Privacy Policy

Update time:March 2023

Dear users:

HAYLOU terminal (referred as "HAYLOU", "We" and "Our" hereafter) knows the importance of privacy to you and will do our best to protect your privacy. Please read, understand and agree to this "Privacy Policy" (referred as the "Policy" hereafter) before submitting personal or privacy data to our product Haylou Sound.

The purpose of this policy is to help you understand the following:

1. Types of personal data we collect

2. How will we use your personal data

3. How we retain your personal data 

4. How will we share your personal data

5. Our third-party providers and their services

6. How will we protect your personal data

7. Your right to process your personal information

8. How we handle children's personal data

9. How your personal data is transferred globally

10. How to update this policy

11. How to contact us

Please note that this policy only applies to consumer electronics products of HAYLOU, including data cards, computer applications, tools, software, websites and services that display or mention this policy.

This policy explains how HAYLOU handles your personal and private data, and affirms HAYLOU's commitment to protecting privacy. We recommend that you read this policy to fully understand the privacy policy of HAYLOU specific products or services.

1. Types of personal data we collect

1.1 The personal data we collect

Account service:

When using the account registration and login functions, the APP will capture the user's email account/mobile phone number, password and registration verification code and country code.

Basic Information:

When you use the app after successful registration, in order to maintain your basic information and improve your service experience, you will be required to choose to fill in and/or improve the information necessary for the service, which may include your email address, mobile phone number, username, avatar, gender, age, etc. If you do not provide this information, it does not affect your access to the basic business functions of the app.

Activation of paired devices:

When pairing a device, the App obtains device information associated with the user account. The main information collected includes: the unique identification of the device (SN code and MAC address), the unique identifier generated when registering the account, the user ID, and the location information. Among them, the Android system mechanism reason, must obtain the location information and Bluetooth permission to complete the Bluetooth device pairing.

Functions and services for connectable devices:

Device information acquisition and display: By acquiring device information, the information is displayed on the mobile app . The main information includes: SN code, Bluetooth MAC address, device name, device type, device model and power level.

Check for device firmware version update updates: Health will regularly upload the unique identifier of the bound device to check if the current device has a version update, the main information includes: headset device unique identifier SN code, MAC address.

Experience feedback:

User-initiated submission of suggestion type, email address/mobile phone number, device information, mobile phone OS version and phone make and model, user-initiated content.

1.2 Device permission call

In providing services, Haylou Sound may request certain device permissions from you. The following are the permissions we may call and their corresponding function descriptions and purposes.

① Bluetooth permission: In order to connect and bind your headset device.

② Networking permission: In order to judge the network environment you are in, and use some functions that require networking.

③ Location permissions: In order to provide location-based services, such as the recording and display of motion data and motion trajectories.

④ Storage permissions: In order to store local data, provide application service functions and meet content storage requirements.

⑤ Telephone permissions: In order to access your device identification code, obtain mobile phone-related attribute information, identify device and function adaptation; and provide telephone communication functions.

⑥ Camera permission: When you choose to use the avatar, you need to call the camera permission to identify the image.

⑦ Read Call History Permission: We need to get the Read Call Status permission for the music player (e.g. white noise playback) to listen to the incoming call status of the phone. If there is music playing before the incoming call, it will switch to music pause and then resume music playback after the call is over. (Android, iOS versions)

⑧ Make and connect calls permission: in order to control the phone hang-up from the headset device when using the call alert function. (Android)

You can set the above permissions by going into System Settings - Apps & Permissions - Manage Permissions.

2. How will we use your personal data

2.1 Account login:

In order to manage Haylou Sound data, we use the account service to register and log in to your account. Before using your account, please ensure that you read about the collection, use and sharing of personal information for your account. Once you have logged in, we will need your account information (nickname and avatar) and basic personal details (gender and date of birth).

2.2 Device management

2.2.1 In order to manage your headset device we need to collect your device identifier (including MAC address), device hardware information, device usage information, basic system information and network information. The purpose of collecting this information is to establish Bluetooth connections, manage device configuration, complete software upgrades, display data sources, and count device activations.

2.2.2 In order to support your use of the device, you can set up the device, including features such as sound effects, key settings, sleep mode and so on. Your settings are only stored on the device and are not uploaded to the cloud.

2.3 Data management

2.3.1 In order to manage your personal data and improve the accuracy of sports data, we need to collect your personal data, including gender, date of birth, height, weight, hobbies, etc. You can go to "My"> "Personal Information" to fill in or modify. Failure to provide such information will affect the accuracy of exercise data calculations, but it will not affect your local use of personal data management functions.

