Privacy Policy

Version 4 · Updated July 21, 2026

Shanghai Fun Pizza Software Technology Co., Ltd. operates AISmartRun, an AI running coach app. This policy explains what data we collect, how we use it, which processors receive it, and how you can exercise your rights. AI-generated content is for training reference only and is not medical advice.

1. Data We Collect

DataWhenPurpose
Phone numberSMS loginAccount authentication and abuse prevention
Profile data such as nickname, age band, sex, height, weight, max heart rate, running history, goals, and injuriesOnboarding or profile editingPersonalized training plans, heart-rate zones, calorie estimates, and safer coaching
GPS route, distance, pace, altitude, duration, run type, and run notesDuring a recorded runRun history, summaries, maps, AI post-run review, and optional leaderboard or group features
Heart rate, cadence, steps, active energy, and watch or sensor dataWhen you start a workout on Apple Watch or connect BLE, Garmin, phone sensors, or supported glassesLive guidance, training load, and run analytics
Chat text and voice transcription textWhen you ask the AI coach a questionAI coach replies and safety review. Voice is converted by the device/system speech recognizer; our server receives text, not the recording itself.
Nutrition photo and extracted meal textOnly when you choose the photo recognition featureFood recognition and nutrition logging. We do not store the original photo; we keep the text result needed for your meal record.
App events, device model, app version, server logsUse of the app and backendSecurity, debugging, service reliability, and aggregate product analytics
Pseudonymous AI-glasses identifier, 8-character AIUI ID, and binding state (never the raw SN)The glasses hash the SN locally with an app-specific SHA-256 namespace; the server applies HMAC for its internal identity and uses a cryptographically secure random generator for the AIUI IDAnonymous use before phone binding, offline retry, de-duplication, abuse prevention, and optional account binding when a signed-in app submits the current AIUI ID

AI glasses identity and optional binding: SmartRun AIUI reads the device SN only on the glasses to calculate an app-specific SHA-256 fingerprint. The raw SN is not written to app storage, logs, UI, or a network request. The server stores only a further HMAC-derived internal key and assigns a cryptographically random current 8-character AIUI ID. That ID locates an unbound device but cannot authenticate the device or read data by itself. Binding requires a signed-in companion app, and a device that is already bound cannot be claimed by another account. Before binding, run summaries and coach memory belong to the glasses' anonymous identity. After binding, that anonymous history moves into your account. Unbinding requires verification of the current ID, changes the glasses to a fresh anonymous owner, and immediately generates a new AIUI ID so the former ID no longer works; prior history remains in the former account.

Apple Watch and Apple Health: Only after you actively start a run on Apple Watch, the app requests the heart rate, active energy, and walking/running distance needed for that workout and writes the completed workout to Apple Health. The completed summary (distance, duration, pace, heart rate, energy, and workout type) syncs to iPhone and is uploaded to AISmartRun for history and personalized training. We do not read clinical records or use health data for advertising or sale.

Garmin Connect IQ: Only after you start a workout on the Garmin watch or in the companion phone app, the watch app accesses the workout data needed for live metrics and activity recording: GPS position, distance, speed, altitude, heart rate, cadence, pressure and Pulse Ox when supported; Garmin profile heart-rate zones, max/resting heart rate and weight; and the latest Body Battery and stress values. During a connected workout, these values and derived coaching metrics are relayed through Garmin Connect Mobile to the SmartRun Android app and, when you are signed in, to our backend for the purposes listed in this policy. In standalone mode the watch app can save the workout to Garmin Connect without the SmartRun backend. Denying a permission limits the related metric but does not cause background collection before a workout starts. Data you send to SmartRun is submitted to us, not to Garmin; Garmin is not responsible or liable for our processing of that data.

2. Sensitive Data

Precise location, health and fitness metrics, nutrition photos, and injury or health profile fields may be sensitive. We process them only for the product features you choose. You can deny permissions, turn off sharing, delete records, or delete your account.

3. Storage and International Transfers

Our backend currently runs in Tencent Cloud Singapore (ap-singapore). If you use the app from another country or region, your data may be transferred to Singapore. Some AI providers process data in other regions as listed below. We use these processors only for the minimum data needed to provide the feature.

Separate third-party AI permission: Before a signed-in user sends the first AI coach message, the app identifies DeepSeek and EverMind, the specific data categories, and the purposes, and offers “Allow and Send” or “Not Now.” Until permission is recorded, the server does not call those providers and does not trigger third-party AI for new runs, weekly reports, or plans. Local run recording and non-AI features remain available. You may withdraw permission under Me → Settings & About → Third-Party AI Data Sharing; new transfers stop after withdrawal.

4. AI and Third-Party Processors

ProcessorDataPurpose
DeepSeek (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd.)The current question and recent chat, selected coach style; nickname, sex, height, weight, resting/max heart rate, longest run, 5K result, goals and streak; training/weekly insights including date, distance, pace, heart rate and cadence; daily nutrition and hydration summaries. No phone number, login credential, or raw GPS route.Only after separate permission: AI plans, post-run reviews, weekly reports, and coach replies
Tencent Cloud TTSCoach speech text without direct identifiersSynthetic voice coaching
Tencent TokenHub / Hunyuan visionNutrition photo provided by youFood and portion recognition
Tencent Cloud SMSPhone numberLogin verification code
EverMind AI / EverOS Cloud (api.evermind.ai)Pseudonymous training summaries (date, distance, pace, heart rate and cadence), AI insights, the user's question, and the AI reply. No phone number, name, login credential, or raw GPS route.Only after separate permission: long-term AI coach memory and personalized coaching context
Google Play services, Garmin Connect IQ / Garmin Connect Mobile, Rokid SDK, OpenStreetMapDevice-side location; Garmin workout, profile and sensor metrics described in Section 1; HUD or map tile data as neededLocation, watch-to-phone relay and activity recording, glasses HUD, and map display

Equivalent protection: Through applicable service agreements and data-processing terms, data minimization, pseudonymous identifiers, and access controls, we require third-party AI providers to protect received data to the same or an equivalent level as this policy and applicable law, and not to use it for advertising, sale, or unrelated purposes. If we cannot confirm that a provider continues to meet this requirement, we stop sending new personal data to it.

5. Retention

Account and profile data are kept until you delete your account. Run, chat, plan, nutrition, and AI memory records are kept until you delete the record or account. Server logs are kept on a rolling basis for security and debugging. Backups roll off automatically.

6. Your Rights

7. Children

The app is intended for adults. It is not directed to children under 14. Teenagers should use it only with guardian consent and should not rely on high-intensity plans without professional guidance.

8. Contact

Operator: Shanghai Fun Pizza Software Technology Co., Ltd.
Support email: support@huangguo.app
In-app support: Me → Settings → Contact us.

9. Updates

Material changes, such as new data categories, processors, or cross-border transfers, will be announced in the app and may require renewed consent.