Welcome to Aevis. Shenzhen Speediance Living Technology Co., Ltd. ("Aevis," "we," "us," or "the Company") values your privacy and is committed to protecting your personal data. Following legal and ethical principles, we have developed this Privacy Policy ("Policy") to inform you how we collect, use, share, and safeguard your information when you use the Aevis app and related services (the "Service"), and how you can access, update, delete, and control that information. We strive to maintain your trust by handling your information with transparency and integrity.
Before installing, registering for, logging into, or otherwise using the Service, please read this Policy carefully. By doing any of these things, you agree to the collection, use, and disclosure of your information as described here. If you cannot accept this Policy, please do not use the Service.
You can complete your reading according to the following index:
- 1. Definitions of Relevant Terms
- 2. Nature and Formation of This Policy
- 3. Data We Collect and Corresponding Processing Activities
- 4. Storage, Sharing, and Disclosure of Your Data
- 5. International Data Transfers
- 6. Our Security Protection Measures
- 7. Your Rights Regarding Your Personal Data
- 8. Protection of Children's Privacy
- 9. Exemption Scenarios
- 10. Special Notice
- 11. Changes to This Privacy Policy
- 12. How to Contact Us
1. Definitions of Relevant Terms
- "Aevis," "we," "us": Shenzhen Speediance Living Technology Co., Ltd., the operator of the Service, and its affiliates where relevant to this Policy.
- "You," "user": any person who installs, registers for, logs into, or otherwise uses the Service. This excludes anyone under the minimum age set out in Section 8.
- "The Service": the Aevis mobile application and any related websites, features, or services we operate, including subsequent upgrades, patches, and updates.
- "Affiliated device/app": Speediance App, Gym Monster, Velonix and Gym Pal, our related fitness hardware/app product operated by the same corporate family, referenced throughout this Policy.
- "Personal data": any information relating to an identified or identifiable individual.
- "Sensitive personal information": personal data given heightened protection under applicable law, including health data, precise geolocation (if collected), and account log-in credentials.
- "De-identified/anonymized data": data that has been processed so that it can no longer reasonably be used to identify you, and that we commit not to re-identify.
- "Processing": any operation performed on personal data, including collection, recording, storage, use, disclosure, restriction, or deletion.
- "Consent": your freely given, specific, and informed agreement, indicated by a clear affirmative action (e.g., authorizing Apple Health access, completing a dedicated opt-in screen, or tapping "I Agree").
2. Nature and Formation of This Policy
2.1 This Policy constitutes a binding part of the agreement between you and Aevis regarding the collection, use, and protection of your information, and should be read together with our Terms of Service. This Policy is contractual in nature.
2.2 You are requested to carefully read this Policy and our Terms of Service and accept all of their contents. If you cannot accept them in full, you should not install, register for, log into, or otherwise use the Service.
2.3 You accept this Policy by taking a clear affirmative action during registration — tapping "I Agree" on the screen where this Policy and our Terms of Service are presented. We record the date, time, and version of the documents you accepted. Merely installing the app does not by itself constitute acceptance.
2.4 The Service is intended for adults only. You should have full legal capacity to accept this Policy. If you do not, please do not use the Service. See Section 8.
3. Data We Collect and Corresponding Processing Activities
We collect the following categories of data as part of specific Aevis features. Each category below states why we collect it and the specific data fields involved. Without providing certain data, you may not be able to access the corresponding feature; we will tell you when information is required for a specific feature.
3.1 Account Registration, Login, and Identity Management
To establish and manage your user account, provide authentication, and ensure account security. Given a legal basis on your consent, we collect registration information provided by you to create an account, verifies phone number/email or third-party accounts, records login/logout events, password resets, and risk control checks to maintain account status and security. Without account registration, you cannot access personalized fitness services.
