Privacy Policy
Summary: Chongqing Zhaiguo Technology Co., Ltd. controls personal data processed by SlowGo. We process only what is needed for accounts, activity records, community interactions, images, subscriptions, notifications, advertising, safety, and support. Camera and photo access occur only when you choose an image feature. The App itself does not access the clipboard, background location, or installed-app lists for core features. Getui or advertising SDKs may process app-list or location-related information under their rules only when the relevant feature is enabled and legally required consent has been obtained, as detailed in Section 4.
1. Scope and Controller
This Policy covers the SlowGo App and services we directly provide. It does not govern independently operated third-party services with their own privacy terms. Controller: Chongqing Zhaiguo Technology Co., Ltd.; contact: contact@dema.cloud.
We follow principles of lawfulness, fairness, good faith, purpose limitation, data minimization, and security. If data is optional rather than necessary for a core feature, refusing it generally affects only that optional feature.
2. Data We Process and Why
| Context | Data | Purpose |
|---|---|---|
| Account and sign-in | Username, hashed password, phone number and verification code; Apple, Google, or WeChat identifiers, authorization credentials, and authorized name/avatar | Create accounts, authenticate, link sign-in methods, and prevent abuse. We do not obtain store payment passwords. |
| One-tap phone sign-in | Phone number, carrier, authentication token, device model and OS version, IP address, network type, and cellular-network status collected or verified by Getui One-click Authentication and China Mobile, China Unicom, or China Telecom when you choose this method | Verify the number on the device and complete sign-in or linking. A supported SIM and cellular network are required. If refused or unsuccessful, use SMS, username, or another available method. |
| Profile | Name, avatar, gender, age, height, weight, general location, profile background, and visibility settings | Complete your profile, estimate activity metrics, and display information you select. Age, height, and weight may reveal health-related information and are optional. |
| Activity and statistics | Duration, cadence/steps, distance, calories, goals, streaks, beat/music settings, and reminder times | Record activity, create statistics and rankings, and sync signed-in accounts. Results are estimates, not medical diagnoses. |
| Community | Friend relationships, Square/Together status, photos, likes, messages, reports, and public profile fields | Publish, interact, recommend, and protect community safety at your direction. Public material may be viewed, saved, or shared by others. |
| Images | Images you choose or capture for avatars, backgrounds, albums, or feedback, with file metadata | Upload, store, display, moderate, and troubleshoot your requested content. |
| Membership and payments | Product/plan identifier, order number, channel, transaction identifier, Google purchase token, Apple transaction information, subscription status, and expiry | Initiate and validate payments, grant or restore benefits, and process renewal notices, chargebacks, transaction reversals, order disputes, and mandatory legal exceptions. Payment credentials are processed by the payment provider. |
| Push and reminders | Notification status, reminder settings, and delivery results collected by the App; push client ID (CID), platform, manufacturer, brand, model, OS version, OAID, Android ID, Wi-Fi connection information (SSID and BSSID), carrier, and DHCP data automatically collected or received by Getui. Where needed for device compatibility or an enabled extension, this may also include IP address, IMEI, MAC, GAID, serial number, IMSI, ICCID, cell-station data, app-list information, and location-related information | Create and identify a push target, maintain the push connection, deliver activity, account, or interaction notices through Getui and configured vendor channels, measure delivery, and diagnose failures. App-list and location-related data are processed only with required consent and an enabled Getui extension. The App does not request query-all-apps or background-location permission for push. Disable categories in the App or all notifications in system settings. |
| Advertising | Ad placement and impression/click events, basic device/network data, and—after applicable consent—a system advertising identifier | Deliver and measure ads and prevent fraud. Personalized advertising is used only with required consent and platform permission. |
| Operations and safety | Device model, operating system/App version, language, time zone, network type, IP address, crash/operation logs, and request time | Compatibility, security, anti-fraud, diagnostics, and performance. |
| Support | Feedback, optional email/phone, attachments, order evidence, and communications | Respond to issues, complaints, order disputes, and account requests. |
Where law permits processing without consent—for example, legal obligations, emergency protection of life or health, or reasonable use of information you made public—we rely on the applicable legal ground. If we change to an unrelated purpose, we will notify you and obtain consent where required.
