Data Privacy and Security Policy

Last updated: 13 June 2026

Total Protect ("we", "us", or "our") is committed to protecting your privacy. Total Protect is a mobile application that lets you manage and control compatible smart locks and gateways. This policy explains what personal data we collect, how we use it, who we share it with, and the choices you have.

By creating an account or using the app, you consent to the collection, use, and disclosure of your personal data as described here. If you do not agree, please stop using the app.

1. Information We Collect

1.1 Information you give us

Account details — your name, email address, and/or phone number, provided when you register, log in, or update your profile.
Access management data — passcodes, IC card numbers, fingerprints, face enrollment, eKeys, and validity periods that you create to grant or revoke access to your locks.
Recipient details — when you share an eKey or passcode, the email or phone number of the person you choose to share it with.

1.2 Device and usage data

Bluetooth — used to communicate directly with your nearby smart lock and gateway. We do not collect data from other Bluetooth devices.
Location — on Android, the operating system requires location permission to scan for nearby Bluetooth lock devices. We use this solely to discover and connect to your locks; we do not track or store your geographic location.
Camera — used only during face enrollment to register a face for lock access. Images are processed by the lock/face system and are not stored by the app for any other purpose.
Lock access records — logs of lock operations (who unlocked/locked, the method, and the timestamp), retrieved so you can review your lock history.
Log data — basic technical information automatically recorded when you use the app, such as device type, app version, and error diagnostics, used to keep the service running and to fix problems.

2. How We Use Your Information

To create and authenticate your account and let you access the app.
To operate lock features — unlocking, locking, passcodes, cards, fingerprints, faces, eKeys, passage mode, and firmware updates.
To send you verification codes, password-reset links, and important service or security notifications.
To maintain a secure, trusted environment, including fraud prevention and abuse detection.
To diagnose problems, improve reliability, and support you when you contact us.
To comply with applicable legal obligations.

3. How We Share Information

We do not sell your personal data. We share it only as needed to provide the service, with the following processors:

Google Firebase (Google LLC) — for account authentication, database storage, and secure server functions.
TTLock / Hangzhou Sciener Intelligent Control Technology Co., Ltd. — the smart-lock platform that performs lock operations and stores lock/access data required to control your hardware.
Resend — to deliver verification and password-reset emails on our behalf.
People you choose — when you share an eKey or passcode, the recipient receives the access information you authorize.

These providers may process and store data outside your country, including in the United States and other jurisdictions whose data-protection laws may differ from your own. We may also disclose information where required by law or to enforce our rights.

4. Data Security

We use administrative, technical, and physical safeguards to protect your personal data against unauthorized access, alteration, or destruction. Credentials are encrypted, and sensitive operations are handled on secured servers. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. When you delete your account, we delete or anonymize your personal data, except where retention is required for legal, security, or fraud-prevention purposes.

6. Your Rights and Choices

You can review and update your profile information in the app.
You can revoke access permissions (passcodes, eKeys, cards, etc.) at any time.
Delete your account — you can permanently delete your account and the personal data we store at any time, directly in the app: go to Profile → Delete Account. This erases your profile (name, email, phone) and any pending verification codes. You may also request deletion by contacting us (see below).
Lock and access data stored in the TTLock cloud is managed by TTLock (Hangzhou Sciener); to request its removal, contact us or TTLock directly.
You can disable Bluetooth, location, or camera permissions in your device settings, though some features will not work without them.

7. Children's Privacy

The app is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children.

8. Third-Party Links and Services

The app may link to or rely on third-party services that have their own privacy policies. We are not responsible for their practices and encourage you to review their policies.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will post the updated policy here and, where appropriate, notify you in the app or by email. Continued use of the app after changes take effect means you accept the updated policy.

10. Contact Us

If you have questions about this policy or wish to exercise your rights, contact us at:

Email: support@totalprotect.in
Website: www.totalprotect.in