Data fields we process:
- User ID (system-generated unique identifier)
- Username/Nickname
- Email address
- Phone number (for verification)
- Password (encrypted/hashed, never stored in plain text)
- Login/logout timestamps and IP address
- Gender
- Birthday
- Device identifiers
3.2 Third-Party Health Platform Synchronization
To provide you with personalized health analysis and recommendations, Aevis may synchronize health and fitness data with Apple Health, Speediance App, Gym Monster, Velonix and Gym Pal. We synchronize health and fitness data from two types of sources, with different sync relationships:
(a) Affiliated fitness device/app. Because Speediance App, Gym Monster, Velonix and Gym Pal share the same account with Aevis under our unified brand, this sync is enabled by default. We sync training/workout records and body composition data between Aevis and these apps, including writing your training records in Aevis back to Speediance App. To turn this sync off, see Section 7.6.2(a).
Data fields we process: training/workout records; body composition data.
(b) Apple Health. To provide you with personalized health analysis and recommendations, Aevis reads from and writes to Apple Health, subject to Apple's own permission system: iOS requires your explicit authorization for each data type, granted separately for reading and writing. You can manage these permissions at any time via "Profile" > "Privacy Settings" > "Data Connections" > "Manage Authorizations", which opens the Apple Health app where you control exactly which data types Aevis may read and write.
Data fields we process: sleep records; exercise/workout records; heart rate; step count and activity data.
For details on how previously synced data will be deleted, please refer to Section 7.8.4.
3.3 Chat Interaction and Long-Term Memory
To understand your questions, respond conversationally, and build a long-term "memory" of your health journey so recommendations stay personalized and consistent over time.
Data fields we process:
- Text messages you send in chat
- Conversation timestamps and history
- Summaries and insights we derive from your conversations and health data ("long-term memory")
Your long-term memory is unique to your account. It is never combined, cross-referenced, or shared with another user's data or memory. See Section 6.3 for more on how we isolate user data.
3.4 Multimodal Content (Photos and Videos)
To analyze images or videos you choose to upload (e.g., meal photos, workout clips) so we can provide relevant feedback and recommendations.
Data fields we process:
- Photos and videos you upload
- Upload timestamp
- AI-derived analysis of the uploaded content
3.5 AI-Generated Health Guidance and Dashboards
To generate personalized health advice and plans, delivered as text responses, dynamically generated web pages, and in-app AI dashboards, based on the data described above.
Data fields we process:
- Generated recommendations and plan content
- Dashboard content and view history
3.6 Proactive Messaging and Event Detection
To detect milestone events from your health data — such as the end of a sleep session or the end of a workout — so we can send timely feedback and evaluations, and to deliver information you've asked for at times you specify.
Data fields we process:
- Detected event type and timestamp (e.g., sleep-end, workout-end)
- Your notification preferences and any scheduled-message requests
- Message delivery logs
- Push notification token
3.7 Usage Analytics and Product Optimization
To understand how the Service is used, diagnose issues, and improve features and user experience. We use tracking events and logs to record feature usage, then perform statistical analysis to evaluate performance, detect problems, and guide product iteration.
Data fields we process:
- Feature access patterns and session duration
- Search history and in-app search terms, if applicable
- UI interaction events
- Crash and error logs
- Device and OS information
3.8 Membership Center
To manage your membership status. Membership is currently provided free of charge; this infrastructure also lays the groundwork for potential paid tiers in the future, at our discretion.
Data fields we process:
- Membership activation status
- (In the future, if paid tiers launch) subscription and purchase records
3.9 Account Cancellation and Data Deletion
Purpose: To process your account or data deletion requests and retain the minimum records necessary for audit and compliance purposes.
Legal basis: Legal obligation.
Data fields we process:
- Account ID
- Deletion request timestamp
- Anonymized retention data (used only to prevent duplicate registration; see Section 7.8)
4. Storage, Sharing, and Disclosure of Data
4.1 Storage
We store your personal data on servers located in the United States, within the period permitted by applicable law and for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. We guarantee your rights to access, correct, delete, port, and object to processing of your personal data, and will handle your stored data in accordance with your lawful instructions and applicable law.
4.2 Sharing
Based on specific business or functional needs, Aevis may share your information with the categories of recipients below. We do not sell your personal information. Where we engage a third-party processor, we enter into an agreement governing the purpose, method, and duration of processing, the type of data involved, and required protective measures.
