OUKITEL Energy APP Data Agreement and Privacy Policy

This Privacy Policy also applies to end users in the European Union (EU/EEA). Within the EU legal framework, OUKITEL Energy acknowledges and complies with the primacy of the General Data Protection Regulation (GDPR).

To use the services of the OUKITEL Energy APP, you shall carefully read and comply with all contents of this Agreement, especially clauses that exclude or limit liability. Unless you have read and accepted all terms of this Agreement, you may not register an OUKITEL Energy APP account or use OUKITEL Energy APP services. If you do not agree to any part of this Agreement, please do not register or use the services, and stop the registration process immediately. If you have any questions about this Agreement, you may contact us at any time using the contact details set out herein, and we will provide further explanation upon request. If you check “I agree to the OUKITEL Energy APP Agreement and Data Privacy Policy” and complete registration or otherwise use or accept any service of this APP, you shall be deemed to have read and agreed to all terms of this Agreement and to voluntarily accept its binding effect. Before deciding to register or use the services, please confirm again that you know and fully understand all contents of this Agreement.

This Agreement may be updated by OUKITEL Energy from time to time. Once published, the updated terms shall replace the previous terms without separate notice. Users may review the latest version on this website. If you do not accept the amended terms, please stop using the services provided by the OUKITEL Energy APP immediately. Continued use of the services shall be deemed acceptance of the amended Agreement.

To collect your information in accordance with this guidance, provide and improve our services, and protect your account security, we may request certain permissions. Sensitive permissions such as location, camera, and photo album are disabled by default and will be used only within the scope of your express consent. For system permissions you have granted, you may also review and manage the types and purposes of permissions we call or use under “Settings – System permissions”.

Permission purposes (sensitive permissions are off by default and requested only when the relevant feature is used):

1. General Terms

1.1 All services of the OUKITEL Energy APP are provided to users who access our global APP. Users shall not attack the OUKITEL Energy APP. If the APP is attacked, we are entitled under applicable law to block your use of our services and the OUKITEL Energy APP and to hold you liable.

1.2 Use of the OUKITEL Energy APP requires network connectivity and related telecommunications services. We do not bear telephone charges, telecommunications fees, or other such costs.

2. User Accounts

2.1 Users may register on the OUKITEL Energy APP and use the services it provides. Users have the right to use the account; OUKITEL Energy retains ownership of the account. We assume no liability for unauthorized use of an account caused by hacking or by the user’s failure to safeguard the account.

2.2 When creating or editing an account, users shall provide complete, true, and accurate personal information. Complete user information is important for recovering accounts and passwords. You shall bear any loss or issues arising from incomplete, untrue, or inaccurate information. Please do not register uncivil or unhealthy names, or accounts containing discriminatory, insulting, or obscene wording. If we find that a user account contains indecent or inappropriate names, we assume no responsibility for such accounts and reserve the right to suspend or terminate their use.

2.3 If your account is used unlawfully or has security issues, you shall notify OUKITEL Energy immediately. When OUKITEL Energy receives a request to suspend an account, we will require the user to provide corresponding registration personal information and take action only after verifying authenticity. After verifying the authenticity of personal and account information, if correct, we will suspend use of your account; if incorrect, we are entitled to refuse the request.

2.4 No organization or individual may register an APP account by unlawful means. When compiling, copying, or transmitting APP information and content, you shall use true personal, company, or organizational information. You shall not register an OUKITEL Energy account using false or impersonated personal, company, or organizational information.

2.5 We will establish sound user information security systems to protect the security of user accounts and personal information.

3. Data Privacy

3.1 OUKITEL Energy is the data controller of the personal information you provide as a data subject. This Privacy Policy applies to the services and to any data subject (users, customers, and paying users) who accesses and uses the services. With the free, specific, informed, and unambiguous consent of the relevant data subject, OUKITEL Energy will process data on a lawful, fair, and transparent basis, and undertakes to comply with the legal obligations under the EU GDPR.

Legal bases for processing:

• Performance of a contract (GDPR Art.6(1)(b)): to provide OUKITEL Energy APP account services, device management, and remote control, we process your registration information, device information, and login data.
• Consent (GDPR Art.6(1)(a)): only with your active authorization will we process device identifiers for push notifications and service optimization. You may withdraw consent at any time.
• Legal obligation (GDPR Art.6(1)(c)): to comply with network security, data security, and tax-related legal obligations, we retain necessary logs and records as required by law.

