Last Updated: October 1, 2026

Effective Date: October 1, 2026

Shenzhen Good Jump Technology Co., Ltd. (hereinafter "we") deeply understands the importance of personal information to you. This Privacy Policy (hereinafter "this Policy") is intended to explain how we collect, use, store, share, and protect your personal information when you use the BeaPulse application.

Please read this Policy carefully before using BeaPulse. Once you begin using BeaPulse, you are deemed to have fully understood and agreed to all the contents described in this Policy.

If you have any questions about this Policy, you may contact us through the contact information provided at the end of this Policy.

This Policy will help you understand the following:

1. Information We Collect

2. How We Use the Information We Collect

3. Storage and Security of Information

4. Third-Party SDKs and Their Information Processing

5. How You Manage Your Personal Information

6. Protection of Minors

7. Updates to This Policy

8. Contact Us and Complaints

1. Information We Collect

BeaPulse collects information following the principle of "minimum necessary", meaning we only collect information essential to realize the corresponding function. Whether you provide the relevant information will directly affect the availability of the corresponding function.

1.1 Information You Provide Actively

(1) Account Registration and Login Information

When you create a BeaPulse account, depending on the login method you choose, we will collect:

• Mobile number registration: your mobile phone number;

• WeChat authorized login: the OpenID, nickname, and avatar corresponding to your WeChat account (provided by the WeChat platform after your authorization);

• One-click login with this device's number: your device's mobile number provided by the carrier (obtained through the Jiguang (Aurora) authentication SDK, requiring your manual click to consent and authorize).

(2) Personal Profile Information

You may voluntarily fill in basic information such as gender, birth year, and height in "Me" → "Personal Profile" to provide you with health reference ranges more tailored to your personal situation.

(3) Health Data

The core function of BeaPulse is health data recording. When you enter data on each recording page, we collect the following information:

• Blood glucose records: blood glucose value (mmol/L), measurement time, measurement status label (fasting/post-meal, etc.), remarks;

• Blood pressure records: systolic pressure (mmHg), diastolic pressure (mmHg), pulse (bpm), measurement time, status label;

• Uric acid records: uric acid value (μmol/L), measurement time, status label;

• Weight records: fasting weight (kg), measurement time;

• Meal records: meal content description, estimated calories, meal time and type (breakfast/lunch/dinner/snack);

• Exercise records: exercise type, duration, estimated calories burned, exercise period;

• Medication records: medication method (oral/injection), drug name, dosage, medication time.

The above health data constitutes sensitive personal information. We only collect it when you actively enter it, and do not automatically collect it through sensors or other means.

(4) AI Conversation Content

When you use the AI Health Assistant feature, the text you input will be sent to the Zhipu AI server to generate replies. We will retain your conversation history to provide a coherent conversation experience. AI-generated answers are for reference in daily health topics only and do not constitute authoritative medical knowledge or professional health guidance. Please do not use AI output as a basis for medical decisions.

(5) Voice Data

When you use the voice input feature to enter uric acid values, your voice audio will be uploaded to the iFlytek voice SDK's cloud for speech recognition, and the text result will be returned after recognition is complete.

1.2 Automatically Collected Information

To ensure the normal operation of the application and security protection, during your use of BeaPulse, our server and some third-party SDKs may automatically collect the following information:

• Device information: device model, device brand, operating system version;

• Network information: IP address, network connection type (WiFi/mobile network), carrier information;

• Application information: application version number;

• Device identifiers: Android ID, OAID (Open Anonymous Device Identifier).

The above device identifiers are only used for anti-abuse of registration and login and for preventing membership trial abuse (to determine whether the same device has already received a trial period; each device receives it only once). Among them, the Android ID is stored and used in anonymous form after one-way hashing, and is not used for cross-application tracking or user profiling.

