Privacy Policy

Effective Date: [2026-8-1]

Welcome to metaXring! This Privacy Policy (hereinafter referred to as "this Policy") applies solely to the metaXring App and related services provided by Science Infinity Technology Limited. Before using this App, please carefully read and understand the full content of this Policy. By starting to use this App, you signify that you have fully understood and agreed to this Policy. For the processing of sensitive personal information, system permissions, or other processing activities that require separate consent under applicable laws, we will separately inform you and obtain the corresponding authorization.

Information such as health, physiological data, sleep, menstrual cycle, and mood may constitute sensitive personal information. We only process such information when strictly necessary to provide the relevant health and fitness features, and we implement rigorous security protection measures. You may decline to provide non-essential information; however, the corresponding features may become unavailable.

metaXring and the accompanying smart ring are intended for general health, fitness, and lifestyle management purposes. They are not medical devices and are not intended to diagnose, treat, cure, alleviate, monitor, or prevent any disease, nor are they a substitute for the advice of physicians or other professional healthcare providers.

Article 1 Data Collection and Usage Principles

1.1 Basic Definitions

1. Personal Information: refers to various types of information related to identified or identifiable natural persons, recorded electronically or by other means, excluding information that has been anonymized.

2. Sensitive Personal Information: refers to personal information that, once leaked or illegally used, may easily infringe upon the personal dignity of natural persons or endanger their personal or property safety. Information such as health, physiological data, menstrual cycle, specific identities, and personal information of minors under the age of 14 may constitute sensitive personal information.

3. Anonymization: refers to the process of processing personal information so that it cannot identify a specific natural person and cannot be restored.

4. Principle of Minimum Necessity: refers to processing personal information only for the shortest time and to the minimum extent necessary to achieve a clear function, and not collecting information unrelated to the service.

1.2 Core Logic of Data Collection

We adhere to the principles of lawfulness, fairness, necessity, integrity, clear purpose, and transparency, and process information primarily based on the following scenarios:

• Basic Service Guarantee: Processing necessary information such as phone model, operating system version, application version, network status, and operation logs for compatibility adaptation, troubleshooting, security protection, and stability optimization.

• Account and User Services: When you choose to register or log in, processing necessary account information for identity verification, account management, data synchronization, and customer support.

• Device Connection and Management: When you actively pair or use the smart ring, processing ring identifiers, model, firmware, battery level, connection and synchronization status for searching, connecting, controlling, maintaining, and updating the device.

• Health and Fitness Features: Calculating, displaying, and recording activities, sleep, and general health trends based on sensor data generated by the ring you wear and information you actively provide.

• Optional Features Authorized by the User: Processing information necessary to realize a feature only when you actively enable the corresponding feature and complete authorization.

• Security and Legal Obligations: Processing the minimum necessary information to prevent fraud, attacks, abuse, fulfill legal obligations, or respond to lawful requests from competent authorities.

We will not refuse to provide basic features unrelated to non-essential information or permissions merely because you decline such information or permissions.

1.3 Information We May Process

1.3.1 Account and Login Information

When you choose to register or log in to an account, we may process your mobile phone number or email address, verification code sending and verification records, username, display name, avatar, encrypted password digest, login token, login time, login IP address, account status, and security records.

If you choose to log in via WeChat, Google, Apple, or other third-party accounts, we may obtain, within the scope of your authorization, the third-party account identifier, display name, avatar, or email address processed through intermediary means. We will not obtain your login password for any third-party platform.

The above information is used to create and manage accounts, verify identity, synchronize data, ensure account security, and provide customer support. If this App provides a guest mode, guest data may be stored only locally on your current phone or ring; uninstalling the App, clearing data, restoring the system, or changing your phone may result in the inability to recover such data.

1.3.2 Personal Profile and Goals

When you actively fill in your personal profile or set goals, we may process gender, date of birth or age, height, weight, general health status, as well as goal and reminder preferences such as step count, calories, distance, and activity duration.

This information is used to establish a personal reference baseline, calculate and display activity and health metrics, and generate trends and goal progress. Except for information strictly necessary to provide the relevant features, you may choose not to fill it in or modify it later.

