Privacy Policy

KryptonArc ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"), website, and related services (collectively, the "Service").

1. Information We Collect

We collect information in several ways:

1.1 Account Registration Information

When you create a KryptonArc account, we collect:

• Full name (first and family name)
• Email address
• Password (securely hashed)
• Date of birth
• Gender
• Organization/Entity name

1.2 Device and Lock Information

We collect information about your smart locks and usage:

• Device identifiers and hardware information
• Lock status (locked/unlocked)
• Lock access logs and timestamp data
• Device location information (if you grant permission)
• WiFi network information your devices connect to
• Device firmware version and update information

1.3 Mobile App Permissions

The KryptonArc App requests the following device permissions:

• Bluetooth: Required to communicate with your smart locks
• Location: Required for Bluetooth Low Energy (BLE) scanning (Android requirement)
• Camera (Optional): For QR code scanning during device setup

1.4 Usage and Analytics Data

We may collect:

• App usage patterns and feature interactions
• Error logs and crash reports
• Device type, operating system, and app version
• IP address and network connectivity information
• Timestamps of app activity

1.5 Authentication and Security

For account security, we collect:

• Multi-factor authentication (MFA) codes and verification logs
• Login attempts and authentication events
• Session tokens and refresh tokens
• Device PIN codes (encrypted locally on your device)

2. How We Use Your Information

We use the information we collect for:

• Operating and maintaining the Service
• Processing lock control commands and managing smart lock access
• Providing customer support and responding to inquiries
• Sending transactional emails (account confirmations, password resets, security alerts)
• Sending multi-factor authentication codes
• Improving and optimizing the App and Service
• Detecting, preventing, and addressing technical and security issues
• Monitoring and analyzing usage patterns for service improvement
• Complying with legal obligations
• Enforcing our Terms of Service and other agreements

3. Data Sharing and Disclosure

3.1 Who We Do NOT Share Your Data With

We do NOT sell, trade, or rent your personal information to third parties. We do not share your location data or device access logs with external services except as described below.

3.2 When We May Share Information

We may share information in the following cases:

• Service Providers: With vendors who assist us in operating the Service (cloud hosting, analytics)
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or asset sale
• With Your Consent: When you explicitly authorize sharing

4. Data Security

We implement comprehensive security measures to protect your data:

• End-to-end encryption for Bluetooth Low Energy (BLE) communication with locks
• HTTPS encryption for all web communications
• Secure password hashing and salting
• JWT (JSON Web Token) based authentication with secure token management
• Encrypted storage of sensitive data in our databases
• Regular security audits and penetration testing
• Secure handling of cryptographic keys and certificates
• Multi-factor authentication for account protection

Note: While we use industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information as follows:

• Account Information: Retained while your account is active and for legal/compliance reasons
• Lock Access Logs: Retained for audit and security purposes
• MFA Codes: Retained only briefly, for as long as needed to complete verification
• Session Data: Retained only during your active session
• Usage Analytics: Aggregated and anonymized data retained for service improvement

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where longer retention is required or permitted by applicable law.

6. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, which may include the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your account and associated data
• Portability: Request a copy of your data in a portable format
• Opt-Out: Opt-out of non-essential communications
• Withdraw Consent: Withdraw consent for data processing

To exercise any rights available to you, please contact us at contactus@kryptonarc.com. We will respond in accordance with applicable law.

7. App-Specific Practices

7.1 Local Storage

The KryptonArc App stores some information locally on your device:

• Encrypted session tokens
• Device PIN codes (encrypted)
• Cached lock information
• User preferences and settings

This local data is encrypted and only accessible to the KryptonArc App on your device.

7.2 Offline Functionality

The App can control locks via Bluetooth when offline. No usage data is sent to our servers until you reconnect to the internet.

7.3 Third-Party Services

The App does not integrate third-party analytics or advertising SDKs. We collect only the data necessary to operate the Service.

8. Children's Privacy

The KryptonArc App and Service are not intended for children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete such information promptly.

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, which may have different data protection laws. By using the Service, you consent to such transfers.

10. Privacy Policy Changes

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date. Continued use of the Service after changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

12. Your Acknowledgment

By using the KryptonArc App and Service, you acknowledge that you have read this Privacy Policy and agree to its terms. If you do not agree with our privacy practices, please do not use the Service.

This Privacy Policy is effective as of September 26, 2026.