Information we collect

We will collect two types of your information.

• Personal Information (information which can be personally identifiable) and Non-personal Information (all information excluding personal information). If we combine Personal Information with Non-personal Information technically, as long as they stay combined, such information will be deemed as Personal Information.

How we collect and use information

Information we get from your use of our services

When you interact with Xiaomi Inc., its subsidiaries and affiliates (hereinafter referred to as “Xiaomi” or “we”) and our operational cooperators (hereinafter referred to as “Cooperator”), you may be asked to provide your Personal and Non-Personal Information in order to use our products and services. We use and combine Personal Information we collect from all of our services with Non-Personal Information to provide, maintain, protect and improve them our products and services. Should any of the information below be classified as Personal Information, you hereby agree that Xiaomi may collect, use and/or disclose the Personal Information for the purposes set out below.
The following are types of information which we may collect and examples how we use such information. Please note that the information mentioned below and how it is used are examples, and are not exhaustive.

The collection of Information

• When you create a Mi Account, download or update Xiaomi software, or participate in an online survey offered by us, we’ll ask for your Personal Information, including but not limited to your name, telephone number, E-mail address, and mailing address. Other information we may ask you for includes language, zip code, area code, time zone, etc.
• When you purchase Xiaomi products or services, we’ll collect relevant Personal Information, including but not limited to delivery information, and order details.
• When you use our customer support services, our customer service agent may collect relevant Personal Information, including but not limited to your name, order number, phone number, delivery address, Xiaomi Account ID, email address, mobile equipment number. We may also record the call for training purposes.
• When you activate our Mi Cloud or Cloud Messaging service, we may also collect personal information relating to your mobile device and location. We may also collect your mobile network information, message recipient phone numbers and message content temporarily for routing purposes.
• When you use some of our services (e.g., invite other users to join relevant services, share information with other users, etc.), other users can see the Personal Information that you share. In addition, they can read, collect and use such information. When it comes a legal dispute, you should bear the corresponding legal responsibility for all Personal Information uploaded / shared by you.
• When you log in to Mi Account or activate Mi Message service, your mobile user identification information and phone number will be sent to the server.
• Information relevant to user behavior and problem diagnosis—when you participate in “User Experience Improvement Program”, we will track your usage of product functionalities. We do this to learn about your habits when you visit Xiaomi official website or use our products and services. When system is forced to exit or crashes, we will collect environmental information of the device to diagnose problems.
• Data saved in Server—when you use products and services like MIUI Theme, VoiceAssist and Browser, Xiaomi may collect data saved in server about your usage of features like uploading, downloading, syncing, browsing etc. Such information shall be deemed as Non-personal Information.
• Location Information—when you use location-based applications and features, we will collect your location information. For instance, when you use location-based search, ads, weather features or obtain map information, your location information will be sent to Xiaomi, in order to provide you with more precise information.
• Information collected by Cookies and various technologies—we and our partners use Cookies and various technologies to collect and store Non-personal Information when you visit Xiaomi websites and use online services, interactive applications, E-mail messages and ads.
• Log Information—when you visit Xiaomi server, we will automatically collect and store information in server logs. Such server log information may include: IP address, browser type, browser language, referral URL, operating system, and date and time stamp and click-stream data.
• Mobile device unique identifier- When you activate a Xiaomi mobile device, its device unique identifier and location information (Non-personal Information) will be sent to the server. The collection of such information may also apply to your system or application updates as well as recovery of factory settings etc.

The use of Information

• Xiaomi will strictly follow this Privacy Policy as well as the updates hereof when using your Personal Information. Your Personal Information will only be used for purposes after receiving your permissions when we collect them. For any other uses, we will ask you for permission.
• The Personal Information may be used to provide you with Xiaomi products and services, to handle your orders, or to follow the contracts between you and us. This is to ensure the safety and functionality of our products and services, verify your identity or prevent and hold accountable for fraud or any other kinds of improper use.
• The Personal Information may be used to make our products and service better, however, in most cases we will only use comprehensive information and statistical information for such purpose.
• The Personal Information may be used to communicate with you. For example, we will provide you with notice of our updates and releases of Xiaomi products and services.
• The Personal Information may be used to customize product design and services. For example, we will recommend and display the content and ads that may interest you; or use such information for research purposes.
• When you participate in lotteries, competitions or similar promotion events held by us, we may use your Personal Information to manage these events.
• Your mobile user identification information, mobile device unique identification information and the location information may be used to activate your after-service and specific software licenses; and we may ask you for further investigations. We may also use such information to improve our products and analyze the efficiency of our business operation.
• The Non-personal information we collect, such as profession, language, zip code, area code and time zone etc. help us to learn more about user behavior and to improve our products, services and promotions.
• We may analyze the data from our “User Experience Improvement Program” to improve user experience, operating performance, problem solving, functionality and design of our products and services.
• We use Cookies and various technologies (such as pixel tags) to collect information to improve our products and overall service quality. For example, when you select a display language in settings, we will show our service in your preferred language. We use pixel tags to send email messages in a format our users can read, and they tell us whether they have read. We may use this information to reduce or eliminate messages sent to users.