1.3 System Permission Instructions

BeaPulse only requests the following system permissions when implementing specific functions. You can manage authorizations at any time in the system settings. Rejecting authorization only affects the corresponding function and does not affect the use of other functions:

• Network-related permissions (INTERNET, ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE): used to connect to our cloud server to complete registration/login, health data cloud synchronization, health information, and smart Q&A functions;

• Recording permission (RECORD_AUDIO): used for voice input of uric acid values (implemented through the iFlytek voice SDK), and collection only begins when you actively click the voice input button;

• Camera permission (CAMERA): used for photo recognition of food and medication (medication records, diet records), and is only invoked when you actively click to take a photo or select an album image for recognition;

• Call phone permission (CALL_PHONE): used to directly dial the customer service number published in this Policy when you click "Call Customer Service" on the "Contact Customer Service" page, avoiding manual number entry. This permission is only invoked when you actively click, we will not read your call records, nor will we dial any other number. If you refuse authorization, it will automatically switch to opening the system dialer and fill in the customer service number for you, and you press to dial, which does not affect your ability to contact customer service.

Regarding storage: the Excel files you export are saved in the application's private directory (scoped storage applies for Android 10 and above), so we do not need to request, and have never requested, any storage read/write permissions.

Regarding permission minimization: we have technically removed the location permission (including background location) and the "read installed application list" permission (QUERY_ALL_PACKAGES) that come with third-party SDKs from the application. BeaPulse does not use the following permissions: location information, contacts, SMS, call records, body sensors, Bluetooth.

2. How We Use the Information We Collect

2.1 To realize the core functions of BeaPulse, we use your information for the following purposes:

• Account management: create and manage your account, verify your identity, and protect account security;

• Data display: display your health data and trend analysis in the form of charts and lists;

• Status determination: automatically determine the status of your blood glucose/blood pressure/uric acid values (low/normal/high) based on medical reference ranges;

• Comprehensive score: generate a comprehensive health score based on multiple health data entries you provide, helping you understand your overall health status;

• AI conversation: send your questions to Zhipu AI for processing and return health science popularization replies;

• Voice recognition: send voice audio to iFlytek cloud for speech-to-text processing;

• Data export: generate your health data into an Excel file and write it to device storage;

• Data synchronization: when you are logged in, upload your health data to the CloudBase cloud service for backup and multi-device synchronization;

• Membership payment: process your membership subscription orders, initiate payment to your selected payment channel and confirm the payment result, so as to activate the corresponding membership benefits for you;

• Anti-abuse and benefit distribution: based on anonymized device identifiers, determine whether the same device has already received a trial period, preventing repeated collection abuse.

2.2 We will not use your personal health data for any advertising push, automated marketing decisions, or user profiling analysis.

2.3 We will not push any form of advertising to you based on your health data.

3. Storage and Security of Information

3.1 Storage Method

Your data is stored in the following ways:

• Local storage: the application uses the Room database to store your health records, and uses EncryptedSharedPreferences (Android secure encryption library) to encrypt and store login credentials (Token and other sensitive information);

• Cloud storage: after you log in to your account, your health data and account information will be synchronized to the Tencent CloudBase cloud service to achieve multi-device data synchronization and backup. The CloudBase data center is located within the territory of the People's Republic of China.

In addition, to improve the efficiency of re-login, the application will cache the mobile phone number you last successfully used to log in in your local device, and only automatically fill it into the input box for your confirmation when you enter the login page again; it will not be submitted automatically. This number is saved in the application's private storage space, will not be uploaded to our server, and will not be used for any other purpose. If you do not wish to use this feature, you can click "Clear Historical Phone Number" on the login page to delete it; it can also be cleared at any time after logging out.

3.2 Storage Period

During your continued use of BeaPulse, we will continuously retain your information. When you cancel your account, we will immediately stop the collection and use of your personal information and immediately delete all your personal information and health data; among them, transaction order information will be anonymized after removing identity identifiers, for the purpose of fulfilling the statutory obligation to retain transaction records (the retention period shall be no less than three years from the date of completion of the transaction).

3.3 Security Measures

We take the following security measures to protect your personal information:

• Data transmission uses HTTPS/TLS encryption to prevent interception or tampering during transmission;

• Local sensitive data is encrypted and stored using the Android Security Crypto library;

• The cloud service adopts Tencent CloudBase's security system, including identity authentication, permission control, and security audit;

• Restrict internal personnel's access to user data, and only authorized personnel can access the data when necessary.

