1. Overview
This Privacy Policy explains how XIRCLE ("XIRCLE", "we", "our", or "the App"), developed by CLOVERX (THAILAND) COMPANY LIMITED, collects, uses, stores, and protects information when you use the App.
XIRCLE focuses on sleep and wellness tracking, account login, and Bluetooth connection to a compatible wearable device.
2. Information We Collect
Account Information
When you sign in with Google or Apple, we may receive:
- User identifier
- Email address
- Display name
- Profile image, if provided by the provider
We use this information to create and secure your XIRCLE account.
Profile Information
You may provide profile information such as:
- Name and phone number
- Birthdate or age
- Sex or gender selection
- Height, weight, and stride length
We use this information to personalize wellness calculations and support wearable-device measurements.
Health and Fitness Information
When you connect a compatible Bluetooth wristband, the App may process:
- Sleep duration, stages, and timestamps
- Steps, distance, calories, and exercise minutes
- Heart rate, SpO2, HRV, stress score, vascular age, and skin temperature
- Device battery and connection state
Metrics are shown only when they are available and supported by the connected device.
Bluetooth and Device Information
To connect to a compatible wearable, the App may process:
- Nearby Bluetooth device name and identifier
- Signal strength and connection state
- Device battery level
- Device data packets required to display sleep and wellness information
Bluetooth data is used to operate wearable features. We do not use Bluetooth to track your physical location.
Demo User Data
Demo mode may show sample or test data for evaluation or product demonstration. Demo data is not intended to represent a real user's personal health data.
Diagnostic Data
The App may keep limited local diagnostic information to troubleshoot Bluetooth connection and wearable-data issues. Diagnostic uploads are disabled by default. If this changes, we will update this policy and inform users.
3. How We Use Information
We use information to:
- Authenticate users and maintain sessions
- Display sleep and wellness information
- Connect to and communicate with a compatible wearable
- Associate sleep and profile data with the correct account
- Improve reliability and troubleshoot issues
- Provide support and comply with legal, security, and operational requirements
We do not sell personal information.
We do not use health and fitness data for advertising or use cross-app tracking for advertising.
4. Data Storage
On Device
The App may store locally:
- Bluetooth connection state and wearable settings
- Profile settings used by the device
- Goals or display preferences
- Temporary wearable readings and local diagnostic logs
Backend Account Storage
Account and profile data may be stored on our backend systems. Sleep data stored by account is treated as health and fitness data linked to that account.
Third-Party Authentication Providers
Google and Apple process login information according to their own privacy policies. We use these providers for authentication.
5. Data Separation by Account
XIRCLE is designed to keep account and sleep data associated with the correct user. We take steps to prevent demo data or another user's information from appearing in your account and scope backend records to the authenticated user.
6. Sharing of Information
We may share information only as needed to operate the App, including with:
- Authentication providers such as Google and Apple
- Backend, hosting, security, and support service providers
- Authorities or other parties when required by law
We do not sell health data or personal information.
7. Retention
We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required for legal, security, backup, or fraud-prevention reasons.
- Account and profile data is retained while the account is active.
- Sleep data is retained while the account is active when stored on the backend.
- Local diagnostic logs are cleared through app-data removal or applicable cleanup.
- Deleted account data is deleted or de-identified within 30 days after confirmation.
8. Account Deletion and User Choices
You may request account deletion from within the App or by contacting support. We will delete or de-identify account and profile data from active systems, subject to legal, security, fraud-prevention, and backup requirements.
You may also:
- Sign out of the App
- Disconnect a Bluetooth wearable
- Stop using Bluetooth features
- Remove the App from your device
- Request access, correction, or deletion of your data
9. Permissions
Bluetooth
Bluetooth permission is used to discover, connect to, and exchange data with a compatible wearable.
Local Network
Local network access may be used during development or local testing.
Location
We do not use location for tracking. On some Android versions, Bluetooth scanning may require location permission because of platform requirements.
10. Children's Privacy
XIRCLE is not intended for children under 13. We do not knowingly collect personal information from children under 13.
11. Security
We use reasonable technical and organizational measures to protect personal information. However, no system is completely secure. Users should protect access to their account and device.
12. International Data Transfers
Depending on our service providers and hosting infrastructure, information may be processed in countries other than your country of residence. Where required, we will use appropriate safeguards.
13. Changes to This Policy
We may update this Privacy Policy when we release features or change how the App processes data. If changes are material, we will provide notice in the App or through another appropriate channel.
14. Contact
For privacy questions, data requests, or account-deletion support, contact CLOVERX (THAILAND) COMPANY LIMITED at admin@xircle.health.