Version v2.1 | Published: October 1, 2026 | Effective: October 1, 2026
Important notice (please read carefully):
"Hui Chi Hui Lian" is a healthy-eating and fitness management tool that processes data primarily on-device. Except when you actively use voice search (audio is transcribed by Apple's servers) and the workout route map (map tiles provided by Apple Maps / AMap), we do not operate our own servers and we do not collect, upload, or store your health and personal data. All of your records — meals, workouts, body weight, menstrual cycle, and so on — are stored in encrypted form exclusively on your own device.
This policy is drawn up in accordance with the Cybersecurity Law of the People's Republic of China, the Data Security Law, the Personal Information Protection Law (PIPL), the Provisions on the Scope of Necessary Personal Information for Common Types of Mobile Internet Applications, and the Apple App Store Review Guidelines. Clauses of material importance to you are highlighted in bold.
1.1 This policy applies to the "Hui Chi Hui Lian" mobile application distributed through official channels such as the Apple App Store (the "App"), together with its companion Apple Watch app, lock-screen/home-screen widgets, and Live Activities (Dynamic Island).
1.2 The App is an individual-developer product. The personal information handler (developer) is: Hua Yanming (花延明), brand/public name "Nisen & Sea (尼森与海)"; the seller name lawfully displayed on the App Store page shall prevail.
1.3 Contact channels:
1.4 This policy does not apply to third-party services you open or share to from the App (such as Apple Health, Apple Maps, AMap, or the system share sheet). Those services are governed independently by their own operators and privacy policies.
The App does not provide account registration or sign-in and does not collect your name, mobile phone number, email address, or government ID number, and sets no user password. All local features are available immediately after download. In-app purchases are processed by Apple; we never touch your payment account information.
To provide diet and training management, you may enter the data below. It is encrypted with AES-256 and kept solely in the local database on your device; it is never uploaded to our servers or any third party's servers (except when you actively use system sharing or data export):
| Category | Contents | Purpose |
|---|---|---|
| Basic body data | Sex, date of birth/age, height, weight, body-fat percentage, neck/waist/hip and other circumferences, activity factor | Calculating BMR/TDEE and daily nutrient targets |
| Goal data | Fat-loss / muscle-gain / maintenance goal, target weight and deadline, diet-plan parameters | Generating a personalized deficit/surplus plan |
| Diet records | Food names, portions/grams, meal type, time, barcodes, food photos | Logging and statistics for calories and macronutrients |
| Training records | Templates, exercises, sets, reps, weight, RPE, duration, estimated burn | Volume statistics and progressive-overload suggestions |
| Outdoor running data | Foreground GPS route, distance, pace, cadence (recorded only during exercise) | Drawing the route and computing running metrics |
| Daily health records | Water intake, urine color, sleep duration/quality, mood, meditation, stretching, supplements | Lifestyle tracking and reminders |
| Women's health data | Menstrual cycle, periods and related symptoms (only if you enable the feature) | Cycle prediction and related prompts |
| Media files | Progress photos, avatars, food photos, exercise demonstration images | Visual logging and before/after comparison |
| Preferences | Units, reminder times, theme, font size, plan options, etc. | Running the App according to your preferences |
The App does not do any of the following:
Under the PIPL, health/medical data, biometric information, location tracks, and information of minors under 14 are sensitive personal information. Sensitive processing in the App is as follows:
All processing of the above is based on your separate consent (obtained through the first-launch privacy prompt and the system permission dialog at first use of each feature). Declining a permission does not affect features unrelated to that permission.
The App follows the "minimum necessary" principle: no permission is requested before the first-launch consent page. Permissions are requested on demand and can be withdrawn at any time in system settings; withdrawal does not affect local processing already completed.
| Permission | Scenario | Refusable? |
|---|---|---|
| Camera | Food/progress photos, barcode scanning | Yes — pick from album or search manually |
| Photo library (read/write) | Selecting photos, saving exported charts | Yes — affects only images |
| Microphone + speech recognition | Speaking food names for search; audio transcribed by Apple | Yes — use text input |
| Location (foreground only) | GPS route/distance/pace for outdoor runs and walks | Yes — use indoor mode (no route) |
| Health (HealthKit / Health Connect) | Read/write steps, heart rate, sleep, weight, nutrition, water, workouts | Yes — all can be logged manually |
| Notifications (incl. exact alarms) | Local diet/training/water/sleep reminders | Yes — affects only reminders |
| Biometrics (Face ID/fingerprint) | Local identity check before sensitive operations such as export | Yes |
| Physical activity recognition | Step counting and workout detection (Android) | Yes |
The following system or third-party services are used only where functionally necessary, and we do not provide your health records to them.