3. How we retain your personal data

3.1 The retention period of the personal data we collect is the minimum amount of time required to achieve the purposes of collection stated in this Privacy Notice, unless otherwise required by laws or regulations.

3.2 You can find below our specific data retention and deletion policy via the table.

3.3 If we stop operating some or all of our products or services for special reasons, we will promptly inform you and stop the collection and processing of personal data by the related products or services, and we will delete or anonymize the personal data we hold that is related to the said products or services, unless otherwise required by laws and regulations.

3.4 We will provide users with a certain amount of free cloud storage space. In order to make reasonable use of the cloud storage resources, if the User has not accessed or used the Service for twelve (12) consecutive months, we will delete all of the User's content from Haylou's servers and the User will be responsible for any resulting losses (including but not limited to loss of data, files, etc.).

4. How will wedisclose your personal data

We may, from time to time, share and transfer some personal data with our associated companies and the strategic partners that work with us to provide products and services, in order to provide the products or services you request.

1. Affiliates: In order to provide you with services based on your HAYLOU account, we may share your personal data with our affiliates. We will only share personal data that is necessary. If we or our affiliates change the use and processing purpose of personal data, we will ask for your authorization again.

2. Sharing with Authorized Partners: Some of our services will be provided by our authorized partners solely for the purposes stated in this Privacy Policy. We may share some of your personal data with our partners to provide services and to improve user experience. To be specific：

a) We may need to share your personal data with our providers(including but not limited to cloud service providers, SMS or other technical service providers, etc.) in order to perform the necessary product or service functions.

b) In some cases, we will entrust a third party to process your personal data on our behalf. For example, companies that send text messages or emails and provide technical support on behalf of us. These companies can use your personal data solely to provide services to you on our behalf.

3. Purchasers and third parties in connection with a business transaction: When we are in a process of a merger, acquisition or bankruptcy liquidation, and if such process requires a transfer of your personal data, we will require the new company or organization that hold your personal data to continue to be bound by this Privacy Policy, otherwise we will require this company or organization to ask your consent again. If it does not involve the transfer of personal data, we will fully inform you and delete or anonymize all personal data under our control.

4. Law enforcement, regulators and other parties for legal reasons: We may also disclose your personal data with third parties as required by law or if we reasonably believe that such action is necessary (a) to comply with a subpoena or other legal proceedings, legal actions or government agencies’ requests, (b) when we believe in good faith that a disclosure is necessary to comply with the law and the reasonable requests of law enforcement, (c) to protect and exercise our legal claims, rights and property, (d) to protect your rights, property or personal safety or the one of others, (e) to investigate fraud and (f) to protect the security or integrity of our services.

5. Otherwise with your consent: After obtaining your explicit consent we disclose the personal data you have authorized with other certain third parties.

We will only share or transfer your personal data for lawful, legitimate, necessary, specific, and express purposes, and will only share personal data that is necessary for the service. Meanwhile, we will require the above-mentioned in scenarios 1 to 3 third parties to take appropriate confidentiality and security measures to process personal data through agreements or other appropriate means.

5.Our third-party providers and their services

We have no control over the privacy and data security policies of third-parties, and third-parties are not bound by this policy. Please refer to the privacy policies of these third-parties prior to submitting your personal information to a third-party.

Our cooperation with third-party software development kit (SDK) providers

In order to enable functionality, incorporation of some functional SDKs may be required. In such an event, please be aware that we will neither collect your personal information nor request any sensitive permissions.

Name: Bugly SDK

Purpose of use: Uploading app crash reports and device logs for developers to analyze the issues and causes

Types of personal data collected: app crash reports and ANR logs

SDK third-party links:

https://privacy.qq.com/document/preview/fc748b3d96224fdb825ea79e132c1a56

Name: Umeng Statistics SDK

Purpose of use: Statistical analysis

Collecting personal data: Our product integrates with the Umeng+ SDK, which needs to collect your device Mac address, unique device identifier (IMEI/android ID/IDFA/OPENUDID/GUID/SIM card IMSI information/ICCID) in order to provide statistical analysis services and to provide basic anti-cheating capabilities by calibrating the accuracy of report data through geolocation.

Device information (IMEI/MAC/Android ID/IDFA/OpenUDID/GUID/SIM card IMSI/ICCID/geolocation etc.)