1.3.3 Smart Ring, Sensors, and Health Data

When you pair and use the metaXring smart ring, we may, depending on the final hardware configuration and the features you enable, process:

• Photoplethysmography (PPG), acceleration, motion, temperature, and other raw or pre-processed sensor data generated by the ring;

• Heart rate, resting heart rate, heart rate variability, blood oxygen saturation, respiration-related metrics, body temperature or skin temperature trends;

• Step count, distance, activity duration, activity intensity, estimated calories, and sedentary status;

• Sleep onset and wake times, sleep duration, sleep stages, wakefulness episodes, sleep continuity, sleep score, and overnight physiological trends;

• Body Battery, recovery level, relaxation level, stress, and other general health and fitness metrics calculated or derived from the above information;

• Ring model, serial number or device identifier, Bluetooth identifier, firmware version, battery level, wearing status, connection status, synchronization status, last sync time, and device diagnostic information.

The above information is used to connect and manage the ring, synchronize and display measurement results, generate personal trends, provide general health and fitness tips, maintain the device, and troubleshoot issues. Algorithmic results may be affected by wearing style, individual differences, environment, network, hardware status, and algorithm limitations.

1.3.4 Menstrual Cycle and Mood Records

When you actively enable the relevant features, we may process the start and end dates of your menstrual cycle, cycle length, estimated cycle phases, symptoms or notes you enter, as well as the mood status you actively select, record time, and mood notes.

These features are optional. You may choose not to enable them, stop recording, or delete existing records. Menstrual cycle predictions are for health management reference only and are not to be used for contraception, pregnancy planning, pregnancy determination, or medical decisions.

1.3.5 Phone, Network, Log, and Security Information

To ensure the stable operation of this App and the security of your account, we may process phone brand and model, operating system and version, application version, language, time zone, network status, IP address, randomly generated installation or instance identifier, as well as launch, click, crash, performance, error, network request, and security logs.

The above information is used for compatibility adaptation, fault diagnosis, service statistics, network and account security, and prevention of attacks, fraud, and abuse. Except where permitted by law and strictly necessary for core security functions, we will not use non-resettable hardware identifiers such as IMEI, IMSI, or SIM serial numbers as regular user identifiers.

1.3.6 Customer Support and Feedback

When you contact us, we may process the account or name you voluntarily provide, contact information, communication content, problem description, screenshots, order or device information, and processing records, for the purpose of verifying issues, providing after-sales or technical support, handling complaints, and fulfilling legal obligations. Please do not submit sensitive information unrelated to the issue in your feedback.

1.4 Collection and Use of Device Identifiers

After you agree to this Privacy Policy, we may collect device identifier information, including your Android ID, in order to ensure the proper operation of the metaXring app, improve device connection stability, and enhance the service experience.

Purposes of Use

We primarily collect the Android ID for the following purposes:

• Device identification and service reliability: To identify the device on which the app is running and help ensure the proper operation of app features;

• Device connection and data synchronization: To support device management, data synchronization, and related services between the metaXring smart ring and the app;

• Troubleshooting and service improvement: To analyze app errors or abnormal behavior, identify issues, and improve the product experience.

Method of Collection

When you first open the app, we will present this Privacy Policy and ask for your consent. The app will collect device identifier information, such as the Android ID, only after you have read and agreed to this Privacy Policy and where required for the relevant service.

Data Storage and Protection

• The Android ID will only be used for the purposes expressly described above and will not be used for purposes unrelated to those stated in this Privacy Policy;

• We take reasonable security measures to protect such information against unauthorized access, use, or disclosure;

• Unless otherwise required by applicable laws and regulations or expressly authorized by you, we will not sell the Android ID or provide it to unrelated third parties.

1.5 Permission Usage Instructions

We only request necessary permissions when you use the relevant features. The specific permission names may vary depending on the operating system and phone model; the system authorization page and the actual functions of this App shall prevail.

Bluetooth Permission

• Used to search, pair, connect, and manage the metaXring smart ring, and to synchronize device status and related data between the phone and the ring.

• Used only when device search, connection, or synchronization is needed; does not unnecessarily log nearby device information unrelated to metaXring.

• If denied or withdrawn, the ring may not be discoverable, connectable, controllable, or synchronizable.

Location Permission (Android 11 and below only)

• Some Android systems associate Bluetooth scanning with location permissions. Requested only when the system requires it and you use the device search or connection function.

• Used to complete discovery of nearby Bluetooth devices; not used to continuously track your location or establish a location trajectory.

• If denied or withdrawn, some phones may not be able to discover or connect to the ring properly.

Microphone Permission

• Used to support voice interaction and voice chat with the private health assistant.

• Used only when you actively enable voice features, perform voice input, or engage in voice chat; does not continuously listen, record, or collect ambient sound in the background.

• If denied or withdrawn, you may still use other features of the App, but voice chat, voice input, and other microphone-dependent features may not be available.

