Fitness Tracker with Heart Rate/Blood Oxygen/Sleep Monitor, 20+ Sports Modes Smart Watches for Women/Men, Activity & Step Tracker Smart Watch for Android/iOS Phones by TROTY

I thought it was too cheap not to have other ways than price tag to make money. I pasted the privacy statement of the app into chat gpt and this is the summary:
Based on the **Keep Health Privacy Policy** you provided, here is a summary of **potential security and privacy risks** found in the document. These are not necessarily proof of malicious intent, but they **do represent areas of concern** that could affect user privacy, especially for a health-tracking app.

—

## 🔐 **Top Potential Security and Privacy Risks**

### 1. **Extensive Data Collection**

* **Collected Data Includes**:

* Full account info (DOB, weight, gender, height, region, etc.)
* Sensitive health data: heart rate, sleep, blood oxygen, body temp, BP
* GPS location (for sports/weather tracking)
* Device identifiers: MAC address, IP, IMEI, Android ID, serial number, firmware version
* Call/SMS content, call logs, address book, notification content
* App list, phone status, system logs (e.g., restarts, crashes)

> **Risk**: Large amounts of sensitive data are collected—some of it personal, biometric, and behavioral. If compromised, it could be used to profile users or track their habits.

—

### 2. **Invasive Permissions**

The app requests access to:

* **Location** (continuous GPS access)
* **Camera**
* **Contacts and Call Logs**
* **Phone State**
* **SMS read/receive**
* **App List**
* **Suspended Window (to run in background)**
* **Notification listener**
* **Nearby Devices (for Bluetooth connection)**

> **Risk**: Some permissions (e.g., SMS, call logs, app list) are highly sensitive and can be misused for profiling or surveillance, especially on Android devices. Many of these are **not essential** for core fitness tracking features.

—

### 3. **Server Infrastructure (Data Residency)**

* Uses **Alibaba Cloud** (Chinese-owned company) for cloud storage.
* States data is generally **stored locally (by region)** but allows for **cross-border transfers with user consent**.

> **Risk**: Even if stored “locally,” using Alibaba Cloud introduces legal exposure to **Chinese cybersecurity laws**, which may require data access under government orders. Cross-border transfers also risk data passing through jurisdictions with weaker protections.

—

### 4. **Data Sharing with Third Parties**

* Shares data with:

* **Map providers**: AutoNavi (China), Google, Apple
* **Weather services**: Hefeng Internet Tech (Beijing)
* **Cloud storage**: Alibaba Cloud
* **Google Fit / Apple HealthKit** (with user consent)

> **Risk**: Data is shared with multiple third parties, and it’s unclear whether all processing is limited to what is necessary. Some third-party partners are **China-based**, increasing exposure to potential surveillance or data requests.

—

### 5. **Vague Language Around Aggregated Data**

* Claims it collects “aggregated, anonymous or de-identified” data and may use it for “analysis” and “service improvements.”

> **Risk**: De-identified data is often **not truly anonymous** and can be re-identified with enough metadata (e.g., GPS + device ID + usage time).

—

### 6. **Permanent Data Retention**

* States it may retain user data **as long as the account is active** and only deletes it **up to 90 days after deletion request**.

> **Risk**: Extended retention increases the window of exposure if a breach occurs or a third party demands access.

—

### 7. **Weak Data Security Guarantees**

* Acknowledges that while it uses encryption and security measures, it **cannot guarantee 100% security**.

> **Risk**: Standard disclaimer, but notable given the amount of sensitive health and personal data collected.

—

### 8. **Children’s Data Collection**

* Claims to prohibit account creation for users under 13 without parental consent but allows collection **if consent is given**.

> **Risk**: If implemented poorly, children’s data could be collected without proper safeguards.

—

### 9. **Limited User Control Over Server-Side Data**

* Users can request deletion, correction, or transfer, but some actions (like revoking app permissions) are complex (e.g., require factory reset or unlinking devices).

> **Risk**: Data control isn’t as user-friendly or immediate as it should be for a health app.

—

### 10. **No Independent Security Audit or Transparency Report**

* There is **no mention** of:

* Third-party audits
* Transparency logs
* Breach disclosures
* Open-source components

> **Risk**: Lack of oversight or independent verification means users must take the privacy policy at face value.

—

## 🟡 **Summary Risk Rating**: **Moderate to High**

| Risk Category | Rating | Notes |
| ———————— | —————- | ———————————————————— |
| **Data sensitivity** | 🔴 High | Includes biometric, location, health, contacts, messages |
| **Third-party exposure** | 🟠 Moderate–High | Includes Chinese services (AutoNavi, Hefeng, Alibaba Cloud) |
| **Transparency** | 🟠 Moderate | No audit, vague policy details, hard to verify practices |
| **Control over data** | 🟡 Moderate | Requires effort to delete or limit some data types |
| **Security** | 🟡 Moderate | Uses standard encryption, but no guarantees or verifications |

—

## ✅ Recommendations if You Use This App

* **Restrict permissions**: Deny access to contacts, call logs, SMS, and background location if not needed.
* **Avoid cloud sync** if possible — store data locally.
* **Review app behavior with network monitoring tools** to see where data is sent.
* **Use fake/dummy data** for profile details (e.g., nickname, weight goal) if health metrics are your only concern.
* **Regularly review and purge your data** through the app settings or deletion tools.

This fitness tracker has everything I need, heart rate, sleep, and oxygen monitoring are accurate and easy to check. The 20+ sports modes help me track different workouts, and it syncs smoothly with my phone. Lightweight, comfortable, and the battery lasts several days. Excellent value for the price.

This fitness tracker does a solid job for the price. It accurately tracks heart rate, sleep, and steps, and I like that it includes so many sports modes. The screen is bright and easy to read, and the band feels comfortable enough to wear all day. It connects smoothly with my phone and syncs data without any issues. The battery life is decent too, lasting several days on a single charge. Overall, it’s a functional and affordable option for anyone wanting to stay on top of their health and fitness goals.

Excellent watch I am very impressed and very pleased with it. My son recommend it as a fitness tracker and thus far works great. It keeps up with my fitness routines, is waterproof, the size is phenomenal not too big. I used it to also keep up with my sleep schedule, counts my calorie intake accurately is reliable easy to sink with your phone and to read it is perfect. I highly recommend this watch and is priced very reasonable.

I was looking for something small and practical to use for my daily routine and finally found it I m really impressed with this smart watch! It’s lightweight, comfortable, and the pink color looks beautiful. The heart rate, blood oxygen, sleep monitor, and step tracker are very accurate, and I love that it has so many sports modes to keep me motivated. The battery lasts a long time and it syncs easily with my phone. For the price, it truly feels like a premium watch—I definitely recommend it! I ordered in pink and I love the like pink tone