Last Updated: July 30, 2026

Dear User,

DR H (hereinafter referred to as “DR H”) is an application provided by Zhihexin Technology (Shenzhen) Co., Ltd. (hereinafter referred to as “we,” “us,” or “our”) for the control and management of smart devices.

We understand that your privacy is important and will use our best efforts to protect it. Before submitting any personal or private information to our product, DR H, please read, understand, and agree to this Privacy Policy.

This Policy describes how DR H processes your private data and confirms DR H’s commitment to privacy. We recommend and encourage you to read this Policy so that you fully understand the privacy practices applicable to the relevant DR H products or services.

Please note: The configuration of business features may vary depending on the system version of your device. The Services listed below may not apply to certain models, and certain features may be unavailable on certain models. Please refer to the actual configuration. All rules concerning the collection and use of information apply only to the use of such information and the specific Service features provided to you.

Special Notice: Health data, health reports, psychological information, precise location, financial-account information, and similar information may constitute sensitive personal information. We process such information only for a specific purpose, where fully necessary, and subject to strict safeguards, and obtain your separate consent where required by law or indicated on the relevant interface.

DR H Privacy Policy

(A) How We Use Your Personal Information

Personal information means information that, alone or in combination with other information, can identify an individual. Such information is collected when you use DR H products or services and includes your sex, date of birth, account, photograph, and the location and date on which you access a product or service.

DR H collects and uses your personal information for the purposes described in this Policy. The following are examples of personal information that we may collect and how we may use it:

(1) Personal Information Collected

About You: We may collect and use your user account, password, geographic location, user nickname, profile image, height, weight, birthday, sex, sleep habits, tags, follows, goals, mobile number, email address, WeChat information, Apple ID, Google Account, heart rate, skin temperature, steps, sleep information, standing information, and various categories of health information that you intend to manage. Height, weight, birthday, sex, and sleep habits are required information. If you do not provide them, your use of this product and the related Services may be affected.

Mobile-Phone Information: When you use DR H, we need to obtain the version of your mobile-phone operating system and the make and model of your mobile phone.

Device-Recorded Data: After you bind a device and separately authorize the relevant feature, we may process the following health data: (1) cardiovascular and rhythm data: heart rate, heart-rate variability (HRV), R–R interval (RRI), and ECG/electrocardiogram data; (2) blood-oxygen and respiratory data: blood-oxygen saturation, respiratory rate, and related trend data; (3) sleep and recovery data: sleep duration, sleep stages, sleep patterns, and sleep scores; (4) temperature and stress data: skin temperature, stress-related indicators, and related trends; and (5) activity and exercise data: steps, standing, activity duration, exercise records, energy expenditure, and other activity data. All of the foregoing may constitute sensitive personal information. The specific items collected are subject to your device model, the features you affirmatively enable, and the authorization interface.

When Connecting Your DR H Device: If you use an iPhone, we may, with your authorization and for purposes of calculating activity-related energy expenditure, receive data from and transmit data to Apple Inc.’s Apple HealthKit and send your exercise data to it. Exercise and health data generated by the DR H App will also be synchronized with Apple HealthKit.

Mobile Number: To comply with real-name registration requirements, we may collect your telephone number, email address, and third-party login information when you register a DR H account. If you use a third-party account to log in, we will separately collect your mobile number to complete real-name authentication. Please carefully consider whether to provide such information. If you decline, you may be unable to use the relevant feature normally.

Network-Usage Information: We may collect network type, network signal, and similar information relating to specific DR H features.

Location Information: If you enable the location function of your mobile device through system authorization and use a DR H location-based service, we collect and use your location information to provide that service. You may disable location services in your mobile-device system to stop our collection of your location information. On an Android device, disabling location services will affect the connection and interaction between the App and a smart Bluetooth device, such as a ring; iOS users are not affected in the foregoing manner. Even if you disable location services, you may continue to use other DR H features normally.

