AINET LIMITED - Hotmind App Privacy Policy Statement

Last Updated: August 3, 2026

Policy Effective Date: August 3, 2026

AINET LIMITED (hereinafter referred to as "we," "us," or "hotmind") values and is committed to protecting your privacy. This Privacy Policy (hereinafter referred to as the "Policy") explains how we process personal data and protect information privacy when you use our services, products, and related mobile applications (collectively referred to as the "Products").

By agreeing to this Privacy Policy, or by starting or continuing to use our Products or Services without contacting us to express a contrary opinion, you will be deemed to have fully understood and agreed to this Policy. If you have any questions, comments, suggestions, or complaints, especially if you believe that our personal information processing activities have harmed your lawful rights and interests, you may submit a complaint or suggestion through appropriate regulatory channels, or contact us as follows:

Customer Service: +852 5108 7973 or app@hotmind.ai

If you are a minor under the age of 18, please obtain the consent of your parent or legal guardian before using our Products or Services. If you are a child under the age of 14, please be sure to read the hotmind Children's Privacy Protection Statement and ensure that you and your guardian understand the relevant children's privacy protection information.

Google API disclosure

Google Calendar Data

When you choose to connect Google Calendar, Hotmind accesses Google user data only to provide the calendar features that you request. This section applies specifically to Google user data and controls if it conflicts with a more general statement elsewhere in this Policy.

Data We Access

Your Google account identity information, such as your email address and basic profile information, to identify and manage the calendar connection.
Calendar list metadata, including calendar identifiers, names, colors, settings, and access roles, so you can choose which calendars to connect.
Calendar event data from calendars you select, which may include event titles, descriptions, dates and times, time zones, locations, recurrence rules, reminders, attendees, and event status.
OAuth authorization tokens and synchronization metadata needed to maintain the connection and detect calendar changes.

How We Use Google Calendar Data

To display the calendars and schedules you select in the Hotmind App and on Hotmind devices linked to your account or family.
To provide reminders and other user-facing schedule features that you request.
For a read-only connection, to import or display selected Google Calendar events without changing them in Google Calendar.
For a two-way connection, to create, update, or delete events in Google Calendar when you perform the corresponding action in Hotmind, and to reflect Google Calendar changes in Hotmind.
To maintain and troubleshoot the calendar synchronization service, protect it from abuse, and comply with applicable law.

AI-Assisted Calendar Responses

When a user initiates a conversation and asks a calendar-related question, Hotmind may use the OpenAI API to generate a spoken response. OpenAI may invoke a Hotmind calendar tool to retrieve only the calendar events relevant to the user's request. The tool result may include limited event information such as the event title, date and time, location, and recurrence information. This information is used solely to generate and deliver the requested spoken response.

Hotmind does not continuously or independently transmit Google Calendar data to OpenAI merely because a calendar account is connected. Google Calendar data is not sent to OpenAI for background analysis, bulk processing, advertising, profiling, sale, or AI model training.

Hotmind does not use Google Calendar data for AI model training, advertising, or sale.

Storage, Security, and Retention

Hotmind stores OAuth access and refresh credentials in encrypted form. Calendar and event data needed for the feature is stored in protected cloud systems and may be cached on your Hotmind App or linked devices. We retain Google Calendar data only for as long as needed to provide the connection you requested, meet security and legal obligations, or resolve disputes. When you disconnect a calendar, future synchronization stops. Depending on the removal option you choose, previously synchronized events may be deleted or retained as local Hotmind events. Account-deletion requests are handled as described in Section 6 of this Policy.

Sharing and Human Access

Google Calendar data is shared only as necessary to provide visible Hotmind features that you authorize. This may include showing selected schedules to family members or linked Hotmind devices that you have authorized, and processing by cloud or infrastructure providers acting on our instructions under confidentiality and security obligations. We do not transfer Google Calendar data to advertising platforms, data brokers, or information resellers. Our personnel do not read Google Calendar data except with your affirmative consent, when necessary for security or abuse investigation, when required by law, or when data has been aggregated for permitted internal operations.

AI Service Provider

Hotmind uses the OpenAI API as a third-party AI service provider for user-initiated conversational features. Relevant Google Calendar event information is transmitted to OpenAI only when the user asks a calendar-related question and only to generate the requested spoken response. Hotmind has not opted in to OpenAI API data sharing or model training. Google Calendar data is not used by Hotmind to create, train, or improve generalized or personalized AI or machine learning models.

