Privacy Policy

This policy applies solely to GravaStar's earbuds products or app services. We respect and protect the personal privacy rights of all users using GravaStar’s online services. Our privacy policy details the ways we collect, use, disclose, transfer, and store your information, and we handle this information with utmost care and responsibility. This privacy policy may be updated periodically. By agreeing to the GravaStar network service agreement, you are deemed to have agreed to all the contents of this privacy policy. This policy constitutes an inseparable part of the GravaStar network service agreement. You are not required to provide the personal information we request, but in many cases, if you choose not to provide it, we may be unable to offer you our products or services or respond to any issues you may encounter.

1. How We Collect Information

We only collect information necessary to achieve product functionality based on principles of legality, propriety, and necessity. The primary sources of personal information collected by our company include: information you provide, information obtained while using our products or services, and information shared by third parties. We collect and use your personal information for the following product features. If you do not provide the relevant information or do not consent to our collection of such information, you may not be able to register as a user, enjoy certain services, or achieve optimal service results.

1. 1 Account Registration and Login

To provide account registration, login features, and services, we may require you to provide the following registration information:

• When registering an account, you may provide your phone number and login password.
• If you choose to log in using a third-party account, we may access your profile picture and nickname from your registered third-party account, such as QQ, WeChat, Weibo, or any other third-party account, depending on the specific product and services integrated.

The purpose of collecting this account information is to: (1) Better serve you through account management, allowing you to sync your relevant information through account login. (2) Facilitate account recovery if you lose your registered account or forget your password, by allowing the use of your provided mobile number, QQ, Weibo, or WeChat account for retrieval. (3) Conduct statistical analysis by anonymizing collected information to understand user habits better, thereby improving the product and enhancing service quality and user experience.

1.2 Information Submitted through Customer Service or Activities

When you contact our customer service or participate in our events, you may provide contact information to facilitate timely communication and event updates.

1.3 Device Information

Device information refers to information related to the device you use while utilizing our products or services. To ensure proper device compatibility and provide secure services, we may collect details such as your device name, model, device identifier, operating system, app version, language settings, resolution, and network ID (PLMN) when you use GravaStar products or services. This information aids in bug analysis, ensures the normal functioning of our products, enhances product experience, and secures your account. Unless otherwise stated in this policy, we will not share your device information with any third parties. However, we cannot guarantee that third parties will not obtain this information by other means and combine it with other data to identify you personally. Any resulting losses should be sought from those third parties. Device information is essential for service provision; if you prefer not to have your device information collected, this may impact our ability to provide services.

1.4 Location Information

Location information refers to data about your location collected when you enable location-based services on your device. This includes:

• When you enable location services and use related products or services, we may use GPS, WiFi, or other technology to collect and process your real-time location data. Location history and precise location data are considered sensitive personal information; apart from product or service requirements, we do not collect such sensitive personal information.
• Real-time geographic data provided by you or other users, including photos with geotags shared by you or others, showing your current or previous locations.

If you do not wish to be tracked, you can disable location features on your device or product/service, though this may affect the services we provide.

1.5 Log Information

To ensure service security, the system may automatically collect certain information via cookies or similar methods and store it in server logs, such as:

• Detailed usage information, including search terms, pages visited, and other data and content viewed while using our services.
• Device or software information, including software version numbers and browser types. We may collect information about your mobile applications and other software to ensure a secure environment and for service provision.
• Device events, including crash data, system activity, and other relevant details.

1.6 Other Information Collected with Your Consent

To offer you more convenient, high-quality, and personalized products or services, specific features may require you to provide certain sensitive personal information. If you choose not to provide this information, the feature may be unusable, but other services will remain unaffected. These features include:

• Camera-based features: You can enable camera access for video recording, photography, scanning codes, and face recognition.
• Photo album access: You can enable access to edit photos and videos.
• Microphone-based features: You can enable microphone access for recording and related functionality. We will collect your recordings to implement related features.
• Contacts-based features: Upon enabling access, we can gather your contact information for easier use without manual input.
• Calendar-based features: With access to read/write permissions, we can collect calendar data for reminders and notes.
• File access: You can enable file reading/uploading permissions for file editing.

You understand and agree that to enable these features, you may need to grant access to your device’s camera, album, microphone, contacts, and calendar. We will seek your consent through a popup or similar alert when collecting sensitive personal data. If you provide this sensitive information, it signifies your consent for processing as described in this policy.

1.7 Information Shared by Third Parties

This includes: (1) Information about you shared by other users. (2) Information generated or shared when using partner services, such as Weibo or QQ accounts, for login to our software products or services. With your authorization, we will verify your identity and link your account to our products or services.

2. How We Use Collected Information

We strictly adhere to legal regulations and agreements with users, using the collected information for the following purposes. Should we intend to use your information beyond these purposes, we will provide additional notice and seek your consent.

To fulfill your personalized needs, such as language and location settings, and provide customized help services.

To deliver our services, including product development and service optimization. For example, if our system encounters a malfunction, we may record and analyze the related information to enhance our services.

According to applicable laws, we may collect and use relevant information without your authorization in the following scenarios:

• When necessary for national or public security, significant public interest, or public health.
• For criminal investigation, prosecution, trial, or execution of judgments.
• When protecting your or others' significant legal interests, such as life and property, where consent is difficult to obtain. To maintain the safe and stable operation of our products and services, including detecting and addressing issues.When necessary for legitimate news coverage.When required for statistical or academic research by institutions in the public interest, provided personal information is de-identified in research results.Any other circumstances as stipulated by law.
• Other uses with your consent. To ensure service security and enhance our understanding of how our application performs, we may record usage information, such as app frequency, crash data, general usage, performance metrics, and the app source. We will not combine the information stored in analytics software with the personally identifiable information you provide in the application.