You may view, grant, or withdraw permissions at any time in your phone's system "Settings." Withdrawal of permissions does not affect processing conducted based on valid authorization prior to withdrawal, but may cause the corresponding features to cease functioning. If we add new permissions or change the purpose of existing permissions in the future, we will provide separate notice and obtain authorization in accordance with applicable law.

1.6 Processing of Sensitive Personal Information

Health, physiological, sleep, menstrual cycle, and mood information may constitute sensitive personal information. Before processing such information, we will explain to you, through feature pages or separate notices, the purpose, method, scope, retention period, necessity, and potential impact on your personal rights of the processing, and obtain your separate consent where required by applicable law.

We only allow personnel whose job duties strictly require access to handle sensitive personal information, and we implement protective measures such as encryption, access control, audit logging, data isolation, and minimization of display.

1.7 Usage Restrictions

Unless otherwise required by law or with your valid authorization, we will not:

• Sell your personal information or health data;

• Use health, sleep, menstrual cycle, or mood data for third-party advertising, cross-app tracking, or data brokerage;

• Publicly disclose your health information;

• Make purely automated decisions that have a significant impact on your rights and interests based on sensitive personal information;

• Process your personal information beyond the purposes stated in this Policy.

Article 2 Data Storage and Security Protection

2.1 Local and Cloud Processing

Depending on the type of account and features you use, some personal profiles, device status, health records, and preferences may be stored locally on your phone or ring; account verification, data synchronization, cross-device recovery, customer support, security protection, and other features requiring network connectivity may process necessary information on lawfully and compliantly deployed servers.

We will, based on the actual product architecture, explain the local or cloud processing methods for major data through in-app notices or supplementary lists. Data in guest mode is typically stored only on the current device; clearing data, uninstalling the App, or changing devices may result in irrecoverable data loss.

2.2 Retention Period

We retain personal information only for the shortest period necessary to achieve the purposes stated in this Policy, unless laws and regulations require otherwise.

• Account and basic profile information are retained for the duration of the account's existence; upon no longer being needed or upon receipt of a lawful deletion request, they are deleted or anonymized within a reasonable period;

• Health, sleep, menstrual cycle, and mood records are retained while you use the relevant features; after you actively delete them or make a lawful deletion request, they will be processed in accordance with product functionality and backup rotation cycles;

• Guest local data is retained until you delete it within the App, clear app data, or uninstall the App;

• Login, security, operation, and fault logs are retained for the shortest period necessary for network security, auditing, and fault handling;

• Customer service and complaint records are retained for the period necessary to handle issues, fulfill legal obligations, and resolve disputes.

After the retention period expires, we will delete or anonymize the information. Anonymized information that cannot identify a specific individual may be used for statistical analysis and product improvement.

2.3 Security Measures

We adopt reasonable technical and organizational measures based on the sensitivity of personal information, including transmission encryption, protected storage, access control, identity authentication, log auditing, key management, vulnerability management, employee confidentiality, and vendor management.

The internet environment cannot guarantee absolute security. If a personal information leak, tampering, or loss occurs or is likely to occur, we will immediately take remedial measures and, in accordance with applicable law, notify the regulatory authorities and affected users of the incident type, potential impact, measures taken or to be taken, risk mitigation recommendations, and contact information, except where the law permits non-notification to individuals.

Article 3 Entrusted Processing, Sharing, Transfer, and Public Disclosure

3.1 Third-Party SDKs

To realize the following functions, we may integrate third-party SDKs. Such SDKs only process relevant information to the extent strictly necessary to realize the corresponding functions. We will conduct security assessments of these SDKs and require them to comply with laws, regulations, and this Policy.

1. Google Login SDK

   • Provider: Google LLC

   • Purpose: Quick login via Google account

   • Information: Google account identifier, email, display name, avatar, ID Token

   • Privacy Policy: https://policies.google.com/privacy

2. Smart Ring Firmware Upgrade Component (WKLOTA/SUOTA)

   • Purpose: Perform firmware upgrades for the ring via Bluetooth

   • Information/Permissions: Bluetooth device connection and communication information; firmware package network download

   • Note: Upgrades are completed locally and are not used for advertising or unrelated third-party profiling.

Beyond the above, this App currently does not integrate common third-party data collection SDKs for analytics, push notifications, advertising, mapping, or location services. If new SDKs are added in the future, we will update this list and obtain your consent in accordance with applicable law.