Retention periods:

• Account data: during the life of the account and for up to 12 months after account deletion (unless a longer period is required by law).
• Device operation and energy monitoring data: retained as needed for business while the account exists; after account deletion, deleted or anonymized within up to 90 days under the backup policy.
• Log data: no more than 6 months.
• Backup data: permanently deleted within up to 90 days.
• SMS / email send records: generally no more than 6 months, for troubleshooting delivery issues.

Categories and purposes of personal data collection (aligned with the categories in the APP “Personal Information Collection List”; field-level details are as shown in the APP list):

For field-level scenarios and further details, please see APP “About → Personal Information Collection List”. Device identifiers and analytics are described in Section 4.2 (DCloud disclosure).

3.2 Before accessing certain information and content of our services, you must complete the relevant information to register as a customer and create an APP account, and you must accept the binding “data protection” rules and the processing of your personal data. In any case, where provision of the service requires registration and certain personal data, a request to cancel such data will cancel registration and accordingly delete your APP account.

3.3 Some personal information we request for APP registration or to contact us is mandatory. Without such information, OUKITEL Energy may be unable to provide registration and/or use of the services. Likewise, if you successfully register as a customer, OUKITEL Energy will also collect certain information necessary for your use of the services—for example, registration telephone number, email address, country, and router account credentials. Such data are required for our systems to operate.

3.4 The OUKITEL Energy APP collects and processes all data you provide, manually or automatically, only for purposes agreed by the parties. We may process your data in order to:

1. Manage your APP account so that you can use our services and access devices;
2. Receive customized notifications based on your use of the application and portal;
3. Only where you authorize us to do so, automatically process your data to generate user personal data derived from data you provide by registering as a customer and using paid services. Such materials will be used by OUKITEL Energy and may be transferred to third-party companies with which we cooperate, to send you business communications about our own products and services and those of such third parties, in a personalized manner matching your consumption and business preferences.

4. Privacy Policy

4.1 Privacy principles:

We value your privacy and will collect, use, store, and protect your personal information in accordance with the Privacy Policy we publish separately. The Privacy Policy forms part of this Agreement. Your use of this APP signifies your agreement to the relevant provisions of our Privacy Policy. We undertake to use your personal information only for the purposes and within the scope expressly stated in the Privacy Policy, and to take reasonable security measures to protect your information.

4.2 Collection and use of information:

1. We may collect the following types of personal information, including but not limited to your registered account information, contact details, information relating to your PV plant, and usage behavior such as operation records and browsing history generated while using this APP. The main purposes are to enable PV plant monitoring and management, to provide better and more personalized services, and to safeguard the security of you and the plant. Categories and purposes are set out in the “Categories and purposes of personal data collection” table above.

2. DCloud uni-app engine disclosure (structured as follows):

   • Development framework: This product is built on DCloud uni-app (5+ App / Wap2App).
   • Information collected: During runtime, the APP may collect device unique identifiers (IMEI / android ID / DEVICE_ID / IDFA, SIM IMSI, OAID / QAID, etc.).
   • Purpose: To provide statistical analysis services; to improve performance and user experience through app launch data and exception / error log analysis.
   • Third-party policy: For details, see the DCloud App Engine Privacy Policy.

4.3 Recipients of shared data:

We do not sell your personal information. We share or disclose it only in the following circumstances, and require recipients to process it within the agreed purposes and security measures:

• Cloud and communications providers necessary for the service (e.g. SMS, email, object storage), for verification codes, notices, and file storage—see the SDK list in Section 7.
• Business feature partners (e.g. weather, electricity price, or third-party device linkage services), shared on a least-necessary basis only when you use the corresponding feature—see Section 7.
• Other third parties with your separate consent.
• Where disclosure is required by laws and regulations or by judicial or administrative authorities.
• In the event of merger, acquisition, or asset transfer, we will require the successor to remain bound by this Policy; otherwise we will seek your consent again.

4.4 Security measures:

• Transmission: Sensitive interactions use encrypted transmission such as HTTPS.
• Storage and access: Sensitive credentials such as passwords are encrypted or hashed; employee and system access is controlled on a least-privilege basis.
• Technical and organizational measures: Security testing, log auditing, and vulnerability / breach response (see Section 5).
• Despite reasonable measures, absolute security cannot be guaranteed on the Internet; please contact us promptly if you detect account anomalies.

