UVCeed, LLC ("UVCeed," "we," "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit uvceed.com (the "Site"), buy our products, or use the UVCeed mobile apps for iOS and Android (the "App"). Together these are the "Services."

If you do not agree with this policy, please do not use the Services.

1. INFORMATION WE COLLECT

A. Information you give us

• Name and contact details (email address, phone number, mailing address)
• Billing and shipping addresses
• Payment information. This is handled by our payment processors; we do not store full card numbers.
• Account credentials
• Communication and marketing preferences
• Warranty registration details, such as your name, email address, and product information
• Feedback you send us in the App: a star rating and any comments you type

B. Information collected automatically on the Site

• IP address and device identifiers
• Browser type and version
• Operating system
• Referring and exit pages and URLs
• Date and time stamps
• Clickstream data, pages viewed, and interactions with content

C. Information collected by the App

Bluetooth and device data. The App uses Bluetooth to connect to your UVCeed device. It reads device status, battery level, serial number, and firmware version so it can control UV output and show you device information. This data stays on your phone or tablet, except as part of the Compliance Log (Section 2).

Camera. The App uses your camera to detect surfaces and guide disinfection. Camera images are processed on your device and are not sent to us. Photos are saved to your photo library only when you choose to save them.

Location. The App asks for location access only while it is in use. Location is used for:

• Outbreak alerts. The App turns your location into a ZIP code on your device. It sends that ZIP code to our servers to check for pathogen outbreaks in your area, along with a random app identifier and a push notification ID. It does this when you open the App and periodically in the background, using the ZIP code from your last session. If you look up a travel destination, the destination's ZIP code is sent the same way. Outbreak alerts are on by default, and you can turn them off in the App's settings.
• Usage statistics. When outbreak alerts are on and location access is allowed, the App reports each completed disinfection session to us. The report includes an approximate location (rounded to about 1 km), ZIP code, app version, the time, and the random app identifier. It does not include your name or contact details.
• The Compliance Log, if you turn it on (Section 2). Precise location and street address are stored on your device only.

To convert coordinates into a ZIP code or address, your device's operating system may send them to Apple (iOS) or Google (Android) under their own privacy policies.

Push notifications. If you allow notifications, we use OneSignal to deliver them. OneSignal assigns a push subscription ID and receives basic device information, such as device model, operating system, language, and time zone.

Analytics and diagnostics. The App uses Google Analytics for Firebase to understand how the App is used. It records:

• App events, such as onboarding steps completed, whether permissions were granted, whether a device was paired, troubleshooting screens opened, and whether in-app prompts were shown or answered.
• Device and app information that Firebase collects automatically, such as an app instance ID, device model, operating system version, app version, country, and session data.

The Android App also uses Firebase Crashlytics to collect crash reports, including device state at the time of the crash, and may access the Android advertising ID. The iOS App does not access the Apple advertising identifier (IDFA) or track you across other companies' apps or websites.

Feedback. If you submit feedback in the App, we receive your rating and comments, the app version and build, device model, operating system version, platform, how many sessions you have completed, and which prompt you responded to. This is stored in Google Firebase. Please do not include personal information in your comments.

2. COMPLIANCE LOG (iOS APP)

The iOS App includes an optional Compliance Log for businesses that need a record of disinfection sessions. It is on by default for Array (two-device) sessions and off for all other sessions. Either can be turned off at any time in Settings > Compliance Log.

When it is on, the App records each session on your device:

• Start and end times
• Disinfection mode
• The devices used, with serial numbers and firmware versions
• Dose and distance readings
• Safety events and how the session ended
• If you choose to include them: photos of the treated surface, precise location and street address, and an operator name and site name you enter

Compliance Log records are stored only on your device. They are also included in your device backups if you use iCloud Backup or computer backups. They are never sent to UVCeed, and we cannot access them.

You can export records as PDF or CSV files and share them with whoever you choose. Once you share an export, it is outside our control.

Records are kept until you delete them. To make the log tamper-evident, each deletion or edit leaves a permanent entry in the log showing what was removed or changed and when. The removed content itself is erased. Deleting the App deletes the Compliance Log from your device.

If you use the Compliance Log on behalf of a business, that business decides what is recorded and how exports are used. It is responsible for any notices or consents required for the employees and locations it records.

3. HOW WE USE YOUR INFORMATION

• To process and fulfill orders, and send order confirmations and shipping updates
• To register warranties and provide customer support
• To deliver outbreak alerts and other notifications you have allowed
• To operate, maintain, and improve the Site and App, including fixing crashes and bugs
• To understand how our products are used, using aggregated usage statistics
• To send marketing communications, with your consent
• To conduct analytics and measure advertising effectiveness
• To prevent fraud and keep the Services secure
• To comply with legal obligations

4. ANALYTICS AND MARKETING TECHNOLOGIES

Analytics

• Google Analytics 4 (Site): tracks website usage, user behavior, and conversion events, using cookies.
• Google Analytics for Firebase (App): see Section 1.C.
• Shopify Analytics: e-commerce metrics and customer insights.