While not all cookies collect personal data, some can potentially collect personal data. When you enable the use of cookies for your Internet activities, you are deemed to have consented to the use of cookies to collect, use, and disclose personal data you provide. You can configure your web browser to suit your cookie preferences, i.e. to accept or reject certain categories of cookies, or choose to receive a notification if there are cookies about to be created.

How to decide what information to provide

People have different privacy concerns, therefore, we will explicitly explain in ways you accept to help you to make decisions.

• You are free to decide whether or not to participate in the “User Experience Improvement Program”, which means you can turn it off to exit this plan.
• You can change your location setting in system settings to provide less precise location information to us. For example, you can change the locating method or disable locating server; or modify the accuracy of your location information.

Accessing and updating your Personal Information

Click https://account.xiaomi.com to log in to your account, you are able to access and update your Personal Information. You can delete part of Personal Information or request to delete your personal account, unless we must keep certain information for legal purposes.

We always find ways to provide you with access to your personal information within thirty (30) days. If any of these information is incorrect or illegal, we will find ways for you to update or delete quickly (unless we must keep those information for legitimate business or legal purposes). When you update Personal Information, you will be asked to verify your identity before we can proceed your requests. We may reject requests that are unreasonably repetitive, require disproportionate technical effort, risk the privacy of others, or would be extremely impractical.

Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort. We aim to maintain our services in a manner that protects information from accidental or malicious destruction. Because of this, after you delete information from our services, we may not immediately delete residual copies from our active servers and may not remove information from our backup systems.

Information we share with third party

Except the explicitly noted limited sharing hereby, we will strictly ensure the confidentiality of your Personal Information and will not share such information with a third party.

You are authorizing us to share your Personal Information with a third party without your further consent in the following cases:

• Cases in which disclosure as required or authorised based on the applicable laws and/or regulations.
• Cases in which the purpose of such disclosure is clearly in your interests, and if consent cannot be obtained in a timely way.
• Cases in which the disclosure is necessary to respond to an emergency that threatens the life, health or safety of yourself or another individual.
• Cases in which disclosure is necessary for any investigation or proceedings.
• Cases in which the personal data is disclosed to any officer of any officer of a prescribed law enforcement agency, upon production of written authorisation signed by the head or director of that law enforcement agency or a person of a similar rank, certifying that the personal data is necessary for the purposes of the functions or duties of the officer.
• Cases in which the disclosure is to a public agency and such disclosure is necessary in the public interest
• Where such disclosure without your consent is permitted by the PDPA or by law.
• We provide Personal Information to our subsidiaries, affiliates or other trustworthy businesses or persons to process above matters for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.
• If Xiaomi is involved in a merger, acquisition or asset sale, we will continue to ensure the confidentiality of any Personal Information and notice affected users before Personal Information is transferred.
• For business purposes or user protection needs, we may share Non-personal Information publicly or with our partners to show trends about the general use of our services.

Information security

We work hard to protect our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. In particular:

• We encrypt many of our services using SSL.
• We review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems.
• We restrict access to personal information to Xiaomi employees and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations , and may be disciplined or terminate his\her relationship with Xiaomi if they fail to meet these obligations.
• Xiaomi takes the security of your personal information very seriously. Therefore, we continuously strive to protect your Personal Information by encrypt when store or in transit it. We do this is to protect your information from unauthorized access to or unauthorized alteration, disclosure or destruction. In the meantime, certain enciphered data can only be visited by user himself/herself.

Retention of Personal Information

We will also put in place measures such that your Personal Information in our possession or under our control is destroyed and/or anonymized as soon as it is reasonable to assume that (i) the purpose for which that Personal Information was collected is no longer being served by the retention of such Personal Information; and (ii) retention is no longer necessary for any other legal or business purposes.

Transfer of Personal Information out of Singapore

Xiaomi will only transfer Personal Information out of Singapore in accordance with the requirements under the Personal Data Protection Act 2012 (“PDPA”). Xiaomi may need to disclose your Personal Information to Xiaomi’s server and any third parties, whether located within or outside Singapore, for one or more of the above purposes for use of Personal Information, as such third parties, would be processing your personal data for one or more of the above purposes. In this regard, you hereby acknowledge, agree and consent that we may/are permitted to disclose your personal data to such third parties (whether located within or outside Singapore) for one or more of the above purposes and for the said third parties to subsequently collect, use, disclose and/or process your personal data for or more of the above purposes.

Such third parties may include:

• our associated or affiliated organisations or related corporations;
• any of our agents, contractors or third party service providers that process or will be processing your personal data on our behalf including but not limited to those which provide administrative or other services to us such as mailing houses, telecommunication companies, information technology companies and data centres; and
• third parties to whom disclosure by Xiaomi is for one or more of the purposes and such third parties would in turn be collecting and processing your personal data for one or more of the Purposes.