3. How We Share, Transfer, and Disclose Your Personal Information

We fully acknowledge the legal obligations regarding the consequences of unlawful sharing, transferring, or disclosing personal information. For all sharing, transferring, and disclosure of your personal information, we will strictly adhere to the following terms:

(1) Sharing

Respect for user privacy is a core principle for us. We will not share your personal information with any company, organization, or individual except under the following circumstances:

• Sharing with explicit consent: With your consent, we may share your personal information with other parties.
• We may share your personal information according to requests from judicial or administrative authorities.
• Sharing with affiliates: We may share your personal information with affiliated companies. We only share essential information and adhere to the purposes outlined in this privacy policy. If affiliates change their processing purpose, they will seek your further consent.
• Sharing with authorized partners: Some services require collaboration with authorized partners. We may share specific personal information to improve customer service and user experience. We only share necessary information for legal, legitimate, specific, and explicit purposes. For example, when purchasing our products online, we must share your information with logistics companies. Our partners are not permitted to use shared personal information for any other purpose.
• We sign strict confidentiality agreements with companies, organizations, and individuals with whom we share personal information, requiring them to handle information per our instructions, this privacy policy, and applicable confidentiality and security measures.

(2) Transfer

We will not transfer your personal information to any company, organization, or individual except in the following cases:

• Transfer with explicit consent: With your consent, we may transfer your personal information to others.
• In the case of mergers, acquisitions, or bankruptcy, involving the transfer of personal information, we will request that the new entity handling your information continues to comply with this privacy policy; otherwise, we will require this entity to seek new authorization from you.

(3) Public Disclosure

We will only publicly disclose your personal information in the following circumstances:

• Disclosure with your explicit consent, in the manner you specify.
• Disclosure of your personal information is required by law, regulation, or mandatory administrative or judicial requests. When such disclosure is requested, we will seek appropriate legal documents, such as subpoenas or investigation letters, as required by applicable laws.

4. How We Protect Your Personal Information

4.1 Security Measures: We use industry-standard security measures to protect the personal information you provide, safeguarding it against unauthorized access, public disclosure, misuse, modification, damage, or loss. We take all reasonable measures to protect your personal information. For instance, data exchanged between your browser and our services (such as credit card details) is protected by SSL encryption; we also support HTTPS secure browsing on our website. Encryption technologies help us keep data confidential, trusted security mechanisms protect against malicious attacks, access controls ensure only authorized personnel can access personal data, and our staff undergo security and privacy training to enhance their awareness of data protection.

4.2 Data Minimization: We take all reasonable steps to ensure we do not collect excessive personal information. Unless otherwise permitted, we will retain your personal information for no more than 36 months after account deletion or cancellation. After this period, we will anonymize or destroy your personal information.

4.3 Internet Security Limitations: The internet is not an entirely secure environment, and communication via email, instant messaging, and other user-to-user interactions is not encrypted. We strongly recommend against sending personal information through these channels. Please use a complex password to help keep your account secure.

4.4 Incident Response: In the event of a personal information security incident, we will notify you in a timely manner as per Article 42, Clause 2 of the Cybersecurity Law. This notification will include the incident's basic details, possible impact, measures taken or to be taken, suggestions for risk prevention and mitigation, and remedies available to you. We will inform you by email, letter, telephone, or push notification, and if individual notifications are challenging, we will publish an announcement in a reasonable, effective manner. Additionally, we will report the incident response to relevant regulatory authorities as required.

5. Managing Your Personal Information

5.1 Access, Modification, and Deletion: While using our services, you may access, modify, and delete your registration information and other personal details. Follow the instructions provided in notifications or contact us for assistance. The scope and methods of managing your personal information depend on the specific services you use.

For instance, if you wish to stop sharing location data while using location-based services, you can turn off location sharing via mobile device settings or through service provider settings.

5.2 Scope of Collection and Use: We collect and use your information strictly to achieve the purposes and functions outlined in this policy.

If you find that we are violating laws, regulations, or agreed terms in collecting or using your personal information, you may request its deletion. You may also request correction if you find inaccuracies in your stored personal information. For security reasons, we may ask you to verify your identity before allowing access, modification, or deletion.

5.3 Exceptions in Legal Circumstances: Certain situations legally exempt us from responding to requests for access, modification, or deletion, including:

• When directly related to national security or defense.
• When directly related to public safety, public health, or significant public interest.
• When related to criminal investigation, prosecution, trial, or enforcement of judgment.
• When there is sufficient evidence of subjective malice or abuse of rights.
• When responding may cause serious damage to the legitimate rights and interests of you, others, or organizations.
• When involving trade secrets.

1. Children’s Personal Information

Our products, websites, and services are mainly directed at adults. Minors may not create accounts without parental or guardian consent. When collecting personal information from minors with parental consent, we will only use or disclose it as required by judicial or administrative authorities, with explicit consent from a parent or guardian, or as necessary to protect the minor.

We consider anyone under the age of 16 to be a minor, though local definitions of minors may vary.

If we discover that we have collected personal information from a minor without verified parental consent, we will promptly delete the relevant data.