Haismart App Privacy Statement

Version: 10.0

Last Updated: October 16, 2025

Introduction

Protecting the personal privacy of every customer, user, and business partner is a crucial part of gaining and maintaining your trust in Haier Smart Home. As a global organization operating across multiple jurisdictions, we are committed to implementing a consistently high standard of privacy protection throughout all of our businesses, services, applications, and platforms, regardless of where you are located.

This Privacy Statement (“Statement”) explains how we collect, use, disclose, transfer, and protect your personal data when you interact with Haismart App and related smart home services. It forms part of our broader compliance framework designed to meet the requirements of applicable privacy and data protection laws (including, where relevant, the GDPR, PDPA, PIPL, CCPA, and other similar regulations).

Through Haismart App, we enable you to connect, control, and optimize your smart home devices (such as smart air conditioners, refrigerators, washing machines, kitchen appliances, smart locks, and IoT-based home automation). We recognize that smart home environments may involve the collection of sensitive device usage data, biometric information such as fingerprints used in smart locks, and geolocation details , and we are committed to processing such information lawfully and transparently.

Scope of Brands Covered

This Privacy Policy applies to all Haier Smart Home appliances and related digital services offered under different brand names depending on the country or region of sale. Regardless of the brand name, the collection and processing of personal data is carried out by Haier Smart Home Group companies or their designated local entities.

For clarity, the following brand names are included under this Privacy Policy (non-exhaustive, subject to regional business updates): Haier, Casarte, Candy, AQUA and other Haier brands as applicable

Users should note that while the product branding may differ, all personal data is processed in accordance with this Privacy Policy and, where relevant, the applicable Local Addendum for their jurisdiction.

Scope of this Statement

This Statement applies to all services, applications (“Apps”), and smart home platforms operated under the Haismart App ecosystem that link to or reference this Statement.

However, it does not apply to third-party applications, products, services, websites, or social media features that may be accessible via links provided on our App.

Please be aware that:

Your Agreement

By using Haismart App and related services that link to or reference this Statement, you acknowledge and agree that your use of our services is subject to the terms and conditions of this Statement.

Prevailing Law

In the event of any inconsistency or conflict between the provisions of this Statement and mandatory requirements under applicable local laws and regulations, the latter shall prevail.

Your Personal Data – What is it?

Personal Data means any information relating to an identified or identifiable natural person (“data subject”). Identification can be made directly (e.g., by name, identification number, phone number, or email address) or indirectly (e.g., by factors specific to the individual’s physical, physiological, genetic, mental, economic, cultural, or social identity), or in combination with other information that is likely to come into the possession of the Data Controller.

For the purposes of this Statement, we distinguish between:

1. General Personal Data

“General Personal Data” refers to any data, whether true or not, relating to a natural person who can be identified, directly or indirectly, from that data alone or from that data combined with other information which the Data Controller has or is likely to have access to.

This may include, for example:

2. Sensitive Personal Data

Certain categories of Personal Data are considered sensitive and subject to enhanced protection. Sensitive Personal Data generally refers to information that, if mishandled, is more likely to cause significant harm to the individual. Depending on applicable laws (such as GDPR, PDPA, PIPL), this may include:

Our Commitment on Sensitive Data

We will only collect and process Sensitive Personal Data where it is strictly necessary for specific, explicit, and legitimate purposes, and where we have obtained your explicit consent or are otherwise permitted by applicable laws.

What Roles Do We Play in Processing Your Data?

In almost all circumstances, Haier Smart Home, through the operation of the Haismart App , acts as the Data Controller of your personal data.

In certain cases, we may also engage third-party service providers to process data on our behalf. These providers act as Data Processors , and their role is limited strictly to following our documented instructions.

To protect your personal data when working with these partners:

We remain fully committed to ensuring that your personal data, whether handled directly by us or by authorized Processors, is protected in line with the highest global data protection standards.

When is Your Personal Data Collected?

We may collect your personal data at different points in time, depending on how you interact with the Haismart App and related smart home devices. For compliance with applicable data protection laws, we categorize the data into General Personal Data and Sensitive Personal Data .

