Wise Water Application Privacy Policy

1. Who we are

The data controller is Wise Water Group LLC (Ukrainian state registry code 40957200), registered address: 15 Chystiakivska St., Kyiv 03062, Ukraine. Contact email: contact@wisewater.com.ua. We design and maintain the Wise Water mobile application for managing water-treatment systems you have purchased or service.

2. Data we collect in the application

During registration, sign-in, and use of the application we process the following categories of data:

• Contact data: first name, last name, email, phone number, country — to create your account, recover your password, and provide technical support.
• Device identifiers: Firebase Installation ID, push notification token (FCM/APNs), session identifier — to deliver alerts about events on your systems and to diagnose sign-in issues.
• Connected IoT device information: serial numbers, Wi-Fi configuration (during initial pairing only), status, telemetry (pressure levels, operating modes, command history) — to display metrics and enable remote control.
• Diagnostic data: error logs, application version, device model, OS version, session timing — used solely for incident investigation (sent manually via "Send logs" or automatically on a crash).
• Technical preferences: selected language, theme, sound and haptics settings — stored locally and may be synced to your account for consistent UX.

We do NOT collect: precise geolocation (only an approximate fallback strictly required for Bluetooth scanning on Android <12); IDFA or advertising identifiers; the contents of your messages, media gallery, or phone contact list.

3. Permissions the application requests

• Bluetooth (BLUETOOTH_SCAN/CONNECT/ADVERTISE on Android, NSBluetoothAlwaysUsageDescription on iOS) — for the initial pairing with the water-treatment device during Easy Connect setup.
• Local network (NSLocalNetworkUsageDescription / NEARBY_WIFI_DEVICES) — to discover the IoT device on your Wi-Fi network during initial setup.
• Camera (NSCameraUsageDescription / CAMERA) — to scan the device QR code during commissioning.
• Location (NSLocationWhenInUseUsageDescription / ACCESS_FINE_LOCATION) — used solely as a technical requirement for Bluetooth scanning on Android <12. Coordinates are never sent to our server.
• Notifications (POST_NOTIFICATIONS / UNUserNotificationCenter) — to receive push notifications about events on your systems (alerts, status changes).
• Network access (Internet) — to synchronise with our backend and receive configuration updates.

4. How we use your data

• Account creation and maintenance, authentication via email/password or Sign in with Google.
• Displaying the status of your water-treatment systems and enabling remote control (e.g. regeneration, reboot).
• Sending push notifications about critical events on your devices.
• Technical support: when you use "Send logs", we receive diagnostic logs together with the note you provided. Logs do not contain passwords and have a limited retention period.
• Product improvement: anonymous usage analytics (Google Analytics for Firebase) — only with your consent given in More → Analytics.
• Compliance with applicable Ukrainian law.

5. Data sharing with third parties

We rely on the following services that may process your data as data processors on our behalf:

• Firebase Authentication (Google LLC, USA) — authentication.
• Firebase Cloud Messaging (Google LLC, USA) — push notification delivery.
• Firebase Remote Config (Google LLC, USA) — dynamic feature configuration.
• Firebase Analytics for Google (Google LLC, USA) — anonymous product analytics, only with your consent.
• Sign in with Google (Google LLC, USA) — optional sign-in method.
• Our backend server (deployed on EU/US infrastructure) — for storing account data and device telemetry.

We do NOT sell or transfer your personal data to ad networks or data brokers. Data is shared with state authorities only in cases explicitly required by Ukrainian law, upon official request.

6. Security and encryption

• All network connections from the application to our backend are protected by TLS 1.2+ (HTTPS).
• Session tokens and sensitive data are stored in OS-level secure storage (iOS Keychain / Android EncryptedSharedPreferences).
• Passwords are never stored in plaintext — the server uses bcrypt hashing with per-user salt.
• Android Auto Backup and device-to-device transfer for application data are disabled at the AndroidManifest level to avoid exporting session tokens.

7. How long we store your data

• Account data (email, name, phone, paired devices) — for as long as your account exists.
• IoT device telemetry — up to 24 months in detailed form, then aggregated.
• Push tokens — while the token is valid (typically refreshed automatically by the application).
• Diagnostic logs (Send logs) — up to 90 days, then deleted automatically.
• After account deletion (see §8) your personal data is removed from active systems within 30 days. If isolated copies remain in backups for some additional time, they are not used and are fully purged on the next backup rotation.

8. Account deletion

You can delete your account fully and permanently directly inside the application:

• Open More → Profile → Delete account.
• Confirm the action — your account will be deactivated immediately and you will be signed out from all devices.
• All personal data will be removed from our active systems within 30 days. Anonymous analytics that does not contain account identifiers may persist for longer.

Alternatively, you can email a deletion request to contact@wisewater.com.ua — we will process it within the same timeframe.

9. Your rights

Under the Ukrainian Personal Data Protection Act and analogous European law (GDPR where applicable) you have the right to:

• Know which data we hold about you (access request).
• Request correction of inaccurate data.
• Request deletion — full (via account deletion, §8) or partial (by emailing contact@wisewater.com.ua).
• Withdraw consent for data processing at any time — the consequence is loss of access to the application’s core functionality.
• Object to processing or restrict it.
• Lodge a complaint with the national data protection authority in your jurisdiction.

10. Children

The application is not intended for persons under 16. We do not knowingly collect personal data from children. If you are a parent or guardian and discover that a child has registered without your consent, please contact us at contact@wisewater.com.ua and we will delete the account immediately.

11. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date is shown at the top of this document. For material changes that affect your rights, we will notify you via push notification or in-app message at least 7 days before such changes take effect.

12. How to contact us

For any questions regarding the processing of your personal data, the exercise of your rights, or this Policy, please contact us:

• Email: contact@wisewater.com.ua
• Controller: Wise Water Group LLC (state registry code 40957200), 15 Chystiakivska St., Kyiv 03062, Ukraine
• Web mirror of this policy: https://wisewater.ua/app-privacy-policy