Privacy Policy隐私政策

1. Introduction

This Privacy Policy describes how Shenzhen Xinhui Yuntu Technology Co., Ltd. ("Xintu Vision", "we", "us") collects, uses, and protects your personal data when you use the Xintu Vision (芯图视界) mobile application (the "App") and its related cloud services (together, the "Service"). It applies to all users, wherever you are. The App lets you set up and control Xintu Vision security cameras, view live video, and receive alarm notifications.

By creating an account or using the Service, you agree to this policy. If you do not agree, please do not use the Service. The first time you open the App, we ask for your consent before any third-party SDK initializes.

This policy does not apply to services operated by third parties that we do not control (for example, payment pages you open outside the App).

2. Information We Collect

3. How We Use Your Information

We do not use your personal data for automated decision-making or profiling, and we do not sell your personal data to anyone.

4. How We Share Your Information

We share data only with the service providers needed to operate the Service, strictly for the purposes below. The full list of integrated third-party SDKs, including what each collects and why, is in §5.

• We may also disclose information if required by law, regulation, or a valid legal process, or to protect the rights, property, or safety of our users.
• If our business is ever restructured (merger or acquisition), we will require the successor to keep handling your data under this policy.

5. Third-Party SDKs We Integrate

To power key features, the App integrates the following third-party SDKs. Each entry lists the provider, the personal data involved, the purpose, and how it is processed. Vendors process data under their own privacy policies (linked below); SDK versions may change as we update the App, and so may the data they handle — the table reflects the versions we currently integrate.

All providers above process data with de-identification, encrypted transmission, and other security measures. If you believe an SDK poses a risk, stop the related operation and contact us.

6. App Permissions

The App requests the following permissions, each tied to a feature you use. You can manage them in system settings at any time; refusing an optional permission only affects the feature that needs it.

• Camera — scanning a QR code to add a camera.
• Microphone — two-way voice intercom with your camera.
• Photos / storage — choosing an avatar, saving or exporting snapshots and recordings, storing local logs.
• Notifications — alarm and event notifications.
• Bluetooth (and, on Android, the associated location permission) — finding nearby devices during camera pairing. Location data is not collected (see §2.5).
• Local network access — finding and controlling cameras on your Wi-Fi network.
• Network state — checking connectivity for device pairing and playback.
• Vibrate — notification alerts.

7. Legal Bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process your data on these bases:

• Contract — account, camera control, cloud storage, and notification features you signed up for.
• Consent — optional items such as the avatar and face library; you may withdraw consent at any time without affecting the basic service.
• Legitimate interests — security, fraud prevention, and crash monitoring, balancing our interests against your rights.
• Legal obligation — retaining certain transaction and security records as required by law.

8. Cross-Border Data Transfers

Our cloud servers are located in China. If you use the Service from outside China, your data described in §2 will be transferred to and processed on servers in China. We take the measures described in §9 to protect data in transit and at rest, and we rely on the transfer mechanisms required by applicable law.

9. Data Security

• Data exchanged with our cloud services is encrypted in transit using HTTPS/TLS.
• Direct connections between the App and your camera stay on your local network or use encrypted peer-to-peer channels.
• Access to production data is restricted to authorized personnel on a need-to-know basis.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your data and to promptly investigate and notify affected users and regulators of any breach where required by law.

10. Data Retention

• We keep your data only as long as your account is active or as needed to provide the Service.
• Cloud recordings are kept according to the storage plan you purchased and are removed when the plan expires.
• When you delete your account, your account data is deleted immediately — there is no waiting period, and the account can no longer be used to sign in. Only transaction and security records that we must retain by law are kept in de-identified form, and are permanently deleted when the statutory retention period expires.

11. Your Rights

You have the following rights over your personal data, wherever required by applicable law (for example China's Personal Information Protection Law, the GDPR for EEA/UK residents, or the CCPA/CPRA for California residents):

• access and obtain a copy of the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data and your account;
• withdraw consent for optional processing (such as the face library or avatar);
• object to or restrict certain processing;
• receive an explanation of the rules behind automated decisions (none are made about you today);
• complain to us or to your local regulator / data protection authority.

To exercise these rights, use the in-App features (profile editing, account deletion, permission settings) or email us at 15019456993@163.com. We verify your identity as necessary and respond within 15 business days, or within other timeframes required by applicable law.

12. Children's Privacy

The Service is not directed to children under 14 (China), under 16 where EU member-state law so requires, or under 13 elsewhere. We do not knowingly collect personal data from children without verifiable guardian consent. If you believe a child has provided us personal data, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date and, for material changes (such as a new SDK or a new category of data), notify you in the App. Continued use of the Service after an update means you accept the revised policy.

14. Contact Us

Shenzhen Xinhui Yuntu Technology Co., Ltd. (深圳市芯汇云图科技有限公司)

Email: 15019456993@163.com