LATICX Privacy Policy

Shenzhen Laticx Technology Co., Ltd. (“LATICX,” “we,” “us,” or “our”) respects your privacy and the protection of your personal information.

This Privacy Policy explains how information is processed, stored and protected when you use the LATICX website, LATICX App, LATICX AI NAS, Lati AI, local knowledge base, and compatible recording card, IPC camera, Smart Calendar and related products and services, and how you can manage your information. Feature availability depends on the product, version and region; a feature description applies when you use or enable that feature.

If you have questions or wish to exercise your rights, please contact us:

• Privacy email:privacy@laticx.com
• Customer support:support@laticx.com
• Address: Tower C, Building 5, Shenzhen International Innovation Valley, Xingke 1st Street, Yuncheng Community, Xili Subdistrict, Nanshan District, Shenzhen, China
• Website:https://laticx.com

This policy covers the LATICX website, App, NAS, Lati AI, compatible devices and related services.

Contents

1. Key Information
2. Information We Process
3. How We Use Information
4. NAS, Files and Sharing
5. Lati AI and Local Knowledge Base
6. Recording Card
7. IPC Camera
8. Smart Calendar
9. Third-Party Services and Sharing
10. Device Permissions and Choices
11. Retention and Deletion
12. Security
13. Children
14. International Processing
15. Your Privacy Rights
16. Policy Updates and Contact

1. Key Information

1. Local storage. Files and related content you choose to store on your NAS are stored on the NAS you control. Downloads, sharing and third-party backups may create additional copies.

2. Local AI. The local knowledge base, recording organization and IPC event analysis are processed locally as described in this policy. These features do not upload the relevant content to a cloud AI model.

3. Recording transcription. The App uses a built-in offline model to transcribe recordings on your phone.

4. Online services. Accounts, remote access, device connections, notifications, support and third-party synchronization or backup features that you choose to enable may involve network transfers or third-party services.

5. Deleting data. Deleting a cloud account, unbinding a device, clearing phone caches and deleting NAS data are different actions and have different effects.

6. Household use. Your NAS, camera, recordings and Smart Calendar may contain information about household members or other people. Please take care when setting device access permissions and sharing content to protect your privacy and the privacy of others.

2. Information We Process

The information LATICX may receive and process depends on the products and features you use. Files, photos, videos, recordings and other content stored on your NAS or other devices are generally processed and stored on devices you control. LATICX does not automatically receive this content merely because you use local features. When you choose to use remote access, sharing, third-party synchronization or backup, or submit troubleshooting materials to us, the relevant sections of this policy explain how information is transmitted and processed.

2.1 Account and Identity Information

When you create or use an account, the relevant features may process your email address, nickname, avatar, encrypted or hashed login credentials, verification code records, session identifiers, account roles and authorization relationships.

A NAS local account is used to sign in to and use your NAS. A cloud account is used for relevant online services, device mapping and connection management and does not replace NAS local-account authentication.

You do not need to register or sign in to a LATICX cloud account solely to use supported NAS and Smart Calendar features on your local network. When you choose cloud-account, cross-network connection, notification or other online features, we process the information needed to provide those features.

2.2 Device and Connection Information

To discover, bind, manage and connect devices, the products may process device identifiers, serial numbers, model, operating system and firmware versions, language, time zone, device binding relationships, Link ID, network connection status and necessary device settings.

When you use remote access or cross-network connections, the system may process information necessary to establish and maintain a connection, including network addresses, connection status, signaling, and relay or tunnel status. When you remotely preview, share or access content, the content travels through the connection you initiate; if a direct connection is unavailable, a relay or another connection method may be used. Connection methods, visibility and log retention depend on actual service configuration.

Local discovery, binding and management can take place on your devices and NAS; supported local features do not require a cloud account. Initial NAS activation requires an internet connection for device compliance verification; activation cannot be completed if verification fails. When Device Hub connects to the service, the NAS aggregates the identity, binding relationships and operational status of connected devices and sends status snapshots to the backend approximately every five seconds, with events when status changes, for device status and notifications. This channel does not upload user files, photos, videos, recordings, calendar events or knowledge-base content.