Log Information: When you browse or use DR H Services, our servers automatically record certain log data, including IP address, browser type, browser language, referring page, operating system, timestamps, and clickstream data.

Device Information: When you use DR H to connect to hardware, information including the device’s unique identifier, version, and approximate geographic location (non-personal information) will be transmitted to the server. The foregoing collection may also apply when you update a system, restore software to factory settings, or reset a computer.

(2) How We Use Your Personal Information

We collect personal information to provide Services to you and improve the user experience of our products, and applicable laws require us to comply with such laws and regulations. You hereby consent to our processing of your personal information for the purposes specified in this Policy and our provision of such information to our subsidiaries (in the communications, social-media, technology, and cloud businesses) and third-party service providers (as defined below).

We may use your personal information for the following purposes:

Registering an App Account: Personal information collected through the App will be used to create a personal account and user-profile page.

Calculating Exercise Results: We use personal physical data to calculate exercise results accurately.

Providing DR H Services: Device information and related information will be displayed to the User.

Determining Whether Your Mobile Phone Is Supported: Telephone information will be used to determine whether your mobile phone can use DR H.

Providing Network-Related Services: In different network environments, we use network type, network signal, and similar information to remind Users to download an updated version.

Optimizing Services: We use recorded data to improve the quality of our Services.

Providing Device Management: We provide management of bound devices.

Improving Software Stability: We collect failure logs and use them to analyze software quality and provide better Services.

DHCP: On local-area and wide-area networks, we need to use DHCP dynamic host configuration to configure IP addresses, subnet masks, gateways, and other network parameters automatically, thereby assisting administrators in effectively managing and configuring networks.

(3) How We Use Your Personal Data

We use your personal data for the following purposes:

(a) Making changes at your request and providing technical support.

(b) Sending you notices regarding operating-system or application updates and installation.

(c) Providing a better user experience and more timely after-sales service.

(d) Conducting internal audits, data analysis, and research to improve our products and Services.

(e) Analyzing operating efficiency and measuring market share.

(f) Improving customer communications and ensuring that customers receive safe and high-quality Services.

(g) Troubleshooting errors for which you elect to send us detailed information.

(h) Synchronizing, sharing, and storing information uploaded or downloaded by you and information required to perform uploads and downloads.

(i) Improving our loss-prevention and anti-fraud programs.

(4) Location-Based Services

When you access certain location-based services, such as a Bluetooth-device search, we collect, use, and process the precise or approximate location of your device. We need this location information to provide those services. We collect your device type, model, and real-time location information obtained through GPS, WLAN, and the network identifier of your service provider.

We collect location information to provide and improve location-based products and services. We will ask which applications you wish to enable for location-based services. You may disable location services on your device and decline to share your location information. For more information about disabling location-based services, contact your network operator.

(5) Collection and Use of Non-Identifying Information

Non-identifying information means information that cannot be used to identify an individual. For example, we may collect aggregate statistics such as the number of visits. We collect such data to understand how Users use our products and Services. This enables us to improve our Services and better meet customer needs. We may, at our discretion, collect, use, process, transfer, or disclose non-identifying information for other purposes.

Creating Your Account: Information you provide, such as your telephone number and personal information, will be used to help you create an account and use the Services.

Feedback: We will contact you through the collection-number information entered by you in your feedback to conduct User surveys and obtain feedback.

(6) AI Health Q&A, Reports, and Psychological Information

You may affirmatively upload materials or enter materials in an AI conversation, or a cooperating institution may synchronize necessary materials to us after you expressly authorize the specified institution, specified materials, and specified purpose. Materials from different sources are processed only within the scope of the feature and authorization selected by you.

AI features are used only for the current User’s personalized Q&A, explanation of materials, health-trend analysis, and health-management reference. Unless you make a separate affirmative election and provide separate consent, we will not use identifiable health reports, conversation content, or other materials for model training, model fine-tuning, data labeling, model optimization for other Users, or marketing.