4.5 Children’s privacy:

This APP is primarily intended for users with full civil capacity and is not directed at children. We do not knowingly collect personal information of children under 14 years of age (or the corresponding age under the laws of your jurisdiction). If you believe we have collected children’s information in error, please notify us using the contact details at the end of this document, and we will delete it promptly.

4.6 User rights (including account deletion):

To the extent permitted by applicable law, you may exercise the following rights:

• Access and correct your account profile and certain personal information.
• Delete or request deletion of personal information; withdraw consent previously given (without affecting processing based on consent before withdrawal).
• Restrict or object to certain processing; request data portability where conditions are met.
• Account deletion: You may apply via the account / settings entry in the APP, or by email to developer@oukitelpower.com. We will process the request after identity verification. After deletion, personal information will be deleted or anonymized in accordance with the retention periods above, except where continued retention is required by law. After deletion, you will no longer be able to log in with that account or use cloud services.

To exercise the above rights or inquire about privacy matters, please email developer@oukitelpower.com. EU/EEA users see also Section 6.

5. Data Breach Response Procedures

OUKITEL Energy has established a formal personal data breach response mechanism:

• Internal response initiation: ≤ 2 hours
• Notify the controller: ≤ 24 hours
• Report to the supervisory authority: ≤ 72 hours
• Notify affected data subjects in high-risk cases: without undue delay
• All incident records retained for ≥ 3 years

* A “vulnerability disclosure platform” does not constitute statutory breach notification under the GDPR.

6. Rights of EU Users and Contact

EU users have the following rights:

• Access, rectification, and erasure of personal data
• Restriction of, or objection to, processing
• Data portability
• Withdrawal of consent at any time

EU/EEA users may exercise the above rights or lodge a complaint by contacting developer@oukitelpower.com. You also have the right to lodge a complaint with your local data protection supervisory authority. General rights and the account deletion path for all users are set out in Section 4.6.

7. Third-Party Code and Plugins (SDK)

To ensure stable operation of the OUKITEL Energy APP and to enable you to fully enjoy its features, the OUKITEL Energy APP embeds SDKs or similar applications from authorized partners. We strictly security-test the APIs and SDKs through which authorized partners obtain relevant information, and we agree with third parties on strict data protection measures so that they process your personal information in accordance with this Privacy Policy and other applicable confidentiality and security measures.

Details of each SDK / third-party service are as follows (primarily server-side calls, enabled as needed for business; consistent with the APP “Third-Party Information Sharing List”):

Links to third-party processing rules are available in the APP under “About → Third-Party Information Sharing List”. Separately, device identifiers and analytics related to the DCloud uni-app engine are described in Section 4.2 and are governed by its official privacy policy.

8. Open-Source Component Notice

This software may use third-party software or technologies. OUKITEL Energy will disclose them as required by applicable laws or agreements, including via annexes to this Agreement, packaging in a designated folder of the installation package, or an open-source component notice page.

9. Intellectual Property and Copyright

9.1 All of our rights (including goodwill and trademarks) belong to us or our licensors. Other products, brands, and trademarks appearing in our APP belong to their respective rights holders.

9.2 All intellectual property in the APP, APP information and service information, our databases on the services and APP, text, images, tables, photos, video, sound and combinations thereof, and all software compilations, related source code, and software (including mini-programs and scripts) belong to us. You shall not obtain or attempt to obtain such intellectual property. Without separate written permission, you may not use, alter, copy, or disseminate commercial information and materials on our APP.

9.3 This Agreement (or terms of use) does not authorize users to use any trademark, service mark, logo, mark, domain name, or other distinctive brand feature.

9.4 Except as permitted by this Agreement (or terms of use), users may not alter, modify, sell, distribute, or copy any part or all of these terms of use, create derivative works, or use them for commercial purposes.

10. Disclaimer

10.1 We are not responsible for the accuracy, completeness, or suitability of information in this service and APP, nor that Internet services will meet user requirements—including interruption of Internet services, accuracy, timeliness, and security of Internet services, quality of service, and suitability of other (including any third-party) assets—unless we breach the provisions of this Agreement. We will endeavor to ensure that our services are not interrupted and to provide timely, secure, reliable, and accurate services.

10.2 Users shall fully consider the risks of using the network services of this website. Any consequences arising from such use shall be borne by the user; we assume no such liability or risk.

11. Miscellaneous

Copyright in this Agreement belongs to OUKITEL Energy. OUKITEL Energy reserves the right to interpret this Agreement.

For any comments or suggestions, please email: developer@oukitelpower.com.