Privacy Policy

01 Information We Collect

When you use the ADEM app or API, we may collect the following categories of information:

• Account information — your mobile phone number, name (optional), and profile avatar if you choose to upload one.
• Authentication data — one-time passcodes (OTPs) sent to your phone number for sign-in. OTPs are discarded immediately after use.
• Container telemetry — sensor readings from your rented containers, including temperature, humidity, GPS location, weight, and battery level.
• Usage data — logs of API requests, timestamps, device type, and app version used to diagnose issues and improve reliability.
• Alert history — records of sensor threshold breaches and the notifications sent to you.

We do not collect payment card details directly — payments are processed by third-party providers subject to their own privacy policies.

02 How We Use Your Information

We use the information we collect strictly to operate and improve the ADEM service:

• Authenticate your identity via OTP and issue session tokens.
• Link rented containers to your account after QR scan.
• Stream live telemetry to your app over WebSocket.
• Evaluate sensor readings against alert thresholds and send push notifications or emails when limits are exceeded.
• Maintain your consignment records and rental history.
• Detect and prevent fraud or unauthorized access.
• Comply with applicable legal obligations.

We do not use your data for advertising, profiling, or sale to third parties.

03 How We Share Your Information

We share data only as necessary to deliver the service:

• Cloud infrastructure providers — servers and databases that store your account and telemetry data, bound by data processing agreements.
• SMS / OTP delivery providers — your phone number is transmitted to send authentication codes. These providers may not retain the number beyond delivery.
• Email service providers — used to deliver alert notifications to any email address you optionally associate with your account.
• Law enforcement or regulators — only where we are legally required to disclose information, and only to the extent required.

We do not sell, rent, or trade your personal information to any third party.

04 Data Retention

We retain your data for as long as your account is active or as needed to provide the service:

• OTP codes — deleted immediately after successful verification, or after a 10-minute expiry.
• Telemetry readings — retained for the duration of the associated rental plus 90 days for your review.
• Account information — retained until you request deletion.
• Alert records — retained for 12 months then automatically purged.

You may request deletion of your account and all associated data at any time (see Your Rights).

05 Security

We implement technical and organisational measures to protect your data:

• All data in transit is encrypted using TLS 1.2 or higher.
• Container telemetry streams use authenticated WebSocket connections (JWT).
• Passwords are not used — authentication is OTP-only, reducing credential theft risk.
• Avatar images are stored in AWS S3 with access controls; only the avatars/* prefix is public.
• Database access is restricted to the application network; no public endpoint is exposed.

No system is completely secure. If you believe your account has been compromised, contact us immediately at the address below.

06 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request that we delete your account and personal data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain processing activities.

To exercise any of these rights, contact us at privacy@adem-system.io. We will respond within 30 days.

07 Children's Privacy

ADEM is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

08 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are material, notify you via the app or by SMS.

Your continued use of ADEM after any update constitutes your acceptance of the revised policy.

09 Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out:

• Email: privacy@adem-system.io
• Email: support@adem-system.io

For general support enquiries, use support@adem-system.io.