Privacy Policy

Last updated: August 3, 2025

This Privacy Policy describes how personal data is collected, used, and protected when you use the AddSecure IoT Alert mobile application ("the App"). We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for processing your personal data is AddSecure or its designated operator. If you have any questions or requests regarding your personal data, please contact us [contact details to be provided].

2. Personal Data We Collect

When you use the App, we may collect and process the following types of personal data:

Account information: Email address, display name, and password (securely hashed and stored).
Device information: Such as device model and OS version, used solely for support and troubleshooting.
Usage data: Basic interaction data within the app, for the purpose of improving functionality and user experience.

We do not collect location data or sensitive personal data.

3. Purpose and Legal Basis for Processing

We process your personal data based on the following legal bases:

Purpose	Legal Basis
To create and manage your user account	Contractual necessity (Article 6.1.b)
To authenticate and authorize your access	Contractual necessity
To provide technical support and assistance	Legitimate interest (Article 6.1.f)
To analyze usage and improve the App	Legitimate interest

We do not use your data for marketing or advertising.

4. Data Sharing and Transfers

We do not share your personal data with third parties. Your data remains under our control and is not transferred outside the EU/EEA without appropriate safeguards.

5. Data Retention

We retain your data as long as your account remains active. We do not automatically delete accounts, but you may request deletion at any time.

6. Your Rights Under GDPR

You have the following rights under GDPR:

Right of access – Request a copy of your personal data.
Right to rectification – Request correction of inaccurate or incomplete data.
Right to erasure – Request deletion of your data ("right to be forgotten").
Right to data portability – Receive your data in a commonly used, machine-readable format.
Right to object – Object to certain types of processing, such as analytics.
Right to lodge a complaint – With a supervisory authority in your country.

To exercise your rights, please contact us [contact details to be added].

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date. You are advised to review this policy periodically.