Legal

Privacy Policy

v1.16 · 2026-10-31

This policy explains how your content is used for records, AI topics, reviews, and Cross, and how you manage profile, permissions, and deletion requests. Cloud AI is the default service source; we ask for your explicit consent before sending content to Alibaba Cloud DashScope; personal memory retrieval, health activity sync, and Cross each have their own activation rules.

1. Scope

This Policy applies when you use ColorCross multimodal records, AI topics and messages, reflection, goal reminders, optional Cross, membership, connected devices and notifications, and related services. We process personal information only as needed for the feature you choose, account and service security, or legal obligations. Features that require separate consent or device permission will ask before processing; refusing an optional permission does not affect unrelated features.

2. Personal information we process

Depending on the features you use, we may process: your phone number, identity-verification result, and information needed for sign-in and account security; text, voice, images, videos, feedback, and relevant context you submit; location, steps, and workout information after you authorize the corresponding feature; device, system, language, network, feature status, and necessary error information; notification preferences and delivery state, goals and reminders, AI-service choice, connected-device state, membership and quota usage, and order amount, payment channel, and result. Payment providers handle payment-account details directly; ColorCross does not receive bank-card numbers or similar account credentials.

3. Purposes

1. Provide core services: account registration and sign-in, record uploads, AI replies, timeline review, micro-action suggestions and push notifications. 2. Maintain service quality and security: investigate abnormal behavior, fix faults, resist malicious attacks, prevent account theft and identify violations. 3. Meet legal obligations: retain sign-in logs as required by Article 21, paragraph 3 of the Cybersecurity Law, and respond to lawful requests from regulators and judicial authorities. 4. Improve the product experience: analyze necessary feature-interaction events and, where feasible, use de-identified or aggregated diagnostic information. We do not use information at the individual-identity level for advertising profiles or targeted marketing. 5. Other purposes you separately authorize, such as sharing with other users or taking part in activities. Each purpose will be explained again and your consent obtained when you use it. 6. When enabled, recognize, create, update, query and link goals, and attempt to send goal reminders according to your settings. Turning goal recognition off stops future messages from entering goal routing or goal-intent interpretation; manual goal creation and management remain available.

4. Processing methods and security controls

Sign-in, AI replies, goal recognition, notifications, and quota measurement may use automated processing. Goal recognition and AI results may be wrong; high-risk, destructive, or ambiguous operations require confirmation. We do not make major decisions affecting your rights solely through automated processing. We use protections appropriate to the data and risk, including encrypted transmission, access controls, account isolation, secure storage, and audit measures. Reminders are best effort and must not replace alarms, medical, emergency, or other safety-critical reminders. 【Android startup and opening other apps】 After you accept this policy, use reminders and allow system notifications, Android may start ColorCross through BOOT_COMPLETED or MY_PACKAGE_REPLACED after a reboot or app update to restore reminders saved on this device. Recovery is disabled by default and enabled only with pending reminders and an available notification permission and reminder channel. Turning off all reminders, signing out or deleting the account disables recovery. Recovery does not run if notifications or the reminder channel are blocked. It uses only local reminder times, titles and navigation data, without opening the app interface, reading location or media, uploading records, advertising or unrelated background activity. The inactive app-managed alarm feature does not listen for boot or app-update broadcasts. Only when you consent and actively choose WeChat/Alipay payments, WeChat sharing, system calendar/clock or health-service authorization may we open the corresponding app or system service for that purpose. We do not open unrelated apps in the background. Service push follows the SDK disclosures in section 5 and notification authorization. You can turn off these features in system notification settings and in-app notification/reminder settings.

4A. Topic personalization and personal memory retrieval

When you use Records or an AI topic, the user messages you send become account-scoped basic personal-context sources used to provide replies that better fit your circumstances in a related topic you actively open. A source shows what you expressed and does not automatically become a confirmed fact. AI, system, and person-to-person connection messages are not personal-context sources by default. You may open a cited source, correct or delete its record, or mark it not to be used. Exclusion or deletion blocks online retrieval immediately and asynchronous indexes are cleaned within a reasonable period. This processing is not used to train third-party public models. The Personal Memory Retrieval setting is a separate enhanced capability and is off by default. After you turn it on, only new or re-edited records are used to create longer-term semantic or multimodal retrieval information; earlier records are not processed automatically. It uses ColorCross-managed AI and does not follow the My Device choice used for ordinary AI replies. You may turn it off at any time; ColorCross then stops enhanced retrieval and deletes the retrieval data created for it without deleting your source records or media.