3. Device Permissions
| Permission/capability | When used | Effect of refusal |
|---|---|---|
| Camera | When you capture an avatar, album, or feedback image | Direct capture is unavailable; unrelated features continue. |
| Photos/media library | When you select an image or save a sharing image | Image selection/saving is unavailable; activity tracking continues. |
| Notifications | Activity reminders and interaction, account, or subscription notices | System notices stop; information may remain available in the App. |
| Phone-number verification and network-switching capability | When you select one-tap sign-in, Getui and the carrier verify the SIM and cellular network | One-tap sign-in is unavailable; use SMS, username, or another method. |
| Network access and vendor push channels (system capability) | After privacy consent, maintain a Getui connection or receive notices through a device-vendor/FCM channel | Messages may be delayed when offline or notifications are disabled; network access generally has no separate permission prompt. |
| Tracking/advertising identifier (iOS, if enabled) | Personalized ads and cross-app/site measurement | You may still see contextual ads; core features continue. |
| Background audio capability | Continue beats or music after you actively start an activity | Stopping audio does not affect unrelated features. |
You can withdraw permissions in system settings. We do not deny unrelated service because you reject an optional permission. Names vary by operating-system version.
4. Third-Party SDK Data Rules and Sharing
We do not sell personal data. The SDKs below are initialized or called only after you accept this Policy or actively use the relevant feature. “SDK collection” means automatic processing by third-party code on the device, “provided by App” means the minimum data we transmit to complete the feature, and “provided by user” means information you actively submit. Exact fields vary by platform, OS and SDK version, and enabled feature. A third party’s own terms also apply when it acts independently.
| SDK/operator | Use | Collection method | Data potentially processed | Permission or trigger | Rules |
|---|---|---|---|---|---|
| DCloud uni-app/uniCloud Digital Heaven (Beijing) Network Technology Co., Ltd. |
App runtime, cloud services, authentication, storage, push, and advertising-module support | SDK collection; provided by App | Device model, OS/App version, network type, IP address, OAID/platform identifier, and runtime/error logs, limited to enabled modules | Initialized after privacy consent; network access. Sensitive permissions such as camera or photos are requested only when you trigger the feature | DCloud privacy compliance information |
| MSA OAID SDK | Obtain OAID on supported Android devices for device recognition, push, and ad attribution | SDK collection | OAID, manufacturer, model, and OS version | Called after privacy consent; generally no sensitive-permission prompt | Mobile Security Alliance identifier system |
| Getui One-click Authentication Daily Interactive Co., Ltd. (formerly Zhejiang Daily Interactive Network Technology Co., Ltd.); China Mobile, China Unicom, and China Telecom |
One-tap phone-number sign-in or linking | SDK collection; carrier verification; authentication result received by App | Phone number, carrier, authentication token, device model/OS version, IP address, network type, and cellular-network status | You select one-tap sign-in; a SIM and cellular network are required and the network may be switched temporarily | Getui Privacy Policy, China Mobile, China Unicom, China Telecom |
| Getui Push Daily Interactive Co., Ltd. (formerly Zhejiang Daily Interactive Network Technology Co., Ltd.) |
Online push, CID generation, connection maintenance, delivery metrics, and diagnostics | SDK collection; push target and message provided by App | Required: platform, manufacturer, brand, model, OS version, OAID, Android ID, Wi-Fi connection data, SSID, BSSID, carrier, and DHCP. Optional: IP address, IMEI, MAC, GAID, serial number, IMSI, ICCID, and cell-station data. App-list or location-related information may be processed only for enabled contextual, intelligent, emergency-push, or link-regulation extensions | Initialized after privacy consent; notification permission is your choice on Android 13+/iOS. The App does not request QUERY_ALL_PACKAGES or background location for push | Getui Privacy Policy, Getui Compliance Guide |
| Vendor push SDKs Huawei, OPPO, vivo, Xiaomi, Meizu, Honor, and Google FCM |
Deliver notifications through a vendor or FCM channel while the App process is offline | SDK collection; push token and message provided by App/Getui | App identifier, device model/OS version, network information, vendor push token/registration identifier, and delivery result | Privacy consent and a supported device/channel; notification permission remains your choice | Huawei, OPPO, vivo, Xiaomi, Meizu, Honor, Google Firebase |
| WeChat Open Platform SDK Shenzhen Tencent Computer Systems Co., Ltd. |
WeChat sign-in, sharing, and WeChat Pay | User authorization; SDK collection; order data provided by App | WeChat authorization identifier/token, authorized name/avatar, basic App/device and network data; order number and amount for payment | You select a WeChat feature; network access | WeChat Privacy Protection Guidelines |
| Alipay Open Platform SDK Alipay (China) Network Technology Co., Ltd. |
Alipay payments | Provided by user; order provided by App; SDK collection | Order number, product/amount, payment result, basic App/device and network data; Alipay processes payment-account credentials | You select Alipay; network access | Alipay Privacy Policy |
