It describes how YI IoT and its subsidiaries and other group companies (collectively, “YI”, “YI IoT”, “we,” or, “us”) collect, use, share, or store data, including information (i.e., information that directly or indirectly personally identifies customer accounts, such as used when creating a customer account) or a combination of data that can be reasonably used to infer information about customer accounts (such as email addresses or mobile phone IMEI).
We only collect data when needed to provide secure customer experiences for example when a customer account is created or our website is visited. All collected data is end to end encrypted and securely stored. We regularly update our security mechanisms. We collect and store your personal data (such as email addresses or phone numbers) when you interact with our website, when you contact us, request YI IoT services or when you use the YI IoT app, as further detailed below. We only collect personal information that you agree to share and submit to us by writing, telephone, and or email.
Depending on your geographic location, your personal information may be collected, processed and stored by YI IoT or its service providers in the United States and or other countries depending on the regional laws and regulations and your customer account settings. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country.
If you are using YI IoT in other regions (outside of the EEA) with laws governing data collection and use that may differ from United States law, you consent to the transfer of your personal data to the United States and other countries (including to Germany and Singapore) where YI IoT operates in case the service or assistance (for example a call to one of our US-based customer service call centers from a country other than EEA or USA) you request requires it.
Information Required to Create a YI IoT Account:
Identity Data – that could include first name, last name, title, date of birth and gender (when you create a customer account).
Contact data – that could include address, email address, and telephone numbers.
Technical data – includes information about your internet protocol (IP) address, your login data, browser type, and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website or our customers use the YI IoT app on.
If you are a customer of YI IoT, personal data that we hold, encrypted, you may include the same information listed above, along with:
Business data – your function/job title within the company and your work email address, company’s name, postal address, VAT and/or company number (required for Business to Business solutions and services).
Financial and transaction data – including bank account and payment card details as well as details about payments to and from you and other details of services you have purchased from us (for example when purchasing from our own website online store and paying with a credit card or bank transfer).
Marketing and communications data – only if you have opted-in via your user preferences in your account settings, we hold details about your preferences for receiving marketing from YI IoT , your communication preference, your language.
YI IoT Camera collects:
Information input during setup: When you set up a YI IoT Camera, you will be asked for certain basic information like your email address (or Facebook account in case you wish to create a YI IoT account using your Facebook profile) and your general location (e.g. city or country).
Video and audio signals and data: When you use the recording or streaming features of your YI IoT Camera, we will encrypt, backup and process video and/or audio recordings received from your device, subject to your configuration and settings. If you have enabled motion sensing or sound detection, we will generate and process the video and/or audio recordings upon sensing motion or detecting sound and may send notifications to you regarding the sensed motion or sound if you wish to receive notifications. In addition, if you have cloud backup enabled, we will encrypt, capture, process and retain video, photo, and audio data recordings received from your device for a limited time (for example, 7, 15, or 30 days, depending on your subscription) and you will be able to access, download, and delete those recordings using YI IoT services during that time. After the subscription period, the recordings are deleted from YI IoT’s systems.
Technical information from the device: In order to improve your experience over time (firmware updates), help troubleshoot problems you may encounter, and provide updates to YI IoT Camera, we store your device information, such as camera model and serial number, hardware and software versions, and mobile phone information like unique identifiers (including IMEI and MAC), operating system, crash logs, error logs, and language settings. In addition, we will collect your mobile phone’s IMEI and MAC numbers (needed to establish secure connections). This information is used to login and authenticates you to your YI IoT account. Further, to improve your experience, we collect but do not associate your account or email with aggregated, non-identified data on functions used and frequency of use.
Saved and Shared Content: Your YI IoT Camera can utilize the Cloud subscription service to store audio, camera, and video content during a selected subscription period (for example, 7, 15, or 30 days). After the subscription period, the content is deleted from YI IoT’s systems. We have technical barriers (for example end to end encryption) to prevent unauthorized viewing or hearing your audio, camera, and video content. We do not share your audio, camera, or video content. You may choose to download your content for sharing, including through a third-party application or service, such as Facebook or YouTube that is not controlled by YI IoT and has its own privacy and service policies. YI IoT is not responsible for the privacy practices of any website or third-party applications and services that it does not own or otherwise control. Read the privacy policies of websites, applications and services owned and controlled by others before you decide whether to proceed.
