Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to all websites, web applications, mobile applications, and other software products published or operated by Foshan Nanhai Shanmu Technology Co., Ltd. under the ShanMu brand. This includes our main website at www.shanmu.mom and any related domain or subdomain that may be added from time to time.

The policy does not apply to websites or services that are operated by other companies, even if you reach them through a link on our pages. If you follow a link away from our site, we encourage you to read the privacy policy of that other service before you share any personal information with it. We are not responsible for how an unrelated third party handles your data.

In this policy, the words we, us, and our refer to Foshan Nanhai Shanmu Technology Co., Ltd. and the developer ShanMu. The words you and your refer to any person who visits our website, installs one of our applications, or otherwise makes use of our services.

2. A Short Summary

If you only want the essential points, here is a brief overview of the most important things to understand about privacy at ShanMu.

• We collect the minimum amount of information needed to run our services.
• We do not sell your personal information to anyone, ever.
• Wellness and health data is treated with extra care and extra protection.
• You can request a copy of your data or ask us to delete it at any time.
• Anyone under 16 is asked not to use our services without a parent or guardian.

The rest of this policy describes these points in more detail. Please keep reading if you want the full picture of how we work with your data.

3. Information We Collect

The information we collect can be grouped into a few broad categories. The exact set of information we collect about a person depends on which services they use and how they choose to interact with us. In almost all cases we keep our data collection deliberately small, because a wellbeing product that quietly gathers too much information is a product we do not want to build.

The main categories are: information you give us directly, information we collect automatically when you use our services, and wellness or health information that you choose to share. Each of these is described in its own section below. We never collect information that we do not actually need to provide the service you asked for.

4. Information You Give Us Directly

When you create an account, contact our team, or purchase one of our products, you may choose to provide certain details. This information is usually limited to what is required for the interaction to work.

• Your name, in cases where we need to address you by name.
• Your email address, so that we can confirm your account and reply to you.
• A password, which we store only in a strongly hashed form and never in plain text.
• Your message content or subject line when you write to our support team.
• Payment information, which is processed by a trusted payment provider and is never stored on our own servers.
• Optional profile details such as your preferred language or time zone.

You are never required to share more than the minimum needed for the feature you are using. If a field is optional, we say so clearly at the point where you would fill it in, and leaving it blank will not prevent you from using the core functions of our products.

5. Information Collected Automatically

Like most modern services, we collect a small amount of technical information automatically when you visit our website or use an application. This helps us keep the service stable and understand broad patterns of use without watching any single person.

• Your device type, operating system, and browser details.
• A general indication of your region or country, never an exact address.
• Standard server logs, including the date and time of your request.
• How our app behaves on your device, such as whether it crashes or runs smoothly.
• Which pages or features you visit, in aggregated form.

This automatic information is used to notice problems, improve performance, and understand which features are genuinely useful. We do not use this technical data to build a profile about you or to follow you across other websites.

6. Wellness and Health Information

Because our products focus on rest, breathing, sleep, and habits, some of them may touch on what is called health or wellness data. This can include things like how long you slept, how many mindful minutes you practiced, your stated feelings in a journal, or the results of a wearable integration.

We treat this category with special care. We only collect wellness data when you explicitly choose to record it, and we use it only to provide the feature that you asked to use. By default, sensitive wellness data stays stored on your own device if you are using a local-only mode. When you choose to sync it to our servers, it is encrypted during transfer and at rest, and you can remove it at any time.

We never sell wellness data, and we never use it for advertising. Any reports we create for corporate programs are aggregated and anonymised so that no individual person can be identified from the numbers.

7. How We Use Your Information

We use the information we collect for a limited set of purposes that all serve you directly. We do not use your data for purposes beyond those described here unless we ask for your separate permission first.

• To create and secure your account across our services.
• To deliver the specific features and content you request.
• To respond to your questions, requests, and support tickets.
• To process a purchase and provide receipts or invoices.
• To keep our software secure and to detect unusual use.
• To measure service reliability and improve performance.
• To comply with laws, contracts, and our own record keeping duties.
• To send you important operational notices about your account or subscription.

When we send a product update or a service notice, we do so because you are an active user of that product and the note is necessary. We do not add your address to marketing lists without your clear and separate consent.

8. When We Share Information

We view your data as belonging to you, so we share it only in narrow, careful circumstances and never for money. When we do share, we share only the minimum needed and we require the recipient to protect it.

• We share with service providers who help us run the service, such as hosting and payment processing, under strict agreements.
• We share when the law clearly requires it, such as to answer a valid court order.
• We share with your consent, when you ask us to connect a service or send something on your behalf.
• We share in aggregated form, where individual people cannot be identified.

We do not sell, rent, trade, or loan your personal information to any advertiser or data broker. If we ever believe we must share information in a way that is not described above, we will seek your permission first unless the law forbids us from doing so.

9. Cookies and Similar Technologies

Our website may use small text files called cookies and similar storage technologies to remember choices you have made and to keep the site working correctly. These are a normal part of operating a modern website.

The cookies we use are mostly functional: they remember your language choice, keep you signed in while you move across pages, and help with basic security. We do not use invasive tracking cookies that follow you across the internet. If you prefer, you can disable cookies in your browser settings, and most of our site will still work, though some personalised features may become limited.

