Privacy Policy

Introduction

DragonTV Limited ("we," "our," or "us") operates the Dragon IoT mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

We are committed to protecting your privacy. We collect only the minimum data necessary to provide our service and never share your personal information with third parties.

Information We Collect

1. Contact Information

• Email Address - Used for account authentication and customer support
• Name - Optional, for personalization

2. Location Information

Privacy-Conscious Design: Your own GPS coordinates are never sent to our servers. The location of each home you set up is stored — the App cannot tell when you arrive or leave without knowing where your home is.

• Your Position (GPS Coordinates)
  • Processed: Transiently on your device only — not stored
  • Used for: Determining whether you are home or away
  • Stored or synced to cloud: No
• Home Location (Coordinates and Address)
  • Collected: Yes — the precise coordinates of each home you create
  • Used for: Detecting arrival and departure, and fetching local weather
  • Street address: Stored only if you choose "Use precise location" when creating the home
  • Synced to cloud: Yes, and visible to anyone you give access to that home
• Home Presence Status
  • Collected: Yes — whether you are home or away
  • Used for: Enabling shared home automation features
  • Synced to cloud: Yes

3. User Content

• Home name (see Location Information above for where a home is stored)
• Device settings and preferences
• Automation rules

4. Identifiers

• User ID - A unique identifier generated internally by our authentication system. It is never used for advertising and not linked to any external profile.
• Installation ID - A random identifier created the first time you open the App on a device. It lets us send alerts to the right device and remember your per-device notification preference. It is not the device's serial number or advertising identifier, and it changes if you delete and reinstall the App.
• Push Notification Token - Issued by Apple and Google so alerts can reach your device. Stored against your account alongside the Installation ID.

5. Crash Diagnostics

When the App crashes we receive a crash report to help us fix the fault. It contains the stack trace, your device model, operating system version and the App version. It does not contain your homes, devices, rules, location or credentials, and it is not tied to your account.

Information We DO NOT Collect

We explicitly do not collect:

• Health or fitness information
• Financial information or payment details
• Contacts from your device
• Browsing or search history
• Photos, videos, or audio
• Device identifiers for advertising
• Usage analytics — we do not record which screens you open, which buttons you tap, or how long you use the App

We do receive crash reports when the App fails. See Crash Diagnostics above.

How We Use Your Information

We use the information we collect solely for:

• App Functionality - To provide home automation services, sync data across your devices, and execute automation rules
• Authentication - To verify your identity and secure your account
• Customer Support - To respond to your inquiries and provide technical assistance
• Alerts - To send push notifications about your homes and devices, such as a door left unlocked or a device going offline
• Reliability - To diagnose crashes and faults so we can fix them

We do not use your data for advertising, marketing, or any other purposes.

Third-Party Services

Your Own API Keys

The App allows you to connect to third-party smart home services using your own API keys and credentials. Important clarifications:

• We store your API keys securely in encrypted form
• We act on your behalf using your credentials to control your devices
• We do not share your data with these third-party services
• We do not have access to your third-party account data beyond what you explicitly authorize

Companion Apps

Dragon IoT works alongside your existing device manufacturer apps — it does not replace them. You will still need apps such as the Sensibo or Xiaomi Home app for initial device setup and manufacturer-specific features. Dragon IoT uses your account credentials solely to read device status and send commands on your behalf.

Weather Data

The App uses Open-Meteo (a free, open-source weather API) to fetch weather conditions for your configured homes. To do this, your home's latitude and longitude are sent to Open-Meteo's servers. Open-Meteo does not require an account, does not track users, and does not store location data beyond the immediate request. See Open-Meteo's terms for details.

Backend Infrastructure

We use Supabase (a trusted database and authentication provider) to store your encrypted data. Supabase is GDPR and SOC 2 compliant.

Notifications and Crash Reporting

We use Google Firebase for three things. We do not use Firebase Analytics, and we have not enabled any advertising or audience feature.

• Firebase Cloud Messaging - Delivers push notifications. Your push token and the text of each alert pass through Google's and Apple's servers on the way to your device.
• Firebase Crashlytics - Receives a crash report when the App fails, as described under Crash Diagnostics.
• Firebase Remote Config - Tells the App the minimum supported version so we can prompt you to update. The App only reads this setting; it sends us nothing about you.

See Google's Firebase privacy information for details.

Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between the App and our servers is encrypted using TLS/SSL
• API keys and sensitive credentials are encrypted at rest
• Database access is restricted with row-level security policies
• We regularly review and update our security practices

Device Backups: The App keeps a copy of your data on your own device, protected by the encryption built into iOS and Android. When you back your device up, that copy is included in the backup. We recommend turning on every encryption option your device offers — Advanced Data Protection for iCloud, or the Encrypt local backup option in Finder or iTunes — so that a backup of your device cannot be read by anyone else.

Data Retention

• Account Data - Retained as long as your account is active
• Home Configurations - Retained until you delete them or close your account
• Location History - Not stored (only current zone status is kept)
• Push Notification Tokens - Retained while your account is active and deleted with it
• Crash Reports - Retained by Firebase Crashlytics for up to 90 days

Your Privacy Rights

Under GDPR (if you're in the EU/UK) and CCPA (if you're in California), you have the right to:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate or incomplete data
• Deletion - Request deletion of your account and all associated data
• Portability - Export your data in a machine-readable format
• Objection - Object to processing of your data
• Withdraw Consent - Withdraw consent at any time (this may limit app functionality)

To exercise any of these rights, contact us at privacy@dragontech.info

Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

International Data Transfers

Your data may be stored and processed in servers located outside your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (if you've provided your email)
• Displaying a prominent notice in the App

Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@dragontech.info
• Support: support@dragontech.info
• Company: DragonTV Limited, Company No. 06236913 (UK)

App Store Privacy Labels

This is a summary of our App Store privacy declarations as they appear on the App Store.