ZWHSmartLock Privacy Policy

Updated: October 21, 2026

This policy covers the ZWHSmartLock international iOS and Android apps provided by Zhongwuhe (Shandong) Software Technology Co., Ltd. It covers the account-based app with email sign-in and sharing.

Information used

Your email address, account ID, nickname, verification status and authentication records support registration and sign-in. New registration and normal sign-in use email verification codes; you do not set an account password. When an older account first verifies its email, its original password is also checked against its existing password hash. Verification codes are stored as hashes and have limited validity and attempts.
Lock identifiers, binding information, Bluetooth credentials, permissions, authorized email addresses and access periods support device ownership and authorized control.
Operation records and diagnostic information, including app/device environment, timestamps and connection outcomes, support troubleshooting and security. The server processes network addresses for request security and rate limiting.
Feedback text and pictures are submitted only when you choose to send them. Do not include passwords, verification codes or unrelated personal information in feedback.

Device permissions

Bluetooth is used to discover, pair with and control nearby compatible locks. Older Android versions may require location permission for Bluetooth scanning; the app does not use that permission to collect or upload geographic coordinates. Photos are accessed only through your choice of feedback attachments or your explicit use of the camera to take a feedback picture. The app does not capture pictures automatically in the background. Controls run in the foreground; proximity alone does not authorize automatic unlocking.

Direct email authorization

An owner may authorize an email address before its user registers. No invitation notification is sent, and no acceptance or manual claiming is required. After the user verifies the same email address to register or sign in, or refreshes while online, matching lock access is applied automatically. An unmatched or unverified email address does not provide usable device access. The owner sets the access period and separate unlock/lock permissions and may revoke access.

Local storage and offline use

Session information and a limited offline authorization snapshot are stored on your device using platform security facilities. Offline access expires and is limited to permitted lock/unlock operations. Sign-out removes the app's local account authorization. A device that is offline cannot learn about server-side revocation until it reconnects; the maximum offline period is seven days for an owner and 24 hours for a delegated user, subject to the authorization end time.

Your language choice is stored locally to remember your interface preference and is retained when you sign out.

Service providers and sharing

Our application server stores account, device, email authorization, feedback and operation information. The configured email delivery provider processes recipient addresses and verification messages to deliver requested codes. Other authorized users see the device and permission information needed to use shared locks. We do not sell personal information or use this app for advertising tracking.

Deletion and retention

Account deletion currently requires manual review to protect shared accounts and associated files. You can start from Account → Delete account, or follow the public deletion request instructions without installing or signing in to the app. First transfer or unbind locks you own. Requesting a verification code or seeing a manual-review message does not delete the account or revoke its access. The app clears account-specific local credentials, offline snapshots, pending recovery data and queued records only after the server confirms completed deletion; a declined or pending request does not trigger this cleanup.

Support verifies account ownership before handling account and associated-data deletion, including feedback text and pictures, email authorization history, and operation or security records. Accounts or files shared with another service or person require an ownership and dependency check. We explain what is deleted, any information that must be retained for security or applicable obligations, and the outcome of the request. We do not promise automatic deletion of every record or a fixed retention period that has not been established.

Contact

Email zhongwuhe2026@gmail.com, use the in-app feedback feature or visit ZWHSmartLock support. Our existing support telephone is +86 177 0574 6888.