Withdrawal of Consent

You may withdraw your consent for the collection, use and/or disclosure of your personal data in our possession or under our control by submitting your request at the following webpage mi.com/sg/ and sending us an email using the “Contact Us” feature towards the bottom of our homepage. We will process your request within a reasonable time from such a request for withdrawal of consent being made, and will thereafter not collect, use and/or disclose your personal data in the manner stated in your request. However, your withdrawal of consent could result in certain legal consequences arising from such withdrawal. In this regard, depending on the extent of your withdrawal of consent for us to process your personal data, it may mean that we will not be able to continue with your existing relationship with us.

When this Privacy Policy applies

Our Privacy Policy does not apply to products and services offered by a third party. Xiaomi products and services may include third party’s products or services. When you use such products and services, they may collect your information. For this reason, we strongly suggest you to read privacy policy provided by corresponding third party.
Our Privacy Policy does not apply to other sites linked from our services.

Children

Xiaomi suggests that children under 13 years of age get prior approval from their legal guardian before using Xiaomi products and services. Xiaomi will not collect children's Personal Information if we know the user is under age, nor will we disclose such information to any third party. The legal guardian shall have the right to reject Xiaomi and its affiliates to collect his/her children's Personal Information, or request the deletion of such Personal Information. If we find out that we have collected the Personal Information of children under 13 years old, we will delete it as soon as it is brought to our attention. It is also advisable for young persons between the age of 14 and 21 to get prior approval from their legal guardian to fully understand that they are consenting to providing Personal Information to Xiaomi.

Changes

Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent, unless we provide you with an E-mail notice or site notice.

Specific product practices

The following notices explain specific privacy practices with respect to certain Xiaomi products and services that you may use.

Mi Account Service

• The terms in this Privacy Policy will also apply to product and services provided by Mi Account Service (collectively the “Mi Account”) that you use.
• Xiaomi is the provider of Mi Account Service, and some Mi Account features you may enjoy are syncing data with Mi Cloud, Find Device and etc. Once you log in to Mi Account, we will collect your information such as your phone number, mobile user identification information and mobile devices unique identifier. If we combine Personal Information with Non-personal Information technically, as long as they stay combined, such information will be deemed as Personal Information.
• With your further agreement, Xiaomi may collect, use, transit, process and maintain information related to your account, as well as information related to any devices or computers registered under your account. Xiaomi may also collect technical, statistical or diagnostic information that related to your usage or caused by your usage, and that may be used to support, improve and upgrade our products and services.
• You can withdraw this consent at any time by stop using or log out from your Mi Account on your device.

Mi Cloud Service

• The terms in this Privacy Policy will also apply to products and services provided by Mi Cloud Service (collectively the “ Mi Cloud”) that you use.
• Xiaomi is the provider of Mi Cloud Service. You can enjoy some features through Internet by syncing data with Mi Cloud. For example, your can import your Personal Information (such as messages, contacts, photos, screenshots, notes, E-mails, calendar etc.) to your compatible devices or computers through this service. When you turn on “Find Device” feature provided by this service, you will be asked to upload Personal Information, including location information. Once you launch Mi Cloud Service to sync data, your Personal Information will be sent to Xiaomi automatically; and we will store such information. As a result, you can access to such information or push such information wirelessly to other devices or computers that also have Mi Cloud Sync Service turned on.
• If you have turned on “Find Device” feature in a device (e.g., a cell phone) that supports SIM card, the system may automatically send a text message in the background to our server (SMS fee charged by the operator). When you insert or replace the SIM card, we will automatically send the verification SMS and store your new phone number in the server.
• You can withdraw this consent at any time by stopping the use and turning off the sync feature provided by Mi Cloud, and turning off “Find Device” on your computer or other devices.

Mi Message Service

• The terms in this Privacy Policy will also apply to products, services and websites provided by Mi Message service (collectively the “ Mi Message”).
• Xiaomi is the provider of Mi Message service. You can send free online messages to devices which also has Mi Message turned on. Xiaomi will not read, transfer or store the content of your messages.
• Once you activate Mi Message, we will collect your information, such as your phone number, mobile user identification information and mobile devices unique identifier. If we combine Personal Information with Non-personal Information technically, as long as they stay combined, such information will be deemed as Personal Information.
• You further agree that, Xiaomi is allowed to collect, use, transit, process and maintain information related to your account, as well as information related to any device or computer registered under your account. Xiaomi may also collect information that related to your usage or created by usage, and that may be used to improve Xiaomi products and services technically, statistically or diagnostically.
• You can withdraw this consent at any time by stopping the use and turning off the Mi Cloud Sync service on your computer or other devices.

Google input method

• The following link leads to terms that apply to Google input method: http://www.google.com/policies/privacy/

SwiftKey input method

• The following link leads to terms that apply to SwiftKey input method: http://swiftkey.com/en/privacy/

Further information

If you have any questions or concerns about Xiaomi’s Privacy Policy or data processing, or if you want to make a complaint about a possible breach of local personal data protection laws, please contact us at:

Data Protection Officer

Xiaomi Singapore Pte. Ltd.

12 Marina View, #23-01

Asia Square Tower 2

Singapore 018961

Email: SteveVickers@xiaomi.com