2.3 Operations, Security and Diagnostics

To operate the service, protect accounts and devices, and troubleshoot problems, we may process IP addresses, login and security logs, service request times, online and synchronization status, error codes, crash information and performance metrics as needed. Where available in the product settings, you can manage or turn off optional analytics and crash diagnostics reporting; once turned off, the App will stop such optional reporting.

We receive complete device logs, screenshots, screen recordings or other troubleshooting material only if you actively submit them to customer support or choose to upload them after the product explains the upload.

2.4 Transactions, Delivery and After-Sales Information

When you buy products directly from LATICX or through an authorized sales channel, we may process order number, products, quantities, amounts, payment status, recipient name, telephone number, delivery address, logistics information and information required for invoices, returns, warranties or after-sales support.

Full payment-card numbers, payment passwords and other payment credentials are generally handled directly by payment providers and are not received or stored by LATICX. Third-party sales or crowdfunding platforms process information under their own policies and may provide fulfilment parties with information needed to complete and deliver orders.

2.5 Website Visits and Analytics

When you visit the LATICX website, we may in the future use third-party analytics services such as Google Analytics and Baidu Analytics to understand website traffic and how visitors interact with the site, and to improve website content and usability. If enabled, these services may use cookies or similar technologies to process browser and device information, pages visited, and other website usage data.

3. How We Use Information

Depending on the services you use, we process necessary information to:

• Create accounts, verify identity and maintain sessions;
• Discover, activate, bind and manage NAS and compatible devices;
• Provide file storage, backup, access, sharing and synchronization;
• Provide local search, transcription, knowledge-based question answering and other intelligent features at your direction;
• Connect third-party calendars or Google Drive with your authorization;
• Send service, device and security notifications you choose to receive;
• Process orders, delivery, returns, warranties and customer support;
• Maintain security and reliability, troubleshoot problems and prevent abnormal activity; and
• Comply with applicable law and establish, exercise or defend legal rights.

Depending on applicable law and the activity, the legal basis may include performance of a contract, your consent, legal obligations or legitimate interests in securing the service, preventing fraud and improving necessary service operations. We determine the applicable basis for each activity under applicable law.

We do not use household content that exists only on your NAS for advertising, profiling or training general-purpose AI models for other users.

4. NAS, Files and Sharing

4.1 File Storage and Backup

You can choose to store, import or process files, photos, videos, recordings, calendar events, tasks and other content on your NAS. To manage and display content, the NAS may locally process file names, types, sizes, locations, timestamps, tags, thumbnails and other related information.

Photos and videos may contain metadata such as the date or location of capture. Files, recordings, images and events may contain personal information about you or others.

You can choose to save files from your phone, computer or other sources to your NAS and use supported backup features to copy content between locations.

When you download, export, share or back up files, additional copies may be created on your phone, other devices or third-party services. Their retention and deletion may differ from the NAS original.

4.2 Personal Space, Team Space and Sharing

You may use personal spaces, team spaces and sharing features supported by the product, including sharing with other NAS users or creating external links.

Authorized users or holders of a valid link may access the content you choose to share according to your settings. They may save independent copies; stopping sharing or deleting the original will not necessarily delete copies they have already saved. Please review the content, recipients, permissions, expiry and password before sharing.

4.3 AI Photos

When you choose to use AI Photos and select relevant photos, your NAS may locally generate thumbnails, categories, tags, OCR results and other indexes to support browsing and search.

People, pet and scene analysis, OCR and natural-language search are enabled by default, but analyze only photos you actively add to AI Photos; they do not automatically scan all photos on your NAS or phone. Person clustering may generate facial features and indexes for organizing photos; these results are stored locally on the NAS. You can turn the features off individually and manage AI-derived data in product settings. Clearing derived data and deleting original photos are different actions; the product explains their effects.

5. Lati AI and Local Knowledge Base

5.1 Lati AI

You may submit text, voice, images or files, or ask Lati to find, analyze or process NAS content that the current account is permitted to access.

Depending on the feature, Lati may process instructions, conversations, selected files, photos, recordings, video events, schedules and tasks, as well as generated answers, summaries, indexes or suggested actions. Lati processes content according to account and resource permissions. The product provides confirmation and execution flows appropriate to actions such as creation, modification, deletion, sharing, export or device control.