Original psychological-counseling notes, verbatim transcripts, treatment-process records, and other highly sensitive professional files are, in principle, independently retained by the actual service provider. The Platform processes such information only to the extent necessary to complete a transaction or provide after-sales support, or where you separately authorize specified materials and specified purposes.

You may delete uploaded materials, disable AI features, or withdraw authorization on the relevant interface. Withdrawal does not affect processing conducted before withdrawal on the basis of your authorization, but we will cease subsequent processing. If retention is necessary to perform a legal obligation, resolve a dispute, or protect safety, we will retain the information only to the extent necessary and subject to safeguards.

(7) Family Health Sharing

Family Health Sharing becomes effective only after an invited member expressly accepts and selects the scope of authorization. The inviting party may view only the day-to-day health data and trends authorized by the invited member. The invited member may at any time decline, narrow the authorization, disable abnormality alerts, terminate sharing, or leave the family relationship; after termination, the inviting party may no longer access the invited member’s subsequently generated health data. The scope of visibility of historical data is subject to the express selection on the authorization interface.

We do not provide health information to any person by default merely because a family relationship exists. Where a minor, a person lacking or having limited civil capacity, or an older adult managed with guardian assistance is involved, we will obtain guardian consent and take necessary verification measures as required by law.

(8) Wellness Marketplace Transactions, Third-Party Services, and Information Sharing

When you purchase or schedule a third-party service through the Wellness Marketplace, we provide the actual service provider, to the extent necessary to complete the transaction and performance, with the order number, service item, contact person, contact details, appointment time, and other necessary information separately authorized by you. We require the recipient to process such information in accordance with contract and law.

We receive, display, or access physical-examination reports, professional-service conclusions, and other health materials only after you expressly authorize the specified service provider, specified materials, synchronization scope, and purpose. The actual service provider is responsible for its professional Services, professional conclusions, and any information processing that it independently conducts in accordance with law.

(9) Device Permission Calls

In providing the Services, DR H may call certain permissions on your device. You may disable some or all permissions in your device settings. The manner in which permissions are displayed and disabled may vary by device. The following is a list of permissions that may be called and the corresponding feature descriptions and purposes:

 

(B) Privacy Policy

We are committed to protecting the privacy, confidentiality, and security of personal information in our possession and to complying with the requirements of the Personal Information Protection Law of the People’s Republic of China and related supporting laws and regulations governing personal information.

(C) How We Disclose Your Personal Information

We may disclose your personal information in the following circumstances:

Synchronization with Third Parties: With your express consent, we will share your personal information with a third party. If you need to share your personal information with a third-party device or platform, we will share information, such as steps, distance, height, weight, and heart rate, with the third party at your direction. Please read the privacy policy of the relevant third-party device or platform. Your activities on that third-party device or platform will no longer be governed by this Policy.

Disclosure to Authorized Partners (“Our Partners”): Certain Services are provided by Our Partners, and we may share some of your personal data with Our Partners to provide better customer service and user experience. For example, when you purchase a product online, we must share your personal data with a logistics-service provider to arrange delivery or arrange for a Partner to provide Services.

We may share your personal data with a logistics-service provider to arrange delivery or arrange for a Partner to provide Services. We may process your personal data for a specific, explicit, and lawful purpose and disclose the data necessary to provide the Services. Our Partners are not entitled to use shared personal information for any other purpose, but we are not responsible for, and have no control over, the privacy and data-protection policies of Our Partners.

Disclosure Based on Law or Reasonable Grounds:

(1) Where necessary to enter into or perform a contract to which the individual is a party, or to conduct human-resources management pursuant to employment rules formulated in accordance with law and collective contracts executed in accordance with law;

(2) Where necessary to perform statutory duties or legal obligations;

(3) Where necessary to respond to a public-health emergency or, in an emergency, to protect the life, health, or property of a natural person;

(4) Processing personal information within a reasonable scope for news reporting, public-opinion supervision, or similar activities conducted in the public interest;

(5) Processing, within a reasonable scope and in accordance with the Personal Information Protection Law of the People’s Republic of China, personal information disclosed by the individual or otherwise lawfully made public;

(6) Other circumstances prescribed by laws or regulations.

