OzoLife Mobile Application Privacy Policy
Ozone Secutech Private Limited
Effective date: Last updated:
1. About this Policy
Ozone Secutech Private Limited (“OSPL”, “we”, “us”, “our”) has its registered office at H-40, Bali Nagar, Delhi - 110015, India. For the OzoLife mobile application and the services and Smart Devices connected to it (together, the “Products”), OSPL decides why and how your personal data is processed. Under Indian law that makes OSPL the “Data Fiduciary”.
This Policy explains what personal data we collect, why, who receives it, how long we keep it, and how you can exercise your rights. We process personal data in line with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, as and when each provision comes into force, the Digital Personal Data Protection Act, 2023 and the rules made under it.
Please read this Policy before you register or use the Products. We ask for your consent through a clear action in the app, such as ticking an unticked box or turning on a permission. We do not treat merely downloading or opening the app as consent to anything beyond showing you this Policy.
Other branded applications. For other mobile applications that OSPL builds or powers for business customers (“Clients”), the Client decides the purposes of processing and OSPL processes data on the Client’s instructions. If you are a customer of a Client and no longer want to be contacted by that Client, please contact the Client directly.
2. Definitions
- Personal Data: information about an identifiable individual, including information that reflects that individual’s activity, whether on its own or combined with other information we hold.
- Sensitive Personal Data or Information (SPDI): the categories defined in the SPDI Rules, which include passwords, financial information such as card or bank account details, health information and biometric information. We also handle the following with extra care and ask for explicit consent before collecting them: biometric information, the content of communications, video and audio recordings, and precise location.
- Smart Devices: connected devices such as smart locks, safes, video doorbells, cameras and plugs that you link to the app.
- You / Data Principal: the individual whose personal data we process.
3. What Personal Data we collect
We collect only what is needed for the purposes in section 4. If you choose not to provide something, some features may not work, but we will not refuse core services because you decline optional items such as marketing.
3.1 Information you give us
- Account and profile: name, email address, mobile number, user name and login credentials, and optionally a nickname, profile picture, country or region code, language and time zone.
- Home and sharing: names or contact details of family members or guests you invite, and names you give to homes, rooms and devices.
- Feedback and support: your email address, phone number and message, used to resolve problems and device faults.
- Orders: if you place an order through the OzoLife Mall, your name, delivery address, phone number and order history. Payments are processed by our payment service providers.
3.2 Information collected automatically
- Device information: MAC address, IP address, wireless connection information, operating system and version, app version, push-notification identifier and mobile network information.
- Usage data: visits, clicks, downloads, messages sent and received, and feature use.
- Log information: system and exception logs uploaded when the app runs or crashes.
- Location: when you allow location access, we may collect precise or approximate location to pair Smart Devices and to run features you turn on, such as geo-fencing. With your consent, geo-fence location is shared with Google Maps services. You can turn location off in the app or in your phone settings.
3.3 Smart Device information
- Basic device data: device name, device ID, online status, activation time, firmware version and update information.
- Data your devices report. Depending on what you connect, this may include the following.
- Locks and safes: lock and unlock events, which user or credential was used, battery status and tamper alarms.
- Video doorbells and cameras: live video, recorded clips and snapshots, audio, and motion or visitor events.
- Smart plugs: on/off state, schedules and, where supported, energy use.
- Biometric data.
- Fingerprint, face and palm templates used by a lock or safe are stored only on that device. They are not sent to, and cannot be read by, OSPL.
3.4 Permissions the app may ask for
The app asks for permission at the moment a feature needs it. You can refuse or withdraw each one in your phone settings.
- Camera and photo library: scanning QR codes, adding profile pictures, uploading images for support.
- Microphone: two-way talk and audio on video doorbells and cameras.
- Bluetooth and nearby devices: finding and pairing Smart Devices.
- Location: pairing devices and geo-fencing.
- Notifications: alerts from your devices and service messages.
Visitor mode. If the app offers a visitor mode, we limit collection to the technical data needed to keep the app working.