4B. System health activity data

Body & Rhythm is optional. Only after you open it and grant permission does ColorCross read existing steps and workout information from the system health service, including distance, summarized heart rate, and existing routes. ColorCross does not count steps itself, continuously collect location or heart rate, read unrelated health information, or change the source records. HarmonyOS currently supports only steps and workout summaries; other data depends on platform support and your permission. Save workout summaries, heart rate and allowed routes to your account, dated when they happened. Separate from cloud insights. Imported workouts and routes are not automatically used for AI, public maps or Cross matching. The separate cloud-insights option uploads only its allowed summaries, without heart rate or precise routes. Stops reads and deletes imported workouts, routes and activity summaries from this device and your account. Separate reflections and system originals remain. Manage access in your system health service. You may turn off sync or disconnect at any time and delete copies held by ColorCross without changing the source records in the system health service. ColorCross does not treat missing data as proof that you did not exercise and does not provide medical diagnosis or exercise prescriptions.

4C. ColorCross Cross Beta

Cross Beta is a separate optional feature released gradually only to users aged 18 or older, and it is off by default. We enable it only after you read the feature notice and then-current specific rules and actively confirm. Using records, messages, goals, or review does not require Cross. When enabled, Cross uses only generalized LifePoint-derived features that you allow to participate, such as generalized topics, time windows, areas, rhythms, and similarity summaries, to create non-real-time, probabilistic intersections and explanations. Raw text, voice, images, video, precise coordinates, precise same-day times, contact identity, and device identifiers are not shown to other users or included in match explanations. Intersections, explanations, and internal scores do not establish identity, relationship, location, or real-world history. They are not used for advertising profiles, targeted marketing, or training third-party public models. A connection requires separate consent from both people. You may decline, revoke a connection, block, or report; the other person sees only the minimum information expressly shown by the product. After you turn Cross off or opt out, we stop future matching, invalidate unfinished requests, intersections, and connections, and clean up related derived data within a reasonable period. We may retain only the minimum report category, review state, pseudonymous subject reference, and audit record needed for reports, disputes, safety, and legal obligations, with restricted access. Historical records do not participate by default and require a separate choice.

