Effective Date: March 2026

Version: v3.0

Welcome to the applications, smart fitness hardware, and related services provided by Merachfit (hereinafter referred to as “we,” “our,” or the “Company”). We deeply understand the importance of personal information to you and are committed to protecting your privacy and personal data security. This Privacy Policy is designed to explain how we collect, use, store, share, and protect your information when you use the Merachfit app, connect to our smart fitness equipment (such as treadmills, rowers, and exercise bikes), and access our related services, as well as the rights you are entitled to.

Please read and fully understand this Privacy Policy before starting to use our products and services. Once you begin using Merachfit, you indicate your consent to all the terms of this policy.

I. Information We Collect

To provide you with quality fitness guidance, device connectivity, and data synchronization services, we collect information that you actively provide during registration, usage, and interaction, as well as data generated through your use of our services:

Account and Registration InformationWhen you register/log in to your Merachfit account, we may collect your mobile phone number, email address, password set by you, and account information from third-party login authorizations (such as nicknames and profile pictures).
Personal Profile and Body DataTo customize personalized fitness plans and scientifically calculate calorie burn, you may voluntarily provide basic body characteristics such as your height, weight, age, and gender.
Health and Workout Data (Core Service Data)When you record workouts using the app or connect Merach smart hardware (such as heart rate monitors or smart exercise bikes) to the app, we collect your workout data (such as workout duration, distance, cadence, resistance, power) and health metrics (such as heart rate, real-time calorie burn, exercise routes, etc.).
Device and Log InformationTo ensure the stable operation of software and hardware, perform Bluetooth pairing, and maintain security risk control, we collect your device information (including device model, operating system version, unique device identifiers like IMEI/Android ID/IDFA, MAC address), network connection status, app crash logs, and operation logs.
Location Information (Required for Bluetooth and GPS Pairing)When you use Bluetooth to scan and connect to nearby Merach smart fitness equipment, the system may require access to your Bluetooth and location permissions (some operating systems mandate location permission to scan for Bluetooth Low Energy devices). If you use outdoor running or other features with route tracking, we will collect your geographic location data.

II. How We Use the Information Collected

We strictly comply with laws, regulations, and agreements with you, using the collected information for the following purposes:

Provision of Core Functions: To maintain a stable connection between the app and your Merach smart fitness equipment, synchronize workout data in real-time, and generate fitness reports and history curves.
Personalized Fitness Recommendations: To scientifically match courses and develop tailored weight-loss or training plans based on your body data and workout history.
Product Security and Optimization: For identity verification, customer service, security protection, fraud monitoring, and continuously improving product performance by analyzing app crash logs.
Notifications and Customer Support: To send you important service change notices, account security alerts, or to handle your inquiries and feedback when you contact customer service.

III. How We Share, Transfer, and Disclose Information

Strict Confidentiality Commitment: We will not sell, rent, or otherwise illegally trade your personal information to any third party.
Sharing Under Statutory Circumstances: We only share your information under legal, legitimate, and necessary circumstances:
- With Your Explicit Consent: Sharing data with third parties after obtaining your explicit authorization.
- Affiliated Companies and Service Providers: To support core functions (such as cloud storage services, SMS verification code delivery, and third-party payment gateways), we may share necessary information with technical service providers. These providers are only permitted to process data according to our instructions and are bound by confidentiality agreements.
- Legal Compliance Requirements: We may disclose your relevant information in accordance with applicable laws, legal procedures, litigation, or mandatory requirements from government authorities.

IV. Data Security and Protection Measures

Technical Security Safeguards: We employ security safeguards that meet industry standards (including SSL data transmission encryption, AES database encryption, and strict data access permission controls) to prevent your information from unauthorized access, public disclosure, use, modification, damage, or loss.
Data Storage Region and Retention: We store personal information collected and generated within the People’s Republic of China (or within the scope permitted by local laws in your country/region) on secure servers in accordance with laws and regulations. We retain your personal information only for the period necessary to achieve the purposes described in this policy, and will anonymize or delete personal information beyond the necessary period.

V. Your Rights

Depending on the data protection laws of your jurisdiction (such as the GDPR, CCPA, or local personal information protection laws), you have the following rights regarding your personal information:

Right of Access and Rectification: You have the right to log into the Merachfit app at any time to query, edit, and update your personal profile and physical health data.
Right to Erasure: You may request us to delete your personal information under the following circumstances:
- The processing purpose has been achieved, is impossible to achieve, or is no longer necessary to achieve the processing purpose;
- We cease providing products or services, or the retention period has expired.
Right to Withdraw Consent: You can withdraw your consent for us to collect specific information by turning off phone system permissions or in the app settings.
Account Deletion: You have the right to apply for the deletion of your Merachfit account through the built-in account cancellation feature in the app (or via customer service channels). Once your account is deleted, we will stop providing services to you and delete your relevant personal information in accordance with the law.

VI. Protection of Minors

Merachfit attaches great importance to the protection of minors’ personal information. Our products and services are primarily targeted at adults. If you are a minor under the age of 14 (or the age of majority specified by local laws), please use our services or provide information to us only after your parents or guardians have carefully read this Privacy Policy and obtained their consent.

VII. Updates to the Privacy Policy

We may update this Privacy Policy from time to time. When significant changes are made to the terms, we will notify you through pop-up notifications, push messages, or announcements within the app. The revised Privacy Policy will take effect and govern relevant behaviors only after obtaining your consent.

VIII. How to Contact Us

If you have any questions, comments, suggestions, or need to exercise your privacy rights regarding this Privacy Policy, you can contact us through the following channels:

Official Customer Service Email: meritchaoranzhi@merach.com / info.us@merachfit.com
Feedback Channel: Submit your questions via the “Me – Settings – Help & Feedback” page within the Merachfit app.

We will review and properly handle your requests as soon as possible.