Privacy Policy for UtilityControl iOS App

Effective Date: Nov 2025

This Privacy Policy describes how QLines ("we," "our," or "us") collects, uses, and protects your personal information when you use the UtilityControl iOS mobile application ("App"). We are committed to protecting your privacy and ensuring transparency about our data practices.

By using the UtilityControl App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email Address: Used for account authentication and communication
• Password: Securely hashed and stored on our servers (we never see your plain text password)
• Account Creation Date: Timestamp of when your account was created
• Last Login Information: Timestamp of your last login session

1.2 Utility Data

To provide our utility tracking services, we collect and store:

• Meter Information: Meter names, serial numbers, utility types (electricity, water, gas, etc.), units of measurement, and associated costs
• Meter Readings: Reading values, timestamps, and optional notes you enter
• Consumption Data: Calculated consumption patterns and trends derived from your meter readings

1.3 Device and Usage Information

We automatically collect certain information about your device and how you use the App:

• Device Information: iOS version, device model, and unique device identifiers
• App Usage Data: Features you use, actions you take, and time spent in the App
• Session Information: Login sessions, authentication tokens, and session cookies
• Error Logs: Technical information to help us diagnose and fix issues

1.4 Information We Do NOT Collect

We do NOT collect:

• Your precise location (GPS coordinates)
• Contact information from your device
• Photos or media files
• Payment or financial information (handled by Apple App Store)
• Biometric data
• Health or fitness data

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Provision

• To create and manage your user account
• To authenticate your identity when you log in
• To store and organize your utility meter data
• To calculate and display consumption trends and analytics
• To enable data synchronization across your devices

2.2 Communication

• To send you important service updates and notifications
• To respond to your support requests and inquiries
• To notify you about changes to our services or policies

2.3 Service Improvement

• To analyze usage patterns and improve App functionality
• To identify and fix technical issues
• To develop new features and enhance user experience

2.4 Legal Compliance

• To comply with applicable laws and regulations
• To respond to legal requests and protect our rights
• To prevent fraud, abuse, and security threats

3. Data Storage and Security

3.1 Data Storage

Your data is stored securely on our servers using industry-standard security measures:

• Encryption: All data transmitted between the App and our servers uses HTTPS/TLS encryption
• Secure Servers: Data is stored on secure, access-controlled servers
• Password Security: Passwords are hashed using secure algorithms (Werkzeug security) and never stored in plain text
• Database Security: MongoDB databases are protected with authentication and access controls

3.2 Data Retention

• Account data is retained for as long as your account is active
• Meter and reading data is retained until you delete it or close your account
• Upon account deletion, data is permanently removed within 30 days
• Some data may be retained longer if required by law or for legitimate business purposes

3.3 Security Measures

We implement multiple layers of security to protect your data:

• Regular security audits and vulnerability assessments
• Access controls limiting employee access to user data
• Monitoring systems to detect and prevent unauthorized access
• Regular backups to prevent data loss
• Session-based authentication with secure cookies

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Limited Sharing

We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our services (e.g., cloud hosting, email services), subject to strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
• Protection of Rights: To protect our rights, property, or safety, or that of our users

4.3 Third-Party Services

The App uses the following third-party services:

• Apple App Store: For app distribution and in-app purchases (subject to Apple's privacy policy)
• Cloud Hosting: For secure data storage and processing

These services have their own privacy policies, and we encourage you to review them.

5. Your Rights and Choices

5.1 Access and Correction

You have the right to:

• Access all personal data we hold about you
• Correct inaccurate or incomplete information
• Request a copy of your data in a portable format

5.2 Data Deletion

You can request deletion of your data by:

• Deleting individual meters, or readings within the App
• Contacting us to delete your entire account and all associated data
• Uninstalling the App (note: this does not delete server-side data; you must contact us)

5.3 Account Management

• You can update your email address and password at any time
• You can deactivate or delete your account by contacting us
• You can opt out of non-essential communications

5.4 GDPR and CCPA Rights

If you are located in the European Economic Area (EEA) or California, you have additional rights:

• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us using the information provided in Section 10.

6. Children's Privacy

The UtilityControl App is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Compliance with applicable data protection laws
• Security measures to protect data during transfer

By using our App, you consent to the transfer of your information to countries outside your country of residence.

8. Cookies and Tracking Technologies

The App uses session cookies to:

• Maintain your login session
• Remember your authentication state
• Ensure secure communication with our servers

These cookies are essential for the App to function and cannot be disabled. They are automatically deleted when you log out or after your session expires.

We do not use tracking cookies, advertising cookies, or analytics cookies that track you across other websites or apps.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you through the App or via email for significant changes
• Post a notice on our website

Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the App and delete your account.

10. Contact Us

We will respond to your inquiry within 30 days, or as required by applicable law.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Exercise your privacy rights without discrimination

To exercise these rights, please contact us using the information in Section 10.

12. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach (as required by GDPR)
• Notify relevant data protection authorities within 72 hours (as required by GDPR)
• Provide clear information about the nature of the breach and steps being taken
• Recommend actions you can take to protect yourself