Your Controls

You can choose which calendars to connect, select read-only or two-way synchronization where available, disconnect your Google account in Hotmind, revoke Hotmind access from your Google Account security settings, and request deletion through the account controls described in this Policy or by contacting app@hotmind.ai.

Google Limited Use

Hotmind's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

1. Definitions

Personal Data: refers to information that can identify a specific individual either alone or in combination with other information.

Smart Device: refers to non-standard computing devices produced or manufactured by hardware manufacturers that have a human-machine interface and can transmit data via wireless networks, including smart home appliances, smart wearable devices, smart air purifiers, smart camera devices, and other smart hardware products.

App or Application: refers to the mobile application developed or operated by hotmind to help users connect, configure, control, and manage hotmind smart products and related services.

Products or Services: refers to smart hardware products, mobile applications, software, firmware, cloud services, after-sales support, and other related functions provided by hotmind.

2. Personal Data We Collect

To provide Products and Services to you, we need you to provide necessary personal information. If you do not provide the relevant information, we may be unable to provide the corresponding Products or Services to you.

2.1 Information You Voluntarily Provide

Account or user profile information: When you register, log in, or use a hotmind account, we may collect your email address, mobile phone number, username, nickname, avatar, country or region code, language preference, time zone, and other information.
Feedback information: When you use feedback, suggestion, customer service, or after-sales functions in the Products, we may collect your contact information, feedback content, issue descriptions, images, logs, and related communication records to handle your issues or device faults.
Third-party login information: When you choose to log in through an authorized third-party account, we may, based on your authorization, obtain account information that you agree to share from the third party, such as avatar, nickname, and region information, and bind it to your hotmind account for quick login.

2.2 Information We Collect Automatically

Device information: When you use hotmind Products or Services, we may automatically collect device model, device identifier, MAC address, IP address, wireless connection information, IMEI, Bluetooth address, SN, Device ID, MEID, OAID, Android ID, Wi-Fi SSID, operating system type and version, App version number, push notification identifier, mobile network information, and similar information.
Usage data: We may collect service usage records such as your access, clicks, downloads, messages sent or received, function usage, device binding, device control, and device status viewing.
Log information: When you use the hotmind App, application logs, exception stacks, error logs, crash logs, and security logs may be uploaded for troubleshooting, system maintenance, and service optimization.
Location information: We collect precise or non-precise geographic location information only when required by specific functions, such as country or region selection, device network configuration, Bluetooth, or Wi-Fi connection. You may manage the relevant authorization through system permission settings.
Photo album permission: Used to select image files from the photo album, such as uploading avatars, feedback images, or other image-related functions.
Camera permission: Used to scan QR codes to add devices, take photos, upload images, or complete other camera-related functions.
Storage permission: Used to ensure stable client operation and support normal App startup, caching, saving, or reading images and necessary files.

2.3 Information Related to Smart Devices

Basic smart device information: When you use smart devices connected to hotmind Services, we may collect device name, device ID, online status, activation time, firmware version, upgrade information, device configuration, operating status, and similar information.
Information during device connection: When you add, bind, or configure a smart device, to identify, activate, connect, and control the device, we may collect Wi-Fi information (SSID, BSSID, Wi-Fi Mac address, Wi-Fi password), device Mac address, device ID, device IP, device Bluetooth Mac address, and similar information.
Information reported by devices: Depending on the type of device you use, we may receive information reported during device operation. For example, when you use smart camera products, the device may upload images, videos, alarm records, or event records according to the functions you enable, in order to provide viewing, playback, notification, cloud storage, and related functions. We will not use such images or videos for purposes unrelated to the Services, and will retain or delete them according to the service term you purchase or use, legal and regulatory requirements, and this Policy.

2.4 Information Collected by SDKs and Third-Party Services

Some third-party SDKs or similar technical services may collect necessary information when you use relevant functions. We will assess the legality, legitimacy, and necessity of such third-party services' collection of personal information, and require third parties to take necessary protective measures and comply with applicable laws, regulations, and regulatory requirements.

