SitSense Privacy Policy

Effective date: 19 August 2026
Version: 2026-08-19

This Policy applies to the SitSense app and services connected to the app.

Data we collect

We collect data according to the features you use, including:

• account data such as name, email, profile image, user ID, language, time zone, authentication data, sessions, IP address, user agent and security records;
• data from a sign-in provider you choose, excluding your password for that provider;
• a passkey public key and technical credential data, excluding biometric data held by your device;
• profile data you provide, such as gender, birth year, height, weight, sitting hours, goals and settings;
• device and sitting data such as pressure signals, weight distribution, calibration, sitting time and duration, classifications, scores, statistics, alert responses, device identifier, model, firmware, battery, signal and pairing status;
• activity and progress generated when you use a feature;
• a notification token and preferences when notifications are enabled;
• a chair photo and file data when a user authorised for the research workspace chooses to take or upload one; and
• technical data, error logs, and data you choose to send when requesting support.

We do not store passwords in readable form, sell personal data, or use health data for advertising or tracking across apps or websites.

Device permissions

Depending on your operating system, device and the feature you choose, the app may request:

• Bluetooth, to discover, connect to and communicate with a SitSense device;
• notifications, to deliver alerts and status information you enable;
• location on Android versions that require it for Bluetooth device discovery only; we do not use this permission to read or store your actual location;
• camera or photo-library access when a user authorised for the research workspace chooses to add a chair photo; the app does not access other photos that you do not select; and
• Apple Health or Health Connect access when you choose that connection, which may include reading steps, heart rate and workouts or writing sitting time and stretch activity you authorise.

The current app version does not yet read or write Apple Health or Health Connect data through a native SDK. Merely displaying a connection screen or status does not give us data from those services.

This app version does not use contacts or the microphone and does not enable external AI chat, clinic sharing, paid in-app subscriptions, advertising or cross-app tracking. If these practices change, we will update this Policy and obtain any permission or consent required before collecting additional data.

Purposes and legal bases

We use data to create and secure accounts, provide the service, connect devices, analyse and display sitting results, operate a research workspace a user chooses to use, manage settings and notifications, provide support, prevent fraud, troubleshoot, comply with law, and establish or defend legal rights.

Depending on the processing, we rely on a contract or steps requested before a contract, consent where required, legitimate interests, or legal obligations. You may withdraw consent without affecting processing already carried out.

Automated processing

We use company-controlled algorithms and models to classify weight-distribution patterns, calculate scores and display suggestions. Processing may occur on a device, phone or our cloud. Results may be inaccurate and are not used for decisions producing legal or similarly significant effects concerning you.

Disclosure and transfers

We may disclose necessary data to providers of infrastructure, storage, security, authentication or support; advisers subject to confidentiality; a business transferee; or authorities and other persons where required by law. Processors acting for us must follow defined instructions, purposes and safeguards.

Some providers may process data outside Thailand. For a transfer, we use safeguards or another basis permitted by applicable law and limit the data to what is necessary.

Retention and deletion

We retain data for as long as necessary or permitted, considering the purpose, nature and sensitivity of the data, risk, security, disputes, backup cycles and applicable legal periods.

In general, account and service data is retained while an account is active. Detailed data may be deleted, aggregated or de-identified when no longer needed. Legal, security, consent and audit records may be retained for as long as permitted or required by law.

You may request account deletion through the in-app privacy menu. After confirmation, the account is disabled and data enters the deletion process within the period required by law. Data required for law, security, disputes or audit may be retained with restricted use. Backups expire under system cycles.

Your rights and choices

Subject to law, you may request access, a copy, portability, correction, deletion or de-identification, restriction, or object to processing; withdraw consent; and complain to the Personal Data Protection Committee of Thailand.

You can update data and settings, disable permissions, withdraw consent, export data or delete your account. A feature that requires data or a permission you disable may no longer work.

Use the in-app tools or email [email protected]. We may request information reasonably necessary to verify identity and prevent disclosure to another person.

Security

We use technical and organisational measures appropriate to risk. No system can guarantee complete security.

The service is not designed for children. Where applicable law requires authority or consent from a legal representative, that requirement applies.

Changes

We may update this Policy as the service, law or providers change. We will display the new date and version and obtain new consent where required by law.

Controller and contact

SITSENSE HEALTH Co., Ltd. (บริษัท ซิทเซนส์เฮลท์ จำกัด)
800 Ashton Chula-Silom Building, Room 419, Rama IV Road, Si Phraya, Bang Rak, Bangkok 10500, Thailand
Email: [email protected]

This English version is provided for convenience. To the extent permitted by law, the Thai version controls if there is any inconsistency.