Privacy Policy

2020-10-21

Privacy Policy 

SHENZHEN SHINE INDUSTRIAL CO., LTD., together with its subsidiaries and/or affiliates ("Shine,""we,""us,"or"our"), recognizes the importance of privacy to our customers. We strive to clearly explain how we collect, use, disclose, transmit, and store your personal information. This policy applies to our brand Vitafit’s smart devices, websites, mobile applications, and customer service platforms (collectively referred to as the"Services"or"Products"). Our current smart devices are smart body scales. Your personal information is primarily stored on servers located in the AWS Europe (Ireland) region, which is within the European Economic Area (EEA).

If you have any comments or questions regarding this Privacy Policy, please contact us via the email address below, with"Privacy Policy"noted in the subject line: 

Email: support@vitafit.com  

Company Name: SHENZHEN SHINE INDUSTRIAL CO., LTD.  

Registered Address: 2nd and 3rd Floor, Building 5, First Industrial Zone, Changzhen Community, Yutang Street, Guangming District, Shenzhen City, Guangdong Province, China

1. What Personal Information We Collect

In order to provide the Services, we may collect information that you provide directly to us, including:

Account/Profile Information: name, gender, height, date of birth, phone number or email address, personal description, and photo.

2. How We Collect Your Personal Information

2.1 When you use our Services, we may also collect:

Device Information: device model, hardware information, other unique device identifiers such as serial number, access records, software version, MAC address, IP address, operating system version, device status, and device settings.

Location-related Information (for Bluetooth pairing): To connect and pair devices via Bluetooth (and to comply with mobile operating system permission models), we may collect or use location-related information such as time zone, region, and country. The core functionality of device pairing does not require precise GPS coordinates (longitude/latitude).

Login Information: During login, we primarily collect and store login-related information and operational information on servers located in the AWS Europe (Ireland) region.

When you sync your device with the Vitafit App, the personal information collected by the device will be stored and transmitted to your Vitafit account on our servers to provide you with body composition measurement and analysis services.

2.2 Cookies and Similar Technologies (Website/App)

We may use cookies and similar technologies in our websites and/or mobile applications to provide essential functionality and, where applicable, to improve the Services.

- Essential cookies/technologies: necessary for core website/app functions (e.g., security, session management)

For detailed information on how each product works, please refer to the user guides in the Help Center.

3. How We Process Your Personal Information

3.1 We process your personal information for the following specific purposes:

To perform our duties listed on the contract between you and Shine, its subsidiaries and/or affiliates. To register you or your device for our services.

To provide services you request.

To verify identity, assist with user-identification, and to determine appropriate services.

To send important notices to you, such as communications about changes to our terms, conditions, and policies.

To help us provide, maintain, develop, operate, deliver, and improve our products and services to you. For internal purposes such as auditing, data analysis, loss prevention, and fraud prevention.

Legal bases for processing under GDPR may include:

- Performance of a contract (to provide the Services you request).

- Compliance with legal obligations.

- Legitimate interests (e.g., security, fraud prevention, improving Services), where such interests are not overridden by your rights.

- Consent, where required (and you may withdraw consent at any time).

3.2 Processing of Special Category for Personal Health Data

The body composition data we collect (e.g., weight, body fat percentage, and related body composition data) constitutes a"special category of personal data."We process such health data solely based on your explicit consent. This consent is obtained when you use the body composition measurement features and/or authorize data synchronization with third-party health platforms. You may withdraw your consent at any time via the App settings or by contacting us; however, if you withdraw consent, you may not be able to use certain health-related features of the Services.

4. How We Share Your Personal Information

We share your personal information only in limited circumstances and with appropriate safeguards:

4.1 Service Providers (Processors): We may share personal information with authorized third-party service providers who assist us in operating the Services, such as: cloud hosting and infrastructure providers (e.g., AWS Ireland), customer support providers. These service providers are contractually required to protect personal information and to process it only on our instructions as applicable.

4.2 Affiliated Companies: With appropriate safeguards, we may share personal information within the Shine corporate group for internal business purposes.

4.3 Business Transfers: If Shine is involved in a merger, acquisition, reorganization, or sale of assets, we may transfer personal information as part of that transaction, with appropriate safeguards.

4.4 Legal and Regulatory Requirements: We may disclose personal information when required by law, regulation, legal process, or to protect our rights and the safety of our users and others.

4.5 International Transfers: When personal information is transferred outside the EEA, we ensure there is a legal basis and appropriate safeguards in place, including SCCs where applicable, and we apply security measures to protect your personal information.

5. How We Safely Share Your Health Information Through Third-Party Health Platforms

To enrich the user experience, our App, subject to your manual authorization, may support one-way (write-only) synchronization of certain body composition metrics (such as weight and body fat percentage) to third-party health platforms, including Fitbit, Health Connect, Apple Health, and Samsung Health.

You can review your data within those platforms. When the authorization period expires or if you manually revoke the authorization, we will stop synchronizing data to these platforms.

System Requirements: Health Connect is supported on Android 9.0 and above; Apple Health is supported on iOS 8.0 and above.

Please note: third-party health platforms are independent controllers of the data within their own services and are governed by their own privacy policies.

6. You Have the Right to Close Your Account

After you delete your account, you will no longer be able to log in or use our products and services with that account. The account deletion path in the App is:"Me>Settings>Delete Account". Account deletion takes effect immediately.

If you cannot access the App, you may contact us at support@vitafit.com for assistance.

7. Children’s Privacy

We do not knowingly collect personal information from children under 18. If we are aware that we have collected personal information from a child under 18 without appropriate consent, we will take steps to delete such information. If you are a parent or guardian, and you believe your child has provided us with personal information without appropriate consent, please contact support@vitafit.com.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention Period/Standards Examples:

Account Information and Health Measurement Data: Retained while your account is active. Account information and health measurement data deletion takes effect immediately upon your request of deletion.

Operational Logs and Diagnostic Data: After personal information desensitization, such operational logs and diagnostic data is generally retained for up to 12 months for security, fraud prevention, and service improvement. After the retention period expires, we will securely delete personal information according to our deletion procedures.

9. Data Security

We are committed to protecting your personal information during processing and transmission. We implement reasonable technical and organizational measures aligned with industry standards to protect the information we collect, including access controls, appropriate encryption, and secure software practices.

10. Your Rights

On base of applicable law including the GDPR, you have the following rights regarding your personal information: the right of access, the right of rectification, the right of deletion, the right of restriction of processing, the right of data portability, the right of objection, the right of consent withdraw, and the right of complaint with a supervisory authority.

How to Exercise Your Rights:

Please contact us at support@vitafit.com with the email subject “GDPR Rights Request”. We may need to verify your identity before processing your request. This verification is to protect the security of your personal information. We will respond to your request within one week (or inform you if extension is needed).

11. Modification to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. If we make modifications, we will notify you through our website or App or email.