Device and log information on its own usually cannot identify you. Where it can be combined with other data to identify you, we treat it as Personal Data.
4. Why we use your Personal Data
We use Personal Data only for the purposes below, and only the data needed for each. Optional purposes are switched off until you turn them on.
| Purpose | What we use | Basis |
|---|---|---|
| Provide the Products you request or buy: register your account, pair and control devices, send alerts, support remote access | Account, device, Smart Device and location data | Your consent, and performance of our contract with you under the Terms of Use |
| Keep the Products working and safe: fix errors, secure accounts, prevent fraud and misuse | Device, log and usage data | Your consent; legal and security obligations |
| Improve the Products: analyse how features are used and develop new ones | Usage and device data, in aggregated or de-identified form where possible | Your consent, which you can refuse without losing core features |
| Service messages: security alerts, policy and terms changes, administrative notices | Contact details | Needed to run the service; you cannot opt out of these |
| Marketing and promotions, including contests you choose to enter | Contact details, preferences | Your separate, optional consent; every message includes an opt-out |
| Personalisation: tailored recommendations, offers and surveys | Account, usage and device data | Your separate, optional consent |
| Legal compliance: follow the law, respond to lawful requests, enforce our terms, protect our systems and rights | Any data the law requires | Legal obligation; the exceptions the law allows |
If we want to use your Personal Data for a new purpose, we will tell you by email or an in-app notice and, where the law requires, ask for your consent again.
5. Your consent and how to withdraw it
How we ask. At sign-up we show this Policy and ask you to agree through an unticked checkbox or button. We ask separately for optional uses such as marketing and personalisation, and for sensitive items such as biometrics, camera and microphone access, and precise location.
How you can withdraw. Withdrawing consent should be as easy as giving it. You can:
- Change permissions for location, camera, photos, microphone, Bluetooth and notifications in your phone settings.
- Turn off optional processing in the app under Settings > Privacy.
- Use the unsubscribe link in any marketing message.
- Remove a Smart Device from the app so we stop collecting data from it.
- Delete your account in the app or write to the contact in section 14.
What happens next. Once you withdraw, we stop the processing that depended on that consent within a reasonable time, and delete the related data unless the law requires us to keep it. Withdrawal does not undo processing done lawfully before you withdrew. If a feature cannot work without that data, we may not be able to provide it.
6. Who we share Personal Data with
We share Personal Data only as described here.
- Service providers (processors) that work for us under written contracts, for example cloud and IoT platform hosting, SMS, email and push-notification delivery, analytics, payment processing, customer support tools and IT services. They may use the data only on our instructions and must protect it. A list of our processors by category is available on request.
- Clients and business partners who supply or install your Smart Devices or networks, only to the extent needed to deliver, install or support what you ordered, or where you have agreed.
- Our group companies, to carry out ordinary business activities, on the same terms as this Policy.
- A buyer or successor, if OSPL is involved in a merger, sale, reorganisation or similar transaction. We will tell you by email or an in-app notice about any change in ownership or incompatible new use, and about the choices you have.
- Authorities and other parties where the law requires or allows: to comply with law or legal process, respond to lawful requests from public or government authorities, enforce our terms, protect our systems, rights, safety or property or those of other users, and pursue legal remedies. We review such requests and disclose only what is required.
- Anyone else, only with your consent.
If you invite family members or guests, they will see the device information and events you choose to share with them.
7. Transfers outside India
We store and process Personal Data in India for users who select the India region during account registration. For users outside India, data is stored or processed in data centres in the EU, West America or China, based on the region selected at account registration. Some service providers may process data in other countries. Indian law allows transfers abroad except to countries the Central Government restricts, and the SPDI Rules require the recipient to give the same level of protection. We use written contracts with these safeguards, and we will not transfer data to a country that is restricted by law.
8. Your rights
You may:
- Access: ask for a summary of the Personal Data we process about you, the processing we carry out, and the other parties we have shared it with.
