Privacy Policy

1. Who we are

AuroOrch (“the app”) is built and operated by 东莞市曜控智能科技有限公司 (Dongguan-registered entity) (“we”), providing monitoring, device management, energy scheduling and an AI assistant for solar and storage plants.

This policy covers the AuroOrch mobile app. Questions about it, or about your personal information, go to {{privacy contact e-mail}}.

2. What we collect

Account details — the phone number or e-mail you register with, plus nickname and avatar. You enter these yourself; they identify the account and allow recovery.

Plant and device details — plant name, address, coordinates, installed capacity; device serial number, model, firmware version and online state. Used to attach devices to the right plant and show their status.

Operating and energy data — generation, consumption, grid and off-grid power, battery SOC and SOH, charge and discharge totals, alarms and historical curves. Reported by the data logger; this is the app’s core subject matter.

Location — a single reading taken only when you ask for it, to fill in a site’s coordinates or centre the map on you. We do not collect location in the background and do not build a movement history.

AI conversations — the questions you type or speak to the assistant, and the plant data attached so it can answer.

Things you submit — feedback, ticket descriptions, community posts and comments, images you upload.

Device and diagnostic data — app version, OS version, device model, crash and error logs. Used to fix faults, not to profile you.

3. How we use it

To render the home screen, device details, statistics and alarms; to carry out the device settings and schedules you submit; to answer questions through the AI assistant; to notify you about your plants; to diagnose faults and improve the product; and to meet our legal obligations.

We do not use your personal information for purposes this policy does not state. If a new purpose comes up, we ask for your consent again.

We do not make automated decisions about you that carry legal effect. The assistant’s suggestions are advisory, and every write to a device requires your confirmation.

4. Device permissions and when they are asked for

Permissions are requested at the moment you use the feature that needs them, and we explain why immediately before the system prompt appears. You may decline any of them, and withdraw any of them later in system settings.

The full list — purpose, trigger, what declining costs you, and how to revoke — is in the app under About → App permissions.

We do not request background location, contacts, SMS, call logs, or access to photos you have not chosen yourself.

5. Who we share with

We do not sell personal information. Sharing is limited to:

AI conversation and speech services — text questions and the plant context needed to answer them are sent to our Sera service. Hold-to-talk sends audio to Alibaba Cloud DashScope for realtime recognition where it is configured, and otherwise to Zhipu AI for file transcription. The actual providers, deployment regions and any cross-border transfer are set out by the operator in {{AI service deployment statement}}.

Cloud and infrastructure providers — for storage, transport and delivery, touching data only as far as providing the service requires, under confidentiality and security obligations.

Map services — base map rendering uses MapLibre. Only the site coordinates you have chosen are used for display; your live location is not handed over for other purposes.

People you choose — when you share a plant with family or an installer, they see that plant’s operating data. You set the scope and duration and can revoke it at any time.

Legal requirements — to comply with law, to respond to lawful requests from judicial or administrative authorities, or where necessary to protect significant interests of users or the public.

6. Storage, retention and cross-border transfers

Data is held on our servers. Account and plant configuration persist while you use the service; energy and alarm history is kept as long as the feature and our compliance obligations require; crash logs are kept no longer than 90 days.

After you close your account we delete or anonymise your personal information within a reasonable period, except where law requires us to keep it. Anonymised energy statistics are no longer linked to you.

Where data must leave mainland China we complete the compliance steps applicable law requires, described here: {{cross-border transfer statement, or “no cross-border transfer currently takes place”}}.

7. Security

Traffic is encrypted with HTTPS. Login credentials live in the platform’s secure storage (iOS Keychain / Android Keystore) rather than ordinary files. Server-side access follows least privilege.

No set of measures makes a system absolutely safe. If a breach affecting personal information occurs, we will tell you what it may mean for you and what we have done, as the law requires.

8. Your rights

You may read, correct and complete your personal information; most of it is editable under Me → Profile.

You may delete your personal information, withdraw consent, and close your account. Withdrawing consent does not undo processing already carried out on the basis of it.

You may ask us to explain how we handle personal information. To exercise these rights or dispute our handling, contact {{privacy contact e-mail}}; we reply within fifteen working days.

9. Children

The app is aimed at plant owners and installation or service staff, not at children under fourteen. Minors should read this policy and use the app with a guardian present.

If we learn we have collected a child’s personal information without a guardian’s consent, we delete it promptly.

10. Changes

We announce changes in the app. Where the purpose, method or scope of processing changes materially, we ask for your consent again.

Current version v2.0, updated 2026-09-04.