Privacy Policy

1. Data Controller

The controller responsible for personal data processed through the App is:

Email: tl.ahcetoni@ofni
Website: inotecha.lt

2. Information We Collect

Account Information

When you create and use an account, we process information necessary to create and manage it, including:

• Name
• Email address
• Country
• Internal account identifier
• Password and related authentication data required to securely access your account
• One-time verification codes used for email-based two-factor authentication (2FA)

The App uses email-based 2FA to help protect your account. When additional verification is required, a one-time security code is sent to the email address associated with your account and used to verify the sign-in attempt.

We use this information only to provide, secure, and maintain your account and the service.

Connected Device Information

When a compatible ventilation unit is associated with your account, our cloud service maintains the information necessary to determine which devices your account is authorized to access. This may include:

• Ventilation unit identifier
• Device connection status and configuration
• Ventilation settings, fan speeds, and airflow information
• Temperature and humidity readings
• CO₂ and air-quality readings, where supported
• Filter information
• Device warnings, faults, and operating status
• Schedule settings

Device information is processed so that the App can display live status and send control commands to the appropriate ventilation unit.

The ventilation unit itself is not provided with your name, email address, or other account profile information. The cloud service manages the association between your account and the devices you are authorized to access.

Communication between the App, cloud service, and ventilation units uses MQTT-based messaging infrastructure operated by INOTECHA on our own server. Device data is not sent to a third-party MQTT provider. We do not use ventilation or environmental information for advertising or tracking.

3. Wi-Fi Credentials and Bluetooth Setup

The App uses Bluetooth when setting up a compatible ventilation unit.

During setup, you may provide the Wi-Fi network name and password required for the ventilation unit to connect to your network.

Wi-Fi credentials are transferred directly to the ventilation device during setup and are not sent to or stored in the INOTECHA cloud.

Bluetooth access is used only for discovering, pairing with, and configuring compatible ventilation devices.

4. Location and Weather

The App may request access to your location to display weather information relevant to your current location. Location access is optional and is used only for weather functionality.

Your precise geographic location is not stored as part of your account profile by INOTECHA. When weather information is requested, location information necessary to retrieve the forecast is processed by the Norwegian Meteorological Institute (“MET Norway”) through the MET Weather API.

We do not use location information for:

• Advertising or marketing
• Profiling
• Cross-app or cross-website tracking

You may disable location permission at any time through your device privacy settings. Weather functionality that depends on your current location may then be unavailable.

The country stored as part of your account is separate from the device location permission and is used as account information and for providing the service.

5. Push Notifications

If you enable notifications, the App uses push notification services to deliver device warnings, filter reminders, status notifications, and other service-related alerts. Technical identifiers such as a push notification token may be generated and processed.

The App uses the following services to deliver push notifications:

• Expo Push Notification Service
• Apple Push Notification service (APNs)
• Google Firebase Cloud Messaging (FCM)

These services receive the technical information necessary to route a notification to the appropriate App installation. Push notification tokens may be associated with your account so that notifications concerning your ventilation system can be delivered to your device. Notification services may also process notification content for delivery.

We do not use push notification identifiers for advertising or tracking. You may disable push notifications at any time through your device settings.

6. How We Use Your Information

We process information only where necessary to operate, secure, and improve the App and its services. Information may be used to:

• Create and maintain your account
• Authenticate your access to the service, including through email-based 2FA
• Associate compatible ventilation units with your account
• Authorize access to connected devices
• Display live ventilation information
• Send commands and settings to connected ventilation units
• Store settings required for device operation
• Manage weekly ventilation schedules
• Provide filter status and maintenance information
• Notify you about device warnings and important events
• Deliver push notifications
• Provide local weather information
• Diagnose technical problems
• Protect the App, cloud service, and connected devices against unauthorized access
• Respond to support requests
• Comply with applicable legal obligations

We do not use personal data for behavioral advertising.

7. Legal Basis for Processing

Where the General Data Protection Regulation (“GDPR”) applies, we process personal data under one or more of the following legal bases:

Performance of a contract

Processing necessary to create your account and provide the service, including remote monitoring and control of connected ventilation devices.

