Privacy statement

Last Updated: September 2026

 

A. Collection of non-personal information and processing

1. If users merely browse the website of Macao ONE Account (hereinafter referred to as “this website”) but do not use the services of this website nor submit applications, they will not be required to enter their personal information and this website will not collect any personal identifiable information of users. However, the computer system used by this website automatically records the Internet domain name, IP address and region of the users, the start and end dates and time of visits, and the visited websites. Under general circumstances, the Public Administration and Civil Service Bureau (hereinafter referred to as SAFP) only uses such information for statistical purposes. Unless the visits are found to be hostile attacks to this application, the information will not be used for tracking the users. However, when violations of the law are involved (e.g. attacks to this website), for the requirements of criminal investigations, SAFP may provide the recorded information to law enforcement authorities which may use such information to track the offenders and process the case in accordance with the law.
2. When users use this website, the executed software may take records of the users’ usage through the technology of “cookies” so as to operate according to the users’ habits subsequently to offer better experience. If users have activated detection of “cookies” in their browsers, they may receive a warning message each time a “cookie” is stored.

B. Collection of personal information and processing

1. Whenever users provide personal information through this website, they are deemed to agree to the terms of this Privacy Policy and give consent to this website to collect and use the information in accordance with the relevant stipulations.
2. SAFP and public departments, public entities, judicial authorities or private entities (hereinafter referred to as “departments/entities”) responsible for processing such personal information are all required to process the relevant personal information in accordance with the stipulations of Law no.8/2005 “Personal Data Protection Act”.
3. When using the electronic services of this website, users may be required to log in to their Macao ONE Account and provide personal information needed for using the services. For the provision of such services and under circumstances permitted by law, SAFP and the departments/entities in charge of the services may transfer such information to other departments/entities for processing or obtain the personal information needed for the provision of such services from other departments/entities. The whole process for such departments/entities to process the users’ personal information must also comply with relevant legal stipulations.
4. For the convenience of users, some electronic services may show the information previously submitted by users so that users do not need to fill in such information again, thus shortening the whole service duration. Showing such information is not only for the convenience of service applicants, but it is also for the need of the service or the departments/entities in charge of the service to keep such information updated. If such information is outdated, users can update it at the departments/entities in charge of the service.

C. Protection of personal information

1. The staff of SAFP and the departments/entities responsible for processing the relevant personal information observe all stipulations related to the protection of personal information. The processing of the users’ personal information is regulated by measures for confidentiality and the information is stored properly. The personal information of users will be stored until such information no longer serves the purposes upon collection or the expiry of the storage period stipulated by the law. The information concerned will then be destroyed according to the stipulations.
2. Users have the right to apply for perusal, correction or update of the personal information stored in this website, or directly view and correct such personal information at the departments/entities or law enforcement authorities which receive such personal information from SAFP and store it.

D. Risks

This website has adopted the technology of safe communication protocol based on the Secure Sockets Layer (SSL) to protect the transmission of personal information on the Internet. Nevertheless, there are still certain risks when transferring such information in open networks as it may be seen or used by unauthorised third parties. If users are concerned about the risks, please provide information in ways other than using the Internet.

E. Connection with other websites

When users access other websites via the hyperlinks on this website, it means that they have exited from this website and have entered other websites. SAFP does not bear any responsibility for the content and the privacy policies of those websites. Users are advised to learn about the privacy policies of such websites first.

F. Changes to this statement

Any update to this statement will be published in a new version replacing the old one without further notice, and the date of update will be stated in the document.

---

Appendix: Privacy Policy on Step Count Data
Overview

“Macao One Account” (hereinafter referred to as “the Application”) respects and protects the privacy of your step count data. This Supplementary Privacy Policy (hereinafter referred to as “this Supplementary Policy”) explains specifically how “My Health”, a service within the Application, collects, uses, stores, shares and protects your step count data accessed via Google Health Connect.

“My Health” is a standalone service under the Application (not an app-wide feature). You can authorize access to your step count data only after opening “My Health” from the service list. No other services or features in the Application will thereby automatically read your step count data.

 

Nature and Scope of Application of the Policy

This Supplementary Policy applies only when you proactively open and use “My Health” from the Application’s service list, and the Application reads, uses, stores or processes your step count data through Google Health Connect. This Supplementary Policy does not apply to other services in the service list, nor to other features of the Application unrelated to “My Health”.