Umeng privacy policy link: https://www.umeng.com/page/policy

6.How will we protect your personal data

We value the security of personal data. We adopt industry standard practices to protect your personal data and prevent unauthorized access, disclosure, use, modification, damage or loss of data. We will take all reasonable and feasible measures to protect your personal data. For example, we will use encryption technology to ensure the confidentiality of data; we will use trusted protection mechanisms to prevent malicious attacks on data; we will deploy access control mechanisms to ensure that only authorized personnel can access personal data; and we will conduct security and privacy protection training courses to strengthen employees’ awareness of the importance of protecting personal data.

We will take all reasonable and feasible measures to ensure that irrelevant personal data is not collected. We will only retain your personal data for the period required to achieve the purpose stated in the policy, unless it is necessary to extend the retention period or is permitted by law. We will do our best to protect your personal data, but please note that no security measures can be impeccable.

7.Your right to process your personal information

According to our terms and conditions, you can manage your personal data, such as your account information, at any time. You should ensure that all personal data submitted is accurate. We will try our best to maintain the accuracy and completeness of personal data and update these data in a timely manner.

Access to personal data:

You can directly query or access your personal data on our product or service interface, such as you can log into your account through the product page at any time to access your account related personal data. To be specific：

Through "Me"> "Personal Information" you can access personal data related to your profile.

Through “Device” you can access information about the devices connected with the Haylou Sound.

You have the right to access your personal data, except for certain legal exceptions. If the privacy and information laws of certain jurisdictions are different, we will comply with those laws. If you want to exercise data access rights, please give us feedback via email. To ensure safety, you may need to provide a written request.

Deletion and Amendment of Personal Data: You also have the right to delete or amend any personal information we hold about you. You can delete all your personal data by logging out of your account (Me > Settings > Account and Security > Log Out) or by contacting us at the email address disclosed in our Privacy Policy. We will delete or modify such information upon your request. We will refuse to process requests if we have reasonable grounds to believe that such requests are deceptive, unenforceable, or if access rights are not mandated by local law.

Deletion of personal data: You can log out of your account (Me>Settings>Account and Security>Delete Account) or feedback to us via your email address. For security reasons, you may be required to provide a written request.

Right to close your account: You have the right to close your account, which can be done via accessing “Me>Settings>Account and Security.” After logging out, your personal information will be deleted or anonymized no later than 15 days from the date of your deletion request.

Right to withdraw consent: You have the right to withdraw your consent to the use of your personal information. For each business function that requires personal information to complete, you may change the scope of the personal information you authorize us to collect or withdraw your authorization by deleting the information, turning off the device permission settings, changing the relevant product features or function settings page, or canceling your account. 

Right to Complaint: You have the right to make a complaint by contacting us at the email address disclosed in this Privacy Policy. We will respond within 15 working days of receiving your complaint. If you are not satisfied with our response, especially if our personal information processing behavior has damaged your legitimate rights and interests, you can also file a complaint or report to the Internet, public security, industry and commerce and other regulatory authorities, or file a lawsuit with a court of competent jurisdiction .

8. How we handle children's personal data

Our products and services are mainly for adults. Without the consent of their parents or guardians, children may not create their own user accounts. For the collection of children's personal data with parental consent, we will only use or disclose this data when permitted by law, the parent or guardian's explicit consent, or is necessary to protect the child. Although local laws and customs define children differently, we treat anyone under 13 years old as a child.

If we find that we have collected children’s personal data without first obtaining verifiable parental consent, we will try to delete the relevant data as soon as possible.

9. How your personal data is transferred globally

We provide products and services through resources and servers all over the world. This means that your personal data may be transferred to other jurisdictions outside the country/region where you use the product or service, or be accessed from these jurisdictions. Such jurisdictions may have different data protection laws or even no relevant laws. In such cases, we will ensure that your data is adequately and equally protected as required by all applicable laws and regulations.

10. How to update this policy

We reserve the right to update or modify this policy from time to time. We will send you a notification of changes through version updates.

11. How to contact us

If you have any questions, comments or suggestions, please send them to us by email in the HAYLOU user feedback module.

Important note: In view of local laws and language differences, the local language version of HAYLOU "Privacy Policy" may be different from this version. If there are any discrepancies, please refer to the local language version.

Last updated: March 2023.

Copyright HAYLOU terminal reserves all rights.

Developer’s Name: Shenzhen Yingsheng Technology Co., Ltd.

Developer’s Address: 202, Building 3, Ping Shan MinQi Technology Park, No. 65 Lishan Road, Ping Shan Community, Taoyuan Street, Nanshan District, Shenzhen

Customer Service Phone: 400-8555-083