| Apple SDK/services Apple Inc. |
Sign in with Apple, App Store purchases, subscriptions, transaction-reversal status, and restoration | User authorization; system-service collection; transaction identifier provided by App | Apple user identifier/token, authorized name/email, product and transaction identifiers, and subscription status | You initiate sign-in or purchase and confirm in Apple’s system interface | Apple Privacy Policy |
| Google SDK/services Google LLC |
Google Sign-In, Google Play Billing, subscription validation, and FCM in applicable Google Play builds | User authorization; SDK/system collection; transaction or push identifier provided by App | Google account identifier/token, product/purchase token, subscription status, basic App/device and network data, and FCM token | You initiate sign-in or purchase; FCM is used only where the build and channel enable it | Google Privacy Policy |
| uni-ad and currently configured advertising SDKs: Baidu Baiqingteng, AdScope, Fanlian, Tencent GDT, Pangle/GroMore, Huawei Ads, Juli Yuemeng, AdVista, Kuaishou, Sigmob, Wangmai, Huaxia Leyou, and Octopus | Ad request/delivery, impression/click/conversion measurement, attribution, anti-fraud, and security | SDK collection; ad placement and events provided by App | Ad placement and impression/click events, device brand/model/OS and App version, OAID/advertising identifier, IP address and network data; app-list or location-related information only where a supplier feature needs it and required consent is obtained | Called for an ad placement after privacy consent; personalized ads on iOS require tracking permission; sensitive permissions such as location are requested separately only when actually needed | DCloud third-party SDK disclosure list, uni-ad information |
The current Android build targets API level 36 and expressly excludes package-install, query-all-apps, and broad media-reading permissions. An SDK capability does not mean all listed information is collected each time. We limit processing through consent timing, feature controls, permissions, contracts, security review, and minimization. In a merger, reorganization, or asset transfer, data may transfer with the business after notice; the recipient must follow this Policy or obtain new consent. We may disclose necessary data in response to lawful authority requests.
5. International and Cross-Border Processing
Primary business data is processed using cloud services in China. If you use Google Sign-In, Google Play, FCM, Apple services, or region-specific international features, authentication credentials, transaction/subscription identifiers, push identifiers, and device/network information may be sent to Google, Apple, and overseas cloud nodes used to validate Google subscriptions, including Google Cloud services in Asia, and processed through their global infrastructure.
We will take measures required by applicable law, which may include providing information about the overseas recipient, purpose, data categories, and rights, obtaining separate consent, or completing another statutory process. Avoiding those third-party features reduces such transfers but may prevent the corresponding sign-in, purchase, or push function.
6. Public Disclosure and Your Choices
When you publish an album, join Square/rankings, send a message, or make profile fields public, the selected information is displayed in that scope. Do not disclose IDs, precise addresses, medical records, contact details, or other sensitive data. Privacy settings can control display of gender, age, height, location, activity, and album feeds. Copies lawfully saved or reshared by others may not be fully recoverable.
7. Retention and Security
We retain data only for the shortest period necessary for the purposes above and legal requirements. Data needed for continuous service is kept while the account exists. After deletion or account closure, we delete or anonymize within a reasonable period, except transaction, dispute, security-log, and limited backup retention required by law or necessary for those purposes.
Safeguards include access controls, encryption in transit, privilege separation, logging, backups, and incident response. No internet service can promise absolute security. If an incident may harm your rights, we will notify you and mitigate it as required. Protect your credentials.
8. Your Data Rights
Subject to law, you may request access, a copy, correction, completion, deletion, restriction or objection, withdrawal of consent, an explanation of processing rules, or account deletion. Use profile, privacy, notification, and account-deletion settings first, or email contact@dema.cloud.
We may verify identity to protect the account and respond within legally required periods. Withdrawal does not invalidate prior lawful processing. Deletion may be delayed where legal obligations, dispute resolution, or security require retention. You may complain to a competent regulator.
9. Minors
Minors should use the App under guardian guidance. We do not knowingly collect children's personal data without required guardian consent. A guardian who believes data was improperly handled may contact us to verify, restrict, or delete it.
10. Updates and Contact
For material changes to features, processing, or law, we will update this Policy and provide prominent notice through the App, a pop-up, or another reasonable method. We will obtain renewed consent before processing where required. Historical versions are available on request.
Controller: Chongqing Zhaiguo Technology Co., Ltd.
Email:
contact@dema.cloud
Support: 9:00–18:00 China
Standard Time on business days.