GoutMate Privacy Policy

GoutMate ("the App," "we," "us," or "our") is developed and operated by Yuncheng Yanhu Canghai Network Technology Co., Ltd. ("the Company"). We understand how important your personal information is and are committed to protecting it in accordance with applicable laws and regulations, as well as the requirements of the Apple App Store, Google Play, and other distribution platforms.

This Privacy Policy explains what personal information we collect, how we use, store, share, transfer, disclose, and protect it, and what rights you have.

We collect only the personal information that is necessary to provide the App's features. Information may come from information you provide directly, data collected automatically, or third-party login services.

1.1 Account and Login Information

• WeChat login: OpenID, UnionID (if applicable), nickname, and profile picture;
• Sign in with Apple: Apple-generated user identifier, name (optional), and email (optional; a relay email address if you choose to hide your email);
• Guest login: device identifier and anonymous user ID;
• Account status, registration time, and last login time.

1.2 Health Profile Information (Sensitive Personal Information)

• Basic body metrics: height, weight, age, and gender;
• Gout-related information: gout history, attack frequency, affected areas, pain level, duration of illness, and current status (stable / acute flare-up);
• Test indicators: uric acid level records;
• Lifestyle habits: activity intensity, alcohol preference, sweet-food preference, and meat preference;
• Comorbidities: hypertension, hyperglycemia, obesity, etc. (entered by you voluntarily).

1.3 Content You Upload or Generate

• Food photos and menu photos;
• Diet records (food name, portion size, meal time, and estimated purine / fructose / glycemic load values);
• Custom food entries;
• Water intake records;
• Gout flare records and notes;
• Health notes and daily check-in records.

1.4 Device and Log Information

• Device model, brand, operating system version, system language, and screen resolution;
• Unique device identifiers (device ID, Android ID / SSAID, OAID, IDFV, etc., used for account security and fraud prevention);
• Network type, IP address, and time zone;
• App version, usage logs, crash logs, and performance data;
• Apple Search Ads attribution token (ASA Token, iOS only, used for advertising performance evaluation and only when you download through Apple advertising).

1.5 Sensor Information

• Gyroscope and accelerometer data (used only in specific security verification scenarios to detect automated scripts, bots, or other non-human operations and to protect account security).

1.6 Transaction Information (VIP Subscription)

• Membership plan type, subscription duration, order number, payment status, and payment time;
• Transaction credentials returned by Apple App Store, Google Play, WeChat Pay, and other third-party payment platforms (we do not store your bank card, credit card, or other sensitive payment information).

Permission	Purpose	Required
Camera	To take photos of food or menus for AI analysis	No
Photo Library	To select local images for food/menu analysis; to save customer service QR codes	No
Storage / File Access	To cache user data, images, and app resources	Yes
Local Network	For network diagnostics and basic statistics	Yes
Motion & Fitness / Step Count (if requested)	To assist in evaluating activity intensity (used only after you grant permission)	No
Push Notifications	Hydration reminders, health check-in reminders, and important messages	No

You may enable or disable any non-essential permission at any time in your device settings. Disabling a non-essential permission may affect certain features but will not prevent you from using the basic functions of the App.

• Service provision: completing account registration and login; building and maintaining your health profile; performing AI food/menu recognition and analysis; generating personalized diet plans, health recommendations, and risk assessments; recording water intake, flare-ups, diet, and other health data; and displaying statistics, charts, and trend analysis.
• Security: identity verification, account security protection, anti-cheating, anti-fraud, and anti-bot protection.
• Service optimization: improving app performance, fixing issues, developing new features, and conducting anonymized data analysis and research.
• Customer service: responding to your inquiries, complaints, account deactivation requests, and data deletion requests.
• Transaction processing: handling VIP subscriptions, order inquiries, refunds, and purchase restoration.
• Legal compliance: fulfilling requirements under applicable laws or requests from government authorities.

To ensure the App runs securely and efficiently, we may store necessary data locally on your device (such as login status, app cache, and user settings). You can delete this information by clearing the app cache or uninstalling the App.

5.1 We do not sell your personal information.

5.2 Circumstances under which we may share information

• Service providers: We may share necessary personal information with cloud service providers, payment service providers, and statistical analysis service providers. These providers may use your information only to provide services to us and are bound by confidentiality obligations.
• Legal requirements: We may disclose your personal information when required by law, court order, or government request, or to protect our rights, users' rights, or public safety.
• Merger / acquisition: If the Company undergoes a merger, division, acquisition, or asset transfer, your personal information may be transferred as part of the business assets. We will require the new holder to continue to comply with this Privacy Policy.