5. Service providers and delegated processing

We use service providers only as needed for a feature, require them to protect information under our instructions, and do not sell personal information. When you open My Map, the AMap Open Platform Maps SDK from Beijing Gaode Tuqiang Technology Co., Ltd. (北京高德图强科技有限公司) displays the base map and generalized place markers. The SDK may process generalized marker coordinates and IP, network, device, system, and current-app information needed to run the map. This feature does not request precise location. Provider information: https://lbs.amap.com/pages/privacy/ For notifications, Alibaba Cloud mobile push and the Huawei, Xiaomi, OPPO, vivo, Honor, and Meizu system channels may process necessary device and notification information to deliver service notices and reminders, not targeted advertising. You may turn notifications off in the system or app. Provider information: https://help.aliyun.com/zh/document_detail/434803.html Managed cloud AI uses Alibaba Cloud DashScope, operated by Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司). Cloud AI is the default service source, but we ask for your explicit consent before the first transfer to DashScope. Only after you agree will relevant text, images, audio, or video and their context be sent to DashScope for a request you start. If you decline, your original records can still be saved while managed AI stays paused; you can enable it later under AI service source. Results are returned and stored in your account. Minimal technical information needed for transport, operation, and service quality may also be processed. Turning it on does not mean your private records are used to train third-party public models. You may turn it off at any time; turning it off stops future managed requests without affecting your local-device service or unrelated features. Alibaba Cloud policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202107091605_49213.html. When you choose My Device, a task is sent to your connected device and may be processed by the AI service you selected. That service may receive task content and project or session information you deliberately choose, under its own account, data, and privacy rules. Apple App Store, WeChat Pay, or Alipay processes product, order, amount, and payment result when you use the corresponding purchase feature. Sharing uses the system share sheet and sends only the content you choose to the app you select. Payment providers handle payment-account details directly. Apple: https://www.apple.com/legal/privacy/; Alipay: https://render.alipay.com/p/c/k2cx0tg8; WeChat: https://privacy.qq.com/document/preview/e1f33f7e3f7e4b35b1c1f4cc91c4f4b8. 【Android third-party SDK list】 The SDK and provider names below use their registered Chinese names. Bundling an SDK does not enable all its capabilities. Processing is limited to the feature you use, supported devices and necessary authorization. Push is for service notifications and reminders, not advertising profiles. Payments, sharing and health services follow your active choices; bundled inactive dependencies receive no additional permissions. Each entry describes the relevant scenario and data processed through device interfaces and networks. Stopping a feature or withdrawing its authorization controls subsequent processing under this policy. 1. SDK: APP支付客户端SDK Package: com.alipay.sdk Provider: 支付宝(杭州)信息技术有限公司 Purpose: When you choose Alipay, complete payment, verify the result and prevent transaction fraud. Data: Order, amount, payment result, device model and OS version, available Android ID/OAID, network and carrier, display and sensor information needed for payment security. SDK privacy policy: https://opendocs.alipay.com/open/54/01g6qm#%E6%94%AF%E4%BB%98%E5%AE%9D%20App%20%E6%94%AF%E4%BB%98%E5%AE%A2%E6%88%B7%E7%AB%AF%20SDK%20%E9%9A%90%E7%A7%81%E6%94%BF%E7%AD%96 2. SDK: OPPO PUSH 客户端SDK Package: com.heytap.msp Provider: 广东欢太科技有限公司 Purpose: Deliver service notifications and goal reminders on supported OPPO devices. Data: Push identifier/token, device model and OS version, app package/version, network state and IP, notification permission and delivery/click state. SDK privacy policy: https://open.oppomobile.com/new/developmentDoc/info?id=11228 3. SDK: vivo推送SDK Package: com.vivo.push Provider: 维沃移动通信有限公司 Purpose: Deliver notifications on supported vivo devices and measure push interface success. Data: App basic information, in-app device identifier, device hardware and system information, push invocation and delivery state. SDK privacy policy: https://dev.vivo.com.cn/documentCenter/doc/878 4. SDK: 华为帐号SDK Package: com.huawei.hms.account Provider: 华为软件技术有限公司 Purpose: Verify the Huawei account and authorization when you connect Huawei Health; this does not replace ColorCross phone sign-in. Data: Authorized account identifier, authorization