Privacy policy
1. General
This Privacy Policy (the “Policy”) describes how we collect, store, and process personal data of users of the official BYMER website, the BYMER mobile application, and related services (together, the “Service”). By using the Service, you confirm that you have read this Policy and agree to its terms where permitted under the laws of the Republic of Kazakhstan.
2. Data controller
The data controller is the owner of the BYMER trademark and ecosystem. Location: Republic of Kazakhstan. For personal-data and Policy questions, use the contacts in section 14. Full legal name, registered address, and bank details can be provided on written request to the email below.
3. Data we process
Depending on how you use the Service, we may process:
- identity and contact data: name, phone number, email (if you provide them);
- health profile fields: sex, height, weight, age (if set in the app);
- data from the BYMER band synced to BYMER: heart rate, stress, blood oxygen, HRV, sleep, steps, activity, temperature, and other metrics supported by the device and app;
- content you submit in the app (e.g. photos or text for nutrition estimates, if you use that feature);
- data from Apple Health (HealthKit) on iOS devices — if you enable sync and grant access to selected categories (e.g. steps, heart rate, sleep, workouts, active energy, and others supported by the app);
- technical data: device type, OS version, identifiers needed for sync and accounts.
The exact fields depend on the app version and your settings. We do not collect more than needed for the stated features.
4. Purposes
We process personal and health-related data to:
- provide band and BYMER functionality;
- calculate and show activity, sleep, strain, and nutrition in the app;
- improve reliability and quality, including in de-identified or aggregated form;
- inform you about updates, device behaviour, and material Policy changes, as allowed by law;
- sync metrics between BYMER and Apple Health — if you enable this feature and grant the relevant permissions in iOS.
5. Not a medical device
The BYMER band and BYMER are not medical devices and are not intended to diagnose, treat, or prevent disease. All metrics are informational and wellness-only and do not replace medical advice. Decisions about treatment, therapy, and exercise should be made with healthcare professionals.
6. Apple Health sync
On iOS, BYMER offers optional sync with the Apple Health app (HealthKit). It works only after your explicit consent: iOS shows a permission prompt for specific data categories, and you choose what to share.
Depending on the app version and your settings, sync may include:
- reading data from Apple Health — to display and complement metrics in BYMER (e.g. steps, heart rate, sleep, workouts, active energy, and other permitted categories);
- writing data to Apple Health — if you enable exporting metrics from the BYMER band or Bymer App into Apple Health.
Apple Health data is processed under this Policy and Apple’s HealthKit rules. We do not use health data from Apple Health for advertising, do not sell it, and do not share it with data brokers. You can change or revoke access at any time in iOS: Settings → Privacy & Security → Health → BYMER (or in the Health app → Data Access). After permissions are revoked, sync stops; data already stored in BYMER or on our servers is handled under sections 8 and 10 of this Policy.
Apple Health is stored on your device and managed by Apple. BYMER does not control Apple’s storage or policies for the Health app; Apple is responsible for HealthKit on your device.
7. Geolocation (location data)
The BYMER app may request access to your device’s location data. We use geolocation only to power app features and do not sell this data to third parties.
What geolocation is used for
Connecting the band via Bluetooth. On some Android devices (including Samsung), the system requires location permission to discover and connect to Bluetooth devices (fitness bands). In this case the app does not track your movements for advertising or analytics — access is needed only for Bluetooth to work.
Workouts and route on the map. When recording a workout, the app may determine your location to build a route, display it on a map, and calculate distance and pace.
Background access (when needed). If you record a workout and minimize the app, BYMER may continue receiving coordinates in the background so the route is recorded without interruption. Background access is requested only when using the relevant features and only with your consent.
What data is collected
- approximate or precise coordinates (latitude and longitude);
- data related to the workout route (track points, distance, time).
How data is stored and shared
- workout route data is stored on your device and/or in your in-app account (if you are signed in);
- geolocation is not used for advertising and is not shared with ad networks;
- data may be sent to our servers only for sync and app features (e.g. saving workout history) if you use an account.
Your choice
You may decline location access or revoke it in your phone settings. Without permission:
- connecting the band via Bluetooth may be unavailable on some phones;
- route recording and the map in workouts will not work.
Managing permissions: Settings → Apps → BYMER → Permissions → Location.
8. Storage and security
We use organizational and technical measures reasonably expected to protect data from unauthorized access, alteration, or disclosure. Data may be stored on our servers and with infrastructure partners under applicable law. Access is limited to authorized staff and contractors bound by contract and confidentiality.
9. Sharing with third parties
We do not sell your personal data. Sharing may occur with contractors necessary to run the Service (e.g. hosting; de-identified analytics if added — with an updated Policy); or when required by authorized authorities in Kazakhstan as expressly provided by law.
Orders on Kaspi.kz are governed by Kaspi’s terms and privacy policy. Payment and delivery details you enter on Kaspi are processed by Kaspi as an independent controller.
10. Your rights
You may:
- request information about data we process;
- request correction of inaccurate data;
- request deletion and cessation of processing by emailing bymerqz@gmail.com;
- withdraw consent where consent was the basis, subject to legal and contractual limits.
We aim to respond within 30 calendar days unless the law requires otherwise. We may be unable to delete data we must retain by law.
11. Cookies and analytics on this site
The static BYMER landing site does not use first-party cookies or third-party web analytics in its typical setup. If we add forms, widgets, or trackers, this section will be updated and, where required, we will show a consent banner.
12. Liability
BYMER is not liable for leaks or distortion caused by third parties outside our control, or for misuse of the band or app. Do not share your account access and keep BYMER updated.
13. Changes
We may update this Policy; the current version is always on this page (privacy.html). Material changes may also be reflected in the app or on the site. Continued use after a new version is published means acceptance where the law does not require separate explicit consent.
14. Contact
Personal data and Policy questions:
bymerqz@gmail.com
Phone: +7 706 658 0299
Website: BYMER home