General Personal Data

These are data points that identify you, your account, or your interaction with the Haismart App and services. They include:

1. Account and Registration Data

2. Device and Technical Data

3. Smart Device Usage Data

4. Location Data

5. Voice and Audio Data

6. Camera and Image Data

7. Customer Service and Feedback Data

8. Notification and Preference Data

Sensitive Personal Data

Certain types of data are classified as sensitive due to the potential impact on your rights and freedoms if mishandled. Depending on applicable law (GDPR, PDPA, PIPL, etc.), this may include:

1. Biometric Data

2. Financial and Payment Data

3. Health or Physiological Data

4. Government-Issued Identification Data

5. Precise Location Data

6. Network Credential Data

Our Approach to Sensitive Data

Providing Third-Party Personal Data

If you provide us with personal data relating to another individual (for example, a family member or other household users), you represent and warrant that you have obtained that person’s authorization or consent for us to collect, use, and disclose their personal data for the purposes described in this Statement.

Privacy of Minors and Individuals with Limited or No Legal Capacity

The Haismart App and related smart home services are not intended for minors or individuals with limited or no legal capacity under applicable laws.

If we become aware that we have inadvertently collected personal data from a minor or an individual with limited or no legal capacity without appropriate consent, we will take steps to delete such data promptly .

Data Storage, Back-up and Retention

Storage of Your Personal Data

All personal data collected through the Haismart App is stored on secure servers and associated databases. Depending on your location and the services you use, your data will primarily be stored and processed in our major data centers , which include:

Back-up copies may also exist in secure cloud environments or disaster recovery systems located in these jurisdictions.

For certain countries or regions that impose local data storage requirements (for example, laws mandating that personal data must remain within national borders), we will comply by ensuring that your data is stored and processed in accordance with the applicable legal requirements. Details of such country-specific requirements will be provided in the Addendum section at the end of this Privacy Statement.

Back-up Mechanisms

Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required under applicable laws and regulations. Specifically:

When retention is no longer necessary, your data will be securely deleted or irreversibly anonymized , in line with industry best practices and our Data Retention Policy.

Cross-Border Data Transfer

Because the Haismart App operates globally, your personal data may be transferred across jurisdictions. To protect your information, we implement strict safeguards that ensure a level of protection essentially equivalent to that required under GDPR, PDPA, PIPL, and other applicable laws.

These safeguards include:

Copies of Transfer Mechanisms

Subject to legal and confidentiality restrictions, we may provide a copy or a meaningful summary of the relevant cross-border transfer safeguards (for example, Standard Contractual Clauses) upon request .

How Do We Process Your Personal Data?

We comply with our obligations under applicable data protection laws by:

Our data processing may involve both automated and non-automated operations, including but not limited to: collecting, recording, organizing, storing, altering, retrieving, using, transmitting, disseminating, aligning, combining, restricting, and erasing your data.

1. Processing of General Personal Data

We process general personal data for the following purposes:

2. Processing of Sensitive Personal Data

Where we collect sensitive personal data (such as biometric identifiers used for device authentication, financial information for in-app transactions, or precise location data for geo-fence automation), we apply heightened compliance measures.

Sensitive data is processed for limited and explicit purposes, such as:

We do not use sensitive personal data for profiling, marketing, or automated decision-making, unless expressly permitted by law and based on your explicit consent.

3. Lawful Basis for Processing

Depending on the nature of the data and the circumstances, we rely on one or more of the following lawful bases:

4. Your Choices and Control

You have full control over whether and how your personal data is shared with us through the Haismart App . While the provision of certain data is optional, please note that:

We will always inform you, at the point of data collection, of whether the requested data is mandatory or optional, and what the consequences may be if you choose not to provide it.

5. Sharing Your Personal Data

We treat your personal data as strictly confidential and will only share it under the conditions described in this Statement. We will not disclose your personal data to third parties except where:

Categories of Potential Recipients

Profile and In-App Visibility

In addition to the external sharing described above, certain personal data and device-related information may be displayed within your Haismart App account for your convenience. This may include:

You may review and update your profile information at any time through the App’s account settings. All visibility is limited to your authenticated account environment and is not publicly searchable.

We encourage you to carefully manage what information you choose to store or display, especially when linking your account to third-party applications or services.

6. Further Processing

If we wish to use your personal data for a purpose that is not originally covered by this Privacy Statement, we will provide you with a specific and transparent notice before commencing such processing.

This ensures that your data is never repurposed without your knowledge and that you maintain control over how your personal information is used.

Your Rights and Your Personal Data

We respect your rights under applicable privacy and data protection laws. Unless subject to exemptions under local laws, you may exercise the following rights in relation to your personal data processed through the Haismart App :

1. Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of such data, together with details on how it is used and shared.

