隐私政策

更新日期：2026 年 7 月 28 日

本隐私政策适用于XCCovcust APP 及配套智能厨房安全设备，包括油温异常检测、干锅检测、告警、远程控制、日志与远程管理等功能。

一、适用范围与数据控制者

数据控制者：

HK XINCHEN HOMWARD LIMITED

注册地址：RM 253, 2/F, MORLITE BUILDING, 40 HUNG TO ROAD, KWUN TONG, HONG KONG

联系邮箱：appledev@xncn175.com

数据保护官 / 代表邮箱：appledev@xncn175.com

我们遵守欧盟 GDPR（欧洲经济区 / 英国）、美国加州 CCPA/CPRA 及全球适用的数据保护法规。

二、我们收集的信息

我们仅收集提供安全与控制服务所必需的数据。

2.1 您主动提供的个人数据

账号：电子邮箱、密码、昵称 —— 用于账号注册、登录验证与身份识别
联系方式：手机号码 —— 用于发送安全告警短信；收货地址 —— 用于产品配送与售后
设备配置：Wi-Fi 名称与密码 —— 仅本地用于设备配网连接，非必要不上传
售后支持：反馈信息、日志、图片、订单信息 —— 用于故障排查、问题诊断与售后服务

2.2 自动收集的设备与使用数据

设备信息：MAC 地址、型号、固件版本、信号强度 —— 用于设备绑定、识别与固件升级
安全数据：人员探测、温度探测、阀门状态、告警记录 —— 用于实时安全监测、告警推送与自动阀门控制
使用数据：操作日志、APP 交互记录、崩溃报告 —— 用于功能改进、稳定性优化与故障分析
网络信息：IP 地址、Wi-Fi / 蓝牙状态 —— 用于保障设备连接与通信安全
位置信息：大致或精准位置 —— 仅用于设备配网时发现附近 Wi-Fi / 蓝牙设备

2.3 敏感数据

Wi-Fi 凭据、告警事件记录、精准位置信息（加密处理）—— 仅用于上述设备配网与安全监测目的

三、处理目的与合法依据

我们仅在以下目的下使用您的数据：

提供、验证、维护账号与设备服务
实时安全监测、告警通知与自动阀门控制
设备连接、配置与固件升级
故障排查、诊断与售后服务
履行法定义务
改进安全性能（聚合、匿名化）

GDPR 合法依据：

您的同意
履行合同所必需
遵守法定义务
合法利益（安全、防欺诈），且不侵犯您的基本权利

四、数据共享与披露

我们绝不会出售您的个人数据（CCPA/CPRA）。仅在以下情形共享数据：

授权服务商（云、托管、消息、支付）
物流合作伙伴（产品配送）
法律要求向监管机构提供
并购、资产转让等情形（提前通知）

所有接收方均受保密与数据保护义务约束。

五、数据存储、留存与安全

1. 数据加密传输与存储，采取严格安全措施

2. 留存期限：仅为实现目的所必需

3. 账号注销后：数据在 30 天内删除或匿名化（法律要求除外）

4. 发生高风险数据泄露时，依法通知监管机构与用户

六、国际数据传输

您的数据可能在全球传输与处理。我们通过以下方式保障合规：

欧盟标准合同条款（SCC）
适用法律认可的其他机制

您可随时撤回跨境传输同意；撤回可能限制服务功能。

七、您作为数据主体的权利

您可免费行使以下权利（身份验证后）：

知情权：获取我们持有的您的个人数据详情
更正权：更正不准确的数据
删除权（被遗忘权）：请求删除数据
限制处理权：请求限制数据处理
数据可携权：获取结构化、机器可读数据
反对权：反对基于合法利益的处理
撤回同意权：随时撤回，不影响此前处理的合法性

行使权利请联系：appledev@xncn175.com。您有权向数据保护机构提起投诉。

八、设备权限

APP 可能申请以下权限：

位置权限：发现附近 Wi-Fi / 蓝牙设备
蓝牙权限：设备扫描与连接
附近设备权限：获取设备列表（Android 12 及以上）
通知权限：接收安全告警
存储权限：日志、反馈、固件升级
后台权限：保障实时监测与告警

您可在系统设置中管理权限。

九、Cookie 及同类技术

我们使用 Cookie 等技术用于登录、会话、分析与稳定性。您可禁用 Cookie，部分功能可能受限。

十、儿童隐私

本 APP 不面向 16 周岁以下儿童，我们不会有意收集 16 周岁以下儿童的个人数据。如发现 16 周岁以下儿童向我们提供了个人数据，请通过 appledev@xncn175.com 联系我们，我们将及时删除相关数据并注销对应账号。

十一、加州居民特别权利（CCPA/CPRA）

加州居民有权：

知晓收集的个人数据类别
请求删除个人数据
选择不出售个人数据（我们不出售）
行使权利不受歧视

请求请联系：appledev@xncn175.com。

十二、欧盟 / 英国特别说明

欧洲经济区 / 英国用户：

• 您享有 GDPR 第 13–15 条完整权利

• 处理合法依据见第三条

十三、政策更新

我们可能更新本政策。重大变更将在 APP 内提前公告。继续使用即视为接受更新版。

十四、联系我们

疑问、请求或投诉：

邮箱：appledev@xncn175.com

地址：RM 253, 2/F, MORLITE BUILDING, 40 HUNG TO ROAD, KWUN TONG, HONG KONG

Privacy Policy

Last updated: July 28, 2026

This Privacy Policy applies to the XCCovcust APP and the accompanying smart kitchen safety devices, including abnormal oil temperature detection, dry-burn detection, alerts, remote control, logging and remote management features.

