Privacy Policy

Summary

AndrIoT (the website andriot.net and the dashboard app.andriot.net, plus the AndrIoT Android app) turns an old Android phone into a security camera and sensor hub. This summary is short; the full policy follows.

• Account data: email address, a password hash (never the password), and, if you use Google sign-in, your Google name, email, profile picture and account ID.
• Device data: the model, Android version, battery, network and sensor readings of the phone you pair, and the camera, microphone, location and files only when you turn those features on.
• Video and audio stream directly from your phone to your browser. Recorded clips are stored only if you enable recording, and you can delete them at any time.
• Google user data: only openid, email and profile, used only to sign you in. Never sold, never used for ads.
• Payments are handled by Stripe; we never see or store your card number.
• Contact and deletion: [email protected], or delete your account yourself in the dashboard.

1. Who we are

AndrIoT (“AndrIoT”, “we”, “us”) is operated by Jagar Yousef. We provide a service that turns an old Android phone into a security camera and sensor hub that you control from a web dashboard at app.andriot.net, together with Android apps that run on the phone. This policy covers the website at andriot.net, the dashboard, the Android apps and the AndrIoT cloud service (together, the “Service”).

For the purposes of data-protection law (including the GDPR), we are the controller of the personal data described below. Contact: [email protected].

2. What data we collect

Account data

• Email and password if you sign up with email (passwords are stored only as salted hashes).
• Google Sign-In data if you choose to sign in with Google: your email address, name and profile picture, and your Google account identifier. We request only the basic openid, email and profile scopes. We do not request access to your Gmail, Drive, Contacts, Calendar or any other Google service.
• Subscription data: your plan, billing period and a customer reference issued by Stripe. We never see or store your full card number.

Device data and telemetry

• Device identifiers: a device ID generated by the AndrIoT app, device model, Android version, app version and the push token issued by Firebase Cloud Messaging.
• Telemetry you choose to use: depending on the features you enable, the phone reports battery level and charging state, temperature, light and sound level, motion events, network information (for example Wi-Fi name and signal), and GPS location if you enable the location feature.
• Command and tool data: settings, schedules, forwarding rules (such as Telegram chat IDs, webhook URLs or MQTT broker details that you enter) and results of remote tools such as the terminal and file manager.

Video, audio and recordings

• Live video and audio are streamed from the phone to your browser using WebRTC. The stream is peer-to-peer and encrypted. When a direct connection is not possible, it passes through an encrypted relay that forwards the traffic without storing it. We do not watch, analyse, or use your streams for any other purpose.
• Motion clips and recordings are created and stored only if you enable them. They are stored in Cloudflare R2 object storage and deleted automatically when the retention period of your plan ends (12 hours on Demo, 7 days on Standard, 30 days on Pro), or earlier if you delete them.

Logs and technical data

• Activity log: events such as device online/offline, motion alerts, commands you issued and sign-ins, kept for your plan's retention period.
• Server logs: IP address, timestamps, user agent and request metadata, used for security, abuse prevention and debugging, and kept for a short period (up to 30 days).
• Cookies and local storage: the dashboard uses essential storage to keep you signed in and remember preferences. The marketing website uses no cookies and no advertising trackers. It uses Cloudflare Web Analytics, a privacy-friendly, cookie-free service that counts page views and general performance without fingerprinting or tracking you across sites.

3. How we use your data

We use personal data to:

• create and secure your account and authenticate you;
• operate the Service: pair devices, stream video, deliver alerts, run schedules and forward notifications you configured;
• store and delete recordings and logs according to your plan;
• process payments and manage subscriptions;
• send service messages (security notices, billing receipts, important changes). We do not send marketing email without your consent;
• detect abuse, fix bugs, and keep the Service reliable and secure; and
• comply with legal obligations.

Legal bases (GDPR): performance of our contract with you (providing the Service), our legitimate interests (security, abuse prevention, service improvement), your consent (for optional features such as location and recordings, and for Google Sign-In), and legal obligations (tax and accounting records).