3.2 Third-Party Login

When you actively choose to log in via WeChat, Google, Apple, or other third-party platforms, we exchange information strictly necessary to realize the login with the corresponding platform in accordance with your instructions. The activities of third parties as independent controllers are governed by their own privacy policies.

3.3 Information Sharing

Except in the following circumstances, we do not provide your personal information to other data controllers:

• Where we have fully informed you and obtained valid consent or separate consent;

• Where necessary to perform a contract to which you are a party;

• Where necessary to fulfill legal obligations or respond to lawful requests from competent authorities;

• Where necessary to respond to public health emergencies or, in emergencies, to protect the life, health, and property safety of natural persons;

• Other circumstances provided for by laws and regulations.

We require recipients to process information only for specified purposes and to provide protection no less stringent than that required by this Policy and applicable laws.

3.4 Transfer and Public Disclosure

In the event of a merger, division, acquisition, asset transfer, reorganization, or other change of control, personal information may be transferred along with the business. We will inform you of the recipient's name and contact information in accordance with the law and require the recipient to continue fulfilling personal information protection obligations. If the recipient changes the original processing purposes or methods, it will re-obtain the necessary consent.

We do not publicly disclose your personal information in principle. If public disclosure is truly necessary, we will inform you of the purpose, type of information, and potential impact in accordance with the law and obtain separate consent, except where laws and regulations provide otherwise.

Article 4 Your Rights and Choices

We value your control over your personal information. To the extent provided by applicable laws and regulations, you may exercise the following rights regarding your personal information through the features provided in the metaXring App or by contacting us.

4.1 Inquiry and Access to Your Personal Information

You have the right to inquire about and access the personal information we process that relates to you.

You can view your account profile, device information, health and fitness records, sleep records, and other data you have actively created or synchronized through the relevant pages in the metaXring App.

4.2 Update and Correction of Your Personal Information

If you find that the personal information we process is inaccurate, incomplete, or has changed, you have the right to request that we correct or supplement the relevant information.

For information that can be modified within the App, you may make changes directly through the corresponding features. For information that cannot be modified by yourself, you may contact us through the in-app feedback channel or via the contact information provided in this policy.

We will process your request in accordance with applicable laws and regulations after verifying your request.

4.3 Deletion of Your Personal Information

Where permitted by laws and regulations, you have the right to request the deletion of personal information we process, including but not limited to the following circumstances:

• The purpose of processing has been achieved, cannot be achieved, or is no longer necessary to achieve the purpose of processing;

• We have ceased providing the relevant products or services, or the retention period for personal information has expired;

• You have withdrawn your consent, and we have no other lawful basis for processing;

• We have processed personal information in violation of laws, regulations, or our agreement with you;

• Other circumstances provided by laws and regulations. You may also delete some of your personal profile data, health records, or other information you have generated through the relevant features provided in the App. Upon receiving a qualified deletion request, we will delete or anonymize the relevant personal information in accordance with applicable laws and regulations. After deleting certain information, some features related to that information may no longer be available.

4.4 Restriction or Objection to the Processing of Personal Information

Where applicable laws and regulations grant you the relevant rights, you may request that we restrict or cease the processing of specific personal information.

For example, if you have objections regarding the accuracy of personal information, the lawfulness of processing, or the scope of processing, you may contact us through the contact information provided in this policy. We will process your request after verifying it and assessing the requirements of applicable laws.

If the relevant personal information is necessary for providing a core service, restricting or ceasing its processing may result in the corresponding features becoming unavailable.

4.5 Obtaining Copies and Transfer of Personal Information

Where permitted by applicable laws and regulations, you have the right to request copies of your personal information that we process.

If applicable laws and regulations grant you the right to data portability, and the relevant conditions are met, you may also request that we transfer your personal information to a data controller you designate.

We will assist with such requests to the extent technically feasible and in compliance with legal requirements.

4.6 Withdrawal of Consent and Management of System Permissions

For personal information processed based on your consent, you have the right to withdraw your consent at any time.

You may manage or withdraw authorized permissions such as Bluetooth, location, microphone, and others through the relevant settings within the App or through the permission management features of your mobile operating system. Withdrawal of consent does not affect the lawfulness of processing activities conducted prior to the withdrawal based on valid consent.

If the relevant personal information or system permission is necessary for the functioning of a particular feature, withdrawal may result in that feature no longer working properly, but will not affect other features unrelated to that permission.

4.7 Account Cancellation

If you no longer wish to use your metaXring account, you may apply for account cancellation through the account cancellation feature provided in the App.

