xanther · Personal Information Collection Checklist
Version: v1.0 Effective date: 2026-05-21
This checklist is drafted in accordance with the MIIT Notice on Carrying Out the Special Action for App Personal-Information Protection Governance and the "notice-and-consent" requirements of Article 17 of the PIPL. Read together with the Privacy Policy and the Third-Party SDK Inventory.
Table Notes
- Required / Optional: Required = without it, the core function is unavailable; Optional = collected only with user consent and does not affect the core function
- Device permission: A system permission the App requests; on first use on iOS / Android, the system prompts for consent
- Related third party: The third party to which the data flows; see the SDK Inventory
- Storage location: Physical location where the data lands
- Retention: Counted from the last relevant use
I. Required Information (necessary for core functions)
| # | Information | Scenario | Device permission | Related third party | Storage | Retention |
|---|---|---|---|---|---|---|
| 1 | Phone number | SMS sign-in, security risk control | None | Tencent Cloud SMS | Our secure storage (Shanghai, China) | 15 days after deletion |
| 2 | SMS verification code | Sign-in verification | None (or SMS permission if enabled by user) | Tencent Cloud SMS | Memory / Redis | 10 minutes |
| 3 | WeChat openid (if WeChat sign-in) | Unique account identification | None | WeChat Open Platform | Our secure storage (Shanghai, China) | 15 days after deletion |
| 4 | Apple sub (if Apple sign-in) | Unique account identification | None | Apple | Our secure storage (Shanghai, China) | 15 days after deletion |
| 5 | Ring Bluetooth MAC address | Ring pairing, reconnect | Bluetooth | Hua Xinzhi BLE | Our secure storage (Shanghai, China) | 30 days after unpair |
| 6 | Ring firmware version | Protocol adaptation, OTA | Bluetooth | Hua Xinzhi BLE | Our secure storage (Shanghai, China) | 30 days after unpair |
| 7 | Heart rate (BPM) | Health dashboard | Bluetooth | Hua Xinzhi BLE, Bian-An Mind algorithm | Our secure storage (Shanghai, China) | 24 months |
| 8 | HRV | Health dashboard, emotion algorithm | Bluetooth | Same as above | Same as above | 24 months |
| 9 | RR interval | Input to emotion algorithm | Bluetooth | Same as above | Same as above | 24 months |
| 10 | OS version, App version, device model | Compatibility, defect localization | None | None | Our secure storage (Shanghai, logs) | 90 days |
| 11 | Crash and error logs (redacted) | Defect localization | None | None | Our secure storage (Shanghai, China) | 90 days |
| 12 | Network type (Wi-Fi / cellular) | Sync-strategy selection | Network state | None | Not stored; runtime only | Real-time |
II. Optional Information (collected with user authorization)
| # | Information | Scenario | Device permission | Related third party | Storage | Retention |
|---|---|---|---|---|---|---|
| 1 | WeChat nickname / avatar | Profile display | None | WeChat Open Platform | Our secure storage (Shanghai, China) | Until user clears |
| 2 | Custom avatar image | Profile display | Photos / Camera | Tencent Cloud COS | Our secure storage (Shanghai, China) | Until user clears |
| 3 | Gender, date of birth, city | Personalization and statistics | None | None | Our secure storage (Shanghai, China) | Until user clears |
| 4 | Blood-oxygen saturation | Health dashboard | Bluetooth | Hua Xinzhi BLE | Our secure storage (Shanghai, China) | 24 months |
| 5 | Body temperature | Health dashboard | Bluetooth | Hua Xinzhi BLE | Our secure storage (Shanghai, China) | 24 months |
| 6 | Steps | Health dashboard | Bluetooth / motion | Hua Xinzhi BLE | Our secure storage (Shanghai, China) | 24 months |
| 7 | Sleep stages | Health dashboard | Bluetooth | Hua Xinzhi BLE | Our secure storage (Shanghai, China) | 24 months |
| 8 | Stress index | Health dashboard | (algorithm-derived) | Bian-An Mind algorithm | Our secure storage (Shanghai, China) | 24 months |
| 9 | Awareness-diary text | Emotion records, statistics | None | None | Our secure storage (Shanghai, field-level encryption) | Until user clears |
| 10 | Awareness-diary images | Emotion records | Photos / Camera | Tencent Cloud COS | Our secure storage (Shanghai, China) | Until user clears |
| 11 | Emotion keywords / tags | Trend analysis | None | None | Our secure storage (Shanghai, China) | Until user clears |
| 12 | Wear location (single coarse location) | Associates context when you "check in this moment" | Location (while in use) | Tencent Location Service | Our secure storage (Shanghai, field-level encryption) | Until user clears |
| 13 | Dialogue content with the AI Emotion Baby (currently not enabled) | AI dialogue generation | None | (pending integration) | Not collected | Not collected |
| 14 | Push token | Push notifications (currently disabled) | Notifications | (Reserved for later) | Our secure storage (Shanghai, China) | Destroyed once notifications are disabled |
| 15 | Microphone / recording (no real feature currently uses it) | (To be removed) | Microphone | None | Not collected | Not collected |
The microphone permission listed in row 15 was previously declared in the client manifest; it is not actually used in the current version, and the declaration is being removed as part of compliance remediation.
