Schlage Base APP Data Privacy Policy
Release Date:June 2, 2023
Effective Date:  June 3, 2023
In this Privacy Policy, we describe the personal data that Allegion Plc. its subsidiaries, and affiliates (collectively “Allegion” “we” or “us”) collects from you, and our use, disclosure, and transfer of that information. This Privacy Policy applies to personal data that we collect from you: (1) online, such as through our applications and Products on which this Policy is posted (collectively, the “Site”); and (2) offline when you interact with us, whether as a customer, vendor, or interested person.
By providing your information to us, you agree that your information, including Personal Data, will be collected, used, and disclosed as described in this Policy. For visitors to our Site, this Policy is incorporated by reference into our Terms of Service.

Information We Collect

We collect information directly from you, from third parties, and automatically through your use of our Site or any Allegion services. To the extent permitted by law or with your consent, we may combine all of the information that we collect about you from various sources.
Information We Collect Directly from You. We collect information from you When you register an account through ‘Schlage Base’ APP, we may collect your contact details, such as your email address, phone number, software password, security questions, and password verification. During your interaction with our Products, we may further collect your nickname, profile picture, country code, language preference or time zone information into your account. When using feedback and suggestion features in our APP, we will collect your email address, mobile phone number and your feedback content to address your problems and solve device failures on a timely basis. When you use this software to set room information, we will collect the room information you set so that you can control the smart devices in each room. When you share the smart device with others in a way permitted and available by this software, we shall collect the sharing account information you provide, the sharing status of the device, your family member information or non-family member information, to enable each user of smart devices to control and use them together.
You are not required to provide us with any personal data, but, you may not be able to take advantage of certain offerings (e.g., registering your lock) if you do not do so.
Information We Collect About You from Third Parties. We also may collect information about you from third parties. For example, we may collect your username, name, or e-mail address from social media platforms if you interact with us through social media.
Information We Collect Automatically. When you interact with our Product, we automatically collect device information, such as the MAC address of your devices, IP address, wireless connection information, operating system type and version, application version number, push notification identifier, log files, mobile network information and Bluetooth state. During your interaction with our Sites and Services, we automatically collect usage data relating to visits, clicks, downloads, messages sent/received, and other usage of our Sites and Services. When you use our app, the application and exception log may be uploaded. When you connect your Smart Locks with our APP or Services, we may collect basic information about your Smart Locks such as device name, device ID, online status, activation time, firmware version, and upgrade information.
Sensitive Personal Data.  Sensitive personal data refers to Personal Data that, once leaked or illegally used, may easily lead to the infringement of personal dignity or harm to personal and property safety. We do not collect any type of sensitive Personal Data from you unless otherwise obtain your separate consent in advance.
Non-personal information. We may also collect other information that cannot identify specific individuals(that is, information that does not belong to personal information), for example, the statistical class data generated when you use a particular service such as user behavior (including click, page jump, browsing time, search keywords). The purpose of collecting such information is to improve the services we provide to you. The type and amount of information collected depends on how you use our products and/or services. We shall aggregate information to help us provide customers with more useful content about which parts of the software and related services they are most interested in. As far as this privacy policy be concerned, aggregated data is treated as non-personal information. If we combine non-personal information with unidentifiable personal information, such information will be treated as personal information during the combination. Please understand and agree that we have the right to use the information that has been desensitized and de-identified, and to analyze, process, make statistic the user database and use it for public benefit or commercial purposes without disclosing your personal information.

Use of Your Information

We use your information, including your Personal Data, for the following purposes:    
It is clarified that any information collected by us is used for the abovementioned purposes only, and the collection, use, disclosure or transfer of such information is necessary for efficient operation and development of Allegion. We do not use, disclose, handle or transfer any information obtained from users for any unlawful purposes.

Disclosure of Your Information

We may disclose your information, including Personal Data, as follows:
Specifically, we may disclose your Personal Data to the third parties described in the Addendum.
We also may disclose your information, including personal data, for the following reasons:

Use of cookies and similar technologies

When you use the software, we and service providers on behalf of us may send one or more small data files "Cookies" to your device to identify your browser. Cookies help us measure, for example, the total number of visitors to the software, the number of visitors per page, how our users use and interact with the service, and the domain name of the visitor's Internet service provider. You can reset your web browser to reject all Cookies, or send a Cookie in specific time. If you do not want to install Cookies on your device, most browsers allow you to reject Cookies with simple settings. Please note that if Cookies are disabled on your device, certain functions of the software will not work properly.
In addition to Cookies, we may also use similar technologies such as beacons and pixel labels.
International Transfers and Offshore Storage of Personal Data
We may use, disclose, process, transfer or store personal data outside the country in which it was collected. We will transfer your personal data outside of the country in compliance with the legal requirements of the country where you locate, and we will adopt necessary measures as required by the laws in order to ensure your transferred personal data will be sufficiently protected. .

