Home›Privacy Policy

Privacy Policy

Last updated: April 10, 2026

1. Introduction

NEXOMATIC ("we", "our", "us") operates the NEXOMATIC Smart Home mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our App and connected smart home hardware. By using the App, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information

Email address (for login and notifications)
Username and password (stored securely with Firebase Authentication)
Phone number (for service OTP verification only)

2.2 Device Information

Smart hub device identifiers (ESP32 MAC address)
Device status (online/offline, firmware version, uptime)
Device configurations (names, types, schedules, scenes)
Power consumption data (wattage, kWh, daily/monthly usage)
Sensor readings (temperature, humidity, smoke, motion, door status)

2.3 Location Data

Collected only when geofencing is enabled by the user
Used to detect arrival/departure from home for automation triggers
Processed locally on the device — not stored on our servers
Background location access required for geofencing to work when app is closed

2.4 Audio Data

Collected only when Music Reactive Mode is activated by the user
Used to capture ambient sound for real-time light synchronization with smart bulbs
Processed locally on the device — never recorded, stored, or transmitted

2.5 Usage Data

App interaction patterns (for improving user experience)
Error logs and crash reports (via Firebase Crashlytics)
Device command history (for diagnostics and troubleshooting)

3. How We Use Your Information

Data	Purpose
Account info	Authentication, account management, notifications
Device data	Real-time control, monitoring, automation, energy tracking
Location	Geofencing automation (arrival/departure actions)
Audio	Music-reactive smart lighting (local processing only)
Sensor data	Safety alerts (smoke, gas, intrusion), automation rules
Usage data	App improvement, bug fixes, crash resolution

4. Data Storage & Security

We take security seriously. Your smart home data is protected with industry-standard encryption.

Firebase Realtime Database — device states, configurations, and user data stored on Google Cloud servers
AES-256-CBC encryption — all communication between the App and smart hub is encrypted
HMAC-SHA256 authentication — every command is signed with per-device unique keys
No hardcoded secrets — all security keys are stored in device secure storage (NVS)
Firebase Authentication — passwords are hashed, never stored in plain text
5-minute anti-replay window — prevents command replay attacks

5. Data Sharing

We do NOT sell, trade, or share your personal data with third parties.

Your data may be processed by the following service providers who act on our behalf:

Service	Purpose	Data shared
Google Firebase	Authentication, database, cloud functions, notifications	Account info, device data
Google Cloud Storage	Firmware update hosting	None (public firmware files only)
Razorpay	Subscription payment processing	Payment info (handled by Razorpay, not stored by us)

We do not share sensor data, location data, audio data, or device usage patterns with any third party.

6. Push Notifications

The App sends push notifications for:

Emergency alerts — smoke, gas, intrusion detection (critical safety)
Device status — offline alerts, firmware updates available
Automation events — schedule execution, sensor triggers
Subscription — trial expiry, payment reminders

You can manage notification preferences in the App settings. Emergency safety notifications cannot be disabled.

7. Your Rights

You have the right to:

Access — view all data associated with your account
Correct — update your account information at any time
Delete — request deletion of your account and all associated data
Opt-out — disable optional features (geofencing, music mode, analytics)
Export — request a copy of your data in a machine-readable format

To exercise these rights, contact us at the email below.

8. Data Retention

Account data — retained while account is active; deleted within 30 days of account deletion request
Device data — retained while device is registered; cleared on device removal
Sensor alerts — acknowledged alerts deleted after 24 hours; unacknowledged after 7 days
Command history — retained for 30 days for diagnostics, then auto-deleted
Power consumption — historical data archived monthly, raw data deleted after 90 days
Location data — never stored; processed locally in real-time only
Audio data — never stored; processed locally in real-time only

9. Children's Privacy

The App is not intended for use by children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data:

Email: support@nexomatic.in
App: Settings → Support → Create Ticket
Address: 217/A Sathy Main Road, Saravanampatti, Coimbatore, Tamil Nadu – 641035