5.3 Third-party SDKs and service providers

SDK / Service Provider	Function	Information That May Be Collected
WeChat SDK	WeChat authorization login and sharing	OpenID, UnionID, nickname, profile picture, device information
Sign in with Apple	Apple account login	Apple user identifier, name, email (optional)
Apple Search Ads (ASA)	Advertising attribution analysis (iOS only)	ASA Token, device identifier
Google Play Billing	Google Play subscription payments	Order information, transaction credentials
Apple App Store In-App Purchase	App Store subscription payments	Order information, transaction credentials
Cloud service providers such as Tencent Cloud / Alibaba Cloud	Data storage and computing	Business data stored in encrypted form

The processing of personal information by third-party SDKs is subject to their own privacy policies. We encourage you to review the privacy policies of the relevant third parties.

In principle, your personal information is stored within the territory of the People's Republic of China. If cross-border data transfer occurs due to the use of services provided by overseas entities such as Apple, Google, or cloud service providers, we will strictly comply with applicable laws and regulations, take necessary security assessment, standard contractual clauses, and other compliance measures, and ensure that the receiving party provides data security protection no lower than the level set out in this Policy.

7.1 Storage location: Your personal information is stored on servers located within mainland China and on your mobile device.

7.2 Retention period:

• Account information: retained until 30 days after you delete your account, after which it will be deleted or anonymized;
• Health data: retained until you actively delete it or until 90 days after you delete your account, after which it will be deleted or anonymized;
• Log data: automatically deleted after 180 days;
• If laws and regulations require a longer retention period, we will comply with such requirements.

7.3 Security measures: We protect your personal information through SSL/TLS encrypted transmission, encrypted storage of sensitive data, access control, permission management, and security audits.

7.4 Special protection for health data: Your health profile, diet records, and flare-up records are sensitive personal information. We apply stricter encryption and access control measures and will not use them for advertising or targeted marketing without your consent.

Depending on applicable laws, you have the following rights:

• Access and correction: You can view and modify your health profile, diet records, water intake records, and other information within the App.
• Deletion: You can delete individual records in each feature module, or request deletion of all personal data.
• Account deactivation: You may apply to deactivate your account through "Me - Settings - Deactivate Account." After deactivation, your personal information will be deleted or anonymized within 30 days, unless otherwise required by law.
• Withdraw consent: You may withdraw authorization for non-essential permissions (camera, photo library, push notifications, etc.) at any time in your device settings. Withdrawing consent does not affect the lawfulness of processing already performed based on your prior consent.
• Restriction or objection: In certain circumstances, you have the right to request that we restrict or stop processing your personal information.
• Data portability: To the extent permitted by law, you may request a copy of your personal information.
• Complaint: If you believe that our processing of your personal information violates applicable laws, you have the right to file a complaint or report with the relevant regulatory authority.

To protect your rights, the App provides an account deletion function:

• Path: Me - Settings - Deactivate Account;
• After deactivation, your account information, health profile, diet records, water intake records, flare records, notes, and VIP status will be unbound from your account and deleted or anonymized;
• Completed transaction records may be retained for a certain period as required by laws and regulations;
• If you cannot complete deletion through the App, you may submit a deletion request using the contact information at the bottom of this Policy.

The App is primarily intended for adult users and is not directed at children under the age of 14 (or the minimum age required in your jurisdiction). If we discover that we have inadvertently collected personal information from a child, we will take steps to delete the information as soon as possible. If you are a parent or guardian and believe that a child has used the App and provided personal information, please contact us immediately.

We may update this Privacy Policy from time to time in response to changes in laws and regulations, business adjustments, or technological advances. The revised Policy will be posted in a prominent location within the App and we will notify you through in-app notices or announcements before it takes effect. Your continued use of the App after the revised Policy takes effect constitutes your acceptance of the revised Policy.

This Privacy Policy is governed by the laws of the People's Republic of China (for the purposes of this Policy, excluding the laws of the Hong Kong Special Administrative Region, the Macao Special Administrative Region, and Taiwan). Any dispute arising out of or in connection with this Policy shall first be resolved through friendly negotiation; if negotiation fails, either party may bring a lawsuit before the competent people's court at the location of the Company.