scope/token, account-service availability and device/OS information; no Huawei account password. SDK privacy policy: https://developer.huawei.com/consumer/cn/doc/HMSCore-Guides/sdk-data-security-forandroid-0000001695031596 5. SDK: 华为运动健康服务SDK Package: com.huawei.hms.hihealth Provider: 华为软件技术有限公司 Purpose: Read existing steps and workouts after you connect and authorize Huawei Health; no continuous monitoring by ColorCross. Data: Account/app identifier and authorized steps, workout time/type/duration/distance, heart-rate summaries and existing routes, limited to system support and your authorization. SDK privacy policy: https://developer.huawei.com/consumer/cn/doc/development/HMSCore-Guides/sdk-privacy-instructions-0000001659248818 6. SDK: 定位SDK Package: com.amap.api.location Provider: 北京高德图强科技有限公司 Purpose: Bundled through the AMap dependency; ColorCross does not call this component for location. Record location uses separately authorized system location. Data: Location collection by this component is not enabled; no precise coordinates or Wi-Fi, cell or Bluetooth scans through this component. See the map entries for rendering data. SDK privacy policy: https://lbs.amap.com/pages/privacy/ 7. SDK: 小米推送 Package: com.xiaomi.push Provider: 北京小米移动软件有限公司 Purpose: Deliver service notifications and goal reminders on supported Xiaomi devices. Data: Push registration identifier, available OAID/encrypted Android ID, device model/OS, app package/version and running state, network type, carrier and delivery state. SDK privacy policy: https://dev.mi.com/console/doc/detail?pId=1822 8. SDK: 微信OpenSDK Android Package: com.tencent.mm.opensdk Provider: 深圳市腾讯计算机系统有限公司 Purpose: Interact with WeChat and return the result when you choose WeChat sharing or payment. Data: Selected share text/image/link or payment order/amount/result, app identifier, WeChat installation/version state and necessary device/network information; no automatic upload of private records. SDK privacy policy: https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8 9. SDK: 性能加速库 Package: com.huawei.hms.stats Provider: 华为软件技术有限公司 Purpose: HMS dependency identified by the scanner as the performance library, used for Huawei service operation and compatibility; no separate graphics acceleration or ad analytics service is enabled. Data: HMS call results, error codes, SDK version and necessary device model/OS diagnostics; no record text, media or health records provided to this component. SDK privacy policy: https://developer.huawei.com/consumer/cn/doc/development/graphics-Guides/sdk-data-security-0000001050700772 10. SDK: 移动推送-android Package: com.alibaba.sdk.android.push Provider: 杭州阿里云智能科技有限公司 Purpose: Register push devices and deliver service notifications and goal reminders. Data: Push device/registration identifier, device brand/model/OS, app package/version, necessary network state/IP, notification payload and delivery state. SDK privacy policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html?spm=a2c4g.434217.0.0.6f663e68ZeueeL 11. SDK: 荣耀推送SDK Package: com.hihonor.push Provider: 深圳荣耀软件技术有限公司 Purpose: Deliver service notifications and goal reminders on supported Honor devices. Data: AAID, PushToken, device model/OS, app identifier, push call result and notification delivery state. SDK privacy policy: https://developer.honor.com/cn/docs/11002/guides/sdk-data-security 12. SDK: 轻量版地图SDK Package: com.amap.api.maps.utils Provider: 北京高德图强科技有限公司 Purpose: Map utility component identified by the scanner, bundled with the AMap 3D SDK to display My Map and generalized markers; no component location enabled. Data: Device/OS and current-app information, IP/network state and generalized marker coordinates needed for rendering; no precise-location request through this map component. SDK privacy policy: https://lbs.amap.com/pages/privacy/ 13. SDK: 魅族推送SDK Package: com.meizu.cloud.pushsdk Provider: 珠海星纪魅族信息技术有限公司 Purpose: Deliver service notifications and goal reminders on supported Meizu devices. Data: Push identifier, device brand/model/OS/language, app package/version, notification switch and delivery state. SDK privacy policy: https://open.flyme.cn/docs?id=202 14. SDK: 华为推送SDK Package: com.huawei.hms.push Provider: 华为软件技术有限公司 Purpose: Deliver service notifications and goal reminders on supported Huawei devices. Data: AAID, PushToken, app identifier, device model/OS, push invocation and delivery state. SDK privacy policy: https://developer.huawei.com/consumer/cn/doc/development/HMSCore-Guides/sdk-data-security-0000001050042177 15. SDK: 3D地图SDK Package: com.amap.api.maps Provider: 北京高德图强科技有限公司 Purpose: Render My Map and generalized place markers when opened; no AMap location invocation. Data: Generalized marker coordinates, IP/network state and device/OS/current-app information; no precise-location request through this SDK. SDK privacy policy: https://lbs.amap.com/pages/privacy/

