Lenovo Cleaner.App Privacy Notice

 

Effective date 03/25_/2021

 

The Lenovo [Lenovo Cleaner App] Privacy Notice (“Privacy Notice”) describes: (i) how Lenovo collects, uses, stores or otherwise processes an individual's personal data in the context of the [Lenovo Cleaner App]; (ii) describes the data sharing relationship between [Lenovo Cleaner App] and [Tuya Inc.,].

 

Before you proceed with the registration of your [Lenovo Cleaner App], we want you to know that using the [Lenovo Cleaner App] (“the App”) will involve certain data processing activities of your personal data by Lenovo and its partners. In this privacy notice, “Lenovo”, "we" or "us" refers to Lenovo Group Ltd and its affiliated group companies. Lenovo will process your personal data as a data controller of your personal information.

 

This Privacy Notice governs the relationship between you and Lenovo, and the specific personal data processing activities conducted in connection with the [Lenovo SIoT Devices] and the [Lenovo Cleaner] App. To learn more about how Lenovo handles your personal data, please visit the Lenovo Global Product Privacy Statement. Such privacy notice includes among others, a description of your data protection rights and how you can exercise them, how we may share your personal information or how we protect personal data in our products.

 

What personal data does the [Lenovo Cleaner] App process?

 

Please be aware that personal data means any information which is related to an identified or identifiable natural person.

 

When you choose to install and use the App, Lenovo requires you to provide certain personal data, as described in the table below, to complete registration, and for the purpose of enabling you to use the App features in performance of the [Insert EULA Hyperlink]

 

When you use the product, data is generated. Categories of data generated can be summarized into: a) [______]; b) [______]; c) [______]and d) [______]. Please see the following table below for more detailed information.

 

Table is completed as an example to be followed when completing this exercise

 

 Data type

 

Source of the data

Legal basis

Purpose

  • E-mail address 

Directly from you, when signing up and linking the app with the product.

  • Contract performance 

  • Legitimate interest 

  • To create an account. 

  • To deliver the features and functions of the App.  

  • To deliver support when needed. 

  • To improve the App. 

  • To manage and renew your subscription. 

  • To communicate with you regarding product updates, education and current privacy affair.  

  • Account login credentials  

Directly from you, when signing up and linking the app with the product.

  • Contract performance 

  • Legitimate interest 

  • For user authentication and identification.  

  • Event Data (i.e. sweep, pause, set restricted area, edit room partition, remote control and other command events)  

From the App as a result of your interaction with the App and Lenovo Robotic Vacuum Cleaner X1.

  • Contract performance 

  • Legitimate interest 

  • For query logs and troubleshooting.  

  • IP Address 

From the App.

  • Contract performance 

  • Legitimate interest 

  • To determine the country where the equipment must be, for instance to locate problems, such as anti-cross cargo. 

  • Device Type 

  • OS type 

  • App version 

  • crash data 

From the App.

 

  • Contract performance 

  • Legitimate interest 

  • To deliver support if you have an issue  

  • To maintain feature compatibility with Operating Systems 

  • To confirm that the App is interoperating with your device correctly 

  • To provide Device Sync. 

  • Serial number 

  • MAC address, 

  • Equipment unique identification 

  • Certification 

From the App.

  • Contract performance 

  • Legitimate interest 

  • To analyze device logs and behaviors to help users resolve issues  

  • Your opinion on the app 

From you if you choose to send feedback.

  • Consent  

  • To understand how we can improve the App. This is voluntary and you can choose not to provide feedback. 

 

Category of Data

Types of Data

Mobile device info

appVersion

channel: OEM or SDK developed

the mobile device id

mobile phone device language

Latitude and longitude (geo-location)

Mobile phone operating system category IOS/android

Mobile phone operating system version

platform: mobile phone model

App sdk version

time zone id

channel ttid

IP address

push notification id

user profile

username: registered with phone number or email address

password  - in the logs with Hash with salt

email address: if the user registered with phone number

nick_name

head_pic

telephone country code

the language preference setting in the mobile phone

time zone id

temp_unit: Degree-day (Celsius/Fahrenheit)

Source of registration,' source, 0 registration (email), 1 registration (mobile phone), 2 registration (other), 3qq,4 microblog, 5fc,6tw,7wx',

Feedback: when using feedback and suggestions features in the App, information about email address, mobile phone number and feedback content

Usage data: during interaction with device or the App, it automatically collects usage data relating to visits, clicks, downloads, messages sent/received, types of features used, frequency of usage and other data related to usage of device or App

Device info

Device ID

UUID

UID: the user id deviated from the uuid, partially psedonymization

Owner ID: created for each user by default when connecting the device

Is it a subordinate device?