2. Right to Correction

You have the right to request that inaccurate, incomplete, or outdated personal data about you be corrected or updated.

3. Right to Erasure (“Right to be Forgotten”)

You may request the deletion of personal data that is no longer necessary for the purposes for which it was collected, or where processing is based on your consent and you withdraw such consent.

4. Right to Restriction of Processing

You have the right to request that we restrict the processing of your data in certain circumstances, for example:

5. Right to Withdraw Consent

Where we rely on your consent (for example, enabling biometric unlock functions or location-based services), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before your withdrawal.

6. Right to Object

Where we process your personal data based on legitimate interests , you may object to such processing. We will respect your request unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is required for legal claims.

7. Right to Data Portability (where applicable)

For certain types of data, you may have the right to request that your personal data be provided to you in a structured, commonly used, and machine-readable format, or transferred directly to another controller where technically feasible.

8. Right to Lodge Complaints

You have the right to raise complaints with the competent supervisory authority in your place of residence, place of work, or where your data is processed if you believe that our processing of your personal data infringes applicable law.

Exercising Your Rights

To exercise any of the above rights, you may contact us through the details provided in the section “Whom Should I Contact?” .

⚠️ Please note that if you choose to exercise certain rights (such as erasure, restriction, or objection), this may affect our ability to continue providing some or all of the services where essential data becomes unavailable.

Security and Breach Notification

We are committed to ensuring the security and integrity of your personal data collected through the Haismart App . To minimize risks of misuse, unauthorized access, disclosure, alteration, loss, or destruction, we implement industry-recognized technical and organizational security measures, including but not limited to:

1. Technical Measures

2. Organizational Measures

3. User Responsibilities

While we take all reasonable precautions, you also play a role in maintaining the security of your data.

4. Breach Notification

Despite our best efforts, no system can provide absolute security. In the event of a personal data breach that is likely to result in a significant risk to your rights and freedoms, we will:

Whom Should I Contact?

For privacy-related inquiries, signed and dated requests, or complaints, you are encouraged to first contact the Data Protection Officer (“DPO”) responsible for your country (if specified in the relevant Addendum to this Privacy Statement). Otherwise, you may contact our Data Protection Officer if you are in:

Email: zhangzifei@haier.com

Telephone: +971 4 8855147| Fax: +971 4 8857763

Office Address:

Haier Electronics Middle East FZE

Office No. LB 190602, P.O.BOX 261958 Jebel Ali Free Zone, Dubai, UAE

Email: tinortega@haier.com

Tel: +971 506305520

Office Address:

Haier Gulf Electronics L.L.C

Office Nos. 3104-3105, API, Trio Office Tower, Al Barsha 1, Dubai UAE

And for all other regions in the world, you may contact our Group Data Protection Officer (“GDPO”):

Entity Name: Haier Singapore Investment Holding Pte. Ltd.

Address: 9 Raffles Place, 30-02 Republic Plaza, Singapore, 048619

Email: sp.dpo@haiersingapore.com

Form of Request

To protect your privacy and maintain data security, requests must be submitted in writing, signed and dated, and include sufficient information for us to verify your identity. Depending on the nature of the request, we may ask for additional supporting information (e.g., copy of identification document).

Response Time

We will acknowledge your request within a reasonable period and respond within the timeframe prescribed by applicable law. If we are unable to fulfill your request, we will inform you of the reasons and of your right to lodge a complaint with the relevant supervisory authority.

Complaints

If you believe your rights under data protection law have been infringed, you also have the right to raise a complaint directly with the supervisory authority in your country of residence, place of work, or where your data is processed.

Changes to this Statement

We may update this Privacy Statement from time to time to reflect changes in our services, our personal information practices, or applicable laws. When we make material changes, we will provide you with a clear notice (for example, within the App) and indicate the “Last Updated” date at the top of this Statement. Your continued use of the Haismart App after the effective date of an update constitutes your acknowledgment of the revised Statement.

WIFI Human Presence Module Addendum

This Addendum applies to the use of Haier air conditioners equipped with the Wi-Fi Human Presence Module and supplements the Haier Privacy Policy. Where this Addendum imposes additional requirements, those requirements shall prevail for the functions described herein.

1. Scope

The Wi-Fi Human Presence Module collects and processes occupancy signals (presence / absence) within the room to enable AI-powered comfort, energy-saving, and self-cleaning features.

2. Data Categories

The following data may be collected:

3. Purposes of Processing

The data is processed strictly for the following purposes:

The data will not be used for advertising, profiling unrelated to AC performance, or for any health/medical purpose.

