Privacy Policy

Information we collect

Account and profile information

We collect an email address and create internal user and account identifiers for login, account administration, and email validation. Users may optionally provide a name, address, phone number, interests, music preferences, hobbies, or similar profile details. These optional details are private by default.

Photos and short videos

When a user uploads photos or short videos, Exolet stores them in its cloud service so the user can beam that media to an authorized family member's Exolet TV without uploading it repeatedly. The receiving family member must have phone control enabled and grant temporary authorization.

Calendar events

With the user's permission, the Android app sends selected calendar event information to Exolet. We store those events to create a personalized events slide in the user's ambient TV show and to make the events available in the Android app. Exolet does not access the user's contacts or address book.

Push notification information

If the user enables notifications, we retain a Firebase Cloud Messaging registration token so we can route a push notification to the correct device. A notification token identifies an app installation for message delivery; it is not used to track unrelated websites or apps.

Voice-command text

Exolet receives only the transcribed text of a voice command submitted to our endpoint. We do not receive or store the audio recording. The command text is used to perform the requested action and is deleted within approximately 30 seconds after receipt.

App activity and technical information

We collect feature-use events and technical logs needed to operate, secure, and troubleshoot the Services. We use this information to understand in aggregate how people use Exolet and to improve reliability. We do not use it to track a person's activity on unrelated websites or apps.

How we use information

• Provide accounts, authentication, email validation, and requested app and TV features.
• Store and deliver user-selected photos, videos, and calendar events.
• Personalize content, including events slides and other user-selected preferences.
• Deliver push notifications the user has enabled.
• Provide support and communicate about the account or Services.
• Maintain security, prevent abuse, diagnose problems, and improve reliability.
• Analyze feature use in aggregate to understand and improve the Services.
• Comply with legal obligations and enforce our terms.

When information is disclosed

Exolet does not sell personal information and does not share it with third parties for their own advertising, marketing, or independent commercial purposes.

User-directed sharing

A user may direct Exolet to display personal media on a specifically authorized family member's TV. A user may also expressly choose to publish selected interests or profile details in a community directory to find residents with similar interests. Saving optional information does not publish it; sharing is off by default. Users can change their sharing choices through the applicable Exolet controls.

Service providers

Vendors that help us operate the Services, such as cloud-hosting, email-delivery, and push- notification providers, may process limited information only on Exolet's behalf and under our instructions. For example, Firebase Cloud Messaging processes notification tokens to deliver authorized push notifications. These providers are not permitted to use Exolet user information for their own advertising or marketing.

Legal, security, and business requirements

We may disclose information when we reasonably believe it is required by law, legal process, or a valid government request; needed to protect users, Exolet, or others; or necessary to investigate fraud, abuse, or security threats. If Exolet is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction subject to appropriate safeguards and notice where required by law.

Data retention

• Photos and short videos: normally retained for 90 days unless the user chooses or requests a longer period, or deletes them sooner.
• Voice-command text: deleted within approximately 30 seconds after receipt.
• Calendar events: retained while needed to provide the events feature, until the user removes them, or until the associated account is deleted, subject to limited legal or security exceptions.
• Account and profile information: retained while the account is active and as needed to provide the Services.
• Notification tokens: retained while notifications are enabled and the token remains active; expired or invalid tokens are removed or replaced as part of normal service operation.
• Technical logs and aggregate analytics: retained only as long as reasonably necessary for security, troubleshooting, service improvement, and applicable legal requirements.

Some information may remain temporarily in restricted backups until those backups are overwritten according to the applicable backup cycle. We may retain limited records longer when required by law or reasonably necessary for security, fraud prevention, dispute resolution, or enforcing agreements.

Your choices and controls

• Choose whether to provide optional profile details.
• Choose whether selected interests or other profile details appear in the community directory; they remain private by default.
• Grant or withdraw permission for calendar access through Android settings and Exolet controls.
• Enable or disable push notifications through Android settings.
• Choose which media to upload, which authorized family member may receive it, and when temporary TV control is allowed.
• Ask to access, correct, or delete personal information by contacting us.

Certain choices may limit features that depend on the corresponding information. Rights available under privacy law vary by location, and Exolet will honor applicable verified requests.

Account and data deletion

Users can request account deletion from the account-profile area in the Android app. Users who no longer have the app installed can follow the instructions on our Delete Your Account page. A user may also email support@exolet.com to request deletion of specific personal information while keeping the account active.

After we verify the request, we delete or de-identify personal information associated with the account from systems controlled by Exolet, except for limited information we must or are permitted to retain for legal, security, fraud-prevention, dispute-resolution, or recordkeeping purposes.

Security

Exolet uses administrative, technical, and physical safeguards designed to protect information, including encrypted network connections where information is transmitted. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Children's privacy

The Services are not directed to children under 13, and Exolet does not knowingly collect personal information directly from children under 13 without appropriate parental authorization. If you believe a child has provided personal information without authorization, contact us so we can investigate and take appropriate action.

Changes to this policy

We may update this Privacy Policy as the Services or legal requirements change. We will post the revised policy on this page and update the date below. If a change is material, we will provide additional notice when required by law.