Security of Personal Data

We have taken commensurate steps under relevant data protection laws to protect against unauthorized or unlawful processing of personal data, unauthorized or accidental access to personal data, and accidental or unlawful loss or destruction of personal data. We have adopted technical and organizational measures as specified in the Addendum to protect your personal data.  However, we cannot guarantee against any loss, misuse, unauthorized access, unauthorized disclosure, alteration or destruction of personal data or any unlawful forms of processing.
Users should safeguard any password or user ID obtained for use on our Site and are responsible for any misuse or unauthorized use of our Site via their password and user ID maintaining the secrecy of their own passwords. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us using the contact information below.

Retention of Personal Data

We will only retain your Personal Data for the period required to achieve the purposes described in this Policy, unless it is necessary to extend the retention period or is permitted by law. After that, we will destroy it through currently available secure destruction means. If we are unable to destroy the data for technical reasons, we will take appropriate measures to prevent further use of your personal data.
If required to retain Personal Data pursuant to applicable laws, we will retain personal data solely for the retention periods and purposes as required by applicable laws and regulations.
When destroying your Personal Data because it is no longer needed, we will do so in accordance with the following procedures and methods.
·       Procedures for destruction
o   We select the Personal Data to be destroyed (e.g., Personal Data whose purpose of processing has been achieved or whose retention period has expired) and destroy it with the approval of our Data Protection Officer.
·       Method of destruction
o   If printed on paper, the Personal Data will be destroyed by shredding, incinerating, or some other similar method and, if saved in electronic form, the Personal Data will be destroyed by technical methods (e.g. Low Level Format) which will ensure that the data cannot be restored or recovered.

Your Rights and Choices

Children's privacy

Protecting children's privacy is very important to us. This software is not available for individuals under the age of 14, and we request that these individuals do not provide us with any personal information. We do not intentionally collect personal information about children under the age of 14, unless we have the consent of a parent or legal guardian. If we collect the personal information of children under 14 without the consent of their parents or legal guardians, we will delete the information when we learn of this situation.

The scope and effectiveness of this policy

This policy applies to your use of the software services.
The service may include other websites, online service links, other services or functions operated and maintained by third parties that are not controlled or maintained by us, or services provided to you by third parties based on the software. The information you provide to such third parties will be subject to the privacy policy of such third parties and will not be subject to this privacy policy. We are not responsible for how third parties use the personal information they collect from you, nor can we control its use. When you use these products or services, we recommend you to read carefully the privacy policies of such third parties in detail and determine whether to agree to the  privacy policies and whether to continue using the products or services.
This privacy policy is an important part of the software license and service agreement. If there is any inconsistency between the privacy policy and the software license and service agreement, the privacy policy shall prevail; If not mentioned in this privacy policy, the software license and service agreement shall prevail.
The headings of all terms of this policy are for ease of reading only and cannot be used as the basis for interpreting the meaning of this policy.
This privacy policy exists in both English and Chinese versions. In case of any conflict between the English version and the Chinese version, the Chinese version shall prevail.

Changes to this Policy

We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our Site. If we make any changes to this Policy that materially affect our practices with regard to the Personal Data we have previously collected about you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Site or e-mailing you. Your continued use of our Site, purchase of our goods or services or provision of further information constitutes your acceptance of our revised Policy.

