MoveSee 隐私政策

To provide the senior safety guardian service, MoveSee collects the following necessary user data:

2.1 Account Registration

2.2 Health & Activity Data

• Step Count: Read via HealthKit (iOS) / Google Fit (Android) for abnormal activity detection.
• Heart Rate: If the device supports it, read from HealthKit for health reference (non-core feature).
• Active Duration: Active/inactive intervals calculated from step data, used for alarm decisions.
• Heartbeat Reports: App reports current step status every 30 minutes to determine whether the alarm threshold is exceeded.

2.3 Location Information

MoveSee uses location permission in the following cases:

• Alarm Location: When an alarm is triggered, the current GPS location is automatically obtained once and included in the alarm notification sent to family members.
• Footprint Map (Premium): With a premium subscription, the elder's device automatically records their location once per hour to generate a daily movement trail map for family members. This feature requires the elder to grant location permission. Family members can view the day's timeline-based location records on an interactive map.
• When the elder actively uses the "Share Location" feature.

2.4 Device & Technical Information

• Push notification tokens (FCM Token / APNs Token): Used to send alarm push notifications to family members' devices.
• OS type and version: Used for compatibility handling and troubleshooting.
• App version number: Used for service compatibility management.

2.5 Family Binding & Alarm Records

• Family bindings: Records the binding relationship between elder accounts and family accounts.
• Alarm records: Including trigger time, alarm type, and location (if any). Retained permanently.
• Notification preferences: Family members' preferred notification methods (push / call / SMS) and corresponding settings.

2.6 Subscription Information

• Subscription status, product ID, expiration date: Used to manage Premium feature access.
• Subscription platform (App Store / Google Play): Used for subscription validation communication.
• We do not collect or store any payment card numbers or bank account information. All payments are processed by Apple / Google.

We collect the above information solely for the following specific purposes and will never use it for any other commercial purpose:

• Provide core senior safety features (step monitoring, abnormal activity alerts)
• Send alarm push notifications, and trigger automated calls and SMS to bound family members
• Manage user accounts and family binding relationships
• Verify App Store / Google Play subscriptions and provide Premium features
• App performance monitoring and troubleshooting (no personal data involved)
• Respond to user support requests
• We will never use your information for advertising, user profiling, or any marketing purpose

We use industry-standard security measures to protect your data:

• Transmission Encryption: All communication between client and server is end-to-end encrypted using AES-256-GCM. Keys are managed by the system and no plaintext data is transmitted over the network.
• Storage Security: Server databases use access controls and encrypted storage; only authorized service processes can access the database.
• Authentication: JWT (JSON Web Token) authentication with a 7-day token validity period that expires automatically.
• Data Isolation: An elder's health and alarm data is only visible to that elder and their bound family members. Other users cannot access it.

In the following limited circumstances, we may need to share certain data:

• Within the Family: An elder's step count, alarm records, and location are shared only with family members they have actively bound. This is a core feature of the service.
• Legal Requirements: If we receive a valid legal request (court order, government subpoena, etc.), we may disclose necessary information as required by law, and will notify users to the extent permitted by law.
• Service Providers: Such as cloud service providers and push notification services (Firebase / APNs). These providers have signed confidentiality agreements and may only use data to provide technical services — not for any other purpose.

MoveSee uses the following third-party services, each with their own independent privacy policies:

Each of these providers has its own independent privacy policy; we encourage you to review them. Our use of these providers is strictly limited to what is necessary to deliver MoveSee's core features.

You have the following rights over your data:

• Right to Access: You can view your account information and history data within the app.
• Right to Correction: You can update your nickname, email, and other personal information at any time.
• Right to Deletion: You can delete your account directly in the app — go to the “Profile” tab, scroll to the bottom, and tap “Delete Account”. All your personal data will be deleted within 30 days. No need to contact customer support.
• Right to Withdraw Consent: You can revoke permissions for HealthKit, location, and notifications in your device’s system settings at any time. This does not affect your ability to continue using basic features.
• Right to Unbind: Family members can unbind from the elder’s account at any time within the app. After unbinding, they will no longer receive alarm notifications.
• Right to Data Export: To export your historical data, please contact us and we will provide it within 15 business days.

To exercise any of these rights, contact openthink@foxmail.com and we will respond within a reasonable timeframe.

MoveSee is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from minors.

If we discover that we have inadvertently collected personal information from a child, we will take immediate steps to delete it. If you believe we have collected data from a minor, please contact us.

We may update this Privacy Policy from time to time to reflect service changes or regulatory requirements. When significant changes occur, we will:

• Provide a prominent notice within the app
• Update the “Last Updated” date at the top of this page
• For changes that materially affect your core rights, provide at least 30 days’ notice before they take effect

Continued use of MoveSee after the effective date constitutes your acceptance of the revised policy.