PrivacyPolicy.

The DofMind website and apps are owned and operated by 深圳市赛迹智能体育科技有限公司 (its Chinese registered name), referred to as “we”, “us” or “our”. This policy applies to the DofMind iPhone, iPad, Mac and Android apps, their account and training cloud sync services, and this privacy policy website. Our privacy contact is huangsport@yeah.net.

Features may vary by platform, version and sensor. We process information for a feature when you use that feature. This policy does not mean that you must provide every item listed below or that every permission will be requested.

DofMind provides training records and performance analysis. It is not intended for medical diagnosis, treatment or emergency assistance. Please do not put unrelated identity documents, medical records or financial account details in athlete notes or feedback.

We process the following information from your entries, connected sensors, files you choose to export, and necessary records generated by the app and servers.

Before submitting registration, you actively confirm that you have read the privacy policy. This confirmation is not selected by default. We record the version and time you actually confirm and do not invent past consent for existing accounts. If an existing account lacks a necessary notice or confirmation record, we provide it before the related cloud processing begins. The same valid record does not require confirmation at every sign-in. Confirming this policy does not establish your authority to enter another athlete’s information.

Sensitive information: Body measurements, performance and associated records may reveal a person's physical condition. Provide them only when needed for the relevant training features. Before processing another person's information, obtain their informed authorization, including separate consent or guardian consent where required by law. Declining optional information does not prevent you from reading this policy.

We do not sell personal information, use training or body data for targeted advertising, build cross-app advertising profiles, or provide training records to advertisers. Current training features do not integrate with Apple Health / HealthKit or read data from the Health app.

Bluetooth

Used to scan for, connect to and read the training sensor you select. If denied or disabled, sensor measurement, calibration and live feedback are unavailable. Viewing saved data does not require Bluetooth permission.

Network access

Used for registration, verification codes, sign-in and training cloud sync. Being offline may prevent account operations and sync. Locally saved data and cloud sync status must be checked separately.

File export & sharing

Accesses selected files or destinations when you start an export or share action. Cancelling file selection cancels that operation. File access on Mac is subject to system permissions and the app sandbox.

Audio playback

Training sounds or spoken feedback announce prompts and metrics. They do not require recording your voice; playing audio does not mean using your microphone.

The app requests relevant permissions only when you initiate sensor discovery or connection. You can change access under Settings → Privacy & Security → Bluetooth on iPhone / iPad, System Settings → Privacy & Security → Bluetooth on Mac, or app permission settings on Android. After a refusal, the app offers settings guidance rather than repeatedly requesting access. Labels may differ between operating system versions.

Current core training features do not require contacts, camera, microphone recording or advertising tracking permissions. Sensor connections on iPhone, iPad and Mac do not require location permission. The current Android runtime component requires precise and approximate location permission to discover Bluetooth devices, including on Android 12 and later. These permissions enable that component to scan for nearby training sensors. The app does not read your geographic coordinates for training or build location histories. You may deny Bluetooth or related scan permissions and still read this policy, manage your account and view saved records.

On your device: The app stores sign-in state, interface preferences, athlete profiles, training drafts, complete records, curves and related caches. Training data is separated by account. Signing out does not erase local data.

In the cloud: After sign-in and the relevant notice and necessary confirmation, athlete profiles, personal exercises and eligible completed sessions sync over the network with cloud data belonging to the current account. Sync includes training content and related raw events, not just summary statistics. Records may remain only on your device if the network is unavailable or sync fails; sync can resume when connectivity returns. Changing pages does not automatically cancel a sync already in progress.

Deleting the app, clearing browser data or changing devices may cause the loss of records that have neither synced nor been exported. First save any training you need using the existing export feature.

Cloud service data uses this app's dedicated uniCloud Alipay Cloud service space. Its nodes in mainland China host account and training cloud data. Using the same device does not automatically expose your records to other accounts. We do not generate public access links for training files. Authorized operations personnel may access only the information necessary for maintenance, troubleshooting or responding to requests.

Users outside mainland China: If you use the cloud services from another country or region, account and synced training data will be transferred to and stored at the above service nodes in mainland China. Email and TestFlight data may also be processed in other countries or regions by the providers listed below. Data protection rules may differ between regions. We will handle transfers under applicable law and apply required safeguards. This policy does not limit the rights you have under laws applicable where you live.

We disclose only information necessary for the services described below. Entrusted processing must be limited to agreed purposes and protected in accordance with this policy and applicable requirements. Independently provided third-party services are also governed by their own privacy rules.

We do not automatically send your account or training history to sensor manufacturers. A sensor connection exchanges operating instructions, settings and necessary measurements. When you export and share records, you choose the recipient. Check for other athletes' information before sharing.

Except with your explicit authorization, to fulfil legal obligations or to handle security incidents lawfully, we do not share personal information with other parties or make it public. If an operator change requires a transfer of information, we will identify the recipient and its contact details and require it to continue the applicable protections. For new cross-border disclosures, we will follow applicable notice, consent and other required procedures.