We do not use your data for advertising, we do not build advertising profiles, and we do not use your video, audio or telemetry to train machine-learning models.

4. Google user data and Limited Use

If you sign in with Google, we receive your email address, name, profile picture and Google account ID through Google Sign-In, using only the openid, email and profile scopes. We use this information solely to create and identify your AndrIoT account, to show your name and avatar in the dashboard and to contact you about the Service.

In practice this means that we:

• use Google user data only to provide and improve the user-facing features of AndrIoT described above;
• do not transfer Google user data to third parties except as needed to provide the Service, to comply with applicable law, or as part of a merger or sale with notice to you;
• do not use Google user data for serving ads, including retargeting, personalised or interest-based advertising;
• do not allow humans to read Google user data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or the data is aggregated and anonymised for internal operations; and
• do not sell Google user data.

You can revoke AndrIoT's access at any time in your Google Account permissions, and you can delete your AndrIoT account as described in section 8.

5. Who we share data with

We do not sell your personal data and we do not share it for advertising. We use a small number of service providers (sub-processors) who process data on our behalf, under contracts that restrict them to providing their service to us:

Our application servers are self-managed and located in the European Union. Some providers above may process data outside the EU/EEA (for example in the United States); where they do, transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Destinations you configure. If you set up the Forwarding Hub, we send alerts and sensor data to the Telegram chat, webhook URL or MQTT broker that you specify. Those destinations are chosen by you and are governed by their own policies.

We may also disclose data when legally required (for example a valid court order), or to protect the rights, safety and security of our users and the Service.

6. Retention

• Account data: kept while your account is active and deleted after you close it (see section 8), except what we must keep by law.
• Recordings and activity logs: kept for your plan's retention period (Demo 12 hours, Standard 7 days, Pro 30 days), then automatically deleted.
• Demo accounts: short-lived; they and their data are removed automatically after they expire.
• Server and security logs: up to 30 days.
• Billing records: kept as long as tax and accounting law requires.
• Backups: deleted data may remain in encrypted backups for up to 30 days before being overwritten.

7. Security

We protect your data with measures including encryption in transit (TLS) for the website, dashboard and APIs; encrypted WebRTC media; salted password hashing; access controls and least-privilege on our servers; and per-device pairing codes. No system is perfectly secure, so please use a strong, unique password and keep your phone's operating system and the AndrIoT app up to date. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

8. Your rights and choices

Depending on where you live, you have rights over your personal data, including to access, correct, delete, export (portability) and restrict or object to processing, and to withdraw consent at any time. Under the GDPR you may also lodge a complaint with your local data-protection authority. Under the CCPA/CPRA, California residents have the rights to know, delete, correct and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined.

Deleting your data

• Account deletion. You can delete your account yourself in the dashboard, or ask us to by writing to [email protected] from the email address of your account. We delete your account, devices, recordings and logs, typically within 30 days, subject to the backup and legal-retention notes in section 6.
• Recordings. You can delete individual recordings or turn off motion clips at any time.
• Removing a phone. Removing a device from the dashboard stops all data collection from it. You can also simply uninstall the app.

We will not discriminate against you for exercising your rights. To make a request, email [email protected]. We may need to verify your identity and will respond within the time required by law (generally one month).

9. Children

The Service is not directed to children under 13 (or under 16 where local law sets a higher age of digital consent), and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact [email protected] and we will delete it. Parents who use AndrIoT to look after their own children (for example a baby monitor) are the account holders and are responsible for how the camera is used.

10. Recording other people

AndrIoT can capture images and sound of people who are not our users. You are responsible for using the Service lawfully, informing people where required, and respecting their privacy. See our Terms of Service for the acceptable-use rules.

11. Changes to this policy

We may update this policy from time to time. If changes are material, we will notify you by email or in the dashboard before they take effect. The date at the top shows when it was last revised.

12. Contact

Questions or requests about privacy: [email protected]
General enquiries: [email protected]
AndrIoT, operated by Jagar Yousef.