Third party services we rely on, such as hosting analytics, may set their own cookies. You can learn more about those in the section on third party services, and you can always clear cookies from your browser at any time.

10. Privacy for Children

Our wellbeing products are designed for adults and are not aimed at children under the age of 16. We do not knowingly collect personal information from children below that age. If a child does try to create a profile on our service, we aim to remove that information as soon as we become aware of it.

If you are a parent or guardian and you believe that your child has shared personal information with us without your agreement, please write to team@shanmu.mom. We will work carefully to delete the information and to help you understand how it came to be shared, so that we can prevent it from happening again.

11. Where Data Is Stored

Our servers are hosted in secure data centers, and the primary location for storage is chosen with the safety and speed of our users in mind. Because our team is based in China (CN) and serves people around the world, some data may be processed in a country outside of your own.

In every case we apply protections that are designed to keep your information safe regardless of where servers sit. We encrypt data in transit and at rest, limit access to a small number of responsible people, and follow the standards that apply to a company of our size. More detail on cross border transfer can be found in the section on international data transfers below.

12. How We Protect Your Data

Protecting data is a serious responsibility, and we approach it with the same quiet care we put into our products. We use several layers of protection to keep information away from anyone who should not have it.

• Encryption in transit using secure connections to our servers.
• Encryption at rest so stored data cannot be read without the proper keys.
• Passwords stored only as secure mathematical hashes, never as plain text.
• Limited access, so only a small number of trusted staff can reach personal data.
• Regular review of our permissions, logs, and infrastructure.

No system is completely immune to risk, and we cannot promise a perfect guarantee of safety. But we work continuously to meet a high standard, we review our practices regularly, and if we ever discover a breach of data, we will notify affected people promptly and explain the steps we have taken.

13. How Long We Keep Data

We keep personal information only for as long as it is genuinely needed for the purpose for which it was collected. When that reason ends, we delete or anonymise the data.

Account information is kept while your account is active, so that you can keep using the service without interruption. If you close your account, we delete or anonymise the personal data tied to it after a short holding period, which we keep only long enough to handle any billing or legal matter. Support messages are kept for a reasonable period so we can refer back to a prior conversation, then deleted. Aggregated, anonymised statistics may be kept for longer because they no longer identify any person.

14. Your Rights and Choices

Depending on where you live, the law may give you specific rights over your personal information. We respect these rights wherever you are. You can ask us at any time to do any of the following.

• Give you a copy of the personal data we hold about you.
• Correct information that is wrong or out of date.
• Delete your data where we no longer need it.
• Limit how we process your data in certain situations.
• Object to a particular use of your data.
• Move your data to another service in a portable format.
• Withdraw a consent you previously gave us.

To make any of these requests, simply contact us using the details in the contact section at the end of this policy. We will respond within the time allowed by law, and we will never punish you for asking to exercise your rights. If you feel we have not handled your request fairly, you also have the right to complain to your local data protection authority.

15. International Data Transfers

Because we serve users in many countries, information you share may be transferred to and processed in a country that is different from the one where you live. This may include a country whose data protection rules differ from those in your own country.

When we make such a transfer, we apply safeguards designed to keep your data protected to a consistent high standard no matter where it is stored. This includes using contracts that bind our processors to the same care we owe you, keeping encryption in place, and limiting access to the few staff who truly need it. If you have questions about a specific transfer, please contact us and we will be glad to explain the safeguards we rely on.

16. Third Party Services

To run a dependable service, we occasionally work with trusted third party providers. These providers help with things like hosting the website, measuring site performance, processing payments, and delivering transaction emails. We choose providers carefully and we hold them to written agreements that require them to protect your data and to use it only for our stated purposes.

These third parties may have their own privacy policies, accessible on their own websites. We encourage you to read them when you have a moment. We are not responsible for how those separate providers handle their own data, but we take reasonable steps to confirm the providers we rely on meet our expectations for security and accountability.

17. Business Transfers

In the unlikely event that Foshan Nanhai Shanmu Technology Co., Ltd. is involved in a merger, acquisition, restructuring, or a sale of some or all of its assets, the personal data we hold might be transferred as part of that transaction.

Should that happen, we will take reasonable steps to ensure that any new owner continues to protect your data in line with this policy, or in line with a revised policy that is at least as protective as this one. We will also make every reasonable effort to notify you of the change, through the website or by email, before your data is put to a materially different use.

18. Changes to This Policy

From time to time we may update this Privacy Policy to reflect changes in our services, the law, or our own practices. When we do, we will revise the date at the top of this page to show when it was last updated.

If a change is significant, we will make a reasonable effort to draw your attention to it, for example by posting a notice on our website or sending you an email if we have your address. Continued use of our services after a change takes effect means that you accept the updated policy. We encourage you to review this page from time to time so that you always know how we handle your information.

19. How to Contact Us

If you have any question about this Privacy Policy, about the information we hold on you, or about any privacy concern at all, please do not hesitate to reach out. Our team answers every message and treats each one with care.

We would rather you ask a question too early than too late. Privacy matters, and it matters to us, so we will always take the time to give you a clear and honest answer.