Zcritical Privacy Policy

KeepSwinging Technology (Shenzhen) Co., Ltd. ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Zcritical application (the "App"). Please read it carefully. The App's core function is connecting to and controlling your hardware via Bluetooth Low Energy (BLE). We follow the "data minimization" principle. The App has NO account system, and most data stays on your local device. 1. INFORMATION WE COLLECT AND HOW WE USE IT We only collect information necessary to provide specific features: (1) Device Connection & Control (Core Function — Required) - BLE-related information: used to discover, pair, and connect to your Critical T1 device and send control commands. - On some Android versions, the system classifies BLE scanning as requiring "location permission." We only use this for BLE scanning; we do NOT collect or record your geographic location. (2) Firmware OTA Updates (Optional) - Current firmware version, device model/tier identifier: used to check for available updates and download the matching firmware package. Firmware packages are downloaded from our own servers, which generates network requests; we do not collect your identity information in this process. (3) Logo / Image Upload (Optional) - Images you actively select or crop from your photo library, or capture with your camera: used for uploading to your device's display. Images are processed locally and transmitted to your device via local WiFi only. We do NOT upload these images to our servers. (4) WiFi Provisioning (Optional) - WiFi name and password you enter: used solely to configure your device for network connectivity. This information is transmitted directly to your device; we do NOT store or upload it. (5) Sound Library / Custom Audio (Optional, Flagship models) - Audio files you actively select from your phone: used for transferring to your device to be played through its speaker. Audio files are processed locally and transmitted directly to your device via local WiFi. We do NOT upload them to our servers, and we do not read or analyze their content. You can delete audio uploaded to your device within the App at any time. (6) Feedback & Crash Diagnostics (Optional / On Error) - When you voluntarily submit feedback or when the App crashes or encounters an error, we may collect: device model, OS version, App version, runtime logs, screenshots you actively add from your photo library or in-app screenshots at the time of the issue, and any contact information you voluntarily provide. - This information helps us diagnose and fix bugs and improve the product. It is processed through Sentry, a third-party service (see Section 4). You can disable crash reporting at any time in Settings > Privacy. (7) Device Activation & Telemetry (on first device connection) - When you first successfully connect and activate a Critical T1 device, the App silently reports the following to our device-ledger server (hosted within mainland China) to measure activation rates, verify and complete factory records, and improve after-sales support and device adaptation by model and regional distribution: · Device serial number, factory firmware version, device model/tier identifier; · App version and build number, device platform (iOS/Android), OS version, phone model, system language; · The network IP address of this connection, and a "city-level" approximate region derived from that IP (e.g., "Guangdong, Shenzhen"). - Scope & boundaries: This location is a coarse, IP-based approximate region (city-level), NOT your precise (GPS) location. The IP-to-location lookup is performed on an offline database on our own server; we do NOT share your IP with any third party. We do NOT collect your precise location, movement trails, contacts, SMS, or unique hardware identifiers (e.g., IMEI/IDFA) through this feature. This data is used solely for the purposes stated above, following the data-minimization principle. (8) Device & Network Information (only when you use the related feature) - Bluetooth MAC address of your device: when you scan for or connect to a Critical device, the App reads the Bluetooth MAC address of nearby Critical devices to identify and connect to yours and to remember paired devices for automatic reconnection. This address belongs to the Critical device, not your phone. It is stored only on your phone and is never uploaded. We do NOT read your phone's own MAC address. - WiFi network information: when you set up WiFi for your device, the App reads the name of the WiFi your phone is connected to and the list of nearby WiFi networks (the system-provided list may include routers' hardware addresses), so you can pick a network and connect the device. Read only on the WiFi setup page; not stored or uploaded. - Orientation sensor (accelerometer): while you use "Scan to Connect", take a photo, or use any other feature that opens the camera, the system camera component (CameraX) reads the phone's accelerometer to detect how the phone is held and keep the camera image the right way up. Read only while the camera is open; not stored or uploaded. - Installed music apps (Android only): when you use audio casting and tap "Play Music", the App checks whether common music apps from a preset list (e.g., NetEase Cloud Music, QQ Music, Spotify) are installed and reads their names and icons so you can open one with a tap. We only check apps on that preset list and do NOT read your full list of installed apps; results are not stored or uploaded. We do NOT collect personal information unrelated to the above functions, nor do we collect your contacts, SMS messages, call logs, or other irrelevant data. 2. DEVICE PERMISSIONS The App may request the following system permissions as needed. You may deny any permission; denying only affects the corresponding feature. - Bluetooth (Scan/Connect): to discover and connect to your device — core function. - Location (Android only, some versions): required by the system for BLE scanning; not used for location tracking. - Camera: for scanning QR codes to pair with your device, or capturing photos as your device logo. While the camera is open, the system camera component reads the accelerometer to orient the image (see Section 1 (8)). - Photo Library / Storage: for selecting images to upload to your device, or adding screenshots when submitting feedback. - Local Network / WiFi: for setting up WiFi on your device (reading the current WiFi name and nearby WiFi list), and for high-speed data transfer to your device on the local network (e.g., logo images, sound library audio). - Microphone (only when you turn on "Music Rhythm"): used to "listen" to the music you are playing aloud in real time and turn it into an on-screen spectrum animation. Audio is analyzed in real time on your phone only; we do NOT record, store, or upload any audio. Turning off "Music Rhythm" stops the capture. Permissions are requested only when the corresponding feature is in use, with an explanation of the purpose. You can revoke permissions at any time in your system settings. 