III. Device Permissions in Detail
The table below lists system permissions used by the App and their purposes and necessity.
| Permission | iOS | Android | Purpose | Effect if denied |
|---|---|---|---|---|
| Bluetooth | NSBluetoothAlwaysUsageDescription |
BLUETOOTH_CONNECT BLUETOOTH_SCAN |
Connect the ring | Ring cannot be paired; no health data |
| Background Bluetooth | UIBackgroundModes: bluetooth-central |
FOREGROUND_SERVICE_CONNECTED_DEVICE |
Keep the ring connected while the App is in the background | No background data sync |
| Location (while in use) | NSLocationWhenInUseUsageDescription |
ACCESS_COARSE_LOCATION |
"Check in this moment" and Android Bluetooth scan compliance | Cannot "check in this moment" |
| Photos (read) | NSPhotoLibraryUsageDescription |
READ_MEDIA_IMAGES |
Upload avatars and diary images | Cannot upload images |
| Photos (write) | NSPhotoLibraryAddUsageDescription |
(writing via system picker requires no declaration) | Save images to the photo library | Cannot save generated images |
| Camera | NSCameraUsageDescription |
CAMERA |
Take photos for upload | Cannot take photos for upload |
| Network | (no explicit permission) | INTERNET ACCESS_NETWORK_STATE |
Data sync | Cannot use any online feature |
| Notifications (reserved) | UserNotifications |
POST_NOTIFICATIONS (Android 13+) |
Important reminders (not enabled) | None |
On iOS, each permission request shows a Chinese "purpose" description prompting for consent. Users may withdraw consent any time in System Settings → App.
IV. Statement of Non-Collection
We do not collect the following information:
- ID-card number, passport number, driver-license number
- Bank-card number, credit-card number, bank-account password
- Detailed home address (down to house number)
- Biometric information such as fingerprint, face, voiceprint, iris
- Contacts, SMS content, call logs
- Full photo-library directory, list of other apps installed
- IMEI, IMSI, MEID, Android ID, advertising ID, or other strong identifiers
- Browser history, clipboard content (except for one-time scenarios where the user actively pastes, e.g., a Skill API key)
V. Special Note on Sensitive Personal Information
"Sensitive personal information" under Article 28 of the PIPL (including health and physiological information, location trajectories, and information of minors under 14) appears in the App as follows:
- Health and physiological data (heart rate, HRV, RR intervals, blood-oxygen saturation, body temperature, sleep, etc.): Express consent is obtained through a separate feature-authorization dialog; AES-256 field-level encryption
- Location information (only when "checking in this moment"): Express consent is obtained through a separate dialog; coarse granularity, one-time capture, no continuous tracking
- Information of minors under 14: Registration is rejected; if collected by mistake, see the Children's Personal Information Protection Rules
Contact Us
- Personal information protection: sznssj2021@163.com
- Customer service: sznssj2021@163.com
Change Log
| Version | Date | Change |
|---|---|---|
| v1.0 | 2026-05-21 | Initial release |