4. Processing Principles & Safeguards

5. Consent & User Controls

6. User Rights

In addition to the rights described in the Haier Privacy Policy, users of the Wi-Fi Human Presence Module have the right to:

 

Country-Specific Addenda

For users located in certain jurisdictions, additional country-specific requirements may apply in order to comply with local data protection laws. Where applicable, these requirements are set out in the relevant Addendum to this Privacy Policy. In case of any inconsistency, the provisions in the Addendum shall prevail for users in that jurisdiction. Where there is a conflict with local data protection laws, the provisions of local law shall take precedence .

India

This Addendum applies to users located in India and supplements the main body of this Privacy Policy. In case of any inconsistency, the provisions of this Addendum shall prevail for users in India.

1. Applicable Law

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and any rules, regulations, or government notifications issued thereunder.

2. Data Storage and Localization

For users in India, your personal data will be stored and processed within India in accordance with the DPDP Act.

Where the Government of India mandates specific categories of personal data (including sensitive personal data) to be maintained locally, we will ensure such data remains stored within India.

3. Cross-Border Data Transfers

Where cross-border transfer of personal data is required (for example, to our global data centers or service providers), such transfers will only occur after meeting the regulatory requirements prescribed by the Government of India. This may include transfer to jurisdictions approved by the Indian Government as providing adequate protection, or subject to contractual and technical safeguards as permitted under the DPDP Act.

4. Grievance Officer

In compliance with Section 13 of the DPDP Act, we have appointed a Grievance Officer for India :

Grievance Officer:

Name : Arun Sharma

Email : in.dp.officer@haierindia.com

Office Address :

Haier Appliances India Pvt. Ltd.

Building No.1, Okhla Industrial Estate Phase 3, New Delhi, 110020

Vietnam

Applicable Law

We comply with the Law on Cybersecurity 2018, the Law on Protection of Consumer Rights (as amended 2023), and the Decree No. 13/2023/ND-CP on Personal Data Protection (“PDPD”), together with any circulars, regulations, or government guidelines issued thereunder.

Data Storage and Localization

In accordance with the PDPD and Law on Cybersecurity, certain categories of personal data collected from users in Vietnam must be stored within the territory of Vietnam. Where local law requires that specific sensitive personal data (including biometric data, financial data, or data of children) be stored locally, we ensure such data remains stored within Vietnam.

Cross-Border Data Transfers

Any transfer of personal data from Vietnam to another country will only take place after fulfilling the requirements under the PDPD, which may include:

Children’s Data

Under Vietnamese law, children are defined as individuals under the age of 16. We only process the personal data of children with the consent of their parent or legal guardian, in compliance with the PDPD.

Local Data Protection Contact

In compliance with the PDPD, we have designated a local data protection contact in Vietnam:

Data Protection Officer

Email : terence.lei@haier.com.my

Office Address :

AQUA ELECTRICAL APPLIANCES VIETNAM CO., LTD

Level 17, Sonatus Building, 15 Le Thanh Ton, Ben Nghe Ward, District 1, Ho Chi Minh City

Indonesia

Data Localization and Storage

We comply with the Personal Data Protection Law (Law No. 27 of 2022, “PDP Law”) and other relevant regulations issued by the Ministry of Communication and Information Technology (“Kominfo”). Where Indonesian law or Kominfo regulations require specific categories of data (including public service or strategic electronic system data) to be stored in Indonesia, we will ensure such personal data remains within Indonesia.

Data Protection Officer

In accordance with the Indonesian PDP Law, Haier has appointed a Data Protection Officer in Indonesia.

PT. Haier Sales Indonesia

Office Address :

Jl. Danau Sunter Barat Blok AIII, No. 38-39,Jakarta 14350

T: +62 (21) 650-5668

F: +62 (21) 651-2556

Website: https://aquaelektronik.com

 

Saudi Arabia

1. Applicable Law

We comply with the Personal Data Protection Law (Royal Decree No. M/19 of 17/09/1443H) and its Implementing Regulations, as enforced by the Saudi Data & Artificial Intelligence Authority (SDAIA).

2. Data Storage and Localization

Personal data of users located in Saudi Arabia will be stored and processed within the territory of KSA. Storage or processing of personal data outside the Kingdom will only be undertaken with the approval of SDAIA or where permitted under the PDPL.

