It describes how YI IoT and its subsidiaries and other group companies (collectively, “YI”, “YI IoT”, “we,” or, “us”) collect, use, share, or store data, including information (i.e., information that directly or indirectly personally identifies customer accounts, such as used when creating a customer account) or a combination of data that can be reasonably used to infer information about customer accounts (such as email addresses or mobile phone IMEI).
This Privacy Policy should be read in conjunction with the Terms of Use of which it forms part and which also applies when you visit our website or use YI IoT. If you do not agree with this Privacy Policy, you must not submit information to us through or in connection with the website or use of the YI IoT app.
We only collect data when needed to provide secure customer experiences for example when a customer account is created or our website is visited. All collected data is end to end encrypted and securely stored. We regularly update our security mechanisms. We collect and store your personal data (such as email addresses or phone numbers) when you interact with our website, when you contact us, request YI IoT services or when you use the YI IoT app, as further detailed below. We only collect personal information that you agree to share and submit to us by writing, telephone, and or email.
Depending on your geographic location, your personal information may be collected, processed and stored by YI IoT or its service providers in the United States and or other countries depending on the regional laws and regulations and your customer account settings. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country.
If you are using YI IoT in the European Economic Area (“EEA”) please be aware that we may transfer data required to provide our service to our customers. All data transfers are end to end encrypted. Third parties in countries outside the EEA might be involved for further processing in accordance with the purposes set out in this Privacy Policy. In particular, your personal data may be transferred to the United States and other countries (including to Germany and Singapore) where YI IoT operates and to our outsourced service providers located abroad, such as customer service departments from where we might reply to your inquiries. In these circumstances, we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organization, contractual or other lawful means. Please contact us for a copy of the safeguards which we have put in place to protect your personal data and privacy rights in these circumstances. For transfers of data from the EEA to the United States or Singapore, YI IoT (i.e., the controller) has entered into the European Commission’s Standard Contractual Clauses with its service providers (i.e., processors) to protect user’s privacy rights.
If you are using YI IoT in other regions (outside of the EEA) with laws governing data collection and use that may differ from United States law, you consent to the transfer of your personal data to the United States and other countries (including to Germany and Singapore) where YI IoT operates in case the service or assistance (for example a call to one of our US-based customer service call centers from a country other than EEA or USA) you request requires it.
Information Required to Create a YI IoT Account:
Identity Data – that could include first name, last name, title, date of birth and gender (when you create a customer account).
Contact data – that could include address, email address, and telephone numbers.
Technical data – includes information about your internet protocol (IP) address, your login data, browser type, and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website or our customers use the YI IoT app on.
If you are a customer of YI IoT, personal data that we hold, encrypted, you may include the same information listed above, along with:
Business data – your function/job title within the company and your work email address, company’s name, postal address, VAT and/or company number (required for Business to Business solutions and services).
Financial and transaction data – including bank account and payment card details as well as details about payments to and from you and other details of services you have purchased from us (for example when purchasing from our own website online store and paying with a credit card or bank transfer).
Marketing and communications data – only if you have opted-in via your user preferences in your account settings, we hold details about your preferences for receiving marketing from YI IoT , your communication preference, your language.
YI IoT Camera collects:
Information input during setup: When you set up a YI IoT Camera, you will be asked for certain basic information like your email address (or Facebook account in case you wish to create a YI IoT account using your Facebook profile) and your general location (e.g. city or country).
Video and audio signals and data: When you use the recording or streaming features of your YI IoT Camera, we will encrypt, backup and process video and/or audio recordings received from your device, subject to your configuration and settings. If you have enabled motion sensing or sound detection, we will generate and process the video and/or audio recordings upon sensing motion or detecting sound and may send notifications to you regarding the sensed motion or sound if you wish to receive notifications. In addition, if you have cloud backup enabled, we will encrypt, capture, process and retain video, photo, and audio data recordings received from your device for a limited time (for example, 7, 15, or 30 days, depending on your subscription) and you will be able to access, download, and delete those recordings using YI IoT services during that time. After the subscription period, the recordings are deleted from YI IoT’s systems.
