施迈泽园（Smellingarden，下称「我们」）由广州施迈健康科技有限公司运营。我们提供嗅觉训练、嗅觉功能测评与睡眠管理相关的软硬件产品：智能指环通过蓝牙采集生理数据，NFC 卡片用于记录训练打卡，数据统一汇聚到「施迈泽园」App 中管理。本政策说明我们收集哪些信息、为何收集、如何保护，以及您可以如何管理这些信息。
一、我们收集的信息
我们只收集实现产品功能所必需的信息。下表中标注 必需 的项目不提供将无法完成注册或核心功能；其余均为可选，不提供不影响其他功能的使用。
| 类别 | 具体内容 | 性质 |
|---|---|---|
| 账号信息 | 手机号（用于注册、登录与短信验证码）；如您选择第三方登录，则包括对应的第三方账号标识；如您设置登录密码，我们仅保存不可逆的加盐哈希值，不保存明文密码 | 必需 |
| 个人资料 | 昵称、头像（表情符号）、性别、生日、身高、体重、步长、微信号 —— 由您在 App 内自行填写，用于个性化分析与建议 | 可选 |
| 健康与生理数据 | 由智能指环通过低功耗蓝牙采集：心率、血氧、睡眠时段与睡眠分期、步数与日常活动汇总、运动记录；以及 App 内手动录入的测量值 | 可选 |
| 嗅觉训练与测评 | NFC 卡片贴卡打卡记录（卡号、卡片类型、时间）、嗅觉训练进度、TDI 嗅觉功能测评的作答与得分、嗅 48 气味偏好评分与偏好画像、香氛推荐记录与定制需求单 | 必需 |
| 设备与运行信息 | 指环的设备名称与标识、固件版本、连接状态；App 内设置项、提醒规则与通知记录 | 必需 |
| 位置信息 | 在您授权「使用期间」位置权限后，采集并上报位置坐标，用于城市级的环境与睡眠相关性分析。您可随时在系统设置中关闭该权限 | 可选 |
| 相机 | 仅在扫描卡片二维码以读取卡号时调用；识别在您的设备上完成，我们不拍照、不上传、不保存任何图像 | 可选 |
| 反馈与诊断 | 您主动提交的反馈内容、为定位问题所需的运行日志与崩溃信息 | 可选 |
二、我们如何使用这些信息
- 提供核心功能：账号登录、指环配对、NFC 打卡、嗅觉训练计划推进、测评与偏好评估；
- 生成您的健康与嗅觉数据报告、趋势分析与个性化建议；
- 在您更换设备时恢复数据（云端备份）；
- 发送与您相关的服务通知（训练提醒、数据同步结果）；
- 保障服务安全与稳定：异常登录识别、故障排查、服务质量改进；
- 履行法律法规要求的义务（如依法配合监管要求）。
我们不会将上述信息用于广告投放，也不会出售或出租给任何第三方。
三、信息如何存储与保护
- 本地优先：指环与卡片产生的数据先在您的设备上完成采集与计算，并保存在设备内的本地数据库中，此为权威数据；
- 云端备份：为支持换机恢复与多端一致，数据会经加密传输（HTTPS/TLS）同步至我们在中国境内的服务器（阿里云）保存；指环时序数据以 5 分钟降采样存储，仅在您授权且处于 Wi-Fi 环境时补传近期的较细粒度数据；
- 安全措施：传输全程加密；登录密码仅保存加盐哈希；短信验证码仅保存不可逆摘要；服务端实施访问控制与最小权限管理；
- 保存期限：在您的账号存续期间保存。您注销账号后，我们将在法律法规允许的最短时间内删除或匿名化处理相关个人信息。
四、我们与谁共享信息
为完成上述功能，我们会在必要范围内与以下服务提供方共享相应信息，并要求其承担同等的保密与安全义务：
| 服务提供方 | 用途 | 涉及的信息 |
|---|---|---|
| 阿里云（短信服务） | 发送登录与安全验证短信 | 手机号、验证码短信内容 |
| 阿里云（云服务器与数据库） | 数据同步备份、服务托管 | 前文「一、我们收集的信息」中除相机图像外的数据 |
| 指环硬件厂商 SDK | 在您的设备上与指环建立蓝牙通信、读取厂商侧测量的生理指标 | 指环设备标识、心率/血氧/睡眠等测量结果 |
此外，仅在下列情形我们会依法披露：取得您的单独同意；依据法律法规或司法、行政机关的强制要求。我们不会向境外传输您的个人信息。
五、您的权利
- 访问与更正：在 App「我的 → 个人资料」中随时查看与修改您的资料；
- 撤回授权：在手机「设置」中关闭蓝牙、位置、相机或通知权限，即可停止相应的信息采集（关闭后相关功能将不可用）；
- 注销账号：通过本政策末尾的联系方式提交注销申请。注销后我们将在合理期限内删除或匿名化您的个人信息；
- 复制与转移：您可通过上述联系方式申请获取您的个人信息副本；
- 投诉与举报：如您认为个人信息权益受到侵害，可联系我们，也可向监管部门反映。
六、未成年人
本产品面向成年人。我们不面向未满 14 周岁的儿童提供服务；若您是未成年人，请在监护人陪同下阅读本政策并在取得其同意后使用。如我们发现在未事先获得可证实的监护人同意的情况下收集了儿童个人信息，会依法尽快删除。
七、健康相关声明
App 中呈现的心率、血氧、睡眠、嗅觉测评等数据用于健康趋势的自我观察与生活方式参考，不构成任何医疗诊断、治疗建议或用药指导，也不能替代专业医疗机构的检查与诊断。本产品为健康生活类消费产品，非医疗器械。如有身体不适，请及时就医。
八、政策更新
我们可能因功能调整或法规要求更新本政策。更新后我们会在本页与 App 内提示，并更新文首的版本与生效日期。若变更会实质影响您的权利，我们将以显著方式另行通知。
九、联系我们
个人信息保护相关事宜，请联系：
运营主体：广州施迈健康科技有限公司
邮箱：info@smellingarden.com
网站：www.smellingarden.com
Smellingarden is operated by Guangzhou Smell Health Technology Co., Ltd. We offer hardware and software for olfactory training, olfactory assessment and sleep management: the smart ring collects physiological data over Bluetooth, the NFC cards record training check-ins, and both flow into the Smellingarden app. This policy explains what we collect, why, how we protect it, and how you can manage it.