This Supplementary Policy is a supplementary document to the Application’s General Privacy Policy. Matters already stipulated in the General Privacy Policy but not specifically addressed in this Supplementary Policy shall remain governed by the General Privacy Policy. In the event of any inconsistency between this Supplementary Policy and the General Privacy Policy regarding the processing of step count data, this Supplementary Policy shall prevail.

For the content of the General Privacy Policy, please visit https://www.mo.gov.mo/statement.

Unless you open “My Health” from the service list and grant the corresponding permissions, the Application will not read your step count data through Google Health Connect. Choosing not to open or enable this service, or declining permission, will not affect your ability to use other services in the service list or other basic functions unrelated to step count data.

 

Types of Data Collected

After you enter “My Health” from the service list and grant permission, only the following data will be accessed through Google Health Connect:

• Step count (daily step count statistics)

The Application requests only the following Health Connect permission: android.permission.health.READ_STEPS, which is used to read your daily step count statistics. The Application will not read heart rate, blood pressure, blood oxygen, calories, weight or any other Health Connect data types, nor will it write any data to Google Health Connect or request any Health Connect permissions beyond the scope stated above.

 

Method of Data Collection

The Application reads your step count data through the Google Health Connect platform only after you enter “My Health” from the service list and grant explicit permission. You may revoke permission at any time via system settings or Health Connect permission management.

 

Purposes of Data Use

Your step count data collected will only be used within “My Health” for the following purposes, for your personal access only:

• To synchronize and display your step count data on the “Step Sync” page after you enter “My Health” from the Application’s service list, enabling you to track your daily movement;
• To generate step trend charts in the “Step Trend” page within “My Health”, enabling you to track your long-term movement patterns;
• To verify your achievement of daily walking goals and calculate/award the corresponding points according to the rules of the “Healthy Lifestyle Contest” (voluntary participation) within “My Health”. Points can be redeemed for rewards of monetary value (vouchers, coupons, and gifts). Step count data is used solely for determining goal achievement and calculating points, and is for your personal access only. Choosing not to participate in the contest does not affect your ability to use step synchronization and other features within “My Health”.

Step count data is processed primarily to provide you with access to your personal health data, solely for your own viewing. It will not be used for advertising, marketing, insurance underwriting or employment decisions, nor will it be sold to any third parties.

 

Data Storage and Security

The security of your step count data is of utmost importance to us, and we adopt the following technical measures to protect it:

• All step count data is protected using encryption technology during transmission;
• Data storage adopts industry-standard security measures;
• We do not sell your step count data to third parties;
• Access to your step count data requires strict identity authentication.

 

Data Sharing

Without your explicit consent, we will not share your step count data with any third party, unless:

• Where disclosure is required by laws, regulations or court orders;
• Where necessary to protect our legitimate rights and interests or those of others;
• Where necessary to provide data to commissioned technical service providers for the provision, maintenance, hosting or technical support of the “My Health” service, and such service providers are bound by obligations of confidentiality, data security and purpose limitation.

 

Your Rights

Regarding your step count data, you have the following rights:

• To revoke access authorisation for specific step count data at any time;
• To request the deletion of your step count data;
• To request the correction of inaccurate step count data.

 

Data Retention

We retain your step count data only for as long as needed by the “My Health” service. After you revoke authorisation, disable the service or delete your account, we will delete the related step count data within a reasonable period (except where retention is required by law).

 

Children’s Privacy Protection

The Application does not knowingly collect step count data from children under the age of 13. If you are a parent or guardian and discover that your child has provided personal information or data to us without your consent, please contact us.

 

Policy Updates

We may update the Privacy Policy from time to time. In the event of significant changes, we will notify you through in-app announcements or other appropriate means.

 

Applicable Legislation

This Supplementary Policy and its implementation shall be in accordance with the provisions of Law No. 8/2005 (Personal Data Protection Act).

 

Contact Information

If you have any questions, comments or requests regarding this Supplementary Policy, the processing of your step count data, or your data rights, please reach out to us via the “Contact Us” feature within the Application.

———-
This Supplementary Policy only applies to step count data accessed via Google Health Connect by the “My Health” service under the Application’s service list.