2.1 Personal data processed when you create an IMAS account

When you create an account, we ask you to provide an account identifier (email), your name, and a password; you may also choose to provide profile information such as birthday, height and weight, gender, and activity type.

Purpose and legal basis: (a) We process your account identifier and password so you can log in; the legal basis is our legitimate interest in keeping your account secure. If you enable two-factor authentication, we process your email or phone number to send a verification code, also based on our legitimate interest in account security. (b) We process your contact information to send important security notices or notify you of material changes to this Policy; the legal basis is our legitimate interest in providing that information. (c) If you consent to receive marketing communications, we process your account identifier to send them; the legal basis is your consent, which you can withdraw at any time in your account settings. (d) If we ask for your birthday, it is to determine, based on your age and location, whether parental consent is required and to apply enhanced protections to children's accounts; the legal basis is our legitimate interest in protecting children who use the Service.

2.2 Personal data processed when you sync a device or upload activity data

You can upload activities (such as running, walking, cycling, race walking, swimming, hiking, gym activities, etc.) and activity data (such as steps, distance, pace, activity time, heart rate, location, power, cadence, etc.) from your device to your IMAS account. When syncing, we also log transmission-related information such as the sync date and time, your device's geographic location, device information, information about the network used (e.g., Wi-Fi or mobile data), and battery level. If you use our compatible devices for gait analysis or bike-fit measurement, we collect the related sensor data to provide analysis results and fitting recommendations.

Purpose and legal basis: We process this information so you can analyze your activity data, view your location on routes and segment maps, view heart-rate-related metrics, track fitness goals, and so we can help identify and resolve sync errors or issues; the legal basis is our legitimate interest in providing quality product support and improving the Service.

2.3 Personal data processed when you communicate with us

When you interact with customer service by email, phone, online, or in person, we collect your name, contact information, contact preferences, and information about the products or subscriptions you own. To improve service quality and where permitted by law, we may also record and review your conversations with support staff and analyze feedback you provide through voluntary surveys.

Purpose and legal basis: We process this information to provide customer and product support, monitor the quality of that support, and assist with repairs or exchanges; the legal basis is our legitimate interest in providing quality product support. Where a support representative logs into your account with your consent to help troubleshoot an issue, the legal basis is your consent, which you may withdraw.

2.4 Personal data processed when you purchase a product, service, or subscription

If you purchase a product, service, or subscription through the Service or customer support, we collect your name, address, email, and phone number, along with any other information required for billing. We do not view or store your full payment card information, which is handled by a PCI-compliant third-party payment processor.

Purpose and legal basis: We process this information to process and fulfill your order; the legal basis is contractual necessity. We may also process this information as part of our fraud-detection process; the legal basis is our legitimate interest in protecting ourselves and our users from fraudulent transactions. Where we process information to issue an invoice for tax reporting or at your request, the legal bases are legal obligation and contractual necessity, respectively.

2.5 Personal data processed when you use location-based features

If you choose to use location-based features of the Service (such as route recording or weather information), we collect your device's actual location in order to provide that service.

Purpose and legal basis: We process your device's location to provide the location-based service you have chosen to use; the legal basis is legitimate interest.

2.6 Third-party device and application integrations

If you choose to allow your IMAS account to access an account you have registered with another application provider, such as Strava or Garmin, we obtain relevant information from that account (such as step count, sleep information, heart rate) to supplement your activity information within IMAS. You may disconnect this integration at any time in your IMAS account settings.

Purpose and legal basis: We process this information to enrich your activity records within the Service; the legal basis is your consent, which you may withdraw at any time by disconnecting the integration.

2.7 Personal data processed to address fraud and abuse

We take steps to identify, detect, and mitigate fraud and abuse on the Service. If we suspect a fraudulent request or claim involving your account, we may process device and basic account information associated with your account, or our communication records with you, to investigate. We may also process content you provide in your account (such as activities, photos, or comments) to develop and test measures to identify, detect, and mitigate abusive content, and to enforce our Terms.