Is it online?

Is it active?

Device name: the name that set default in the device

Custom name: the name that the user changed

Version of software

Version of the protocol

Version of the baseline

Product Code

Product ID

Icon

Upgrade Status

Upgrade Text

GMT_Upgrading

Longitude and latitude

IP address

Port

City ID

Country Code

Time Zone

Time Zone ID

Language Preference

Access Type: whether it is accessed by the App or accessed by wechat. the access type is the same for oversea users (a definite value)

Http_last_time

Mqtt_last_time

Active Time: the time to activate the device

Reset_Factory or not

Gmt_creat /gmt modified: the time to generate and modify the user information

 

 

What specific permissions do you grant us, and how to withdraw consent?

 

In order to process your personal information, when it is necessary, Lenovo will ask for your consent within the App for specific features. The table below describes how you can grant and withdraw your consent to such specific consent items.

 

Please note that some features would not be available if you do not grant the App permission. Also, we want you to know that we will not sell nor share your data for marketing related purposes. In addition, we will not send you marketing related communications by email, or via in-app push notification unless we have previously obtained your consent.

 

Table is completed as an example to be followed when completing this exercise.

 

Feature

Data Processed

Purpose

Withdraw mechanism

GPS

Specific location as per app permissions.

  • To obtain Wi-Fi information and connect the App to the device's own AP hotspot. Lenovo will not collect location data.  

System/App settings in your phone

Wi-Fi

Wi-Fi settings as per app permissions.

  • To transfer data and interact with the device and cloud. 

System/App settings in your phone

Camera

Access to your camera and phone gallery as per app permissions.

  • To upload your avatar picture. You will be prompted with a pop-up window and be asked to confirm.  

  • If you share the device by scanning the QR code, the camera needs to be turned on. 

System/App settings in your phone

 

Permission Setting in the Mobile App

Tuya Obtained?

Need user's consent?

Functions

iOS

Android

The key permission

Location

Y

Y

Y

provide service:
1) Access SSID info During pairing device process;
2) Set location for family;
3) Condition setting like Geo-Fence, weather situation under Automation Setting

Phone number

Y

Y

N

1) Registered as the account;
2) SMs/phone calls for Notification service (a value-added service)

Message Content

N

N

/

/

AddressBook - Contact

N

N

/

/

Dialing Records

N

N

/

/

Important Permission

Camera

Y

Y

Y

Scan the QR code;

Recording

N

N

/

/

Microphone

Y

Y

Y

Automation scenario: voice control of the smart devices

Permission to send Message

N

N

/

/

Permission to make a call

N

N

/

/

Photo Album

Y

Y

Y

1) set the head portrait;
2) attach a photo to report the issue in the App

Files

N

N

/

/

Common Permission

Permission to turn on Wifi

Y

Y

N

Pair the App and smart device

Bluetooth

Y

Y

Y

Pair the App and smart device

Access to Cellular

N

N

/

/

Calendar

N

N

/

/

List of Application

N

N

/

/

These permission can be withdrawn in the mobile setting.

 

 

How do we share your personal data?

 

In order to provide the service, we will share your information with [Third party 1] To [Insert why Third party 1 is necessary – e.g. the purpose of the partnership]. As part of Lenovo’s data processor arrangement with them, Lenovo requires that [Third party 1] maintains information security best practices, makes all reasonable efforts to secure your data and only processes your data for the purposes listed in the table below.

We will also use [Third party 2] for the purpose to [Insert why Third party 1 is necessary – e.g. the purpose of the partnership].

 

[Add as many third parties as necessary]

 

How Long do we keep your personal data?

 

When we design a product, we focus on delivering the best user experience. In order to do so, we will process personal data for the purposes described in this Privacy Notice, but we will only retain your personal information as long as necessary to achieve proper performance of the product. In some cases, we may need to retain your personal data when it is required by law.

 

Please see below detailed information about the data retention schedule.

 

Complete table as per information provided in Data Retention section and Annex B.

 

Type of data

Retention Period

  • Mobile device information 

Permanently stored.

  • User profile  

Permanently stored.

  • Device information 

Permanently stored.

  • Log files, usage data 

7 days.

  •  

 

  •  

 

  •  

 

  •  

 

 

 

 

Changes to this Privacy Notice

 

Our mission is to be as transparent as possible.

 

We might update this privacy notice to let you know about any changes in the way the product, or Lenovo process your personal data and ask you if you are happy with those changes when necessary by law. We will let you know via in-app push notification or e-mail about such changes to make sure you are up to date.

 

Contact us

 

For any privacy related matters please contact the Lenovo Privacy Program at privacy@lenovo.com. We will get back to you as soon as possible.