Privacy Policy for SecHeal

Last Updated: August 12, 2026

Welcome to SecHeal (website accessible at https://www.sechealcrowdfunding.com). SecHeal (“we”, “us”, “our”) is committed to fully protecting your privacy and securing all personal and sensitive data you share with us when browsing our website, subscribing to updates, participating in our Kickstarter crowdfunding campaign, purchasing or using our SecHeal smart lock hardware, and contacting our customer support.

This Privacy Policy explains what information we collect, how we use, store, share and protect your data, your legal privacy rights under the EU GDPR, California CCPA/CPRA and other global data protection laws, and how you can reach us with privacy inquiries. By accessing our website, signing up for newsletters, backing our crowdfunding project or using our smart lock products, you acknowledge you have read, understood and agreed to the terms below.

1. Information We Collect

We separate collected data into website & marketing data (collected via our crowdfunding site) and smart lock hardware data (generated when you operate the SecHeal smart lock device).

1.1 Voluntarily Provided Personal Identifiable Information (Website)

We collect data you actively submit:

Contact details: Email address for newsletter subscriptions, campaign launch alerts, exclusive discounts (e.g., 30% off pre-order offer), support tickets; your full name, shipping address, phone number when backing our Kickstarter campaign or placing orders.
Inquiry content: Any messages, questions, feedback or support requests sent to customerexperience@secheal.com.
Account & transaction data: Crowdfunding pledge amounts, order records, delivery preferences provided to Kickstarter or our checkout tools.

1.2 Automatically Collected Device & Website Usage Data

Via cookies, pixel trackers, server logs and analytics tools, we passively gather:

Device identifiers: IP address, browser model & version, operating system, screen resolution, unique device tag.
Behavioral metrics: Pages viewed, click paths, time spent on site, referral source, download actions, form submission status.
Technical metadata: Session timestamps, cookie consent preferences, network connection type.

1.3 SecHeal Smart Lock Hardware Data

This section covers all data generated by our self-charging solar smart lock, including highly sensitive biometric data classified as special category personal data under GDPR:

Biometric Data (3D Face Templates & Curved Fingerprint Templates) All facial feature data and fingerprint scans are encrypted and processed locally on the lock’s on-board secure chip only. Biometric templates are never uploaded to our web servers, cloud platforms or website databases, and we do not store, access or retain any of your facial or fingerprint biometrics remotely. Biometric data can be permanently deleted directly on the lock hardware or via our companion mobile app at any time by the user.
Local Access Event Logs Unlock records (face/fingerprint/passcode unlock timestamps, tamper alerts, low power notifications) are stored on-device by default. You may enable optional secure Wi-Fi remote log sync to your private cloud account (end-to-end TLS encrypted); we do not extract or analyze these logs for marketing purposes.
Device Configuration Data Wi-Fi credentials, lock security settings, user passcodes, authorized user profiles are saved locally on the smart lock hardware. Wi-Fi passwords are never transmitted to or stored on SecHeal’s servers.
Firmware & Performance Telemetry (Opt-in Only) You may voluntarily opt in to send anonymized, aggregate lock performance data (solar charging efficiency, temperature operating metrics, cycle test feedback) to our R&D team for product optimization. No personal or identifying markers are attached to this telemetry.

1.4 Anonymous Aggregate Data

We may compile de-identified, aggregated usage statistics that cannot be linked back to any single individual for market research and product improvement. This data does not qualify as personal information under global privacy laws.

2. Legal Bases for Data Processing (GDPR Compliance)

For users residing in the European Economic Area (EEA), United Kingdom or Switzerland, we process your personal data under these lawful grounds:

Consent: Sending marketing emails, collecting analytics cookies, syncing access logs to cloud storage, sharing anonymized device telemetry — you may withdraw consent at any time with no penalty.
Performance of Contract: Fulfill crowdfunding orders, process shipping, deliver customer support, provide functional remote unlock via Wi-Fi as promised in our product listing.
Legitimate Interests: Website traffic optimization, fraud prevention, security audits, product R&D improvements, responding to legal official requests, provided these interests do not override your privacy rights.
Legal Obligation: Retain transaction records to comply with tax, consumer protection and cross-border trade regulatory requirements.

3. How We Use Your Collected Information

We only utilize your data for disclosed, limited purposes and will never repurpose data without obtaining new explicit consent:

Campaign & Marketing Communications Deliver updates on SecHeal Kickstarter launch, early-bird discounts, product upgrades, new security feature releases and limited promotions. You can opt out of marketing emails via the unsubscribe link included in every newsletter.
Customer Support & Order Fulfillment Reply to your support inquiries via customerexperience@secheal.com, process crowdfunding pledges, arrange product delivery, handle returns, warranty claims and hardware troubleshooting.
Website & Product Optimization Analyze anonymous site traffic to improve page layout, loading speed and user experience; use opt-in aggregate solar lock telemetry to refine our BMS power management system, perovskite solar panel efficiency and biometric recognition algorithms.
Security & Fraud Mitigation Detect fake accounts, fraudulent crowdfunding pledges, unauthorized website access attempts and lock tampering risks to protect SecHeal and all our users.
Legal & Compliance Requirements Retain transaction records for tax audits, respond to valid government legal subpoenas, enforce our website Terms of Service and protect our intellectual property.
Smart Lock Core Functionality Enable local 3D face / curved fingerprint unlock, remote Wi-Fi lock/unlock, access log tracking and firmware over-the-air updates — biometric data is solely used for on-device identity verification and never repurposed.

4. Data Retention Periods

We only store personal data for as long as necessary to complete the purpose for which it was collected:

Marketing contact data (email): Retained until you unsubscribe or submit a deletion request.
Crowdfunding order & shipping records: Stored for 7 years to meet international tax and consumer warranty legal requirements.
Website cookie & analytics data: Anonymous session logs retained for 12 months; identifiable visitor data purged after 90 days.
Smart lock biometric templates: Permanently stored locally on your hardware only until you manually delete them

5. Third-Party Services and Platforms

Our website may interact with third-party platforms, including: Crowdfunding Platforms: We use Kickstarter to host our campaigns. When you participate in our campaign, their privacy policy will also apply. Website Hosting: Our site may be hosted on platforms like Wix, which collect data necessary for site stability and performance. Marketing Tools: We use third-party email service providers to manage our newsletter subscriptions.

6. Cookies and Tracking

We use cookies to enhance your browsing experience. You can choose to disable cookies through your browser settings, though this may affect your ability to use certain features of the site.

7. Data Security

We implement a variety of security measures to maintain the safety of your personal information. However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have the following rights: The right to access, update, or delete the information we have on you. The right to opt-out of marketing communications at any time by clicking the "unsubscribe" link in our emails. The right to request that we restrict the processing of your personal information.

9. Children's Privacy

Our services are not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

SecHeal reserves the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: Email: customerexperience@secheal.com Address: Building 1, 1st-3rd Floor No. 7, Jianghui South Road, Changhe Street, Hangzhou, 310051, China Phone: +86 13641844706