Keepova Privacy Policy

This policy applies to the Keepova monitor app (the phone you leave by the tank), the Keepova viewer app (the phone you watch from) and the related cloud service (together, the “Service”). Hangzhou Luanshi Technology Co., Ltd. (“we”, “us”) is the personal information handler for the processing activities described here. Please read this policy carefully before using the Service. By starting to use the Service, you confirm that you have understood and agree to this policy.

1. Information we collect

Information you provide

• Account information: in mainland China you register with your mobile phone number (verified by SMS code); outside mainland China you register with an Apple account, a Google account or an email verification code. Phone numbers are stored encrypted (see section 5).
• Tank and device information: the tank’s name and time zone, the detectors and alert preferences you choose, and the binding between your monitor phone and your account.
• Content you submit: feedback, support tickets, and any note you add when you authorise support staff to view your camera feed.

Information generated while the monitor phone is in use

• Device and runtime status: device model, operating system version, app version, battery level and battery temperature, charging state, network type and signal strength, CPU and memory usage, detector status, capture frame rate, and the length of the pending upload queue. We use this information to determine whether the device is working properly and whether it is at risk of going offline or overheating.
• Detection results and runtime logs: detection results produced by processing the camera feed on the device (for example “unusual movement on the water surface”), and device runtime logs. Logs are used for troubleshooting, and personal information in them, such as phone numbers, is masked.
• Notification records: whether the alerts we push to you were delivered.

Camera and microphone

• Camera: the monitor phone uploads footage to the cloud for AI analysis only when an anomaly is detected, or when you actively request a “Take a look” check or a live view. Before upload, the footage is masked to the tank area you selected, so that only content within the tank area is kept. We do not upload footage continuously around the clock.
• Microphone: used only to detect, locally on the device, whether sound characteristics such as pump noise or water flow are abnormal. Raw audio is processed only on the monitor phone itself; we do not upload or store raw audio, and upload only detection results and statistical sound features.
• Live view: when you actively watch, the video travels over an encrypted real-time audio and video channel (WebRTC) directly from your monitor phone to your viewer phone, and the monitor phone’s screen shows a notice while it is being viewed.

We do not actively collect: contacts, text messages, call logs, precise location, the contents of your photo album, or any camera content outside your tank. The coordinates of the detection area are set by you and are never expanded automatically.

2. How we use this information

• To run detection, identify anomalies, send alerts, and generate the daily all-clear report.
• To provide live view and snapshots when you actively request them.
• To determine whether the monitor phone is offline, overheating or low on battery, and remind you to take action.
• To troubleshoot faults and improve detection performance and product quality (using de-identified data for improvements).
• To keep the Service secure: identifying abuse, abnormal sign-ins and attacks, and retaining the necessary security audit records.
• To fulfil obligations required by laws and regulations.

Use for model training: off by default. We use the relevant footage to improve our detection models only after you have expressly authorised this in Settings. You can withdraw your authorisation at any time; after you do, we stop using new data for training. The time and scope of every authorisation and withdrawal are recorded.

3. Third-party services and data sharing

We do not sell your personal information. To provide the Service, we share necessary data with the third parties listed below, deployed by region:

• Other than in the cases above, we provide your personal information to others only with your separate consent or where required by laws and regulations.
• Only when you authorise support staff to view your camera feed do we open the feed of the relevant tank to on-duty support staff, for the validity period of the authorisation (up to 24 hours). Every view is recorded in an audit log, and access closes immediately when the authorisation expires or you withdraw it.
• Data of users in mainland China is stored in mainland China; data of users outside mainland China is stored in the overseas region. The two regions are isolated from each other, and accounts cannot be migrated between regions.

4. List of third-party services (compliance disclosure)

In addition to the services listed in the table above, the apps use a number of open-source software components. The full list and the license terms are available in the app under Settings → About → Open-Source Licenses. The mainland China version does not initialise any third-party SDK before you agree to this policy.

5. Data storage and security

• Transmission: communication between the apps and our servers is encrypted with TLS 1.2 or above; real-time audio and video is encrypted with DTLS-SRTP.
• Storage: phone numbers are stored encrypted with AES-256-GCM, lookups use an irreversible hash, and the encryption keys are kept separately from the data; our databases accept only encrypted connections from our application servers; database backups are stored encrypted.
• Access control: least-privilege access by role. By default our operations console cannot view users’ camera feeds; support staff can view a feed only after you actively authorise it in the app, and the whole process is recorded in an audit log.
• We take reasonable technical and organisational measures to protect your information, but please understand that no system can be absolutely secure.

6. Retention periods

• Event-related snapshots and clips: 7 days on the free plan and 30 days on a subscription, after which they are deleted automatically.
• Event records (excluding footage): 1 year.
• Monitor phone runtime logs: 30 days; device status and metric data: 90 days.
• Account information: after you delete your account, a 7-day cooling-off period applies; when it ends, the data is deleted or anonymised.

7. Your rights

In the app, under Settings and Me, you can:

• view and correct your account and tank information;
• delete the footage of an individual event, delete all media of a tank, and delete your account (the option is in the app; when the 7-day cooling-off period after deletion ends, your account data is deleted and cannot be restored);
• withdraw your authorisation for training data and for support access to your camera feed;
• turn off push notifications or adjust your alert preferences.

You can also contact us as described in section 8 to exercise your rights to access, copy, correct and delete your personal information and to withdraw consent. We will respond within 15 working days of receiving your request.

If you are in the European Economic Area: you have the right to request a copy of your data (data portability), to restrict processing, to object to processing, and to lodge a complaint with the data protection authority in your country. We process data on the basis of the performance of our contract with you and our legitimate interests, and cross-border transfers rely on Standard Contractual Clauses (SCCs). The contact details of our EU representative and for data protection matters are set out in section 8.

8. Contact us

• Privacy and personal information protection: support@zhiyunms.com
• Customer support: in the app under Settings → Help & feedback
• Website: https://fish.zhiyunms.com

9. Minors

The Service is not directed at children under the age of 14 (outside mainland China, under the age of 16 or the equivalent age in your jurisdiction). If you are below that age, please read this policy together with your parent or guardian, and use the Service only with their consent. If we discover that we have collected a child’s personal information without the consent of a parent or guardian, we will delete it as soon as possible.

10. Changes to this policy

When this policy is updated, we will publish the new version and its effective date in the app and on the public page. For material changes, such as changes to the purposes of processing, the categories of information or the recipients, we will notify you prominently and, where necessary, ask for your consent again.