This Notice covers optional Health processing in Photo Atlas 2.0.0, displayed as Journey Poster in English, and supplements the Privacy Policy. Basic account terms do not replace legally required separate consent.
1. Information and Purpose
After your voluntary choice and consent, we read selected HealthKit workouts/routes and walking, running or cycling distance and available speed, including type, source/identifier, start/end, duration, pauses, elevation and timestamped coordinates, altitude and accuracy. This supports workout review, photo association and works, not unrelated health reads, Health writes/deletion or live tracking.
Routes, places, times and statistics may reveal sensitive location or routines. Results may be inaccurate and are not medical advice, training prescriptions, navigation, surveying or safety guidance. Refusal or withdrawal does not disable ordinary photo functions.
2. Local Processing, Necessary Requests and Works
Raw Health records, workout statistics, content-association records, edits and works stay in an account-isolated protected local workspace excluded from backup, App CloudKit, ordinary summaries, product analytics and crash attachments. Limited action analysis under the combined authorization follows Section 3. Billing uses only account and necessary ordinary settlement information, not Health identifiers, workout times, full routes or Health statistics.
Local processing can still use networks: Apple Maps processes necessary coordinates/regions; Microsoft Planetary Computer receives geographic regions, search parameters and IP/network information needed for terrain and imagery, not photo originals, account credentials, complete route points or workout statistics. A region can still reveal workout location. Recipient and international arrangements require the relevant prior notice and legally required consent; this Notice does not authorize arbitrary disclosure. Combined authorization for workout processing and feature-use analysis does not replace the independent choice for Microsoft terrain and imagery services; those services retain their own notice, legally required consent and separate withdrawal.
Works you save can contain sensitive routes or statistics. System Photos synchronization follows your Apple settings, and recipients independently process copies you share. The App does not automatically upload workout works to cloud history. Newly composed motion is silent; App history does not back up complete dynamic works.
3. Feature-Use Analysis and Combined Authorization
After you expressly agree to the combined workout-processing and feature-use-analysis arrangement, we record actions in workout review and work creation, their occurrence times, route source, template, App version, results and necessary operation timings, linked to necessary account, Journey and workflow identifiers. We use these to check workflow completion, understand template use and improve rendering and saving reliability. These records may reveal your use of workout features and are handled with restrictions appropriate to sensitive associated information. They do not include raw Health records, workout start/end times or measurements, route coordinates, photo content, titles, place descriptions or filenames. They are not used for advertising, marketing or profiling unrelated to the workout service. They are sent to our business servers and processed for these limited purposes by us and Alibaba Cloud as our infrastructure provider, without third-party advertising or analytics services.
Before enabling the workout features covered by this Notice, you must expressly confirm both workout-information processing and the feature-use analysis described above. One confirmation covers both; subsequent relevant actions are then recorded automatically, without backfilling earlier actions. Neither is enabled before confirmation. If you decline or withdraw this combined authorization, the relevant workout processing and analysis will not start or will stop; ordinary photo features and legally protected paid entitlements are unaffected. You may withdraw through the corresponding App management option or the contact channels stated here. We must stop the relevant processing, analysis collection and transmission, clear unsent records, and delete or lawfully anonymize analysis details and intermediate records still linked to you, as required by law. Necessary transaction, security and consent evidence is retained separately for its limited purposes without adding Health-analysis labels. This arrangement does not limit your statutory personal-information rights or remedies.
For the workout-service analysis described here, we retain action records and necessary associations long term while the service-checking, troubleshooting and quality-analysis purposes described above continue and retention remains necessary, subject to review of that continuing necessity. When the purpose is fulfilled, retention is no longer necessary, you withdraw the relevant consent, delete your account or make a lawful deletion request, we delete or anonymize analysis records still linked to you as required by applicable law. Necessary transaction, security and consent evidence follows its separate purposes and applicable retention periods; analysis does not justify expanding its scope or retaining it indefinitely.
4. Withdrawal, Deletion and Contact
System Health permission, the combined workout-processing and feature-use-analysis authorization, and saving a work are separate choices. Manage system read permission, and use corresponding controls actually available in your App or zack@chongmuec.com to request cessation, local cleanup or lawful deletion without deleting the whole account or supplying raw Health records as proof.
You may request deletion of specified personal information at zack@chongmuec.com, identifying the account and requested scope. After necessary identity and scope verification, we handle the request manually and promptly and inform you of the outcome. A targeted request concerns only verified data belonging to you within that scope; it does not delete the whole account or unrelated data. We explain and restrict processing of any necessary records that must lawfully be retained. Data held only on your device must be handled through that device; we will help explain the available means. You need not provide raw Health records, passwords or verification codes to make a request.
Deleting specified existing records is distinct from withdrawing consent or stopping future collection. We address each according to your actual request. If you also request withdrawal or cessation, we handle that request as required by law; deleting existing records alone does not discharge our duty to stop processing when required.
Withdrawing system Health read permission or signing out does not itself erase existing local workout copies. Account-deletion cleanup includes related workout copies on the current device; pending or failed cleanup is reported. Cleanup does not delete source Health records, Photos, external copies or all independent geographic caches. Cleanup, uninstallation or device change can make files unavailable; Restore Purchases does not restore workout data. Necessary retention and request periods follow the Privacy Policy and applicable law.
Material changes of purpose, categories or recipient require applicable fresh notice and choice. The operator is Shanghai Chongmu E - Commerce Co., Ltd.; contact and remedies are provided in the Privacy Policy.