Cancellation Path:

Open the metaXring App and navigate to:

"Me" → "Profile Picture" → "Delete Account"

Follow the on-screen prompts to confirm and submit your account cancellation request.

Before applying for account cancellation, please carefully read the relevant notices displayed on the cancellation page. After your account is cancelled, you will no longer be able to log in to metaXring using that account, and some data, service benefits, and related content associated with the account may not be recoverable.

Upon completion of the account cancellation, we will cease providing services to you through that account and will delete the personal information associated with that account in accordance with applicable laws and regulations. For information that is required by laws and regulations to be retained, we will retain it within the prescribed retention period and scope, and will use it only for purposes stipulated by laws and regulations during the retention period.

If you encounter any issues during the account cancellation process, you may contact us through the contact information provided in this policy, and we will assist you after verifying your identity.

4.8 Complaints, Inquiries, and Appeals

If you have any questions, comments, suggestions, or complaints regarding the way we process your personal information, you may contact us through the following channels:

• Through the user feedback feature in the metaXring App;

• By sending an email to: contact@metaxsire.com. We will process your request within the time limits prescribed by applicable laws and regulations after verifying the necessary information. You may also file a complaint with the competent personal information protection authority or other regulatory body in accordance with applicable laws.

Article 5 Minors

metaXring is intended solely for users aged 18 or above and is not targeted at minors. Minors under the age of 18 are not permitted to register or use this App.

We do not knowingly collect personal information from minors. If we discover that a minor has used this App or submitted personal information without parental consent, we will verify the circumstances and delete the information or take other necessary measures in accordance with applicable law. Parents or legal guardians may contact us at contact@metaxsire.com if they become aware of such situations.

Article 6 Regional Supplemental Provisions

6.1 Mainland China

For users in Mainland China, we are the "personal information processor" under the Personal Information Protection Law of the People's Republic of China. When processing sensitive personal information, we will inform you of the necessity of processing and the impact on your personal rights, and obtain separate consent in accordance with the law. When providing information to other data controllers, publicly disclosing information, or conducting cross-border transfers, we will fulfill the corresponding obligations of notification, consent, and impact assessment in accordance with the law.

If you believe that our personal information processing activities infringe upon your lawful rights and interests, you may first contact us through the email address listed in this Policy, and may also file a complaint with the competent regulatory authority in accordance with the law.

6.2 European Economic Area, United Kingdom, and Other Applicable Regions

Under applicable data protection laws, we may process personal information based on the performance of a contract, your consent or explicit consent, compliance with legal obligations, protection of vital interests, and, where it does not override your rights, legitimate interests such as network security, fault analysis, and service improvement.

Eligible users may request access, rectification, erasure, restriction of processing, objection to processing, or data portability in accordance with the law, and may lodge a complaint with the data protection supervisory authority in their habitual residence, place of work, or where the alleged infringement occurred.

6.3 United States and Applicable States

Under applicable U.S. state privacy laws, health, menstrual cycle, account credentials, or specific biometric information may constitute sensitive personal information or consumer health data. We do not sell personal information, nor do we provide health data to third parties for their own advertising or marketing purposes.

Eligible users may request information access, rectification, erasure, copies of data, restriction on the use of certain sensitive information, withdrawal of authorization, or appeal in accordance with the law, and may contact us at contact@metaxsire.com.

We are generally not a "covered entity" or "business associate" under the U.S. Health Insurance Portability and Accountability Act (HIPAA), unless we expressly state otherwise in a specific context. Even if that law does not apply, we still protect your information in accordance with applicable consumer privacy and health data laws.

Article 7 Policy Updates

We may update this Policy due to changes in product features, technology, laws and regulations, or business operations. The updated Policy will be published through this App, our official website, or other reasonable channels, with the effective date clearly indicated.

For changes involving new types of sensitive personal information, changes to processing purposes, expansion of sharing parties, or other changes that may have a material impact on your rights and interests, we will notify you through prominent means and re-obtain your consent where required by law.

If you do not agree to the updated Policy, you may stop using this App and related services. Without a lawful basis, we will not retroactively apply information collected prior to the update to new purposes unrelated to the original purpose and materially adverse to you.

Article 8 Contact Us

Data Controller: Science Infinity Technology Limited

Contact Email: contact@metaxsire.com

If you have any questions, comments, suggestions, or complaints regarding this Policy, our personal information processing practices, or your related rights, please contact us through the above email address. We will process your request within the timeframe prescribed by applicable law after verifying the necessary information.