Technical information from the device: In order to improve your experience over time (firmware updates), help troubleshoot problems you may encounter, and provide updates to YI IoT Camera, we store your device information, such as camera model and serial number, hardware and software versions, and mobile phone information like unique identifiers (including IMEI and MAC), operating system, crash logs, error logs, and language settings. In addition, we will collect your mobile phone’s IMEI and MAC numbers (needed to establish secure connections). This information is used to login and authenticates you to your YI IoT account. Further, to improve your experience, we collect but do not associate your account or email with aggregated, non-identified data on functions used and frequency of use.
Saved and Shared Content: Your YI IoT Camera can utilize the Cloud subscription service to store audio, camera, and video content during a selected subscription period (for example, 7, 15, or 30 days). After the subscription period, the content is deleted from YI IoT’s systems. We have technical barriers (for example end to end encryption) to prevent unauthorized viewing or hearing your audio, camera, and video content. We do not share your audio, camera, or video content. You may choose to download your content for sharing, including through a third-party application or service, such as Facebook or YouTube that is not controlled by YI IoT and has its own privacy and service policies. YI IoT is not responsible for the privacy practices of any website or third-party applications and services that it does not own or otherwise control. Read the privacy policies of websites, applications and services owned and controlled by others before you decide whether to proceed.
Data protection and privacy laws in your locality may impose certain responsibilities on you and your use of YI IoT. You (not YI IoT) are responsible for ensuring that you comply with any applicable laws when you use YI IoT. For example, you may need to display a notice that alerts visitors to your home that you are using YI IoT. Note that recording and sharing clips that involve other people may affect their privacy and data protection rights.
Any YI IoT data that you choose to share with a third party (for example, if you share a video recorded with your camera on Instagram or other Social Media Channels) is governed by that third party’s privacy policy while at that party’s possession.
Any data that YI IoT receives from third-parties (for example, information received from Facebook in case you choose to create your YI IoT account using your Facebook profile, after you log in to your Facebook account to share content) will be processed and stored by YI IoT and will be treated in accordance with this Privacy Policy. This information may be processed in the same manner as any other data that is a part of your YI IoT account or the YI IoT logs.
Wi-Fi Network Information: To connect your YI IoT camera and app to our services, including Cloud, or to access your YI IoT camera over the Internet from a computer, a smartphone or a tablet, you may need to connect it to your Wi-Fi network. During setup, the YI IoT camera will ask for your Wi-Fi network name (SSID) and password to connect to the Internet. It will save this information on the device so that you can access it and control it from your computer, smartphone or tablet, and so that it can communicate with YI IoT’s systems and download software updates.
Once connected to your Wi-Fi network, your YI IoT regularly sends the data described in this Privacy Policy (excluding your Wi-Fi password) to YI to provide you with services.
Email Addresses: When you create a YI account, we collect and store your email address (only if you choose the email option when creating a new account). From that point forward, your email address is used for communications from YI (for example account verification). In addition, YI may provide you with the ability to login with alternative credentials, such as a Facebook account.
Basic Profile Information: Your account allows you to provide certain basic optional profile information like a username of your choice and profile photo. Usernames and profile photos may be shown to others in connection with YI services (for example, if you share your YI IoT camera with a family member). We routinely record log entries and technical information when your mobile device, tablet, PC, or YI IoT contacts our systems.
We use this information to provide, develop and improve YI IoT products and services, including making assessments and recommendations about products or safety. We may use your contact details to send you this information, to ask you to participate in surveys about your YI IoT use, and to send you other communications from YI IoT.
We may also use this information in an aggregated, non-identified form for research purposes and to help us make sales, marketing, and business decisions. For example, we use aggregated, non-identified information about the number of times users in a particular region use a particular function to help us determine if the function is desired by customers. We may use service providers to perform some of these functions. Those service providers are restricted from sharing your information for any other purpose (for example e911 service that can assist and contact authorities for you).