(1) Our affiliates. Our affiliated companies, for purposes consistent with this Policy.
(2) Unified account / companion app (login only). Your Aevis account is part of our unified account system. Once you create an account in Aevis, the same account can also be used to log into our related product, Speediance App, Gym Monster, Velonix and Gym Pal.
(3) Affiliated Fitness Device/App (Data Sync). Enabled by default. Because Speediance App, Gym Monster, Velonix and Gym Pal share the same account with Aevis under our unified brand, we sync training/workout and body composition data between Aevis and these apps, including writing your training records in Aevis back to Speediance App. To turn this sync off, see Section 7.6.2(a).
(4) AI model service provider. Microsoft processes your chat text, images/videos, and health data to generate recommendations. Microsoft's privacy policy is available at https://www.microsoft.com/en-us/privacy/privacystatement and https://azure.microsoft.com/en-us/support/legal/. Aevis does not use your data — including de-identified or aggregated data — to train or fine-tune AI models; see Section 7.7.
(5) Cloud infrastructure. Our backend infrastructure — including account authentication and centralized recordkeeping of your acceptance of this Policy and our Terms of Service — runs on Amazon Web Services (AWS). AWS provides the underlying servers; the authentication and recordkeeping systems themselves are built and operated by us. Servers are located in the United States.
(6) Apple Health (HealthKit). Reads data you authorize through iOS Health permissions; never used for advertising and never sold to data brokers, consistent with Apple's Developer Program requirements.
(7) Service providers. Companies that perform services on our behalf, such as customer support, hosting, analytics, crash reporting, push-notification delivery. These providers may access limited technical information — such as device type, OS version, IP address, and push notification tokens — solely to deliver their service to us, and may only use your data within the scope we authorize.
(8) Professional advisors. Lawyers, auditors, and similar advisors, only as necessary to provide professional services to us.
(9) Law enforcement, courts, and government agencies. Where necessary and appropriate to comply with law, regulation, legal process, or a valid request from a public authority.
(10) Business transfers. Participants in an actual or potential business transaction (merger, acquisition, reorganization, sale of assets, or similar), in which case your information may be one of the assets transferred, subject to this Policy or a successor policy.
4.3 Disclosure Without Additional Notice
Under the following circumstances, we may use or disclose your information without prior notice to you:
- To eliminate an imminent danger to someone's life, body, or property.
- To prevent or stop damage to our rights or a third party's rights.
- For disclosure in the public interest.
- To comply with applicable law, regulation, litigation or dispute-resolution needs, or a valid request from a court or government authority.
4.4 We Do Not Publish Your Data
- We do not publish, post, or otherwise make public your health data, chat content, uploaded photos or videos, AI-generated reports, or any other content associated with your account. We do not display your data to other users. Sharing is entirely under your control: content leaves Aevis only when you choose to share it.
5. International Data Transfers
The Service is offered only in the United States. All data generated by Aevis, and all data we obtain from Apple Health or from our affiliated fitness device/app (Section 3.2), is stored exclusively on servers located in the United States. We do not pull data from any other servers, and we do not currently transfer your personal data outside the United States.
If our operations expand internationally in the future, we will update this section to describe the transfer mechanism used (such as standard contractual clauses or an adequacy determination) and the safeguards applied, and will notify you in accordance with Section 11.
6. Our Security Protection Measures
Aevis places great emphasis on protecting the security of your personal data. We apply industry-standard security technologies and organizational measures to minimize the risk of your information being leaked, damaged, misused, or accessed or disclosed without authorization.
6.1 Data Protection Impact Assessment
Before introducing any data processing activity that may pose a high risk to your privacy — particularly involving new technologies such as automated decision-making, profiling, or large-scale processing of sensitive data — we will assess the necessity and proportionality of the processing, evaluate risks to your rights, and adopt corresponding risk-mitigation measures.
6.2 Entrusting the Processing of Your Information
Where we engage a third party to process your personal data (our "trustees"), we enter into an agreement covering the purpose, duration, method of processing, data types involved, and required protective measures, and we supervise their processing activities. Our trustees may include:
- AI model service provider: processes chat, image/video, and health data to generate your recommendations, as described in Section 4.2(4).