• Account, athlete and training information: Retained while you keep your account and need history, sync and analysis. Following a completed deletion or account closure request, we handle it as described below. Archiving an athlete organizes the list; it does not delete the profile or existing training.
• Verification codes: Current email verification codes are valid for 5 minutes and cannot be used after use or expiry. Verification digests and sending-rate counts used to prevent abuse are kept only until their respective validity windows end, and are then removed by the hourly cleanup task.
• Local caches and files: Retained until you delete them in the relevant feature, clear app data or the system removes them. Uninstalling does not necessarily delete cloud copies. Exported files, system backups and copies on other devices must be managed separately.
• Error, sign-in and request records: Retained only as necessary for security, troubleshooting, disputes or legal obligations. During account deletion, linked sign-in security logs lose the account ID, email address, mobile number, username, device details and user-agent information. Only action type, success or failure, time, IP address and app ID remain. These necessary logs are kept for six months from creation and deleted by a scheduled task when due. They contain no training content. Other records are deleted or anonymized when their necessary period or purpose ends.
• Account deletion receipt: To check results or retry failed requests, the deletion flow keeps only a request ID, random internal account ID, processing status and times, and a verification digest of the random receipt. These minimal receipt details are deleted automatically after 30 days. They do not contain email addresses, athlete profiles or training content.
• Deleted training: After the cloud removes a session and its data blocks, minimal markers such as account ownership, record ID and deletion time may remain to prevent old devices or retries from restoring deleted records. These markers do not retain training curves or content.

Account deletion removes this app’s account, associated profiles, training content and verification data. We do not retain complete training content indefinitely as security logs. Cloud and mail providers may independently retain necessary infrastructure security or delivery logs under applicable law. For example, China’s Cybersecurity Law requires applicable network logs to be kept for at least six months; that does not authorize retention of all training content. If specific information must be kept by law, or technical reasons temporarily prevent immediate deletion, we explain the basis and scope, restrict processing to necessary storage and security, stop unrelated use and complete deletion when possible. Backups are not a justification for indefinite retention of identifiable training content.

We use encrypted network transport, password verification values, account authentication, access controls and data integrity checks. Please protect your device unlock method, email and exported files. No system can guarantee absolute security. If a personal information security incident occurs, we will take remedial measures and provide required notifications under applicable law.

View, correct & obtain a copy

You can view information in athlete management, history and analysis, change editable fields in athlete profiles, and obtain copies using the relevant record export features. Contact us if you cannot find the information, your version does not offer a suitable control, or you need to correct account details.

Delete training & athlete information

“Delete this workout” in history deletes the session's local and cloud content. Cloud deletion that requires a connection must be confirmed by the app's actual result. A failed operation does not mean deletion succeeded. Archiving an athlete is not deletion. To permanently delete athlete profiles and associated information, send a deletion request. To avoid mistakes, we will first confirm the account, athletes and records involved.

Delete your account

After signing in, open Account → Account security → Delete account in the app to review the current account, deletion scope and irreversible effects. You can cancel before submitting. First save any records you need using the existing training export feature. Verify your identity with your current password or a code sent to your linked email. You do not need identity documents or customer service approval. Our privacy contact email does not replace this in-app deletion process.

The server determines the account from the signed-in session, first blocks further reads and sync writes, and then deletes the account, sign-in credentials, device associations, athlete profiles, personal exercises, training records including curves and raw-event data blocks, and related verification data. Other accounts are outside the deletion scope. Use the app’s actual status to confirm the outcome: submitted or processing does not mean completed. Failure, timeout or a network interruption does not indicate success; you can check the result or retry. We do not promise a fixed processing time. Completion is confirmed only after deletion actually finishes.

After completion, the account cannot sign in again. Old sessions on other devices and queued sync jobs cannot read or upload its cloud data. The current device clears local profiles, records and caches belonging to the deleted account without clearing other accounts. Offline copies on other devices, system backups and files already exported or shared must be managed separately; cloud deletion does not remove them from third-party storage or recipients’ devices. Minimal processing receipts and any legally required retention are described in section 6.

Withdraw permission & raise concerns

You can disable system permissions, stop sensor collection, stop providing optional information, or request data deletion or account closure. Withdrawal does not affect earlier processing carried out on a lawful basis. Disabling Bluetooth stops the related collection but does not automatically delete saved records; signing out is not a deletion request.

Subject to applicable law, you may also ask us to explain processing rules, restrict or object to particular processing, and challenge the outcome of a request. We verify only the identity information necessary to handle a request and respond within applicable legal time limits. If we cannot fully comply, we will explain the basis and available options. You may lodge a complaint with the competent data protection authority as permitted by law.

DofMind is intended for sports training and is not specifically designed for children. Minors should read this policy and use the service with a parent or guardian's guidance. Coaches, parents and other account users must ensure they are authorized to provide and manage an athlete's information. Holding an account alone does not establish that authorization.

Before processing information about a child under 14, obtain consent from their parent or other legal guardian and apply the special protections required by applicable law. Do not enter children's information without lawful authorization. Guardians may contact us to access, correct or request deletion of that information. If we discover collection without appropriate consent, we will verify and address it promptly.

You can read this page without registering or signing in. It has no training data upload form, advertising, visitor analytics or marketing cookies, and loads no third-party fonts, analytics scripts or embedded content. Images and styles are served from this website.

To deliver pages and protect the service, the website server processes necessary network information such as IP address, access time, requested path, browser type and response status. This policy website is separate from the app's training cloud database. Visiting it does not read your app sign-in state, athlete profiles or training library.

External service and privacy links take you to the respective provider's website. Email links open your device's mail tool. You decide whether to send a message and what to include.

We will update this page and its date when features, providers or information processing practices change. For changes that materially affect purposes, information types, recipients or your rights, we will notify you through the app or another appropriate channel. Where renewed consent is required by law, we will obtain it before the related processing.