Purpose and legal basis: These activities protect our interests and those of our users and other stakeholders against fraud, breach of terms, and other harmful or unlawful conduct; the legal basis is our legitimate interest in reducing fraud and abuse related to our products and services.

Service providers: We use third-party cloud services (such as email delivery providers) to help send email notifications; these services may track whether emails are opened or links are clicked. We use third-party payment processors to handle your payment information, and may use address-verification and fraud-detection services. We use third-party cloud hosting services (for hosting, content delivery, and security) to provide the Service's infrastructure. We may also use third-party services for customer support ticketing, surveys, and usage analytics.

Other disclosures: We may process and disclose your personal information to others where: (a) we have your valid consent; (b) required to comply with a valid subpoena, court or governmental order, or other valid legal process, or to retain records to support applicable reporting and audit requirements; (c) to investigate potential fraud and enforce our terms or policies; (d) to seek available legal remedies or defend against legal claims when necessary; or (e) where you are involved in an emergency and we believe it necessary or appropriate to assist you.

If we undergo a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or equity — including in connection with bankruptcy or similar proceedings — we may transfer your personal information to an affiliate, subsidiary, or third party, provided that any entity receiving your personal information may process it only as described in this Policy, unless it notifies you and obtains your consent as required by applicable law.

Because the Service may use cloud hosting or third-party service providers located outside Taiwan, your personal information may be transferred to, and stored and processed in, other countries or regions. We take reasonable safeguards required by applicable data protection law (such as data processing agreements or standard contractual clauses) to ensure your personal information receives appropriate protection when transferred across borders.

The Service may use cookies, tracking pixels, and similar technologies to support login authentication, understand and improve your experience, perform traffic analysis, and, where you have consented, support marketing. You can manage your cookie preferences through your browser or device settings; disabling certain cookies may affect some features of the Service.

We collect data about how you use the Service, such as access times, software version, device location, language settings, user behavior (such as which features are used and how often), device and operating system information, and information about how the Service is performing. We use this data to improve the quality, security, and functionality of the Service, to develop features best suited to you and other users, and to help identify and fix stability or usability issues as quickly as possible.

Purpose and legal basis: The legal basis for processing this analytics information is our legitimate interest in understanding how users interact with the Service so we can enhance the user experience and functionality. We may use third-party analytics providers (such as web and app usage analytics tools) to help collect this information; see Section 5 above for how we use cookies in this context.

The Service is not designed for, and is not directed to, children under the age of 13, and we do not knowingly collect personal data from anyone under 13. If you are under 13, please do not use the Service. If we discover that we have collected a child's personal data without parental consent, we will take steps to delete that information. For users under 18, we apply more protective default privacy and safety settings.

We may update this Policy from time to time as we add new products, services, or applications, or as technology and law change. The "Last updated" date at the top of this page reflects when this Policy was last revised; changes take effect as soon as the revised Policy is posted. If we make a material change, we will notify you through your primary contact method, or by posting a notice on the IMAS platform websites and applications linked to this Policy, and will obtain your consent where required by applicable law.

We retain your personal data for as long as your IMAS account is considered active, or as required to meet applicable legal and regulatory obligations. See Section 11, "Managing Your Data," below for how to delete your data or account.

We do not make decisions based solely on algorithms or other automated processing that would produce legal or similarly significant effects concerning you. Where the Service offers AI-based training suggestions or equipment-fitting recommendations, these are provided as informational input only, and the final decision remains yours.

The data controller for the personal data covered by this Policy is IMOTEK Technology Co., Ltd. If you have any questions about this Policy, or wish to exercise rights of access, correction, deletion, restriction, or withdrawal of consent, please contact us at:

Email:[email protected]
Company: IMOTEK Technology Co., Ltd. (艾蒙特科技股份有限公司)

You can access and correct your profile and account information at any time in your account settings. To delete content you have uploaded (such as photos or activity records) or to request deletion of your account, you may do so in your account settings or apply through Delete Account. After deletion, we will delete your personal data and system logs within a reasonable period, except for data we are required to retain by law. Once your account is deleted, we cannot restore your data, including your account and activity records.