3.4 Security Incident Handling

In the unfortunate event of a personal information security incident, we will, in accordance with legal and regulatory requirements, promptly inform you of the basic situation of the incident, the possible impact, the disposal measures taken, and your response suggestions through in-app notifications and other means.

Please note that although we have taken the above measures, there is no absolute security in the Internet environment. We will do our best to protect your information, but cannot guarantee 100% security.

4. Third-Party SDKs and Their Information Processing

To support the implementation of some functions of BeaPulse, we have integrated the following third-party SDKs:

4.1 Tencent CloudBase (TCB)

• Provider: Tencent Technology (Shenzhen) Co., Ltd.

• Function: User authentication, cloud data storage and synchronization

• Information involved: account information (mobile number/OpenID), health data, device information

• Transmission method: HTTPS encryption

4.2 WeChat OpenSDK

• Provider: Tencent Technology (Shenzhen) Co., Ltd.

• Function: WeChat authorized login, WeChat Pay

• Information involved: WeChat OpenID, nickname, avatar (login only); payment transaction voucher (payment only, does not include your bank card information)

• Note: Only invoked when you actively choose WeChat login or WeChat Pay

4.3 Alipay SDK (AlipaySDK)

• Provider: Alipay (China) Network Technology Co., Ltd.

• Function: Membership subscription in-app payment (invoke Alipay cashier to complete payment, query payment result)

• Information involved: order information (order number, subscription package, payment amount), payment result status; for payment security risk control, the Alipay SDK also collects device identifiers (UTDID), device model, and operating system version

• Transmission method: HTTPS encryption

• Note: Only invoked when you actively choose Alipay payment. The Alipay account, password, and bank card information during the payment process are directly handled by Alipay within its cashier page; we do not obtain or store your payment account information

4.4 Jiguang (Aurora) Authentication JVerification

• Provider: Shenzhen Hexun Huagu Information Technology Co., Ltd.

• Function: One-click login with this device's number

• Information involved: mobile number obtained through carrier gateway, device identifier, network status

• Note: Only invoked when you choose one-click login, requiring your manual click to authorize

4.5 iFlytek Voice MSC SDK

• Provider: iFlytek Co., Ltd.

• Function: Voice dictation (speech to text)

• Information involved: voice audio data, device information

• Note: Only invoked when you use the voice input feature, audio uploaded to iFlytek cloud for processing

4.6 Zhipu AI (GLM-4-Flash)

• Provider: Beijing Zhipu Huazhang Technology Co., Ltd.

• Function: AI Health Assistant conversation

• Information involved: the conversation text you input, conversation history context

• Note: Only invoked when you use the AI Assistant feature

4.7 MPAndroidChart

• Provider: Philipp Jahoda (open-source library)

• Function: Health data chart rendering

• Information involved: None (pure local rendering, does not collect or upload data)

4.8 Glide

• Provider: Google (open-source library)

• Function: Image loading and caching

• Information involved: No sensitive information (only downloads and caches public image resources such as WeChat avatars)

4.9 Markwon

• Provider: Open-source library

• Function: Science popularization article Markdown rendering

• Information involved: None

4.10 OkHttp / Retrofit

• Provider: Square (open-source library)

• Function: HTTP network requests

• Information involved: Network request data (transmitted via HTTPS encryption)

The above third-party SDKs each have their own independent privacy policies, and their information collection and processing behaviors are subject to their own policies. We recommend that you understand their privacy protection measures through the official channels of each SDK provider. We do not bear joint liability for the information processing behaviors of third-party SDKs.

5. How You Manage Your Personal Information

5.1 View and Modify

• Account information: view and modify mobile number, WeChat binding, and other information in "Me" → "Account Management";

• Personal profile: view and modify gender, birth year, height, and other information in "Me" → "Personal Profile";

• Health data: view, edit, or delete individual records on the recording page corresponding to each indicator (blood glucose/blood pressure/uric acid).

5.2 Data Export and Sharing

• In "Me" → "Data Export", preview and export your blood glucose, blood pressure, and uric acid data as Excel files (.xls format);

• Exported files will be saved in the "Documents/TangAnZhiExport/" directory;

• After export, you can choose to send the file to other applications through the system sharing function.