| Service/SDK | Provider | Purpose | Data possibly involved | Privacy policy |
|---|---|---|---|---|
| Apple Speech recognition | Apple Inc. | Voice food search transcription | Voice audio, device language | apple.com/legal/privacy |
| Apple Maps (MapKit) | Apple Inc. | Workout route tiles on iOS | Requested map region, coarse device location | Same as above |
| AMap SDK (Android only) | AutoNavi / AMap Co., Ltd. | Workout route tiles on Android | Device identifiers, network type, requested map region, location (when map features are used) | lbs.amap.com/pages/privacy |
| HealthKit / Health Connect | Apple Inc. / Google LLC | Health data read/write interchange | Steps, heart rate, sleep, weight, nutrition, water, workouts (within your authorization only) | Apple / Google |
| StoreKit / in-app purchase | Apple Inc. | Lifetime membership purchase and restore | Transaction receipt, Apple ID account information (processed by Apple) | apple.com/legal/privacy |
| System TTS / local notifications | Device operating system | Workout voice cues, local reminders | Cue/notification content is generated on-device and never uploaded | System provider policy |
HealthKit / Health Connect data is used strictly within the read/write scope you authorized. It is never used for advertising, never sold, never used for profiling, and never shared with third parties (other than the system health platforms themselves). The App does not read health data proactively in the background.
Maps load only on pages where you actively view a running route. The AMap SDK initializes only after you accept this policy, per its compliance requirements. We do not provide your diet or workout records to the map provider.
The App sells only a one-time, non-consumable "Lifetime" membership; there are no auto-renewable subscriptions. Purchases, charges, and refunds are handled by Apple under App Store terms.
To allow smooth future use of cloud backup, cross-device sync, and stability improvements, the App retains code for cloud sync (Tencent CloudBase), crash reporting (Sentry), and remote configuration. However, in this release, without configured service credentials, these capabilities do not initialize, make no network requests, and collect no information. If ever enabled, we will update this policy, list providers/fields/purposes item by item, and obtain your consent again.
The App itself never transmits your information abroad. The following system-provider scenarios may involve cross-border transfers, separately disclosed here:
Apart from these system services, no other outbound transfer occurs. Using voice search and maps constitutes acknowledgement of these system services' data handling.
Data remains local while you use the App. It is deleted and unrecoverable when: (1) you uninstall the App; (2) you run "Clear all data" under "Profile › Data Management"; (3) you delete an individual record. Because storage is local and encrypted, we hold no copy of your data and cannot restore it after deletion; please use the export feature for your own backups.
We apply encrypted storage, local key isolation, biometric verification, backup exclusion, and jailbreak/root risk warnings, but no internet or electronic storage is absolutely secure. If the device is stolen, jailbroken/rooted, or unlocked by someone else, local data may still be accessed directly. Please set a device passcode and keep the device safe.
Under Articles 44–50 of the PIPL, you have the rights below. Since all data resides on your own device with no account system, most rights can be exercised instantly in the App:
We will respond within 15 working days after receiving and verifying your request.
The App is primarily intended for adults. Minors under 14 must use it together with a guardian who has read and consented to this policy. We do not knowingly collect personal information and provide no features based on minor profiling. If a guardian discovers that a minor's information has been processed without knowledge (in practice the data resides only on that device), contact us via section 13 and we will guide local deletion. The App's age rating is as displayed on the App Store page.
Calorie, nutrient-target, and training-volume results are computed locally in real time from publicly available general formulas (e.g., the Mifflin-St Jeor BMR equation, metabolic equivalent tables) and the parameters you enter. This is not "automated decision-making" under the PIPL: the results do not determine any transaction, pricing, or differential treatment. You can change the inputs at any time or ignore the suggestions. Detailed methodology is available on the in-app plan explanation pages or on request.
We may revise this policy from time to time. For material changes (such as substantial changes to purposes, data types, or sharing scope), we will re-obtain your consent prominently in the App (a pop-up); without your consent, the original policy continues to apply. The latest version number and effective date appear at the top; previous versions are available on request.
For any questions, opinions, complaints, or reports about personal-information processing, contact us via the channels below; we reply within 15 working days:
You also have the right to lodge a complaint or report with the authorities responsible for personal-information protection.
Health notice: The diet, nutrition, and exercise information and computed results are general health-management references only. They do not constitute medical diagnosis, treatment, or medication guidance and cannot replace professional advice from physicians and registered dietitians. If you are pregnant/breastfeeding, have chronic conditions or eating disorders, or take medication, consult a qualified medical professional first. Exercise carries injury risk — warm up, stay within your limits, and stop and seek care immediately if you feel unwell.