- Correct and update: ask us to correct inaccurate or misleading data, complete incomplete data, and update it. Much of this you can do yourself in the app profile.
- Erase: ask us to delete your Personal Data, unless we need it for a purpose you agreed to that is still running or the law requires us to keep it.
- Withdraw consent: at any time, as described in section 5.
- Complain: use the grievance process in section 14.
- Nominate someone: name a person who can exercise these rights for you if you die or cannot act for yourself.
How to ask. Use Settings > Privacy in the app or write to the contact in section 14. Say clearly what you want changed or deleted. We may ask you to verify your identity first. There is no fee, and we aim to respond within 30 days. If you are not satisfied after using our grievance process, you may complain to the Data Protection Board of India once it is operational.
Your duties. Give us accurate information, do not impersonate another person, and do not make false or frivolous complaints.
9. How long we keep Personal Data and how to delete your account
We keep Personal Data only as long as needed for the purpose it was collected, or longer if the law requires. When the period ends we delete or irreversibly anonymise it. Where deletion is technically delayed, for example in backups, we isolate the data and do not use it.
| Data | Retention |
|---|---|
| Account and profile | While your account is active, then deleted within 30 days of account deletion |
| Smart Device event history | 3 months, or until you delete the device or account |
| Video and audio clips stored by us | 7 days, rolling, unless you save a clip |
| Support tickets and feedback | 24 months after closure |
| Order and tax records | The period required by tax and company law |
| Marketing preferences | Until you withdraw consent |
Delete your account. Go to Settings > Account > Delete account in the app, or use web deletion request link. Deleting your account cannot be undone. We then delete your data as above, except what the law requires us to keep. Some content you shared with other users, or posted on third-party platforms, may remain visible outside our control.
10. How we protect Personal Data
We use reasonable technical, administrative and physical safeguards to protect Personal Data against loss, misuse, unauthorised access, disclosure and alteration. These include:
- Encryption of data in transit between the app, devices and our servers, and encryption of stored confidential data.
- Access controls so only authorised staff and providers can reach personal data, with logging of that access.
- Authentication of devices and users, and separation of one user’s data from another’s.
- Security testing and audit logs on our systems.
- Written security and confidentiality terms with every processor.
No system is completely secure. Please protect your password, keep your phone’s operating system and the app up to date, use a screen lock, and remove devices you no longer use. If you think your account has been compromised, tell us straight away at the contact in section 14.
If something goes wrong. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users in the form and time the law requires, and report cyber security incidents to CERT-In as required.
11. Children and recording other people
Children. OzoLife is meant for adults. Under Indian data protection law, anyone under 18 is a child. We do not knowingly process the Personal Data of a child without verifiable consent from a parent or lawful guardian. We do not track or monitor the behaviour of children or show them targeted advertising. If we learn that we hold a child’s data without that consent, we will delete it. If you think a child has given us data, please contact us.
Recording visitors and household members. Video doorbells, cameras and locks may record family members, guests, staff and passers-by. If you use these features you are responsible for using them lawfully, for telling the people affected, and for keeping recordings in line with applicable law.
12. Third-party services and links
The app may use third-party services such as Google Maps for geo-fencing and payment service providers for payments, and may link to other sites. We do not control their practices, and this Policy does not cover them. Please read their privacy policies.
13. Changes to this Policy
We may update this Policy to reflect changes in our practices or the law. For material changes we will notify you by email to the address on your account or by a prominent notice in the app before the change takes effect, and where the law requires we will ask for your consent again. The date at the top shows when it was last updated. Earlier versions are available on request.
14. Contact us and Grievance Officer
For questions, requests to exercise your rights, or complaints about how we handle your Personal Data, contact us using the details below. We will acknowledge your message and aim to resolve it within 30 days.
- maninder@ozonesecutech.com
- Postal address
- Ozone Secutech Private Limited
H-40, Bali Nagar
Delhi - 110015, India - General enquiries
- customercare@ozone.in
This Policy is governed by the laws of India, and the courts at New Delhi have jurisdiction.