5.3 Delete Data

• Individual health records: delete one by one on each recording page;

• Clear all data: select clear data in "Me" → "Account Management";

• Historical login phone number: click "Clear Historical Phone Number" near the phone number input box on the login page to delete the locally cached number.

5.4 Withdraw Authorization

You can turn off the permissions already obtained by BeaPulse in the system settings at any time (storage, recording, camera, call phone, etc.). After turning off permissions, the corresponding functions may not be available, but it does not affect other basic functions.

5.5 Cancel Account

Submit a cancellation application in "Me" → "Account Management" → "Cancel Account", which takes effect immediately after your two confirmations. After cancellation, we will immediately delete all health data, membership benefits, and login credentials under your account. This operation is irreversible, the account cannot be recovered, and if you need to continue using it, please re-register. We will not restrict your right to cancel on the grounds of "membership not yet expired", "need to contact customer service", "need to wait for a certain period", etc.

Special note: Your unused membership benefits will become invalid together with the account, and we will not refund them; in order to fulfill the transaction record retention obligations stipulated by laws and regulations such as the E-Commerce Law (the retention period shall be no less than three years from the date of completion of the transaction), your transaction order information will be anonymized after removing identity identifiers such as mobile number and nickname. This part of the information can no longer be identified as you personally and will not be used for any purpose related to your account.

5.6 Response Time

The cancellation operation is automatically processed by the system and takes effect immediately upon submission, without waiting. For other requests such as inquiries, corrections, and deletions, we will generally complete the processing and reply within 15 working days after receiving your request. If complex circumstances are involved, we may appropriately extend the processing time, but will promptly inform you of the reason for the extension.

6. Protection of Minors

6.1 BeaPulse is mainly aimed at adults. If you are under 14 years old, please do not register to use this application.

6.2 If a minor under the age of 14 uses this application with the consent of their guardian, we will only collect and use their information within the scope permitted by laws and regulations and with the explicit consent of the guardian.

6.3 If we discover that we have inadvertently collected information from a minor under the age of 14 without guardian consent, we will delete the relevant data as soon as possible.

7. Updates to This Policy

7.1 We may update this Policy according to changes in laws and regulations, product function adjustments, or business development needs.

7.2 The updated policy will be published within the application and reminded to you to read through pop-ups and other means when first launched. For major changes, we will also prominently prompt you through in-app notifications and other means.

7.3 If you do not agree to the updated policy, you have the right to stop using BeaPulse and cancel your account. Your continued use of BeaPulse after the update takes effect is deemed as your acceptance of the changed policy.

8. Contact Us and Complaints

If you have any questions, opinions, complaints, or reports about this Privacy Policy or personal information processing, please contact us through any of the following methods:

Developer: Shenzhen Good Jump Technology Co., Ltd.

Unified Social Credit Code: 91440300MAKDR4CP4F

Customer Service Phone: 15914154604 (Working days 9:00-12:00, 14:00-18:00)

Customer Service Email: 15914154604@163.com

In-app channel: "Me" page → "Contact Customer Service" or "Feedback"

We will generally accept, process, and reply within 15 working days after receiving your email or call. If the situation is complex and requires an extension of processing time, we will promptly inform you of the reason and time for the extension.

Contact information of the person in charge of personal information protection: 15914154604@163.com (please indicate "Personal Information Protection" in the email subject).

If you are dissatisfied with our processing results, or believe that our personal information processing behavior has damaged your legitimate rights and interests, you can also complain and report through the following external channels:

Ministry of Industry and Information Technology 12321 Network Bad and Spam Information Reporting Acceptance Center: 12321.cn

Central Cyberspace Affairs Commission (National Cyberspace Affairs Commission) Illegal and Bad Information Reporting Center: 12377.cn

You can also file a lawsuit with the people's court with jurisdiction over the place where Shenzhen Good Jump Technology Co., Ltd. is domiciled.

Friendly reminder: Our customer service personnel will not ask you for account passwords or SMS verification codes for any reason, nor will they ask you to transfer money or provide bank card information. If you encounter such a situation, please do not believe it and report it to us through the above channels in time.