Third-party services may include message push, cloud services, payment, app stores, data statistics, customer service, security risk control, login authentication, and other services. Details of third-party information sharing may be found in the Third-Party Information Sharing and SDK Service Inventory.

2.5 Self-Startup and Associated Startup

To ensure that the App can normally receive message pushes, alarm notifications, system broadcasts, or complete necessary services when it is closed or running in the background, this Application may use self-startup or associated startup capabilities under specific functions.

For example, in scenarios such as one-click login, message push, device alarms, family messages, log detection, or third-party authorization services, the App may need to be awakened by the system to complete the corresponding function. Non-essential associated startup will not occur without your authorization or trigger.

3. How We Use Personal Data

We may process your personal data for the following purposes:

To provide services to you, including account registration, login, identity verification, device binding, device connection, device control, status viewing, message notification, data display, firmware upgrade, and after-sales support.
To improve Products and Services, including ensuring product functionality and security, analyzing service operation, optimizing user experience, troubleshooting, and developing and improving product functions.
To send non-marketing notices, including service notices, device alarms, system messages, changes to terms, policy updates, security reminders, and other administrative information. Because such information is closely related to your use of the Services, you may not be able to opt out of all such notices.
To comply with laws, regulations, and regulatory requirements, including applicable laws and regulations, legal procedures, and lawful requests from government authorities or regulatory bodies.
To maintain security and lawful rights and interests, including preventing fraud, attacks, abuse, illegal acts, or security risks, and protecting the rights, privacy, safety, and property of us, you, and other users.
To use the information for other specific purposes with your consent or where permitted by applicable law. If the processing purpose changes, we will notify you in a prominent manner and obtain your consent again where required by applicable law.

4. With Whom We Share Your Personal Information

We will not sell your personal information to unrelated third parties.

To achieve the purposes described in this Policy, we may share your personal information with the following parties within the necessary scope:

Service providers: including cloud services, data storage, message push, payment processing, IT services, customer support, after-sales services, data statistics, security risk control, and system operation and maintenance service providers.
Third-party platforms: When you use third-party login, payment, voice authorization, app store services, or other third-party functions, we may share necessary information with the corresponding third party based on your authorization or as permitted by laws and regulations.
Parties required by laws and regulations: We may share, transfer, or disclose your personal information in accordance with law when required by laws and regulations, judicial authorities, administrative authorities, or regulatory bodies, or when necessary to maintain public safety or protect lawful rights and interests.
Transaction-related parties: In the event of merger, division, acquisition, asset transfer, reorganization, bankruptcy liquidation, or similar transaction, your personal information may be transferred as part of the transaction. We will require the new holder to continue to be bound by this Policy or obtain your authorization and consent again.

Except for the above circumstances, we will share your personal information with other third parties only with your consent.

5. Information Storage

5.1 Device Local Storage

To ensure the normal operation of core App functions, some necessary data may be stored on your personal device, such as login status, local App settings, cached information, images, or necessary files. You may manage this data through device system settings or by clearing the App cache.

5.2 Cloud Server Storage

Most personal data generated during your use of the Services, such as account information, device control records, device status, and service logs, may be encrypted and stored on cloud servers operated by us or entrusted third-party service providers.

We may store and process your personal information in the Hong Kong Special Administrative Region or other countries and regions based on service deployment, cloud resource configuration, user location, and applicable legal and regulatory requirements. Where cross-border processing is involved, we will take necessary protective measures in accordance with applicable laws and regulations.

6. Your Personal Information Rights

We respect your rights regarding personal information. To the extent permitted by applicable laws and regulations, you may exercise the following rights:

Request access to personal data related to you that we process;
Request correction of inaccurate or incomplete personal information;
Request deletion of your personal data;
Request restriction of our processing of some or all of your personal data;
Request transmission of your personal information to you or a third party designated by you where the conditions prescribed by law are met;
Object to or refuse our processing of your personal data based on your consent or legitimate interests;
Withdraw your consent to personal data processing at any time, provided that withdrawal does not affect the lawfulness of processing based on consent before its withdrawal;
Delete your account.