Please understand that, under applicable laws and regulatory requirements, the sharing or transfer of anonymized personal information does not require separate notice to or consent from you, provided that the recipient cannot restore the information or re-identify the individual to whom the personal information relates.

(D) How We Store and Protect Your Personal Information

We take the security of personal information seriously. We will take all reasonable and practicable measures to protect your personal information from unauthorized access, disclosure, use, modification, or alteration.

We will take all reasonable and practicable measures to protect your personal information. For example, we use encryption to preserve confidentiality; use safeguards to prevent malicious attacks against data; and, where necessary, may use other measures to protect your personal information from unauthorized access, disclosure, modification, destruction, or loss.

We will organize security and privacy training to increase our employees’ awareness of the importance of protecting personal information.

We will take all reasonable and practicable measures to ensure that we do not collect irrelevant personal information. We will use our best efforts to protect your personal data, but you accept and acknowledge that no security measure is perfect.

1. Storage

Storage Location: We store personal information obtained in the course of our operations within the People’s Republic of China. In the following circumstances, we will provide your personal information to an entity outside the People’s Republic of China only after fulfilling the obligations prescribed by law:

(1) Applicable law expressly so provides;

(2) We obtain your express authorization.

In the foregoing circumstances, we will use contracts and other means to ensure that your personal information receives protection no less stringent than that provided under this Policy.

Retention Period: We undertake to retain your personal information for a reasonable and necessary period in accordance with law. After that period, we will delete or anonymize your personal information.

Anonymization means technical processing of personal information that makes the individual to whom the personal information relates unidentifiable and cannot be reversed. Information obtained through anonymization does not constitute personal information.

If we discontinue operations, we will promptly cease collecting your personal information, endeavor to notify you of the discontinuation individually or by announcement, and delete or anonymize personal information in our possession.

2. Protection

To protect the security of your personal information, we will endeavor to adopt security measures consistent with industry standards to minimize the risk that your personal information is damaged, stolen, leaked, accessed, used, disclosed, or altered without authorization. We will actively establish data-classification and grading systems, data-security management standards, and secure-development standards to regulate the storage and use of personal information and ensure that we do not collect personal information unrelated to the Services we provide.

Please properly safeguard your account and password information. To help prevent security incidents, we have established early-warning mechanisms and emergency-response plans in accordance with laws and regulations. If a security incident occurs, we will promptly notify you of the relevant circumstances by email, letter, telephone, push notification, or another method required by law. If it is difficult to notify individuals separately, we will issue a reasonable and effective announcement. We will also proactively report our handling of the personal-information security incident as required by regulators and cooperate closely with governmental authorities.

If our products or Services cease operations, we will promptly cease further collection of personal information. We will endeavor to notify you of the foregoing change through a push notification, announcement, or similar method, and will delete or anonymize your personal information within a reasonable period.

(E) How We Manage Your Personal Information

We attach great importance to, and use our best efforts to protect, your rights in your personal information.

1. Accessing, Obtaining a Copy of, Correcting, and Deleting Personal Information

Through the design of the interactive interface, we provide channels through which you may access, obtain a copy of, correct, and delete relevant personal information. You may configure such matters as follows:

(1) Access, obtain a copy of, or correct your profile information, including profile image, nickname, and sex, through [Me – tap the information area at the top];

(2) Configure, access, obtain a copy of, or correct account information, including the login password, through [Me – Settings – Account & Security];

In addition to the foregoing, we shall proactively delete your personal information, and you have the right to request deletion, in any of the following circumstances:

(1) The processing purpose has been achieved, cannot be achieved, or the personal information is no longer necessary to achieve the processing purpose;

(2) We have ceased providing the product or Service, or the retention period has expired;

(3) You have expressly withdrawn your consent;

(4) You have sufficient grounds to believe that our processing of your personal information violates any law, administrative regulation, or agreement with you;

(5) Other circumstances prescribed by laws or administrative regulations.