1. Scope and Data Controller

Data Controller:

HK XINCHEN HOMWARD LIMITED

Registered address: RM 253, 2/F, MORLITE BUILDING, 40 HUNG TO ROAD, KWUN TONG, HONG KONG

Contact email: appledev@xncn175.com

Data Protection Officer / Representative email: appledev@xncn175.com

We comply with the EU GDPR (EEA / UK), the California CCPA/CPRA, and other applicable data protection laws worldwide.

2. Information We Collect

We collect only the data necessary to provide safety and control services.

2.1 Personal data you provide

Account: email address, password, nickname — used for account registration, login verification and identification
Contact details: phone number — used to send safety alert SMS; shipping address — used for product delivery and after-sales service
Device configuration: Wi-Fi name and password — used locally only for device provisioning; not uploaded unless necessary
After-sales support: feedback, logs, images, order information — used for troubleshooting, diagnostics and after-sales service

2.2 Device and usage data collected automatically

Device information: MAC address, model, firmware version, signal strength — used for device binding, identification and firmware updates
Safety data: presence detection, temperature readings, valve status, alert history — used for real-time safety monitoring, alert notifications and automatic valve control
Usage data: operation logs, APP interaction records, crash reports — used for feature improvement, stability optimization and fault analysis
Network information: IP address, Wi-Fi / Bluetooth status — used to ensure device connectivity and communication security
Location: approximate or precise location — used only to discover nearby Wi-Fi / Bluetooth devices during provisioning

2.3 Sensitive data

Wi-Fi credentials, alert event records, precise location information (processed with encryption) — used only for the provisioning and safety monitoring purposes described above

3. Purposes of Processing and Legal Bases

We use your data only for the following purposes:

Providing, verifying and maintaining account and device services
Real-time safety monitoring, alert notifications and automatic valve control
Device connection, configuration and firmware updates
Troubleshooting, diagnostics and after-sales service
Compliance with legal obligations
Improving safety performance (aggregated and anonymized)

GDPR legal bases:

Your consent
Necessity for the performance of a contract
Compliance with legal obligations
Legitimate interests (security, fraud prevention), without overriding your fundamental rights

4. Data Sharing and Disclosure

We never sell your personal data (CCPA/CPRA). We share data only in the following circumstances:

Authorized service providers (cloud, hosting, messaging, payments)
Logistics partners (product delivery)
Disclosure to regulators as required by law
Mergers, acquisitions or asset transfers (with prior notice)

All recipients are bound by confidentiality and data protection obligations.

5. Data Storage, Retention and Security

1. Data is encrypted in transit and at rest, under strict security measures

2. Retention period: only as long as necessary for the stated purposes

3. After account deletion: data is deleted or anonymized within 30 days (except where retention is required by law)

4. In the event of a high-risk data breach, regulators and users will be notified as required by law

6. International Data Transfers

Your data may be transferred and processed globally. We ensure compliance through:

EU Standard Contractual Clauses (SCCs)
Other mechanisms recognized under applicable law

You may withdraw your consent to cross-border transfers at any time; doing so may limit service functionality.

7. Your Rights as a Data Subject

You may exercise the following rights free of charge (after identity verification):

Right of access: obtain details of the personal data we hold about you
Right to rectification: correct inaccurate data
Right to erasure (right to be forgotten): request deletion of your data
Right to restriction of processing: request that processing be restricted
Right to data portability: receive structured, machine-readable data
Right to object: object to processing based on legitimate interests
Right to withdraw consent: withdraw at any time, without affecting the lawfulness of prior processing

To exercise your rights, contact: appledev@xncn175.com. You also have the right to lodge a complaint with a data protection authority.

8. Device Permissions

The APP may request the following permissions:

Location: discover nearby Wi-Fi / Bluetooth devices
Bluetooth: device scanning and connection
Nearby devices: obtain device list (Android 12 and above)
Notifications: receive safety alerts
Storage: logs, feedback, firmware updates
Background execution: ensure real-time monitoring and alerts

You can manage permissions in your system settings.

9. Cookies and Similar Technologies

We use cookies and similar technologies for login, sessions, analytics and stability. You may disable cookies, though some features may be limited.

10. Children's Privacy

This APP is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal data, please contact us at appledev@xncn175.com and we will promptly delete the data and close the associated account.

11. Special Rights for California Residents (CCPA/CPRA)

California residents have the right to:

Know the categories of personal data collected
Request deletion of personal data
Opt out of the sale of personal data (we do not sell personal data)
Exercise rights without discrimination

To submit a request, contact: appledev@xncn175.com.

12. Special Notice for EU / UK Users

EEA / UK users:

• You enjoy the full rights under GDPR Articles 13–15

• Legal bases for processing are set out in Section 3

13. Changes to This Policy

We may update this Policy. Material changes will be announced in advance within the APP. Continued use constitutes acceptance of the updated version.

14. Contact Us

For questions, requests or complaints:

Email: appledev@xncn175.com

Address: RM 253, 2/F, MORLITE BUILDING, 40 HUNG TO ROAD, KWUN TONG, HONG KONG