# Privacy Policy

**Last updated:** May 30, 2026

This Privacy Policy describes how **Aeviot** (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use our smart home mobile application, connected devices, websites, and related services (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

---

## 1. Who We Are

**Aeviot**  
**Email:** info@qicapp.com  
**Phone:** +91 124-4147306  
**Website:** https://aeviot.com

---

## 2. Information We Collect

### 2.1 Information You Provide

- **Account information:** mobile phone number, name, email (if provided), profile details, and registration information.
- **Authentication data:** one-time passwords (OTP) and session tokens used to verify your identity.
- **Device and home information:** device names, groups, rooms, schedules, favorites, and configuration preferences you set in the app.
- **Support communications:** messages, feedback, or attachments you send to customer support.

### 2.2 Information Collected Automatically

- **Device and usage data:** device identifiers, model, firmware version, online/offline status, connectivity (Wi‑Fi/Bluetooth), control commands, schedules, and telemetry (e.g., power state, brightness, temperature, or other sensor readings supported by your device).
- **App usage data:** features used, timestamps, crash logs, and performance diagnostics.
- **Log data:** IP address, app version, operating system, language, and general technical logs for security and troubleshooting.

### 2.3 Information from Your Mobile Device (With Permission)

Depending on your settings and app features, we may collect:

- **Push notification tokens** (e.g., Firebase Cloud Messaging) to send alerts and device updates.
- **Location information** (approximate or precise), only if you grant permission—for example, to support location-based features, automations, or regional settings.
- **Bluetooth / local network access**, only as needed to discover, pair, or control compatible devices.

You can change permissions in your device settings at any time. Some features may not work without certain permissions.

---

## 3. How We Use Your Information

We use information to:

- Create and manage your account and authenticate you;
- Provision, connect, monitor, and control your smart home devices;
- Send OTPs, security notices, service messages, and push notifications;
- Provide customer support and respond to inquiries;
- Improve, secure, and debug the Services;
- Comply with legal obligations and enforce our Terms;
- Send marketing communications **only where permitted by law and with your consent** (you may opt out at any time).

---

## 4. Legal Bases for Processing (Where Applicable)

If you are in a region that requires a legal basis (such as the EEA/UK), we process personal data based on:

- **Contract:** to provide the Services you request;
- **Legitimate interests:** security, fraud prevention, service improvement, and analytics (balanced against your rights);
- **Consent:** where required (e.g., marketing, optional location);
- **Legal obligation:** where we must retain or disclose data by law.

---

## 5. How We Share Information

We do **not** sell your personal information. We may share information with:

- **Service providers** who help us operate the Services (e.g., cloud hosting, databases, messaging/SMS, push notifications, analytics, customer support tools), under contractual confidentiality and security obligations;
- **IoT and infrastructure partners** necessary to connect and operate devices (e.g., cloud IoT platforms, secure device messaging);
- **Affiliates** within our corporate group, for consistent service delivery;
- **Authorities** when required by law, court order, or to protect rights, safety, and security;
- **Business transfers** in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

We may share **aggregated or de-identified** data that cannot reasonably identify you.

---

## 6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, including:

- While your account is active;
- As needed for legal, tax, audit, or security requirements;
- For a limited period after account deletion, unless a longer period is required by law.

Device logs and telemetry may be retained for shorter or longer periods depending on operational and legal needs.

---

## 7. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and secure cloud infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

You are responsible for keeping your phone, OTP, and account credentials secure.

---

## 8. International Transfers

Your information may be processed in countries other than your own. Where required, we implement appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

---

## 9. Your Rights and Choices

Depending on your location, you may have the right to:

- Access, correct, or delete your personal information;
- Object to or restrict certain processing;
- Withdraw consent where processing is consent-based;
- Port your data in a structured format;
- Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at **info@qicapp.com**. We may need to verify your identity before responding.

You may also:

- **Opt out of marketing** via unsubscribe links or by contacting us;
- **Disable push notifications** in device or app settings;
- **Revoke app permissions** (location, Bluetooth, etc.) in your phone settings.

---

## 10. Children’s Privacy

The Services are not intended for children under **13** (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

---

## 11. Third-Party Links and Services

The Services may link to third-party websites or integrate third-party services. Their privacy practices are governed by their own policies. We are not responsible for third-party practices.

---

## 12. Changes to This Privacy Policy

We may update this Policy from time to time. We will post the revised version with a new “Last updated” date and, where required, provide additional notice (e.g., in-app notice or email). Continued use after changes means you accept the updated Policy.

---

## 13. Contact Us

For privacy questions or requests:

**Aeviot**  
**Email:** info@qicapp.com  
**Phone:** +91 124-4147306  
**Website:** https://aeviot.com

---

*This document is provided for operational use. Have it reviewed by qualified legal counsel for your jurisdiction, business model, and regulatory requirements.*
