ZKTECH Privacy Policy
We respect your personal information and your choices. This Policy explains how the ZKTECH App handles information for accounts, device connectivity, energy management, the AI assistant, and customer support. We process information only as needed for clearly described features.
1. Scope and data controller
This Policy applies to the ZKTECH mobile application and its related account, cloud device management, messaging, help, and feedback services. Third-party sites, products, and services follow their own privacy terms.
Data controller: Dongguan Zhongkang Electronic Technology Co., Ltd.; registration number: 91441900588291573K; address: No. 12, Yansha Road, Tianxin, Tangxia Town, Dongguan City, Guangdong Province, China.
We process personal information under the privacy and data-protection laws applicable to the services in your country or region. Where local mandatory law provides a higher standard of protection, that standard controls.
2. Information we process
- Account and identity data: email, phone number where supported, verification codes, protected account credentials, country/region, time zone, and optional profile name, avatar, and address. If you use Google Sign-In, we process the Google account email, user identifier, basic profile, and authorization result that you approve.
- Device and energy data: device ID, serial number, model, firmware, binding and sharing relationships, online state, connection method, operational logs, alarms, settings, control records, and telemetry such as voltage, current, power, temperature, and accumulated energy.
- Network and nearby connection data: Bluetooth scan results, nearby-device permission, current Wi-Fi name, and network state. A Wi-Fi password you enter is stored on your phone and sent over Bluetooth to the device you selected for provisioning. Protect your phone with a secure screen lock.
- Location and space data: foreground location or a map position you select, only for space maps, weather, or where a particular Android version requires location to read the Wi-Fi name or scan for Bluetooth devices. We do not request background location for advertising or continuous tracking.
- Camera, photos, and content: the camera is used when you choose to scan a device-sharing QR code; the photo library is used when you choose and upload an avatar. We also process feedback, AI messages, selected device context, and operation confirmations when you use those features.
- Technical and security data: IP address, operating system and App version, phone model, language, time zone, request time, network state, diagnostic or crash information, and security audit logs.
We do not read contacts, SMS, or call history. We do not sell personal information or share it for cross-context behavioral or targeted advertising. The current App does not include an advertising SDK.
3. Why we process information
- Contract: create and manage your account; discover, bind, monitor, and control compatible devices; and provide energy data, alarms, messages, and firmware updates.
- Consent: access Bluetooth, nearby devices, location, camera, or photos; use Google Sign-In; and process an avatar, feedback, or AI conversation that you choose to submit. You can withdraw device permissions in system settings.
- Legitimate interests or legal obligations: protect accounts, devices, and networks; prevent abuse; diagnose faults; maintain service quality; and comply with law. We apply a balancing test where required.
- Weather, maps, and solar forecasts: use a saved space location or project parameters to return the requested result. Refusing an optional permission does not affect features that do not rely on it.
4. Device permissions
- Bluetooth and nearby devices: discover, pair, provision, and locally control ZKTECH devices.
- Location while using the App: locate a space on a map and, on some Android versions, read the current Wi-Fi name or complete Bluetooth scanning.
- Camera: scan a device-sharing QR code. Photos: select, crop, and upload an account avatar.
- Local network, Wi-Fi, and internet: find local devices, provision a device, connect to cloud services, synchronize state, and check for updates.
- Notifications, if requested by the operating system: deliver device alarms, service messages, and update notices.
Permissions are requested in context. Review or withdraw them under Me > Settings > System Permissions or in your phone settings. The related feature may stop working after withdrawal.
5. Sharing, processors, and third-party services
We do not sell personal information or share it for cross-context behavioral or targeted advertising. We disclose the minimum necessary data only to deliver a requested feature, follow your instruction, or comply with law, and require service providers to process it only under our instructions with appropriate confidentiality and security measures.
- Google Sign-In: receives the Google account identifier, email, basic profile, and authentication information you authorize for login. Google independently handles its service data under policies.google.com/privacy.
- Open-Meteo: receives space coordinates, time zone, and weather query parameters to return weather data (open-meteo.com/en/terms).
