Protection Officer via the "Feedback" page or at mailto:XMAIDC_TPV@tpv-tech.com.

 We will respond promptly.
If unsatisfied with our response, especially if your rights are infringed, you may file a lawsuit with a competent court or complain to industry associations or government agencies.

Address: 1 Xianghai Road, Xiamen Torch High-Tech Industrial Zone (Xiang’an), Xiamen, China.

7. Policy Updates

We reserve the right to update or modify this policy periodically. Notifications will be sent via version updates.