The "EMAi Health" App is provided by Hefei Zhongke Zhiqi Information Technology Co., Ltd. (hereinafter referred to as "we") to offer you cardiac and sleep health services. We attach great importance to the protection of your personal information and privacy. We will adopt corresponding security measures for your personal information in accordance with legal requirements and mature industry security standards.

The key points of this privacy policy are as follows:

• i. We will specify the types of personal information collected and their corresponding purposes one by one, so that you can understand the categories, usage reasons and collection methods of specific personal information collected for a particular function.
• ii. When you use certain functions, we will collect some sensitive information only after obtaining your separate consent. Unless otherwise required by applicable laws and regulations, refusing to provide such information will only prevent you from using the specific relevant functions, and will not affect your normal use of other functions of the "EMAi Health" App.
• iii. At present, the "EMAi Health" App will not actively share or transfer your personal information to third parties outside the "EMAi Health" App. If there is any other circumstance of sharing or transferring your personal information or you require us to share or transfer your personal information to third parties outside the App, we will directly or confirm that the third party obtains your separate consent for the above conduct. In addition, we will conduct a risk assessment on the act of providing information externally.

For more detailed information, please refer to the corresponding chapters according to the following index:

• 1. How We Collect, Use and Protect Your Personal Information
• 2. Permission Access
• 3. Minor Protection Provisions
• 4. Third-Party SDK
• 5. Manage Your Personal Information
• 6. Contact Us

• To provide better health services, we need to collect: basic personal data (name, age, date of birth, gender, height, weight), account information (avatar, nickname), application information (basic app information, app name, app version, app configuration, browser settings, app logs, clipboard data, app settings), network information (WLAN data including Wi-Fi status, Wi-Fi parameters, Wi-Fi list, SSID, BSSID, Wi-Fi password, Wi-Fi password encryption mode, IP address, etc.), location information, device information (device hardware type, model, device status data, system basic information, device name, device logs, device language, device identifiers including MAC address, IMEI, SN, ODID), data actively submitted by you (feedback, images, etc.), sensor data (gyroscope, accelerometer, rotation vector sensor, magnetometer, gravity sensor data), list of installed applications, iOS device identifiers (IDFV). Such information helps record and analyze your health data more accurately, provide you with professional health guidance, health services and optimized experience. Cardiac and sleep health data are used for storage and display within the application.

1. How We Collect and Use Your Personal Information

Personal information refers to various recorded information electronically or otherwise that can identify a specific natural person alone or in combination with other information, or reflect the activities of a specific natural person.

When providing services, we collect and process your personal information in accordance with the principles of legality, legitimacy, necessity and integrity:

1.1 Account Login

1. Registration & Login: When you register and log in to the "EMAi Health" App via email, we collect your email address. You may complete supplementary personal data including date of birth, gender, height and weight to complete registration and login verification.
2. Device Information: During your use of the App and related services, to ensure normal software and service operation, we collect device model and hardware details, WLAN list data, OS version, IP address, location data, app settings, system language & registration region, IMEI, MAC address, software version, network access type and operation logs.
3. Log Data: We automatically record detailed product usage behaviors including feedback records, carrier information, network environment, page stay duration, etc., to optimize user experience.

1.2 Device Management

To manage health devices and improve network connection experience, when enabling Bluetooth connection, configuring devices, viewing data sources and counting device status, we collect device identifiers (MAC address, UUID, SN), hardware type & model, device usage records, iOS IDFV, system basic data, network information and precise location data. To synchronize data between mobile devices and health hardware, system calendar and basic system data may be read locally without server uploads. You may disable synchronization in Device Settings. Bluetooth connections obtain health device raw data, which can be terminated by disconnecting Bluetooth or unbinding devices manually.

During network configuration for health devices, if your mobile WLAN is available, SSID, Wi-Fi password and encryption mode will be sent to hardware for automatic network connection.

1.3 Data Management

1.3.1 Personal Profile Management

We collect gender, date of birth (age), height and weight to enhance health data accuracy. You may edit these items in Mine - Personal Profile. Refusal to provide such data will not affect local basic functions.

Application settings such as notification preferences and account password records are encrypted and stored in the cloud to maintain consistent user experience when switching devices.

1.3.2 Health Data Management

When binding and using health devices, we collect sleep metrics, heart rate, stress levels, physical status, cardiac health records, ECG curves, respiratory data, heart rate variability and related measurement results. Sleep data includes AHI, HI and sleep duration; heart rate data includes real-time heart rate, HRV, high/low heart rate alerts. These data are used for recording, statistics and display to deliver comprehensive health analysis services.

Long-term synchronized cloud health data will be statistically analyzed and visualized as trend summaries inside the App.

1.4 Feedback & Suggestions

The feedback module allows users to submit opinions and suggestions. We collect uploaded images, system attributes, basic app info, iOS IDFV, email accounts, logs, account profiles, device hardware parameters and system configurations for service optimization and problem troubleshooting.

1.5 Analysis & Improvement

We collect device model/name, hardware identifiers (MAC, SN, ODID), device activation time, country code configuration, mobile brand/model/OS version to push questionnaires for product iteration. Questionnaire personal data collection requires separate user authorization, and users may ignore surveys without affecting core functions.

In-app page browsing, button interaction logs and runtime stability data are collected for overall statistical analysis without identifying individual user privacy.

2. Permission Access

• Camera Permission: For avatar shooting & image attachment uploads in feedback submissions.
• Album Permission: For selecting local photos as avatars or feedback attachments.
• Location Permission: Optional activation during Bluetooth device pairing for peripheral device discovery.
• Bluetooth Permission: Required for scanning nearby hardware devices and reconnection operations.
• Local Network Permission: Allows LAN device discovery & communication during network configuration.

You may adjust these permissions anytime in your mobile system Settings. Available permissions vary by device OS version.

3. Minor Protection

We strictly comply with national laws on minor privacy protection. Minors must obtain parent or legal guardian consent before using this App. Guardians shall supervise minor application usage and take adequate privacy protection measures.

4. Third-Party Services

We only share necessary user data with authorized partners for specified legitimate purposes. Third parties are prohibited from using personal information beyond authorized scope.

Integrated Third-Party SDK Service:

Push Notification Service:

We use UniPush 2.0 SDK provided by DCloud to deliver message notifications. Collected data includes unique device identifiers, running process lists, installed app catalogs, mobile model, system type/version and network status to ensure stable push delivery and disable pushes after App uninstallation.

• Purpose: Message push delivery
• Processor: DCloud
• Data Collected: IMEI / Android ID / IDFA / GUID / SIM IMSI, network status, location access, running processes, installed app list, hardware serial number, MAC address
• Third-party Privacy Link: https://uniapp.dcloud.net.cn/tutorial/app-ios-privacyinfo.html

5. Manage Your Personal Rights & Data

Account Cancellation

• Path: Mine - Settings - Cancel Account

After cancellation, data collection stops immediately; cloud and local cached personal data will be permanently cleared and unrecoverable. Please operate cautiously.

Data Storage Location & Retention Period

Storage Location: All data is stored on servers located within Mainland China.

Retention Rules:

• Core health data: Retained until account cancellation or manual deletion by users.
• Questionnaire & hardware upgrade logs: 6 months from collection date.
• Annual health trend statistics: 2 years in compliance with PIPL requirements.
• Feedback records: Maximum 2 years.
• Operation maintenance & risk control logs: Up to 5 years (independent of account cancellation status).

If service termination occurs, users will be notified via in-app announcements, and personal data will be deleted or anonymized within a reasonable timeframe.

6. Contact Us