- CARTO maps: map tile requests may contain an IP address, device/browser details, and the viewed map area to display the base map (carto.com/privacy).
- Forecast.Solar: when solar forecasting is enabled, receives project location and photovoltaic parameters to generate a forecast (forecast.solar).
- Cloud hosting, object storage, and messaging providers: host account data, avatars, device data, logs, and MQTT messages on our behalf to operate the App.
6. International transfers
To provide cloud connectivity, sign-in, maps, weather, and support across regions, information may be processed outside your country or region. The destination may have different data-protection standards.
Where required, we rely on an adequacy decision, standard contractual clauses or another recognized contractual mechanism, together with encryption, access controls, and data minimization. We obtain separate consent or meet localization requirements where applicable. Contact the privacy email to ask about safeguards relevant to your transfer.
7. Retention and security
- Account data is normally retained until account deletion or until no longer needed for the service. Device data and operation records are retained only as needed for history, support, and security auditing.
- After a valid deletion request, we generally delete or de-identify related information within 30 days, except where law requires retention or a protected backup has not yet cycled out. Such data is isolated and restricted from ordinary use.
- The phone may store login state, language, device and weather caches, and a Wi-Fi password you chose to remember. Uninstalling clears most local data; use account deletion or contact us to remove cloud data.
- We use HTTPS/WSS encryption in transit, authentication, access controls, sensitive-log masking, and reasonable organizational safeguards. No internet transmission is risk-free. Do not place passwords, verification codes, or unnecessary sensitive data in feedback or AI chats.
8. Your rights and account deletion
- Use Me > Account Information to access or correct profile details and use feature or system settings to withdraw permissions.
- Use Me > Delete Account and complete email verification to delete the account and associated data. Deletion cannot be undone. Records for devices already unbound or shared independently may no longer identify you.
- Where provided by applicable law, you may request information or access, correction, deletion, restriction, objection, consent withdrawal, and a portable copy, and may challenge a significant decision based solely on automated processing. Withdrawal does not affect processing that was lawful before withdrawal.
- Email jenhuang@zk-keji.com to submit a request. We may verify your identity to protect the account, and an authorized agent may act for you where local law permits. We respond within the period required by applicable law and explain any refusal or restriction and available appeal process.
- We will not discriminate against you for exercising a privacy right. You may complain to a privacy, data-protection, or consumer authority with jurisdiction where you habitually reside or work or where an alleged violation occurred, and you may seek a judicial remedy where applicable.
9. Regional supplements
- EEA, United Kingdom, and Switzerland: where the relevant law applies, we rely on performance of a contract, consent, our legitimate interests, or a legal obligation. You may exercise access, correction, erasure, restriction, objection, and portability rights and complain to your local data-protection authority.
- United States: where an applicable state privacy law provides these rights, you may request to know, access, delete, or correct personal information; limit applicable sensitive-personal-information use; opt out of sale or sharing for cross-context behavioral or targeted advertising; and use an authorized agent. We do not sell personal information or share it for those advertising purposes, and we do not discriminate for exercising a right.
- Australia, Canada, and other countries or regions: you may exercise access, correction, deletion, consent-withdrawal, complaint, or other statutory rights available under local law. Mandatory local rules control if they conflict with this Policy.
10. Children's privacy
The App is intended for adults capable of installing, operating, or maintaining energy equipment and is not directed to children. We do not knowingly collect personal information from children under 13; a higher child or digital-consent age applies where local law sets one. A user below the applicable age may use the App only with valid parental or guardian consent and supervision. We take steps to delete child data processed without valid consent when we learn of it.
11. Policy changes
We may update this Policy as features, processing, or law changes. The App will show the current version and effective date. We will give prominent notice of material changes and request renewed consent where required.
12. Contact us
- Privacy contact: jenhuang@zk-keji.com
- Customer support: jumpmonster@zk-keji.com
- Company telephone: +86 769 8792 7715
- Mail: Dongguan Zhongkang Electronic Technology Co., Ltd., No. 12, Yansha Road, Tianxin, Tangxia Town, Dongguan City, Guangdong Province, China