3. DATA STORAGE AND TRANSFER 3.1 Storage Location: Your preferences, device pairing information, and custom content are stored locally on your device only. 3.2 Retention Period: Local data is retained until you delete it or uninstall the App. Crash/feedback diagnostic data is retained by our third-party service provider per its own policy; we only access it for the reasonable period needed to resolve issues. 3.3 International Data Transfers: Crash reporting and feedback are handled by Sentry, whose servers may be located outside the People's Republic of China. Where cross-border transfer of personal information is involved, we will comply with applicable legal requirements including notice, consent, and data protection impact assessment, and will implement encryption and other protective measures. (Note: Sentry's actual deployment region is subject to final confirmation before release.) 4. THIRD-PARTY SERVICES / SDKs The App integrates the following third-party services. They may collect and process information according to their own privacy policies: - Sentry (Crash Monitoring & User Feedback) Data collected: crash stack traces, device model, OS version, App version, runtime logs, in-app screenshots, optional contact info. To understand the environment a crash happened in, it also checks on your phone whether the device is rooted (by checking whether a few root-manager apps are installed; it does NOT read your full app list), and records foreground / background and screen on/off state. Purpose: crash monitoring, issue diagnosis, and product improvement Privacy Policy: https://sentry.io/privacy/ - flutter_blue_plus (BLE Communication Library) Data collected: Bluetooth MAC address, name and signal strength of nearby Critical devices (processed locally, not uploaded) Purpose: discover and connect to devices How: called only while you scan for or connect to a device; results are kept on your phone - mobile_scanner with Google ML Kit Barcode Scanning (QR Code Library) Data collected: camera frames (QR codes are recognized on your phone in real time; frames are not stored or uploaded), accelerometer information (read by its built-in system camera component, CameraX, to orient the image) Purpose: scan the device QR code to pair How: called only while the "Scan to Connect" page is open Privacy Policy: https://developers.google.com/ml-kit/terms We will update this list as features evolve. (Note: firmware OTA update packages are served from our own servers, not by a third-party service; the related network requests are described in Section 1 (2).) If new third-party services are integrated in the future, we will update this notice and obtain your consent as required by law. 5. DATA SHARING AND DISCLOSURE 5.1 We do NOT sell your personal information to any third party. 5.2 Other than the third-party services described in Section 4 above, we do not share your personal information without your consent, except: (a) With your explicit consent; (b) As required by law, litigation, or competent government authorities; (c) As necessary to protect our legal rights, user safety, or public interest. 6. DATA SECURITY 6.1 We implement industry-standard security measures to protect your information from unauthorized access, disclosure, use, modification, or destruction. 6.2 Because the App connects locally via BLE without an account system, most data never leaves your device, reducing the risk of data breaches at the architectural level. 6.3 No internet transmission is 100% secure. Please take reasonable precautions to protect your device and data. 7. YOUR RIGHTS You have the following rights regarding your personal information: 7.1 Access, Correction, and Supplementation: You can view and manage your preferences and device info within the App. 7.2 Deletion: You can clear local preference data using the "Reset" feature within the App, or uninstall the App to delete all local data. 7.3 Withdrawal of Consent: You can disable diagnostic data reporting in Settings > Privacy, revoke system permissions, or stop using the relevant features to withdraw corresponding consent. 7.4 Account Deletion: The App has no account system. Uninstalling the App is equivalent to ceasing our processing of your local data. 7.5 Complaints and Feedback: If you believe your rights have been violated, contact us at support@keepswinging.cn. We will investigate and respond in accordance with applicable law. 8. CHILDREN'S PRIVACY 8.1 We take children's privacy seriously. If you are under the age of 16, please review this policy with a parent or guardian and use the App only with their consent. 8.2 We do not knowingly collect personal information from children. If we become aware that we have collected children's data without parental consent, we will delete it promptly. 8.3 This product includes components with moving parts or heat-generating elements. Children should use it only under adult supervision. 9. POLICY UPDATES 9.1 We may update this Privacy Policy from time to time. Updates will be notified via in-app notice, popup, or re-consent flow. 9.2 For material changes (e.g., changes to collection purposes, data types, sharing practices, or your rights), we will provide prominent notice and, where required, obtain your consent again. 10. CONTACT US If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us: - Company: KeepSwinging Technology (Shenzhen) Co., Ltd. - Address: Room A05, 902, Building E, Block 1, Chuangzhi Yuncheng, Xili Community, Xili Street, Nanshan District, Shenzhen, Guangdong, China - Email: support@keepswinging.cn - Data Protection Officer: support@keepswinging.cn Thank you for trusting Zcritical.