3. Conditional Right to Transfer Personal Information

If you need to transfer your personal information to another platform, enterprise, or organization, you may contact us as disclosed in this Privacy Policy. We will review your request and, if the conditions prescribed by the PRC cyberspace administration authorities are satisfied, provide a channel for transferring the relevant personal information.

4. Restrictions on Automated Decision-Making by Information Systems

For certain business features, we may make decisions solely through non-human automated decision-making mechanisms, including information systems and algorithms. If such a decision materially affects your lawful rights and interests, you have the right to request an explanation, and we will provide an appropriate means of redress.

(F) How to Delete Your Account

You may delete your account through [Me – Settings – Delete Account] by selecting [Apply to Delete Account] after satisfying the conditions for account deletion. After receiving your deletion request and verifying your identity, we will process the request as soon as practicable and within seven business days. Following account deletion, your personal information will be removed from our systems, except for personal information that we are expressly required by law to retain.

(G) How We Process Minors’ Personal Information

Our products and Services are primarily intended for adults. If you are a minor, we recommend that you ask your parent or other guardian to read this Policy carefully and use our Services or provide information to us only with the consent of your parent or other guardian.

If you are a child under 18 years of age (although the definition of a child varies under local laws and customs, we treat every person under 18 as a child), we will not permit you to use our Services or provide information to us without the consent of your parent or other guardian. If you are under 18, you may not create your own User account without the consent of your parent or other guardian.

Where we collect a child’s personal information, we will do so only where permitted by law, with the express consent of a parent or guardian, or where necessary to protect the child.

We will use or disclose such information where permitted by law, expressly consented to by a parent or guardian, or necessary to protect the child. If we discover that we collected a child’s personal data without parental consent, we will use our best efforts to delete such data as soon as practicable.

If you are the parent or other guardian of a child, please ensure that the child’s use of our Services has been authorized by you. If you have any questions regarding a child’s personal information, please contact us.

(H) Our Third-Party Service Providers and the Services They Provide

The DR H Platform may include third-party products and/or Services or links to information and/or Services provided by third parties. Before using such a third-party product and/or Service, you may be required to navigate to the relevant mini-program or third-party page.

Your use of a third-party Service, including any personal information provided by you to that third party, is governed by the third party’s terms of service and privacy policy, rather than this Policy. You should carefully read those terms and decide whether to accept them.

Please properly protect your personal information and provide it to others only where necessary. This Policy applies only to information collected, stored, used, shared, or disclosed by us and does not apply to Services provided by a third party or the third party’s rules governing its use of information. The third party is responsible for its conduct in using your information.

(I) Updates to This Policy

We reserve the right to update or modify this Policy from time to time. By continuing to use DR H products, you are deemed to agree to the updated or modified Policy.

You may view the current version of this Policy in the DR H App.

(J) How to Contact Us

Under the Personal Information Protection Law of the People’s Republic of China and other applicable laws and regulations, you have the right to request access to and/or correction of personal information in our possession.

If you have any questions about this Policy or wish to exercise your privacy rights, please contact us by email at service@doctorhhh.com or by mail at [PRC Company Contact Address].

(K) Jurisdiction

This Policy is governed by the laws of the People’s Republic of China. Any dispute arising from or in connection with this Contract shall be submitted to Shanghai International Economic and Trade Arbitration Commission/Shanghai International Arbitration Center for arbitration.

****************************************

Appendix 1: Description of Integrated Third-Party SDKs

To enable certain independent features and allow you to use and enjoy additional Services and features, we embed third-party SDKs in the App. We carefully assess the purposes for which such SDKs are used. Please understand that the functions and Services of third-party SDKs are continually updated and developed, and the categories of data processed by them may change as their functions or policies are adjusted. Please refer to the third party’s then-current public disclosure regarding personal information.