Marketing and advertising pixels (Site)

• Meta (Facebook) Pixel: tracks conversions, builds advertising audiences, and measures ad effectiveness. It may collect browsing behavior and purchase data.
• Google Ads: measures conversions and shows ads based on your interactions with our Site.
• Reddit Pixel: measures ad performance and enables retargeting on Reddit.
• Taboola Pixel: measures ad performance and enables retargeting across Taboola's publisher network.

You can opt out of interest-based advertising at optout.aboutads.info or optout.networkadvertising.org, and through your device's ad settings.

5. COOKIES AND TRACKING TECHNOLOGIES

The Site uses cookies and similar technologies:

• Essential cookies: required for the Site to work and stay secure.
• Analytics cookies: help us understand how visitors use the Site.
• Marketing cookies: used to deliver relevant advertising.
• Preference cookies: remember your settings.

You can manage cookies in your browser settings. Disabling cookies may affect how the Site works. We honor Global Privacy Control (GPC) browser signals as a request to opt out of the sale or sharing of personal information.

6. HOW WE SHARE INFORMATION

We do not sell your personal information for money. We share information with service providers who process it on our behalf:

• Shopify (e-commerce platform)
• Payment processors (Stripe, PayPal)
• Shipping carriers
• Mailchimp (email marketing and warranty registration)
• Google Firebase (app analytics, crash reporting, feedback storage)
• OneSignal (push notifications)
• Cloud hosting providers (our outbreak alert and usage servers)
• Customer support tools
• Analytics and advertising platforms (Google, Meta, Reddit, Taboola)

Sharing data with advertising platforms through Site pixels may count as a "sale" or "sharing" for cross-context behavioral advertising under some U.S. state laws. You can opt out as described in Section 8.

We may also disclose information:

• to comply with law or legal process,
• to protect our rights, users, or the public,
• in connection with a merger, acquisition, or sale of assets.

7. DATA RETENTION

• Order and account information: as long as needed to provide the Services, and as required for tax, accounting, and legal purposes.
• Marketing data: typically 2 years from your last interaction.
• Outbreak alert registration (app identifier, push ID, ZIP code): until you turn off outbreak alerts and delete your data in the App, or the App stops checking in.
• Usage statistics: may be kept in aggregate form indefinitely.
• App analytics and crash data: under Google Firebase's retention settings.
• App feedback: until it is no longer useful for improving the App.
• Compliance Log: on your device only, until you delete it (Section 2).

8. YOUR PRIVACY CHOICES AND RIGHTS

In the App

• Turn off outbreak alerts, location access, camera access, or notifications at any time in the App or your device settings.
• Use "Delete My Data" in the App's outbreak alert settings. This removes your outbreak registration from our servers and resets your app identifier.
• Turn off or delete Compliance Log records in Settings > Compliance Log.

Depending on where you live, you may also have the right to:

• Know and access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Receive a portable copy of your information
• Opt out of the sale or sharing of personal information, targeted advertising, and profiling
• Limit the use of sensitive personal information
• Restrict or object to processing
• Withdraw consent
• Not be discriminated against for exercising these rights

California residents (CCPA/CPRA)

In the past 12 months we have collected these categories of personal information:

• identifiers
• customer records
• commercial information
• internet or other electronic network activity
• approximate geolocation
• inferences drawn from this information

We collected them from the sources and for the purposes described above. We do not use or disclose sensitive personal information for purposes that require a right to limit. To opt out of the sale or sharing of your personal information, email Do Not Sell or Share My Personal Information (info@uvceed.com) or enable Global Privacy Control in your browser.

Other U.S. states

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others) have similar rights. If we deny your request, you may appeal by replying to our decision. If your appeal is denied, you may contact your state attorney general.

To exercise any of these rights, email info@uvceed.com. We will verify your request before acting on it. You may use an authorized agent.

9. INTERNATIONAL DATA TRANSFERS

We are based in the United States, and our service providers may process information in the United States and other countries. Those countries may have different data protection laws from yours. Where required, we use appropriate safeguards for these transfers.

10. SECURITY

We use reasonable technical and organizational measures to protect personal information. App connections to our servers are encrypted. Compliance Log records are protected by your device's encryption. No method of transmission or storage is 100% secure.

11. CHILDREN'S PRIVACY

The Services are not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If we learn that we have, we will delete it.

12. CHANGES TO THIS POLICY

We may update this policy from time to time. We will post the updated policy on this page and change the Effective Date above. If the changes are material, we will provide additional notice, such as in the App or by email.

13. CONTACT US