Privacy Policy

EasyPin Android Mobile App

Effective Date: 17.02.2026

EasyPin (“we”, “our”, or “us”) operates the EasyPin mobile application (the “App”). The App allows users to manage their account, configure smart locks, and use lock functionalities via Bluetooth or the TTLock cloud. This Privacy Policy explains what data we collect, how it is used, and how it is protected.

1. Account Information

- Users must have an EasyPin account created by an administrator.

- To log in, the App processes:

    • Email or username

    • Authentication credentials (passwords)

    • Authentication tokens issued by our backend

This information is used solely for authentication and access to the App.

2. Location and Lock Mapping

- The App fetches locations configured by the administrator.

- Each location may contain stored TTLock account credentials (username + hashed password).

- If a TTLock account does not exist for a location, the App can automatically create one via the TTLock registration API.

- Our backend stores only:

    • Lock ID

    • Lock name

    • TTLock account credentials (for mapping and API integration)

No raw Bluetooth communication or operational lock data is stored on our backend.

3. Lock Initialization and TTLock Integration

- Lock initialization is performed locally via Bluetooth.

- The App sends lock setup data directly to TTLock cloud to configure the lock.

- EasyPin’s backend does not receive or store lock initialization data.

- Stored information in the backend is limited to lock ID, lock name, and TTLock account credentials for mapping purposes.

Summary: EasyPin does not collect operational lock data. TTLock cloud handles all lock operation, configuration, and remote access data.

4. Gateway Devices

- Users can add gateways to enable remote lock functionality.

- Gateway setup occurs via Bluetooth and communicates directly with TTLock cloud.

- EasyPin’s backend does not store gateway data.

- Gateway types:

    • WiFi Gateway → SSID, WiFi password, name (stored locally on device only)

    • LAN Gateway → name only

    • 4G Gateway → name + optional APN

Users may delete gateways, which removes them from the App and TTLock cloud.

5. Lock Operations

- Locks can be operated via:

    • Local Bluetooth connection

    • Remote TTLock cloud commands (through gateway if available)

- EasyPin’s backend is not required for lock operation and does not execute lock commands.

- Stored lock ID is used only to identify the correct lock when calling TTLock API.

Users may delete locks, which removes them from the App and TTLock cloud.

6. Diagnostics and Analytics

- The App may collect anonymous diagnostic data to help us improve stability and performance.

- This includes crash reports, device information (such as model and OS version), and App usage statistics.

- No personal data is shared with third parties beyond what is necessary for crash reporting or analytics.

7. Data Sharing

- The App communicates with TTLock cloud for account creation, lock setup, and remote lock operations.

- EasyPin does not send backend data to TTLock beyond what is required for mapping via API (lock ID, lock name, TTLock account credentials).

- No user data is sold or shared with third parties for marketing.

8. Data Not Collected or Stored

The App does not collect or store:

- Raw Bluetooth communication

- WiFi passwords for gateways on our backend

- Lock operational keys or cryptographic secrets

- Lock or gateway settings beyond lock ID, lock name, and TTLock account credentials

9. Security

- Communications with EasyPin backend use HTTPS encryption.

- Authentication credentials are securely hashed and not stored in plain text.

- Lock mapping data is stored with standard safeguards to prevent unauthorized access.

10. Data Retention

- Account data and lock mapping information are retained only as long as necessary to provide the service or comply with legal obligations.

- Users may request account deletion by contacting [Insert Contact Email].

11. Children’s Privacy

- The App is not intended for children under 13 (or the applicable minimum age in your jurisdiction).

- We do not knowingly collect data from children.

12. Changes to This Policy

- We may update this Privacy Policy periodically.

- Continued use of the App after changes indicates acceptance of the updated policy.

13. Contact Information

Ontico d.o.o.

Podhosta 33

8350 Dolenjske Toplice, Slovenija

info@ontico.eu