Beating
Privacy Policy
Beating (“the App”, “we”) is a heart-rate–focused health data visualization tool. We take your privacy — especially your health data — seriously. This policy explains what we collect, how we use and store it, and the rights you have.
1. Information We Collect
Health data (read via Apple HealthKit, with your permission): heart rate, resting heart rate, heart rate variability (HRV), high/low heart-rate events, steps, walking & running distance, active energy, stand time, sleep analysis, body mass / BMI, VO₂max, and workouts. The App only reads this data; it never writes data to HealthKit.
Location (optional, while in use): only when you actively enable the Weather feature, to fetch the current temperature for your city. We do not continuously track or store your precise location history.
Sync & account identifiers: the App generates a random sync key and device token on your device. If you use BeatingCloud, uploaded data and family/friend group activity are linked to that random identifier. We do not collect your name, phone number, or precise identity (other than a nickname you may set yourself), and the current version does not automatically transfer this credential to another device.
Diagnostics: the App keeps a small amount of sync-status information locally for troubleshooting; this is not uploaded by default.
2. How We Use Information
- To present your heart-rate trends, time-segment analysis, and health overview;
- After you enable sync, to process data associated with the BeatingCloud credential available on your device and to support family/friend groups you choose to join;
- To provide supplementary features such as weather.
3. HealthKit Data — Specific Notice
As required by Apple, data obtained from HealthKit is used solely to provide you with health and fitness services. It is not used for advertising or similar services, and is not shared with any third party that does not help you manage your health or fitness.
4. Storage & Sync
- On device: your data is primarily stored on your device.
- BeatingCloud (api.guozhihenhaochi.com): personal health data stays on your device by default. Only after you explicitly enable personal cloud sync are heart-rate summaries, analysis data, and custom periods transmitted over HTTPS and stored on our self-operated service in mainland China.
- Credential scope: cloud recovery can only access data linked to the BeatingCloud credential currently available on that device. A new installation or another device does not automatically inherit the credential from an existing device.
- Family/friend groups: group membership is managed by BeatingCloud. Only after you explicitly enable health sharing is your daily health overview stored on BeatingCloud and made visible to members of that group. You can turn sharing off or leave a group at any time.
- No other sync backend: the App does not use iCloud/CloudKit or a third-party cloud database to store or synchronize health data.
5. Data Sharing
Other than members of family/friend groups you actively join and authorize sharing with, we do not share your personal health data with third parties. Apple HealthKit and WeatherKit are used as system services and are governed by Apple’s privacy policy.
6. Your Rights
- Delete account: in Settings → Account & Legal → Delete Account, you can permanently delete your account and all cloud and on-device data.
- Turn off sharing: disable health-data sharing or leave a group at any time in Family settings.
- Revoke access: revoke the App’s HealthKit access anytime in iOS Settings → Privacy & Security → Health.
7. Security
Sync keys and device tokens are stored in the system Keychain; all communication with our servers uses HTTPS. Please note that no method of transmission or storage is 100% secure.
8. Children’s Privacy
The App is not directed to children under 13, and we do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be indicated by updating the “Effective date” above or via an in-app notice.
10. Contact Us
If you have any questions about this policy, contact us at support@beating.dev.
隐私政策
Beating（“本应用”“我们”）是一款以心率为核心的健康数据可视化工具。我们非常重视你的隐私，尤其是健康数据。本政策说明我们收集哪些信息、如何使用与存储，以及你拥有的权利。
1. 我们收集的信息
健康数据（经你授权，通过 Apple HealthKit 读取）：心率、静息心率、心率变异性（HRV）、高/低心率事件、步数、步行与跑步距离、活动能量、站立时间、睡眠分析、体重 / BMI、最大摄氧量（VO₂max）以及体能训练记录。本应用仅读取这些数据，不会向 HealthKit 写入数据。
位置（可选，使用期间）：仅当你主动开启“天气”功能时，用于获取你所在城市的当前气温。我们不会持续追踪或存储你的精确位置轨迹。
同步与账户标识：本应用会在设备上生成随机同步密钥与设备令牌。你使用 BeatingCloud 时，上传的数据及家庭/好友组活动会与该随机标识关联。我们不会收集你的姓名、电话号码或精确身份信息（你可自行设置的昵称除外）；当前版本也不会把该凭证自动迁移到另一台设备。
诊断信息：App 本地会记录少量同步状态用于排错，这些信息默认不会上传。
2. 我们如何使用信息
- 为你呈现心率趋势、时段分析与健康概览；
- 在你开启同步后，处理与当前设备所持 BeatingCloud 凭证关联的数据，并支持你选择加入的家庭/好友组；
- 提供天气等辅助展示功能。
3. HealthKit 数据的特别声明
根据 Apple 的要求，本应用从 HealthKit 获取的数据仅用于向你本人提供健康与健身相关的服务；不会用于广告或类似服务，也不会与任何无法帮助你管理健康/健身的第三方共享。
4. 数据的存储与同步
- 设备本地：数据主要保存在你的设备上。
- BeatingCloud（api.guozhihenhaochi.com）：个人健康数据默认只保存在设备本地。只有在你明确开启“个人健康数据同步”后，心率汇总、分析数据、自定义时段等才会通过 HTTPS 传输并存储在我们位于中国大陆境内的自有服务中。
- 凭证范围：云端恢复仅能访问与当前设备所持 BeatingCloud 凭证关联的数据；新安装的 App 或另一台设备不会自动继承已有设备的凭证。
- 家庭/好友组：组成员关系由 BeatingCloud 管理。只有在你明确开启健康共享后，你的每日健康概览才会存储到 BeatingCloud 并向该组成员展示；你可随时关闭共享或退出群组。
- 无其他同步后端：本应用不使用 iCloud/CloudKit 或第三方云数据库存储、同步健康数据。
5. 数据共享
除你主动加入且明确授权共享的家庭/好友组成员外，我们不会与第三方共享你的个人健康数据。Apple HealthKit 与 WeatherKit 仅作为系统服务使用，并受 Apple 隐私政策约束。
6. 你的权利
- 删除账户：在“设置 → 账户与法律 → 删除账户”中，可永久删除你的账户及云端与本机的全部数据。
- 关闭共享：可随时在家庭设置中关闭健康数据共享或退出群组。
- 撤销授权：可在 iOS“设置 → 隐私与安全性 → 健康”中随时撤销本应用的 HealthKit 访问权限。
7. 数据安全
同步密钥与设备令牌保存在系统 Keychain 中；所有与服务器的通信均通过 HTTPS 加密传输。请注意，没有任何一种网络传输或存储方式是 100% 绝对安全的。
8. 儿童隐私
本应用不面向 13 周岁以下儿童，我们不会有意收集儿童的个人信息。
9. 政策变更
我们可能会不时更新本隐私政策。重大变更将通过更新本页面的“生效日期”或在应用内提示的方式告知你。
10. 联系我们
如对本隐私政策有任何疑问，请联系：support@beating.dev