1. Information we collect
We collect only what the product needs. Items marked Required are necessary to register or to use a core feature; the rest are optional.
| Category | What it includes | Status |
|---|---|---|
| Account | Mobile number (registration, sign-in, SMS codes); a third-party identifier if you use third-party sign-in; if you set a password, we store only an irreversible salted hash, never the plain password | Required |
| Profile | Nickname, avatar (emoji), gender, birthday, height, weight, stride length, WeChat ID — entered by you to personalise analysis | Optional |
| Health data | Collected by the ring over Bluetooth Low Energy: heart rate, blood oxygen, sleep sessions and stages, steps and daily activity, workouts; plus measurements you enter manually | Optional |
| Olfactory data | NFC tap records (card ID, card type, time), training progress, TDI assessment answers and scores, Smell-48 preference ratings and profile, fragrance recommendations and custom orders | Required |
| Device & app data | Ring name and identifier, firmware version, connection state; app settings, reminder rules and notification history | Required |
| Location | With your "While Using" permission, we collect and upload location coordinates for city-level environmental and sleep analysis. You can revoke this at any time in system settings | Optional |
| Camera | Used only to scan a card's QR code to read the card number; recognition happens on your device — we never capture, upload or store images | Optional |
| Feedback | Feedback you submit, plus the logs and crash information needed to investigate it | Optional |
2. How we use it
- Core features: sign-in, ring pairing, NFC check-ins, training plans, assessments and preference profiling;
- Generating your health and olfactory reports, trend analysis and personalised suggestions;
- Restoring your data when you change devices (cloud backup);
- Service notifications relevant to you (reminders, sync results);
- Security and reliability: detecting abnormal sign-ins, troubleshooting, improving the service;
- Meeting legal and regulatory obligations.
We do not use this information for advertising, and we never sell or rent it.
3. Storage and security
- Local-first: data from the ring and cards is captured and computed on your device and stored in its local database, which is the authoritative copy;
- Cloud backup: to support device migration and consistency, data is synced over encrypted transport (HTTPS/TLS) to servers located in mainland China (Alibaba Cloud). Ring time-series data is stored downsampled to 5-minute intervals; finer-grained recent data is uploaded only with your authorisation and on Wi-Fi;
- Safeguards: encryption in transit; passwords stored only as salted hashes; SMS codes stored only as irreversible digests; server-side access control and least privilege;
- Retention: kept while your account is active. After you close your account, we delete or anonymise the personal information within the shortest period permitted by law.
4. Who we share it with
| Provider | Purpose | Information involved |
|---|---|---|
| Alibaba Cloud (SMS) | Sending sign-in and security verification messages | Mobile number, message content |
| Alibaba Cloud (servers & database) | Data sync and backup, service hosting | The data listed in section 1, excluding camera images |
| Ring vendor SDK | Establishing Bluetooth communication with the ring on your device and reading vendor-measured metrics | Ring identifier, heart rate / blood oxygen / sleep measurements |
We otherwise disclose information only with your separate consent, or where required by law or by a competent judicial or administrative authority. We do not transfer your personal information outside mainland China.
5. Your rights
- Access and correction: view and edit your profile any time under Me → Profile;
- Withdraw consent: turn off Bluetooth, location, camera or notification permissions in your phone settings to stop the corresponding collection (related features will then be unavailable);
- Close your account: request it through the contact details below. We will delete or anonymise your personal information within a reasonable period;
- Copy and portability: request a copy of your personal information through the same channel;
- Complaints: contact us, or raise the matter with the competent regulator.
6. Minors
This product is intended for adults. We do not offer the service to children under 14. If you are a minor, please read this policy with your guardian and use the product with their consent. If we learn that we have collected a child's personal information without verifiable guardian consent, we will delete it promptly.
7. Health disclaimer
Heart rate, blood oxygen, sleep and olfactory assessment data shown in the app are for self-observation of health trends and lifestyle reference only. They are not medical diagnosis, treatment advice or medication guidance, and do not replace examination by a qualified medical institution. Our products are consumer wellness products, not medical devices. Please consult a clinician if you feel unwell.
8. Updates to this policy
We may update this policy as features or regulations change. We will indicate updates on this page and in the app, and revise the version and effective date above. If a change materially affects your rights, we will notify you separately in a prominent manner.
9. Contact us
For anything relating to personal information protection:
Operator: Guangzhou Smell Health Technology Co., Ltd.
Email: info@smellingarden.com
Website: www.smellingarden.com