Privacy Policy

Effective date: 24 September 2026

This policy explains what the Balajii Automation app ("the app") collects, why, where it's kept, and how to delete it. The app is developed by Anand Ram Verma ("we", "us"). It lets you control Balajii smart-home devices from your phone.

In short: we collect only what's needed to run your account and your devices. We don't sell your data, show ads, or use analytics or tracking tools.

1. What we collect

Account information — when you register:

• Your email address and the name you enter.
• Your password. It's handled by Google Firebase Authentication; we never see or store it ourselves.
• When your account was created and last signed in, recorded by Firebase Authentication.

Device information — when you add a device:

• The device's ID, which account owns it, when it was added, and the name you give it.
• Secure connection credentials for your account and for each device, so they can connect to our messaging service.
• The commands and settings you send to your devices, and the status they report (such as which switches are on), pass through our messaging service to reach you or the device. The messaging service keeps each device's most recent status so the app can show it straight away.

Stored on your phone (not kept on our servers):

• Your device list and its settings, such as display preferences and automation settings. Device names are the one exception: they're also saved with your account (see above), so they come back when you sign in again. Settings you apply to a device pass through our messaging service to reach it, but aren't stored there.
• The home Wi-Fi network name and password you enter when setting up a device. They're sent directly to that device over its own local Wi-Fi so it can connect to your network, and saved on your phone so you don't have to type them again. They're never sent to our servers.
• Your theme choice and a random identifier the app uses when connecting.

Service logs. Our servers keep technical logs (for example, "device added" or "account deleted") that include your account's internal ID, for security and troubleshooting.

What we don't collect. The app doesn't access your location, contacts, photos, camera or microphone. It uses no analytics, advertising or crash-reporting tools. Its Android permissions are for network access only, including switching to a device's own Wi-Fi during setup.

2. How we use it

• To create your account, sign you in, and keep your account secure.
• To connect your phone to your devices, and make sure only your account can control them.
• To send you account emails: email verification when you register, and password-reset emails when you request one.
• To find and fix problems, and to prevent misuse.

We don't use your data for advertising, and we don't sell or rent it to anyone.

3. Who processes it

We use these service providers to run the app. They process data only on our behalf:

• Google (Firebase and Google Cloud): sign-in (Firebase Authentication), the account and device records (Cloud Firestore, United States), server functions (United States), logs, and this website.
• EMQ Technologies (EMQX Cloud): the messaging service that carries commands and status between the app and your devices (Singapore).

We don't share your data with anyone else, except where the law requires it.

4. Security

• Everything between the app, our servers, the messaging service and your devices travels over encrypted connections (TLS/HTTPS). The one exception is the brief device setup step: the app talks directly to the device over the device's own local Wi-Fi network.
• Each account and each device has its own credentials, limited to that account's own devices.
• Access rules on our servers stop one account from reading or controlling another account's devices.

5. How long we keep it

• Account and device records: as long as your account exists. They're deleted as soon as you delete your account.
• A device's registration is deleted as soon as you remove that device in the app.
• Service logs: up to 30 days, then deleted automatically.
• A device's last reported status stays on the messaging service until the device is set up again. It contains no personal information.
• Data on your phone is removed when you sign out, delete your account, or uninstall the app.

6. Deleting your account and data

You can delete your account and its data at any time:

• In the app: Menu → My Account → Delete Account.
• On the web: balajiautomationai.com/delete-account.

Deletion is immediate and permanent. The account deletion page lists exactly what is deleted and what is kept.

7. Your choices and rights

You can see your account details in the app (My Account), change your device names at any time, and delete your account whenever you want. To ask a question about your data, or to ask us to access, correct or delete it, email us from the address your account uses. We'll respond as required by the law that applies to you.

8. Children

The app is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has created an account, contact us and we'll delete it.

9. Changes to this policy

If this policy changes, we'll update it on this page and change the effective date above.

10. Contact

Anand Ram Verma, developer of Balajii Automation
Email: anandverma26n@gmail.com