Data protection and privacy laws in your locality may impose certain responsibilities on you and your use of YI IoT. You (not YI IoT) are responsible for ensuring that you comply with any applicable laws when you use YI IoT. For example, you may need to display a notice that alerts visitors to your home that you are using YI IoT. Note that recording and sharing clips that involve other people may affect their privacy and data protection rights.
Wi-Fi Network Information: To connect your YI IoT camera and app to our services, including Cloud, or to access your YI IoT camera over the Internet from a computer, a smartphone or a tablet, you may need to connect it to your Wi-Fi network. During setup, the YI IoT camera will ask for your Wi-Fi network name (SSID) and password to connect to the Internet. It will save this information on the device so that you can access it and control it from your computer, smartphone or tablet, and so that it can communicate with YI IoT’s systems and download software updates.
Email Addresses: When you create a YI account, we collect and store your email address (only if you choose the email option when creating a new account). From that point forward, your email address is used for communications from YI (for example account verification). In addition, YI may provide you with the ability to login with alternative credentials, such as a Facebook account.
Basic Profile Information: Your account allows you to provide certain basic optional profile information like a username of your choice and profile photo. Usernames and profile photos may be shown to others in connection with YI services (for example, if you share your YI IoT camera with a family member). We routinely record log entries and technical information when your mobile device, tablet, PC, or YI IoT contacts our systems.
We use this information to provide, develop and improve YI IoT products and services, including making assessments and recommendations about products or safety. We may use your contact details to send you this information, to ask you to participate in surveys about your YI IoT use, and to send you other communications from YI IoT.
We may also use this information in an aggregated, non-identified form for research purposes and to help us make sales, marketing, and business decisions. For example, we use aggregated, non-identified information about the number of times users in a particular region use a particular function to help us determine if the function is desired by customers. We may use service providers to perform some of these functions. Those service providers are restricted from sharing your information for any other purpose (for example e911 service that can assist and contact authorities for you).
If you have agreed that we may do so, we may use your information to send you marketing via the communications methods you have selected via your preferences in your account settings. Not all YI IoT products conduct direct marketing. Where this functionality is available, you can change your preferences at any time and switch this option on/off. We use industry-standard methods to keep this information safe and secure while it is transmitted over your home network and through the Internet to our systems.
Depending on your location and type of data, YI IoT may process your personal information on servers that are not in your home country. If you are in the United States, YI IoT processes your personal information only in the United States. If you are outside of the United States, YI IoT processes your personal information in Germany and/or Singapore.
In order to store, hold and process your data lawfully where EU Data Protection Law (including the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016), read in conjunction with and subject to any consequential national data protection legislation) applies, we rely on one or more of the following legal grounds:
When we are pursuing legitimate interests. We process your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. This means we process your information for things like:
- offering and improving YI IoT products and services
- developing new products and features
- understanding how people use our products and services
- performing research that improves our services for our users and benefits the public
- protecting against harm to the rights, property, and safety of YI, our users, and the public
- detecting, preventing or otherwise addressing fraud, abuse, security or technical issues with our services
- maintaining and improving the integrity of our computing systems, and protecting our users’ data security
When we are complying with legal obligations. We process your data when we have a legal obligation to do so, for example, if we are responding to a legal process or an enforceable governmental request.
With your consent. Where necessary, we ask for your consent to process your information for certain specific purposes and give you the right to withdraw that consent at any time.
If you are located in the EEA, you may seek confirmation regarding whether YI IoT is processing personal information about you, request access to your personal information and ask that we correct, amend or delete your personal information. In addition, you may object to YI IoT’s processing of your personal information at any time. However, doing so may impact your use of the YI IoT.
If the applicable law provides you the right to request access to, (receive) port, object to or restrict processing, seek rectification or request erasure of personal information held about you by YI, you may do so, as applicable, through controls in the YI IoT app or by contacting YI at firstname.lastname@example.org.