Contact Us

Please contact us at 4009201818 or give your feedback through APP if you have any questions or concerns about this Policy, the Personal Data we have about you, require assistance in managing your choices, or have other questions, comments or complaints regarding our privacy practices. 
Allegion Security Technologies (China) Co., Ltd.
Addendum
  1. Transfer of personal data to third parties
Specifically, Allegion provides personal data to or outsource the processing thereof to third parties as specified below.
(a)   Provision of personal data to third parties
Name of recipient
Purposes of use and collection by recipient
Items of personal data accessed by or disclosed to the recipient
URL
Tuya Inc
Provide software service for both user management and device management.
User account information, name, email address and/or phone number, mailing address, username and login credentials.
Mobile Device Access Information: When you interact with our website and services through hardware, we automatically collect device information, such as the device's unique device identification identifier, serial number, Internet Protocol Address, wireless connection information, operating system type and version, Browser type and version, push notification identifiers, and mobile network information.
Lock Device Information: When you connect your lock device to the app, we automatically collect device information, such as the device’s unique device identification identifier, serial number, Internet Protocol Address, lock serial number, lock battery, lock open and close event records, door status.
Privacy Policy Address:
Shenzhen Tencent Computer System Co., Ltd
Provide infrastructure, including network, server and virtualization services
Website hosting, data analytics, infrastructure provision, IT services, customer support services, email delivery services and other similar services, all information will be stored on Tencent Cloud, please refer to the Privacy Policy for details
Data processing and security protocols: https://intl.cloud.tencent.com/zh/document/product/301/17347
Privacy Policy Address:
Xiaomi Mobile Software Co., Ltd.,
Push notification function
information collection details: your OAID (applicable to Android Q and above), MEIDMD5, Android ID, VAID, AAID, as well as your MID (applicable to MIUI system), device model information.
Huawei End Point Co., Ltd
a) provides push notification services; b) counts the success rate of Huawei push SDK interface calls
information collection details: basic application information, in-app device identifier, device hardware information, system basic information and system settings information
Guangzhou Huantai Technology Co.Ltd
Push notification function
information collection details: your device-related information (Serial Number, User ID, Android ID, Google Advertising ID, mobile phone Region settings, device model, mobile phone battery, mobile operating system version and language), application information using the push service (APP package name and version number, running status), push SDK version number, network-related information (IP or domain name connection result, current network type), message sending result, notification bar status (notification bar permissions, user click behavior), lock screen status (whether the screen is locked, whether the screen is allowed to be locked)
Vivo Mobile Communications Co., Ltd.
Push notification function
information collection details: device and application information: including operating system version number, application information, device identifier (SIM, mobile country code and vivo Android device) during your use of vivo devices and services Mobile network number), mobile operator, language used, system settings, device and application data
Autonavi Software Ltd (Autonavi SDK)
Provide corresponding services, provide you with problem tracking, troubleshooting, diagnostic services and conduct data statistics to ensure the normal operation of products and services, Autonavi will process your device information, including IDFA, Android ID, MEID, MAC address, OAID, sensor, hardware serial number, based on different devices and systems (Android/iOS) and system versions. In particular, when you use the following Autonavi SDK-related functions and services, the device information collected will be different. For details, please check the content of the Location SDK, Map SDK, Search SDK and Navigation SDK
Locate SDK details collection:
Location information: The purpose of use is to return the user's location information to the application, and for developers to provide corresponding services based on the user's location information; in order to facilitate the provision of real-time road conditions and road condition prediction services, we will conduct data statistics and analysis on the user's location information, and make judgments on traffic congestion conditions based on this
  • Mobile device information: The purpose of use is to provide services, track, troubleshoot, diagnose, and count various problems in the service, and ensure the normal operation of products and services
Map SDK details collection:
  • Location information: The purpose of use is that when the developer turns on the positioning small blue dot function, in order to return the user's location information to the application, display the user's location on the map and provide the developer with corresponding services based on the user's location information
  • Collect equipment information: The purpose of use is to provide services, track, troubleshoot, diagnose, and count various problems in the service, and ensure the normal operation of products and services
Search SDK details collection:
Mobile device information: The purpose of use is to provide services, track, troubleshoot, diagnose, and count various problems in the service, and ensure the normal operation of products and services
Privacy Policy Address:
(b)   Outsourcing of the processing of personal data to third parties
Outsourced processors
Outsourced tasks
Tuya Inc
User register, Login, Delete and other user related tasks.
(c)   Cross-border outsourcing of the processing/storage of personal data to third parties
Recipient (if the recipient is a corporation then the name of the corporation and the contact information of the person in charge of the management of personal data)
Items of the personal data to be transferred
Countries where the personal data are to be transferred and the date, time, methods of transfer
Purposes of use of recipient
Periods of retention of recipient
None
None
None
None
None
(d)   Data Center for Country or Region in user data storage:
For user in the following country or regions, the user/device data will be processed and stored in each data center. Within the lifecycle of the data for user and devices, there will be no cross data center  outsourcing processing and storage.
Country
Data Server location
South Korea
Western America Data Center
Thailand
Vietnam
Malaysia
Indonesia
Philippines
Singapore
Central Europe Data Center
China
China Data Center
India
India Data Center
  1. Security
We will implement technical, organizational, and physical security measures prescribed by applicable laws in order to protect data, such as those listed below:
l  Managerial measures: Designation of a data privacy officer, establishment and implementation of an internal management plan, regular training of employees on data protection, etc.;
l  Technical measures: Management of access authority to the personal data processing system, installation of an access control system, installation of security programs, etc.; and 
l  Physical measures: Restriction of access to personal data storage facilities and equipment such as computer rooms and data storage rooms, etc.