You may manage your personal information and authorizations through the following paths:

Access or correct personal information: Go to "Me - Settings - Account & Security" to view or modify account information, avatar, nickname, time zone, and other profile information.
Manage device information: Go to "Home - Device Management" to view, modify, or delete device information.
Clear cache: Go to "Me - Settings - Clear Cache" to clear cached information on your device.
Withdraw system permissions: Go to "Me - Settings - System Permission Management" to withdraw permissions such as camera, photo album, storage, location, Bluetooth, and notifications.
Turn off message push: Go to "Me - Message Center - Settings - Enable Message Push" to turn off relevant notifications.
Turn off personalized recommendations: Go to "Me - Settings - About - Personalized Recommendations" to turn off personalized recommendations.
Unbind device: Unbind a smart device through "Home - Device Management - Manage - Remove Device".
Delete account: Submit an account deletion request through "Me - Settings - Account & Security - Delete Account".

Please understand that account deletion is irreversible. After you submit an account deletion request, we will stop providing services to you within a reasonable period and delete or anonymize personal information related to your account, unless otherwise required by laws and regulations. General data will be deleted or cleared within 7 days.

If you are unable to exercise your rights through the above paths, or if you have other questions about personal information processing, you may contact us through the methods provided in the "Contact Us" section of this Policy. We will process your request within 15 working days after completing necessary identity verification.

7. Information Security Safeguards

We take commercially reasonable physical, administrative, and technical safeguards to maintain the integrity and security of your personal information.

For device access, we use security authentication, authorization verification, and data isolation mechanisms to protect device access security.
For data communication, we support security algorithms, transmission encryption protocols, and information encryption transmission based on dynamic keys.
For data processing, we adopt data filtering, data validation, permission control, and log auditing mechanisms.
For data storage, we take encrypted storage or other necessary protective measures for confidential information.
For management systems, we reduce risks of data loss, illegal use, unauthorized access, disclosure, alteration, or damage through role and responsibility allocation, access permission control, security and privacy protection training, and employee confidentiality requirements.

Please understand that the internet environment is not absolutely secure. If you believe that your hotmind account or your interaction with us is no longer secure, please contact us immediately at app@hotmind.ai.

If a security incident affects the security of your personal information, we will notify you as soon as possible through your email, phone number, App message center, or other reasonable methods, and inform you of suggestions for reducing or preventing related risks. Where necessary, we will report to the relevant competent authority in accordance with applicable laws and regulations.

8. Information Retention Period

Unless applicable laws and regulations require a longer retention period, we will retain your personal data for the minimum period necessary to achieve the purposes stated in this Policy. We will determine the appropriate retention period based on the amount, nature, sensitivity, processing purpose, and legal requirements of the personal data.

After the retention period expires, we will delete or anonymize your personal data. If immediate deletion is not possible for technical reasons, we will take appropriate measures to prevent your personal data from being further used for unnecessary purposes.

9. Protection of Children's Personal Information

hotmind attaches great importance to the protection of children's personal information. If you are under the age of 14, or below the corresponding age specified in your country or region, you should use our Products or Services with the consent and guidance of your parent or legal guardian.

If we discover that we have collected a child's personal information without verifiable consent from a parent or legal guardian, we will take steps to delete the relevant personal information or take other necessary protective measures as soon as possible.

10. Policy Changes

We may update this Policy based on changes in laws and regulations, product functions, service content, or information processing practices. If this Policy undergoes material changes, we will notify you before the changes take effect by email, in-App notice, page prompt, announcement, or other reasonable methods.

If you do not agree to the updated Policy, please stop using hotmind Products and Services. If you continue to use them, you will be deemed to have accepted the updated Policy.

11. Contact Us

If you have any comments or questions regarding this Privacy Policy, or if you have any concerns about our collection, use, sharing, transfer, or disclosure of your personal information, please contact us using the methods below and indicate "Privacy Policy".

For your personal information rights requests or related inquiries, we will conduct necessary identity verification and complete verification and handling within 15 working days. If you are dissatisfied with our response, you may lodge a complaint with the relevant regulatory authority.

Contact Information and Address:

AINET LIMITED

Mailing Address: Rm 305-306, 3/F, New East Ocean Centre, 9 Science Museum Road, Tsim Sha Tsui East, Kowloon, Hong Kong

Email: app@hotmind.ai

Telephone: +852 5108 7973

This Policy is formulated in accordance with and governed by the laws of the Hong Kong Special Administrative Region.