5.2 Local Knowledge Base

When you create a local knowledge base and select materials, your NAS can process and index them for question answering, summaries, citations and notes.

File processing, indexing and AI question answering for the local knowledge base take place on your NAS and are not uploaded to a cloud AI model. A knowledge base may contain source references or copies, indexes, summaries, conversation history and notes. The relevant operation screen explains the effect of removing a source or deleting a knowledge base.

If we introduce optional external AI features in the future, we will explain recipients, purposes and processing before activation and obtain any necessary authorization.

5.3 AI-Generated Results

AI-generated answers, classifications, summaries and suggestions may be incomplete or inaccurate. Review results for your intended use, especially for important health, legal, financial or other decisions.

6. Recording Card

6.1 Recording and Transfer

When you use the recording card, it captures and stores audio locally according to your actions. Audio may contain your voice or conversations and those of others.

Recordings may be transferred to the phone App using supported connection methods and archived to your NAS through the product workflow. Related information may include original audio, transcripts, recording time, status and necessary metadata.

If you enable “Record Location,” the App obtains your current location when recording begins, subject to your phone’s location permission, and associates it with the recording as metadata. You can turn this feature off or withdraw system location permission; denial or failure does not prevent recording. The App retains at most the 200 most recent recording-location mappings and removes the oldest when that limit is exceeded. Archived copies in other locations are managed under their applicable retention and deletion rules.

6.2 Offline Transcription and Local Organization

The App uses a built-in offline model to transcribe audio on your phone. This transcription does not use a third-party cloud transcription service.

The NAS can locally organize archived content and generate summaries, to-dos or mind maps. These NAS organization features do not use a third-party cloud model.

6.3 Storage, Export and Deletion

Recordings and related results may exist separately on the card, phone and NAS. Exports and shares may create further copies.

When you delete a recording in the App, the card file and App cache are deleted by default; you can choose whether to delete the NAS archive as well. The operation screen explains the precise scope. Deleting content in one location does not necessarily delete copies previously exported, shared or saved elsewhere.

When recording others, provide notice or obtain permission as required by the circumstances and applicable law.

7. IPC Camera

7.1 Camera Information

Depending on your settings, an IPC camera may capture and process live video and audio, continuous recordings, event clips, event screenshots, and related device and event status, timestamps and logs.

Video and audio may contain information about household members, visitors and others. Please choose appropriate camera locations, recording areas and access permissions and comply with applicable law.

7.2 Local Recording and AI Analysis

IPC recordings and event clips are stored on the NAS. Relevant event AI analysis runs locally offline on the NAS without uploading household video or AI analysis content to a cloud AI model.

You may use available settings to manage recordings, events, notifications, storage capacity and access. Recording retention, overwriting and cleanup depend on product settings and instructions.

7.3 Remote Viewing and Member Permissions

You may authorize members to view live video, playback or messages, or allow particular device controls, as supported by the product. Grant appropriate permissions only to people you trust.

Screenshots, local recordings, downloads and exports on your phone may create separate copies. The effect of privacy mode, recording and remote access settings is explained in the product.

8. Smart Calendar

8.1 Household Content and Shared Display

Smart Calendar can display schedules, tasks, member information, photos and other household content created, imported or viewed by you or authorized members. Content may include titles, times, locations, notes, member names, birthdays and other information you choose to enter.

Household content and related NAS content are stored on the NAS you control. Smart Calendar may read and display them at your direction. LATICX does not obtain content merely because it is displayed on Smart Calendar.

Smart Calendar is a shared household display. People near the device may see displayed content, so please choose its location, displayed content and access permissions appropriately.

When you use the Smart Calendar weather feature, the product may use network location to recommend a weather city and temperature unit. You can confirm or search for and change the city on the device. Providing weather may require sending the city or other necessary request information to a weather service. The weather service provider may process relevant information under its privacy policy.

8.2 Third-Party Calendars

If you connect Google Calendar or Microsoft Outlook/Hotmail, your NAS connects through the provider's OAuth authorization mechanism. LATICX does not receive your third-party account password in plain text.

Third-party account identifiers, authorization tokens, selected-calendar identifiers, synchronization cursors, synchronization status and event content needed for synchronization are processed locally on the NAS. Third-party calendar event content travels directly from Google or Microsoft to your NAS; it does not pass through LATICX servers and is not stored in the LATICX cloud.