- Push-notification infrastructure: used to deliver the proactive messages described in Section 3.6; may access your device's push token and basic device information.
- Cloud infrastructure provider: provides the underlying servers on which we run our own authentication and data-storage systems, as described in Section 4.2(5).
6.3 Data Security Technical Measures
- Encrypted transmission using TLS/HTTPS for all network communication between the app and our servers.
- Passwords are stored using industry-standard hashing/salting and are never stored or transmitted in plain text.
- Data masking and access-control technologies are used when displaying or processing personal data internally.
- Strict access control and multi-factor authentication protect internal systems that can reach personal data, on a need-to-know basis.
- User data isolation: your data — including your long-term memory — is strictly isolated to your own account; we never combine or cross-reference it with another user's data.
- Automated security monitoring and periodic access-log review to detect anomalous activity.
6.4 Additional Organizational Measures
- Data classification and handling standards that govern how different sensitivity tiers of data are stored and accessed.
- Confidentiality obligations for personnel who handle personal data, combined with monitoring and periodic audits.
- Breach response: if a breach involving your identifiable health information occurs, we will notify you and, where applicable, the FTC, in accordance with the FTC Health Breach Notification Rule and applicable state law.
- Periodic security and privacy training for personnel who handle personal data.
6.5 Your Responsibility
In addition to our efforts to protect your information, you are responsible for safeguarding your own account credentials and the security of the devices and networks you use to access the Service. No system can be guaranteed 100% secure.
7. Your Rights Regarding Your Personal Data
7.1 Opt Out of Marketing Communications. If we send marketing emails, you may unsubscribe using the link in any such email. You may still receive non-marketing messages (e.g., security or account notices) even after opting out of marketing.
7.2 Access, Correct, Update, and Port Your Account Information. You can review and update most account information in-app. You may also request a copy of the personal data you've provided to us, processed based on your consent or our contract with you, in a structured, commonly used, machine-readable format (e.g., CSV, JSON, or XML), and may direct us to transmit it to another controller where technically feasible.
7.3 Control Proactive Message Notifications. You can manage which proactive messages you receive (e.g., sleep/workout event feedback, scheduled reminders) in your notification settings, or disable push notifications entirely in your device settings. Some administrative or security messages cannot be disabled.
7.4 Cookies. If we operate a marketing website alongside the app, that site may use cookies; you can control cookies through your browser settings. Disabling cookies may affect site functionality.
7.5 Do Not Track. The Service does not currently respond to browser "Do Not Track" signals; we honor Global Privacy Control (GPC) signals where applicable as a valid opt-out request under state law.
7.6 Choose Not to Share Certain Data. You can decline to grant Apple Health access or decline to upload chat/photo/video content; some features may not work without this data, and we will tell you when information is required for a specific feature.
7.6.1 Control the Unified Account / Companion App Link. Contact us if you have questions about how your unified account interacts with Speediance App, Gym Monster, Velonix and Gym Pal
7.6.2 Withdraw the Affiliated Device/App Data Sync Opt-In. How you withdraw it depends on which sync is involved:
(a) Sync with Speediance App, Gym Monster, Velonix and Gym Pal. This sync uses the same account as this app and cannot be disabled on its own. To stop it, you must either delete your account via "Profile" > "Privacy Settings" > "Delete Account", or contact after-sales support at after-sales@speediance.com for assistance. Note that deleting your account under this option will end your access to the rest of the Service, not just the sync.
(b) Sync with Apple Health. You can manage Apple Health permissions at any time via "Profile" > "Privacy Settings" > "Data Connections" > "Manage Authorizations", which opens the Apple Health app where you control exactly which data types Aevis may access. This only affects future syncing and does not affect your ability to use the rest of the Service.
7.7 AI Model Training. We do not use your data — including de-identified or aggregated data — to train or fine-tune AI models. Information you share with Aevis (chat text, health data, photos/videos) is used only to generate your own personalized recommendations, as described in Section 3.
