Privacy Policy

中文

Last updated: October 13, 2026　Effective: October 13, 2026

RingBoom reads your activity data from Apple Health so you can compete with friends and groups on your rings and workouts. This policy explains what information we collect, how we use it, where it is stored and for how long, and how you can manage it.

This English version is provided for your convenience. If it differs from the Chinese version, the Chinese version prevails.

1. Information We Collect

1.1 Account information

• Phone number: used for sign-in and password recovery. Our server stores only a hashed digest of your phone number, never the number itself. When we send you a verification code, your phone number is passed to Alibaba Cloud's phone number verification service (see Section 6).
• Password: stored only as a salted hash. We cannot see your password.
• Nickname, profile photo, RingBoom ID, sign-up time, last sign-in time and app version.
• Profile photo: chosen with the system photo picker, which does not require photo library access. Before upload it is compressed on your phone to a 512-pixel JPEG, and camera and location metadata are removed.

1.2 Health and fitness data (sensitive personal information)

Health data is sensitive personal information. RingBoom reads it only after you grant access in the system prompt. You can turn off any item at any time in iPhone Settings → Health → Data Access & Devices → RingBoom. RingBoom never writes any data to Apple Health.

Data we read

• When you first grant access: activity summary (rings), workouts, steps, walking and running distance, cycling distance, active energy, resting energy and heart rate.
• Only if you open the workout heart rate or Body sections and grant access again: workout effort, resting heart rate, VO₂ max, date of birth, heart rate variability, sleep (duration, sleep stages, bedtime and wake time), respiratory rate during sleep, blood oxygen, wrist temperature, walking speed and walking steadiness.

Data uploaded to our server

• Daily summary: date, time zone, ring values and goals, steps, walking and running distance, number of workouts and workout time.
• Workouts: start and end time, duration, workout type, distance, energy, average heart rate, pace, and the name of the recording source (usually the device name, such as "Alex's Apple Watch", which only you can see).
• Workout heart rate details: maximum heart rate, a 60-point heart rate curve (each point is an average over a segment), time spent in each of the 5 heart rate zones, workout effort, and a workout analysis summary (such as sets, rest and recovery).
• Readiness score: one score from 0 to 100 per day, with its date. The score is calculated on your phone from your sleep, heart rate variability, resting heart rate and the previous day's training; our server stores only the score, not your sleep, heart rate variability or any other raw data.
• Your phone's current time zone (for example, America/Los_Angeles): sent each time the app connects to our server. We keep the most recent one to work out your local date for today, leaderboards, duels, group goals and daily awards, and to time reminders and notifications. Friends see the times of your stories and workouts in your local time.

Data used only on your phone and never uploaded: resting heart rate, VO₂ max and date of birth (used on your phone to estimate your maximum heart rate); heart rate variability, sleep, respiratory rate, blood oxygen, wrist temperature, walking speed and walking steadiness (used on your phone to calculate Readiness and show the Body page; only one Readiness score per day is uploaded); and the individual raw heart rate readings recorded during a workout (used on your phone to calculate the heart rate curve, zones and workout analysis above; only the results are uploaded).

Data we do not read or upload: GPS routes, weight, height and medical records.

1.3 Social information

Friend connections, invite code usage, groups you create or join (name, photo and members), group goals, duels and scores, nudges, emoji reactions (preset emojis only), story read status, blocks, and reports you submit (with an optional note of up to 200 characters).

1.4 Push notification information

Your push device token (APNs device token), push environment, system language, app version and notification settings. We keep records of the notifications we send, including their content, to avoid duplicates and to troubleshoot problems. Notification content may include friends' nicknames, workout names, calories and ranking gaps.

1.5 Settings

Your preferences, including visibility, leaderboard participation, display options and notification settings.

1.6 Network information

• Your IP address when you connect to our server. We use an offline IP database on our server to infer your approximate region (province or state, and city) and network carrier, so we can troubleshoot problems like "users in a certain region or on a certain carrier can't connect" and keep the service secure. No third-party service is called for this.
• For each account: the most recent IP address, the server address used and the app version; whether the account was active in each hour of the day; and the last few failed requests (endpoint and error code only).
• Server logs record IP addresses, access times, requested endpoints and part of your account number, for troubleshooting and security auditing.

1.7 Crash and performance diagnostics

We receive crash, hang and launch-time diagnostic reports through Apple MetricKit. They include call stacks, performance metrics, app version, system version and device model. Reports are linked to your account so we can locate specific problems; they contain no health values and no phone number. Whether these reports are shared with developers is controlled by your iPhone setting Settings → Privacy & Security → Analytics & Improvements → Share With App Developers.

2. How We Use Your Information

• To provide the core features: showing your rings and workouts, friend and group leaderboards, duels, daily and weekly reports, medals, and workout heart rate insights.
• To show your data to friends and group members according to your privacy settings.
• To send the notifications you have turned on.
• To keep your account secure, troubleshoot connection problems and crashes, and improve stability.

We do not use your information for advertising, we do not build user profiles, and we do not sell any data.

3. Who Can See Your Data

By default, your friends and members of your groups can see your Power (overall score), rings, steps, workouts and workout heart rate details (heart rate curve, heart rate zones, maximum heart rate and workout effort). Your friends can also see which of three levels your Readiness is in today — Good, Fair or Needs rest — but not the score or any sleep, heart rate variability or other values; Readiness never appears on leaderboards, in the feed or in notifications. Only you can see your phone number and the device name of your workout source.