3. Cross-Border Data Transfers

Cross-border transfers of personal data from Saudi Arabia will only occur:

4. Data Protection Officer / Local Representative

In compliance with the PDPL, we have appointed a Data Protection Officer for Saudi Arabia:

Data Protection Officer – KSA

Name : Nasser Mohammed Alsomali

Email : nasser.alsomali@haier.com.sa

Telephone : T: +966 138 21 5264 | M: +966 598383265

Office Address :

Haier and AlJabr Saudi Electronics Trading Company. 

34413, 3132 Prince Turkey Street, Alkurnaish, Al Khobar Floor number 9 office number 903 - 904

Egypt

1. Applicable Law

We comply with the Egyptian Data Protection Law No. 151 of 2020 and its implementing regulations, as well as any decisions or directives issued by the Egyptian data protection authority.

2. Data Localization and Cross-Border Transfers

Where cross-border transfer of personal data is necessary (e.g., to our global data centers or service providers), such transfers will only occur after obtaining the necessary approvals or permits from the competent Egyptian authorities, in line with the Data Protection Law 151/2020.

3. Data Protection Officer (DPO) / Local Representative

In compliance with the requirements of the Egyptian Data Protection Law, we have appointed a Data Protection Officer for Egypt.

Name: Ahmed Osama Aly Ahmed El Khobeery

Email: heg.ahmed.osama@haier.com

Telephone: 01068820711

Office Address:

Haier Egypt Electric Appliances Co. Limited

Second Floor of Building on the Land Plot No.(94) at the entrance of the Industrial Zone Third Urban Community, New Cairo, Egypt

Qatar

Applicable Law

We comply with Law No. 13 of 2016 Concerning Personal Data Privacy Protection and its executive guidelines/regulations issued by the competent authority. These rules apply to personal data processed in Qatar (excluding the QFC free zone, which has its own regime).

Local Requirements

a. Cross-Border Data Transfers

We will ensure that any transfer of personal data outside Qatar will only take place where the recipient jurisdiction provides an adequate level of protection, or where appropriate contractual, organizational, or technical safeguards are in place. Where required, we will also provide notification to or obtain authorization from the competent authority before such transfer.

b. Direct Marketing

We will only send direct marketing communications to individuals in Qatar after obtaining their explicit and informed prior consent. Users will be provided with clear information about such communications and with a simple mechanism to withdraw consent at any time.

c. Data Breach Notification

In the event of a personal data breach affecting users in Qatar, we will notify the competent authority without undue delay and, where applicable, inform the affected individuals. Notifications will be made in line with regulatory expectations, which may include a timeframe of up to 72 hours.

South Africa

This Addendum applies only to users located in South Africa and supplements the Haismart Privacy Policy. Where this Addendum imposes additional requirements, those requirements shall prevail for South African users.

  1. Local Data Storage
  2. Personal data of South African users will be stored securely, only the minimum necessary data will be stored.
  3. Cross-Border Transfers
  4. Personal data may be transferred outside South Africa only if:
  1. Regulatory Compliance
  2. Haier or its local affiliate will comply with POPIA obligations, including transparency, lawful basis for employee data processing, and restrictions on monitoring.
  3. South African User Rights
  4. In addition to the rights described in the Haismart Privacy Policy, South African users have the right to:

Kenya

Registration with ODPC

We comply with the Data Protection Act, 2019 (the “DPA”) and all related regulations and guidelines issued by the Office of the Data Protection Commissioner (“ODPC”).

As required under the Data Protection (Registration of Data Controllers and Data Processors) Regulations, 2021, we are obligated to register with the ODPC as a Data Controller and/or Data Processor. This registration includes disclosure of our data processing activities, categories of data processed, data storage locations, and any cross-border data transfers. Our certificate of registration will be maintained and renewed in accordance with the DPA.

Ghana

Registration Requirement

We comply with the Ghana Data Protection Act, 2012 (Act 843) and any guidelines or directives issued by the Data Protection Commission (DPC). We are required to register as a data controller with the Ghana Data Protection Commission (DPC) before collecting, processing, or storing personal data of users in Ghana.

Brazil

We comply with the Lei Geral de Proteção de Dados Pessoais (Law No. 13,709/2018 – LGPD) and related regulations issued by the ANPD.

Under the LGPD:

Office Address:

Haier Smart Home Do Brasil LTDA

Sala 133B, 373 R Sansao Alves Dos Santos, Cidade Moncoes, Sao Paulo, Brazil, 04.571-090

Tel: (11) 6304-1066