If you have agreed that we may do so, we may use your information to send you marketing via the communications methods you have selected via your preferences in your account settings. Not all YI IoT products conduct direct marketing. Where this functionality is available, you can change your preferences at any time and switch this option on/off. We use industry-standard methods to keep this information safe and secure while it is transmitted over your home network and through the Internet to our systems.
Depending on your location and type of data, YI IoT may process your personal information on servers that are not in your home country. If you are in the United States, YI IoT processes your personal information only in the United States. If you are outside of the United States, YI IoT processes your personal information in Germany and/or Singapore.
In order to store, hold and process your data lawfully where EU Data Protection Law (including the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016), read in conjunction with and subject to any consequential national data protection legislation) applies, we rely on one or more of the following legal grounds:
Where it is necessary for the performance of a contract - we process your data to provide and support a product or service you have asked for under a contract, including but not limited to delivering our Terms of Use.
When we are pursuing legitimate interests. We process your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. This means we process your information for things like:
- offering and improving YI IoT products and services
- developing new products and features
- understanding how people use our products and services
- performing research that improves our services for our users and benefits the public
- protecting against harm to the rights, property, and safety of YI, our users, and the public
- detecting, preventing or otherwise addressing fraud, abuse, security or technical issues with our services
- maintaining and improving the integrity of our computing systems, and protecting our users’ data security
- enforcing legal claims, including investigation of potential violations of applicable Terms of Use
When we are complying with legal obligations. We process your data when we have a legal obligation to do so, for example, if we are responding to a legal process or an enforceable governmental request.
With your consent. Where necessary, we ask for your consent to process your information for certain specific purposes and give you the right to withdraw that consent at any time.
If you are located in the EEA, you may seek confirmation regarding whether YI IoT is processing personal information about you, request access to your personal information and ask that we correct, amend or delete your personal information. In addition, you may object to YI IoT’s processing of your personal information at any time. However, doing so may impact your use of the YI IoT.
If the applicable law provides you the right to request access to, (receive) port, object to or restrict processing, seek rectification or request erasure of personal information held about you by YI, you may do so, as applicable, through controls in the YI IoT app or by contacting YI at support@yunyiiot.com.
Further information on your rights in the EEA is set out below:
– you have the right to obtain a copy of the personal information we hold about you. If you would like to make a SAR, i.e. a request for copies of the personal data we hold about you, you may do so by contacting us at the contact details above. The request should make clear that a SAR is being made. You may also be required to submit proof of your identity.
– you may request that we rectify any inaccurate and/or complete any incomplete personal data.
– you may as permitted by applicable law, withdraw your consent to the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit certain service features for which the processing of your personal data is essential.
– including automated processing and profiling. You may, as permitted by applicable law, request that we stop processing your personal data. In relation to automated processing and profiling, you may object to the processing and you will have the right to obtain human intervention.
– you may request that we erase your personal data and we will comply unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping your personal data, such as, a legal obligation that we have to comply with, or if retention is necessary for us to comply with our legal obligations.
– in certain circumstances, you may request that we provide your personal data to you in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services.
– please contact us first about any questions or if you have a complaint in relation to how we process your personal data. However, you do have the right to contact the relevant EEA supervisory authority directly.
We do not share personal information for any commercial or marketing purpose unrelated to the activation and delivery of YI IoT products and services without asking you first.
The following are the limited situations where we may share personal information:
We have vendors, service providers, and technicians who help with some of our processing and storage, including helping to answer your questions. They may also assist with monitoring our servers and systems for technical problems. These technicians (as well as YI employees) can access certain information about you or your account relating to this work, but these technicians are not allowed to use this data for non-YI IoT purposes. We also have strict policies and technical barriers in place to prevent unauthorized employee access to video and audio recordings that you have not shared.