7.8 Delete Your Account. You can choose to delete your account, but this action is irreversible. Proceed with caution.
7.8.1 Deletion process: go to Settings and select "Delete Account," or contact us at DPO@speediance.com for assistance.
7.8.2 Irreversibility: once deleted, you will no longer be able to log in, and all information and data stored under your account will be permanently deleted. Account deletion does not exempt or reduce responsibility for actions taken under the account before deletion.
7.8.3 Limited retained record: to prevent duplicate registrations and support new-user onboarding, we retain an encrypted record limited to your user ID, registration timestamp, and deletion timestamp. This record is used only to determine whether a re-registering user is a returning user, and for no other purpose.
7.8.4 Delete Previously Synced Third-Party Data. Turning off a data connection (Section 3.2) stops future syncing but does not automatically delete data already synced into Aevis. You may request deletion of previously synced data — without deleting your account — by contacting us at DPO@speediance.com. We will process your request within 30 days and will delete the data from our active systems and backups.
7.9 California residents (CCPA/CPRA). You have the right to know/access, delete, and correct your personal information, and to limit use of sensitive personal information (which includes health data). We do not sell or share personal information for cross-context behavioral advertising. Because the core functionality of Aevis depends on processing your health data, our use of sensitive personal information falls within the exemption for uses necessary to perform the services you have requested. If you wish to stop this processing entirely, you may delete your account (Section 7.8).
7.10 Other states (Virginia, Colorado, Connecticut, Utah, and similar comprehensive privacy laws). You have similar rights to access, correct, delete your data, and appeal a denied request.
7.11 Washington, Nevada, and other consumer health data laws. See our separate Consumer Health Data Privacy Policy, which addresses your health-data-specific rights, including withdrawing consent and deletion.
8. Protection of Children's Privacy
The Service is intended only for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. We ask you to confirm you meet this age requirement when you register.
If we become aware that we have collected personal data from someone under 18, we will take steps to delete that information promptly and may restrict or terminate the associated account. If you believe a minor has provided us with personal data, please contact us using the details in Section 12.
9. Exemption Scenarios
Aevis shall not be liable for the following matters or situations:
- Leakage, loss, theft, or alteration of your information caused by your failure to safeguard your account credentials, disclosure of your password to others, or sharing your account with others.
- Leakage, loss, theft, or alteration of your information caused by hacking, malware, or similar attacks beyond our reasonable control.
- Leakage, loss, theft, or alteration of your information caused by government action, equipment damage, or other factors affecting the normal operation of the network.
- Leakage, loss, theft, or alteration of your information caused by third-party websites or services linked from the Service.
- Leakage, loss, theft, or alteration of your information caused by your own violation of this Policy or applicable law.
- Leakage, loss, theft, or alteration of your information caused by entities other than Aevis.
- Nothing in this Section limits our obligations under applicable law.
10. Special Notice
10.1 Links to other websites or advertisements. The Service may contain links to other websites. These links do not imply that we are affiliated with any third party, and we are not responsible for the content, privacy policies, or actions of those websites. Review their privacy policies before providing information to them.
10.2 Content in unrelated services. Our content may appear in web pages or services unrelated to us. We do not control such third-party services and are not responsible for their practices.
10.3 AI-generated content. All health guidance, recommendations, dashboards, and messages generated through the Service are produced by an artificial intelligence model and may contain errors or omissions. They are provided for your reference only and do not constitute medical advice, diagnosis, or treatment, nor do they represent the opinion of any licensed medical professional. You should exercise your own judgment and consult a qualified professional for medical decisions. Any actions you take based on AI-generated content, and any resulting consequences, are your sole responsibility. See our Terms of Service, Section 8.2, for our full medical disclaimer.
11. Changes to This Privacy Policy
11.1 We reserve the right to update and modify this Policy. Once modified terms are published in the app or on our website, they replace the original terms and become part of this Policy as a whole. You can check the Service at any time to view the latest version.
11.2 When we make changes, we will update the effective date at the top of this Policy and, if we have your email address or another reasonable way to reach you, provide direct notice of material changes before they take effect.
11.3 Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
12. How to Contact Us
If you have questions, concerns, or requests regarding this Policy or our data processing activities, contact us at DPO@speediance.com.