Further information on your rights in the EEA is set out below:
– you have the right to obtain a copy of the personal information we hold about you. If you would like to make a SAR, i.e. a request for copies of the personal data we hold about you, you may do so by contacting us at the contact details above. The request should make clear that a SAR is being made. You may also be required to submit proof of your identity.
– you may request that we rectify any inaccurate and/or complete any incomplete personal data.
– you may as permitted by applicable law, withdraw your consent to the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit certain service features for which the processing of your personal data is essential.
– including automated processing and profiling. You may, as permitted by applicable law, request that we stop processing your personal data. In relation to automated processing and profiling, you may object to the processing and you will have the right to obtain human intervention.
– you may request that we erase your personal data and we will comply unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping your personal data, such as, a legal obligation that we have to comply with, or if retention is necessary for us to comply with our legal obligations.
– in certain circumstances, you may request that we provide your personal data to you in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services.
– please contact us first about any questions or if you have a complaint in relation to how we process your personal data. However, you do have the right to contact the relevant EEA supervisory authority directly.
We do not share personal information for any commercial or marketing purpose unrelated to the activation and delivery of YI IoT products and services without asking you first.
The following are the limited situations where we may share personal information:
We have vendors, service providers, and technicians who help with some of our processing and storage, including helping to answer your questions. They may also assist with monitoring our servers and systems for technical problems. These technicians (as well as YI employees) can access certain information about you or your account relating to this work, but these technicians are not allowed to use this data for non-YI IoT purposes. We also have strict policies and technical barriers in place to prevent unauthorized employee access to video and audio recordings that you have not shared.
We may provide information to a third party if we believe in good faith that we are required to do so for legal reasons. For example, we may disclose information in response to legal process and we may disclose information in response to lawful requests by public authorities in the United States and other countries for the purposes of law enforcement and national security.
If you select an outside party for the purchase, installation, or service of your YI IoT device and share your personal information, we cannot control the collection, storage or sharing of information collected by that party. For example, if you buy a YI IoT product from a retailer, the retailer may collect personal information as part of the transaction.
YI IoT generally stores your personal information (such as contact details from your account end to end encrypted) on YI IoT’s systems until you delete or edit it, or for as long as you remain a YI IoT customer, in order to provide you with YI IoT products, but your audio, photo, and video files are stored for a limited time (e.g., 7, 15, or 30 days). Your YI IoT account allows you to delete audio, photo, and video files that you choose before the limited storage time has elapsed. In addition, should you wish to delete your entire account, including all recordings associated with it you can do it directly in the YI IoT app or by contacting email@example.com.
As described above, some information is processed and stored directly on the YI IoT device. All personal information is encrypted as it is transmitted to YI and cannot easily be accessed.
You can access, amend or delete your personal information from YI IoT’s systems through the controls in your YI account. Because of the way we maintain certain services, after your information is deleted, backup copies may linger for some time before they are deleted, and we may retain certain data for a longer period if we are required to do so for legal reasons.
A cookie is a small file that a website, app or its service provider transfers to your computer’s hard drive, mobile phones or other devices, through your web browser (if you agree) that enables the website’s, app’s or service provider’s systems to recognize your browser and capture and remember certain information. We use the following cookies:
These cookies are required for the operation of our website.
They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the relevant website and/or app.
Under this agreement, the payment processing services for goods and/or services purchased on this website are provided by SUNLIGHT (UK) TRADING LIMITED & Old Street,167 City Road, London, EC1V 1AW, UK on behalf of YI Technology. In the event you choose to pay with a credit card and the payment will be processed via a European Acquirer, these terms are an agreement between you and SUNLIGHT (UK) TRADING LIMITED & Old Street,167 City Road, London, EC1V 1AW, UK.
If there is any chargeback or reversal of any payment requested by a payment service partner, SUNLIGHT (UK) TRADING LIMITED has the right to refund the money so requested by the payment service partner without liability to YI IoT. SUNLIGHT (UK) TRADING LIMITED will use reasonable efforts to assist YI IoT in participating in the dispute resolution process of the relevant payment service partners.
For any inquiries, if you choose DHpay for payment contact:
SUNLIGHT(UK) TRADING LIMITED
Address: Old Street 167 City Road London, EC1V 1AW, UK
If you have any questions, please contact us at firstname.lastname@example.org.