The following sets forth information concerning the principal third-party service providers integrated by us:

3.1.1 Mobile Security Alliance OAID

Supplementary Device Identification System for Mobile Intelligent Terminals and SDK Privacy Compliance
The Supplementary Device Identification System for Mobile Intelligent Terminals and its SDK strictly comply with the Cybersecurity Law, the Data Security Law, the Provisions on Protecting the Personal Information of Telecommunications and Internet Users, and other applicable PRC laws and regulations, as well as national standards including the Information Security Technology—Personal Information Security Specification. The SDK does not proactively collect any data. It obtains the following data only when called by the App, solely for local determination, and does not transmit such data over any network:
Device manufacturer, device model, and device brand, to determine the terminal interface to be called;
Device network-operator name, to determine whether a virtual-machine environment exists;
App package name, to verify the signature.

3.2 UniPush

 UniPush is an integrated unified-push service launched by DCloud together with Getui and uses an SDK provided by Getui. The push-notification technology is provided by Daily Interactive Co., Ltd. We may provide Daily Interactive Co., Ltd. with device information, including your device platform, device manufacturer, device brand, and device identifier, as well as application-list information, network information, and location-related information, for purposes of providing push-notification technology Services to you. When sending push notifications to you, we may authorize Daily Interactive Co., Ltd. to conduct link coordination and mutually activate a closed SDK push process to ensure that you receive our push notifications in a timely manner. For details, please see the Getui User Privacy Policy (hyperlink the Getui User Privacy Policy to http://docs.getui.com/privacy).

3.2.1 Description of Third-Party SDKs Integrated into the Module

Note: UniPush is configured with the following manufacturer push services.

3.2.2 HMS Push

Push Kit is a message-push platform provided by Huawei that establishes a message-push channel from the cloud to the terminal. Integration of Push Kit enables messages to be pushed to client applications in real time; accordingly, a description of “HMS Push” must be included in the Privacy Policy.

3.2.3 Meizu Flyme Push

Meizu Push is a message-push service provided by Meizu to developers. Developers may push notifications or messages in real time to client applications that integrate the Meizu Push SDK, thereby maintaining User engagement and increasing activity. Accordingly, a description of “Flyme Push” must be included in the Privacy Policy.

3.2.4 OPPO Push

OPPO Push is a message-push service provided by OPPO to developers. It establishes a stable and reliable persistent-connection channel between the server and the operating system to push messages in real time to App clients on OPPO’s ColorOS. Messages may be received whether or not the App process is running. Accordingly, a description of “OPPO Push” must be included in the Privacy Policy.

3.2.5 vivo Push

vivo Push (Vpush) is a message-push service provided by vivo to developers. It establishes a stable and reliable persistent connection between the cloud and client, enabling developers to push messages to client applications in real time. It supports tens of billions of notifications/messages and can reach mobile Users within seconds. Accordingly, a description of “vivo Push” must be included in the Privacy Policy.

3.2.6 Xiaomi MiPush

Xiaomi Push (MiPush) is a message-push service provided by Xiaomi to developers. It establishes a stable and reliable persistent connection between the cloud and client, enabling developers to push messages to client applications in real time and effectively reach Users and increase App activity. Accordingly, a description of “Xiaomi Push” must be included in the Privacy Policy.

3.3 Statistics

Description of Third-Party SDKs Integrated into the Statistics Module

3.4 Use of In-App Permissions

3.4.1 OAuth and Share: The same SDKs are used for login and sharing and are therefore described together below:

SDK Name	Package Name	Purpose	Permissions Used	Personal Information Involved	Privacy Policy Link
WeChat Open Platform	com.tencent.mm	Login (currently only on Android and HarmonyOS, if supported by HarmonyOS) and sharing.	android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE	stored personal files, network-related information(WLAN access points (such as SSID, BSSID), IPaddress, base stations, Bluetooth, network operator, network status, type, access method, network parameters, network status)	WeChat Privacy Policy.

3.4.2 Bluetooth (Bluetooth Low Energy)