Upon the sale or transfer of the company and/or all or part of its assets, your personal information may be among the items sold or transferred. We will request that a purchaser treat our data under the Privacy Policy.
We may provide information to a third party if we believe in good faith that we are required to do so for legal reasons. For example, we may disclose information in response to legal process and we may disclose information in response to lawful requests by public authorities in the United States and other countries for the purposes of law enforcement and national security.
If you select an outside party for the purchase, installation, or service of your YI IoT device and share your personal information, we cannot control the collection, storage or sharing of information collected by that party. For example, if you buy a YI IoT product from a retailer, the retailer may collect personal information as part of the transaction.
YI IoT generally stores your personal information (such as contact details from your account end to end encrypted) on YI IoT’s systems until you delete or edit it, or for as long as you remain a YI IoT customer, in order to provide you with YI IoT products, but your audio, photo, and video files are stored for a limited time (e.g., 7, 15, or 30 days). Your YI IoT account allows you to delete audio, photo, and video files that you choose before the limited storage time has elapsed. In addition, should you wish to delete your entire account, including all recordings associated with it you can do it directly in the YI IoT app or by contacting support@yunyiiot.com.
As described above, some information is processed and stored directly on the YI IoT device. All personal information is encrypted as it is transmitted to YI and cannot easily be accessed.
You can access, amend or delete your personal information from YI IoT’s systems through the controls in your YI account. Because of the way we maintain certain services, after your information is deleted, backup copies may linger for some time before they are deleted, and we may retain certain data for a longer period if we are required to do so for legal reasons.
Your personal data will be retained for as long as it is necessary to carry out the purposes set out in this Privacy Policy (unless longer retention is required by applicable law). However, we will not retain any of your personal data beyond this period and the retention of your personal information will be subject to periodic review. We may keep an anonymous form of your personal data, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.
The YI IoT Camera website and app use cookies to distinguish you from other users of the website and app. This helps us to provide you with a good experience when you browse the service and allows us to improve our website and/or app.
This section of the Privacy Policy explains what cookies are, why we use them and what you may do if you wish to restrict, remove or refuse to accept cookies. By continuing to use the YI IoT Camera website and/or app, you agree to the use of cookies for the purposes set out in this Privacy Policy.
A cookie is a small file that a website, app or its service provider transfers to your computer’s hard drive, mobile phones or other devices, through your web browser (if you agree) that enables the website’s, app’s or service provider’s systems to recognize your browser and capture and remember certain information. We use the following cookies:
These cookies are required for the operation of our website.
They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the relevant website and/or app.
Under this agreement, the payment processing services for goods and/or services purchased on this website are provided by SUNLIGHT (UK) TRADING LIMITED & Old Street,167 City Road, London, EC1V 1AW, UK on behalf of YI Technology. In the event you choose to pay with a credit card and the payment will be processed via a European Acquirer, these terms are an agreement between you and SUNLIGHT (UK) TRADING LIMITED & Old Street,167 City Road, London, EC1V 1AW, UK.
If there is any chargeback or reversal of any payment requested by a payment service partner, SUNLIGHT (UK) TRADING LIMITED has the right to refund the money so requested by the payment service partner without liability to YI IoT. SUNLIGHT (UK) TRADING LIMITED will use reasonable efforts to assist YI IoT in participating in the dispute resolution process of the relevant payment service partners.
For any inquiries, if you choose DHpay for payment contact:
SUNLIGHT(UK) TRADING LIMITED
Address: Old Street 167 City Road London, EC1V 1AW, UK
Please note that this Privacy Policy may change from time to time. We will provide notice of any changes by contacting you through a notification in the YI IoT mobile app or through the email contact information you provided when setting up your customer account.
If you have any questions, please contact us at support@yunyiiot.com.
This document focuses on information related to the operation of the YI IoT. In this Privacy Policy, it also includes our Mobile App, PC App, and Cloud as defined in our Terms of Use.