6. Sharing, transfer, and disclosure

We do not sell your personal information. We disclose it only with your separate consent, when required by law or competent authorities, when needed for legal obligations or public interests, or in emergencies where consent is hard to obtain but disclosure is needed to protect major lawful interests such as life or property. If information must transfer because of merger, division, dissolution, or bankruptcy, we will notify you and require the recipient to keep following this Policy.

7. Cross-border transfer

Core services and personal content are mainly processed in mainland China. A system service, payment channel, or AI service you choose may process necessary information in another jurisdiction. Where ColorCross provides personal information overseas, we will complete required notices, separate consent, and other compliance steps. Services you choose also follow their own rules.

8. Retention

We keep personal information only for the shortest period needed to provide the service or meet legal obligations. Account, membership, and order information remains while the account is active and is normally deleted or anonymized within 30 days after account deletion, except for transaction, dispute, security, and legally required records. Records, goals, and media remain until you delete them or the account; backups expire through normal rotation. Notification, connected-device, and diagnostic information is deleted when disabled, unbound, invalid, or no longer needed. Routine operational logs are normally kept no longer than 90 days. Cross-derived results are deleted or anonymized within a reasonable period after opt-out, eligibility revocation, or invalidation. Report, safety, and audit records are kept only for the shortest period needed to resolve disputes, protect users, and meet legal obligations.

9. Your rights

You may request to know, access, copy, correct, supplement or delete information, withdraw consent, restrict or object to processing, or ask us to explain processing and automated decisions. The app lets you manage profile data, records, media, goals, permissions, notifications, goal recognition, AI mode and account deletion. Turning goal recognition off affects future messages and does not delete existing goals. Cross Authorization lets you opt in or out of Cross; Cross lets you revoke a connection, block, and report. For data export, correction, deletion, or other rights, use Feedback or the contact email. We will verify identity and respond no later than 15 working days after receipt. Account deletion is available under Profile → Account; in some client versions it is under About ColorCross. • The managed cloud AI authorization in “AI services & devices” is separate and can be turned on or off; when off, ColorCross-managed AI requests fail closed.

10. Protection of minors

ColorCross is not offered to children under 14, and we have not established a guardian-consent process or dedicated safeguards for children’s personal information. Children under 14 must not register or use the app. If we discover that we have collected a child’s personal information by mistake, we will promptly delete it or take other necessary action as required by law; guardians may contact us by email. Users aged 14 to 17 should read these terms and use the app with guardian guidance, and avoid submitting unnecessary sensitive information. Cross Beta is not available to anyone under 18.

11. Security measures

We apply measures appropriate to the type of data and the risks, including encrypted transmission, secure storage, access controls, account isolation, auditing, backup and recovery. No online service can guarantee absolute security. Keep your signed-in devices and SMS verification codes secure. If personal information is or may be leaked, altered or lost, we will immediately take remedial action, report to regulators as required by law, and notify affected users through push notifications, announcements, email or other effective means.

12. Policy revisions and earlier versions

We may revise this Policy when laws, regulatory requirements or features change. Material changes to processing purposes or methods, categories of personal information, sharing with third-party AI or payment services, or your rights will be prominently communicated through an in-app notice, push notification or release notes. Where renewed consent is required by law, we will obtain it before the relevant processing begins; silence or continued use alone does not replace consent. Minor wording changes will update the version number and effective date. Earlier versions are available on request by email.

13. Offline content and sync

While offline, sent text and selected media may be stored on the current device until connectivity returns and upload and processing can continue. Seeing local content does not mean the server has received it or AI analysis has finished. Sync processes the content, media and necessary sending state. Unsynced content depends on storage on the current device. Uninstalling the app, clearing its data or losing the device may make that content unrecoverable. Check sending status before these actions. System permissions, disabling enhanced memory retrieval, leaving Cross and deleting original records are separate actions with the scopes described in the relevant screens and this policy.

14. Xiaomi watch connection and recording sync

Xiaomi watch connection is optional. After you confirm its purpose on your phone, ColorCross uses the Xiaomi wearable SDK to access paired device names, identifiers and connection status for device selection and data exchange. Binding uses an account-scope digest and pairing identifier. Syncing a selected recording processes its audio, recording time, duration, size, integrity digest and import status. This feature does not read heart rate, sleep data or contacts. Recordings remain on the watch until you choose to sync them through the phone into your current ColorCross cloud account. Phone receipt is separate from cloud import; necessary transfer copies and retry state are retained while pending. Unbinding stops the connection and clears the phone receiving queue, without deleting original watch recordings or existing cloud records. Imported media caches and records remain subject to this policy and your deletion controls. SDK connection documentation: https://iot.mi.com/vela/quickapp/zh/features/network/interconnect.html

Contact

Personal information processor: Beijing Huodudu Technology Co., Ltd. Email: dodofun@126.com If you believe our processing harms your personal information rights, contact us at the email above. We will respond no later than 15 working days after receiving your request. You may also complain to competent regulators.