Privacy Policy

Uriel Electronics (the "Company") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act of the Republic of Korea and related laws, in order to protect users' personal information and handle related grievances promptly.

This English translation is provided for convenience. In the event of any discrepancy, the Korean version shall prevail.

Article 1 (Personal Information Collected and Collection Methods)

1. Information collected at sign-up

2. Information collected via social login

3. Information collected automatically during service use

4. Collection methods

• Direct input through the in-app sign-up and login screens
• Automatic collection through social login APIs
• Automatic generation and collection during service use

Article 2 (Purposes of Use)

The Company uses collected personal information only for the following purposes.

1. Member management: identity verification, member identification, confirmation of intent to join, prevention of fraudulent use
2. IoT device management: device registration, remote control, device status monitoring, multi-user device sharing
3. Notification service: push notifications upon device errors (sensor faults, overheating, etc.)
4. Service improvement: resolving service errors and improving quality
5. Smart home integration: providing device status queries and remote control through external smart home platforms (such as Google Home) that the user has directly linked
6. Statistics and analysis: product quality improvement and anomaly analysis based on device operation data

The Company does not sell users' personal information and does not use it for advertising purposes. Personal information is not used for training artificial intelligence models.

Article 3 (Retention and Use Period)

Article 4 (Provision to Third Parties)

In principle, the Company does not provide users' personal information to external parties, except in the following cases.

1. When the user has given prior consent
2. When required by law or unavoidable to comply with legal obligations

Third-party provision for Google Home integration (cross-border transfer)

Only when the user personally completes account linking (OAuth) in the Google Home app, the information below is provided to Google to deliver the integration service. No information is provided for users who have not linked their account.

Article 5 (Outsourcing of Personal Information Processing)

The Company outsources personal information processing as follows to provide the service.

Article 6 (User Rights and How to Exercise Them)

Users may exercise the following rights at any time.

1. Access: view your information in the app under Settings > Account
2. Correction: change user name, phone number, and password in the app
3. Deletion: withdraw via Settings > Account > Delete Account in the app
4. Suspension of processing: request via the contact information below

The Company takes action without delay (within 10 days at the latest) upon receiving a request to exercise user rights.

Article 7 (App Permissions)

The following permissions are requested to provide the service. Each permission is requested only when the relevant feature is used, and services other than that feature remain available without consent.

Article 8 (Security Measures)

The Company takes the following measures to secure personal information.

1. Transport encryption: all data transmission is encrypted via TLS/HTTPS
2. Certificate-based IoT security: mutual authentication between devices and the cloud via X.509 certificates
3. Password protection: passwords are stored as one-way hashes (SRP)
4. Access control: access to personal information is minimized
5. App code protection: code obfuscation (R8) to prevent reverse engineering

Article 9 (Destruction Procedure and Method)

1. Procedure: personal information whose purpose has been fulfilled is destroyed immediately without separate storage.
2. Method:
   • Electronic files: securely deleted so they cannot be recovered
   • Cloud data: completely deleted from AWS and Firebase
   • Local data: destroyed automatically when the app is deleted

Article 10 (Guest Users)

When using the service as a guest, devices can be registered and controlled without sign-up.

• A per-device unique identifier (guest_xxxxxxxx) is generated automatically and stored on the handset.
• This identifier is used only for device ownership management and cannot identify an individual.
• The identifier is destroyed automatically when the app is deleted.

Article 11 (Privacy Officer)

Article 12 (Changes to This Policy)

This Privacy Policy applies from the effective date. Any additions, deletions, or amendments in accordance with laws or policy will be announced through in-app notices from 7 days before the change takes effect.

Article 13 (Remedies for Rights Infringement)

Users may contact the following organizations (Republic of Korea) for remedies or counseling regarding personal information infringement.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
• Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301)
• National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)