You can change this in Me → Settings → Privacy & data. The following options are all on by default:

• Visibility: friends, or only me;
• Whether to appear on friend leaderboards and group leaderboards, or leave all leaderboards at once;
• Whether to show your Power, Move, Exercise and Stand rings, steps and workouts;
• Whether to share workout heart rate details;
• Whether friends can see your Readiness (three levels only);
• Whether to show exact values (when off, friends see rounded values; you always see your full data).

Our server applies your settings when it returns leaderboards, feeds and workout details.

4. Data on Your Phone

• Camera: used only when you open Scan QR code, to recognize RingBoom friend or group invite QR codes on your phone. No photos are taken, saved or uploaded. Without camera access you can still add friends by RingBoom ID or join groups with an invite code.
• Photo library: RingBoom writes QR codes, reports, duel cards or share cards to your photo library only when you choose to save them. RingBoom does not read your photo library.
• Offline cache: the most recently loaded Today, leaderboards, groups, feed, duels, group goals, stories, daily awards, highlights, daily and weekly reports, profile and medals are saved so they can be shown when you are offline or have just opened the app. The cache is separated by account, stays on your phone and is excluded from iCloud backup.
• Widgets: your phone keeps a widget snapshot containing your rings and goals, Power, rank and gap, the nicknames and avatar thumbnails of the top three, update time, theme and language. Widgets do not connect to the internet or read Apple Health, and the snapshot is excluded from backup.
• When you sign out or delete your account, that account's offline cache and widget snapshot are cleared.

5. Where We Store Data and For How Long

Location: our servers are hosted by Alibaba Cloud in Hong Kong, China, and database and profile photo backups are stored in Alibaba Cloud Object Storage (Hong Kong, China). If you use RingBoom outside Hong Kong, including in mainland China, your personal information is transferred to Hong Kong for storage and processing.

Retention:

• Account, social, health and workout data: kept while you use RingBoom, until you delete it or your account (see Section 7).
• Notification records: generally 90 days. Records for medal unlocks and accepted friend requests are kept long-term to avoid duplicate notifications.
• Crash and performance diagnostic reports: 90 days.
• Each account's most recent IP address: up to 35 days. Hourly activity and failed request records: 8 days.
• Server logs: cleared when the service is updated.
• Backups: the last 14 days are kept on the server. Backups in Object Storage are kept long-term and used only to restore data after a server failure.

6. Third-Party Services

RingBoom does not include any advertising or analytics SDK. The following services receive some of your information:

• Alibaba Cloud phone number verification service: receives your phone number when we send a verification code.
• Alibaba Cloud (Hong Kong, China): provides our servers and backup storage, and stores the information uploaded to our server described in Section 1.
• Apple:
  • Apple Health: read only on your phone;
  • Apple Push Notification service (APNs): receives your device token and notification content;
  • MetricKit: provides us with diagnostic reports;
  • App Store lookup API: used to check for new versions; it only sees your IP address.
• AliDNS public DNS (dns.alidns.com) and Tencent DNSPod (doh.pub): since version 2.3.1, used to look up RingBoom's server addresses when the network has problems. They only see your IP address, with no account information.
• System share sheet: only when you choose to share, the image you select is handed to the app you choose.

7. Your Rights

• Access and correction: view your data in the app and change your nickname, profile photo and password.
• Withdraw consent: turn off Health, notification or camera access in system Settings at any time. Withdrawal does not affect data already processed.
• Delete server health data: go to Me → Settings → Privacy & data → Delete server health data. This deletes your daily summaries, workouts (including heart rate details), Readiness scores and related feed items from our server, and clears data snapshots in your medals; medals you have earned, daily awards and duel scores are kept. If Health access is still on after deletion, the app will upload the daily summaries and workouts from the last few days (up to 7) again at the next sync, and will keep syncing after that. To stop uploading completely, turn off RingBoom's Health access in system Settings first, then delete.
• Delete your account: go to Me → Settings → Account & security → Delete account. After deletion:
  • your daily summaries, workouts (including heart rate details), Readiness scores, medals, related feed items, emoji reactions you sent, sign-in sessions, invite codes and profile photo files are deleted;
  • your account is anonymized: the nickname becomes "Deleted User", and the phone number digest, password, RingBoom ID and profile photo are removed;
  • your push devices are deactivated and no more notifications are sent to them; groups you created are disbanded, and friend and group connections are marked as ended;
  • duels, nudges, blocks and reports you took part in are kept and shown as from a deleted user;
  • diagnostic reports and IP records are deleted when the periods in Section 5 expire, and data in backups is kept as described in Section 5.
• Get a copy or raise a concern: the app does not currently offer data export. To get a copy of your personal information, or if you have questions or objections about how we process it, email us (see Section 10). We will reply within 15 business days.

8. Minors

RingBoom is intended for users aged 14 and over. If you are under 14, please use RingBoom only with the consent and supervision of a parent or guardian. If a guardian finds that a child under 14 has registered without consent, please contact us to delete the account.

9. Changes to This Policy

When this policy changes, we will update this page and its date.

10. Contact Us

For privacy questions, a copy of your data or help deleting your account, email kp199610280039@gmail.com.