Consent

Where you choose to grant optional permissions, such as access to your location or permission to receive notifications, where consent is required.

Legitimate interests

Where necessary to maintain the security, reliability, and technical operation of the service, provided that these interests do not override your rights and freedoms.

Legal obligations

Where processing or retention is required by applicable law.

8. Service Providers

We use the following specialized service providers to operate the App and associated services:

Expo

Expo technology is used as part of the App infrastructure and push notification functionality. The Expo Push Notification Service processes push notification tokens and temporarily processes notification payloads to deliver notifications to Apple or Google notification services.

Apple

Apple Push Notification service (APNs) is used to deliver push notifications to Apple devices. Apple processes device-specific notification tokens and notification payloads as necessary to deliver notifications.

Google Firebase

Google Firebase Cloud Messaging (FCM) is used to deliver push notifications to Android devices. Firebase processes technical identifiers necessary to route and deliver notifications.

Serveriai.lt (UAB „Interneto vizija“)

Serveriai.lt, operated by UAB „Interneto vizija“, provides our email service. It processes email addresses, message content, and technical delivery information as necessary to send service-related emails, including email-based 2FA codes, account messages, and responses to support or privacy requests. More information is available in its privacy policy.

netcup GmbH

netcup GmbH provides the server-hosting infrastructure used to operate our cloud service. Account information, connected-device information, service data, and technical logs may be stored or processed on this infrastructure as necessary to provide and secure the service. More information is available in netcup's privacy policy.

Norwegian Meteorological Institute (MET Norway)

Weather data is provided by the Norwegian Meteorological Institute (“MET Norway”) through the MET Weather API. When weather functionality is used, MET Norway receives the geographic coordinates necessary to return a forecast for the requested location. MET Norway may also process technical request information in accordance with its privacy policy.

We require service providers to process information only as necessary to provide their respective services and subject to applicable privacy and data-protection requirements. We do not provide personal information to data brokers.

9. Data Sharing

We do not sell, rent, or trade personal information.

We may disclose or make information available to service providers only where necessary to operate the service. We may also disclose information where required by law, regulation, court order, or another legally valid request from a competent public authority.

10. Data Retention

Account information is retained for as long as your account remains active and as necessary to provide the service.

Technical information, device associations, settings, and other operational information are retained only for as long as reasonably necessary for functionality, security, maintenance, or legal requirements.

Push notification tokens are retained while required to deliver notifications and may be removed when they become invalid, when notifications are disabled, or when the associated account is deleted.

When an account is deleted, personal information associated with it is deleted or anonymized unless retention is required by applicable law or necessary for legitimate legal or security purposes.

11. Account and Data Deletion

You may delete your account using the account-deletion button available within the App. You may also request deletion of your account and associated personal data by contacting us at tl.ahcetoni@ofni .

Deleting your account removes the account and personal information associated with it from our active systems, except for information we are legally required or permitted to retain. It also removes the association between your account and connected ventilation units.

We may need to verify your identity before processing certain privacy requests.

12. Your Rights

If the GDPR or similar data-protection legislation applies to you, you may have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing
• Receive certain personal data in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a competent data-protection supervisory authority

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Users in Lithuania may also submit complaints concerning personal data processing to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

13. Data Security

We use reasonable technical and organizational measures designed to protect personal and connected-device information against unauthorized access, modification, disclosure, loss, or destruction.

Access to cloud services and device communication is limited according to the functions necessary to provide the service. No internet-connected system can be guaranteed to be completely secure, but we continuously take appropriate measures to protect the systems used to provide it.

14. Tracking and Advertising

The App does not use personal information to track users across apps or websites owned by other companies. We do not use advertising identifiers for targeted advertising, and we do not sell personal information to advertisers or data brokers.

15. Changes to This Privacy Policy

We may update this Privacy Policy when the App's functionality, our technical infrastructure, our service providers, or applicable legal requirements change. When it is updated, the “Last updated” date at the top of this page will be changed.

Material changes may also be communicated through the App or by other appropriate means.

16. Contact

For questions about this Privacy Policy, personal data, or your privacy rights, contact:

Email: tl.ahcetoni@ofni
Website: inotecha.lt