Smart Calendar currently accesses third-party calendars read-only and does not create, modify or delete third-party events.

For Google Calendar, the product requests only permissions needed for core synchronization:

• calendar.events.readonly to read events from calendars you authorize;
• calendar.calendarlist.readonly only when the product supports selection among multiple calendars.

Event information may include title, start and end time, time zone, all-day status and location, used for one-way synchronization and display. These permissions are not used to read Gmail. Google user data is not used for advertising, profiling, credit or lending decisions, or training general-purpose AI models for other users.

LATICX's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You may disconnect in the product or revoke permission through the third-party app authorization page in your Google or Microsoft account. Once permission is revoked, the product cannot continue accessing that service.

When you actively remove a synchronized third-party calendar in LATICX, synchronization stops and the NAS removes the calendar's synchronized event copies and related sync state, caches, search indexes and reminders. Events no longer appear in the App or Smart Calendar; original events in Google Calendar or Microsoft calendars are not deleted or modified. If you authorize and select the calendar again, the product retrieves events according to the synchronization scope at that time.

When you disconnect an entire third-party calendar account in LATICX, synchronization stops for all calendars in that account and related tokens, sync state and synchronized event copies, caches, indexes and reminders are cleared. Calendar member labels associated with tasks, rewards, lists or other household data may remain to avoid affecting that data. Before disconnection, the product explains any effects on other features using the same authorization.

If there is a temporary network interruption, synchronization failure or expired authorization, the product displays the relevant status or prompts you to reauthorize; it does not automatically delete synchronized events solely because of a temporary network error. If you revoke authorization through a third-party account page, the product stops access and informs you once it detects the authorization failure; the product explains the scope and available deletion actions.

8.3 IPC Live View

After the NAS validates the IPC device relationship and access authorization, Smart Calendar can obtain live video directly from the IPC for immediate display without the NAS relaying the stream. Smart Calendar does not actively record, upload or persistently retain the related footage or screenshots. IPC and NAS processing is described in the relevant sections of this policy.

8.4 Unbinding and Resetting

Unbinding Smart Calendar from the NAS does not itself delete household data on the NAS. Factory-resetting Smart Calendar is also not the same as deleting NAS content. Please read the product prompt before proceeding.

9. Third-Party Services and Sharing

9.1 Google Drive Backup

If you connect Google Drive, you grant the necessary permissions through Google's authorization process. According to your chosen backup direction, scope and plan, files may be transferred or backed up between the NAS and Google Drive.

Google Drive is currently the supported third-party cloud drive. You can revoke access through the product or your Google account's authorization controls. Subsequent backups will stop or be affected; copies already on the NAS or Google Drive must be managed using the applicable deletion controls.

LATICX’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

9.2 Service Providers

We may share information actually received by LATICX, as necessary, with:

• Cloud infrastructure providers supporting accounts, device binding, connections and security;
• Payment providers and sales platforms processing orders, payment status, refunds, invoices and fraud prevention;
• Logistics and fulfilment providers handling storage, shipping, delivery, returns and tracking;
• Affiliates as necessary for support, internal management or unified service delivery;
• Authorities or other parties as necessary to comply with legal obligations, respond to lawful requests or protect users and service security; and
• Business successors in connection with a merger, acquisition, restructuring, asset transfer or insolvency, subject to applicable law.

Providers may vary by purchasing channel, region and enabled service and are identified on checkout, order, product pages or applicable lists. General LATICX App push, analytics, crash diagnostics, scanning and connectivity services are described in the applicable Third-Party Services and Data Disclosure, according to actual configuration and triggering events.

Where law or Apple's rules require permission to share data with a third party, we provide the required notice and obtain permission before sharing.

9.3 Sale and Advertising

We do not sell personal information or share it for cross-context behavioral advertising.

10. Device Permissions and Choices

When you use relevant features, the App may request access to the camera, photos or media library, microphone, local network, Bluetooth, location or notifications. Location permission may be used to record location when you enable that feature, and may also be used to read the current Wi-Fi name when you configure an IPC camera, to help connect the device to the network. Permission requests depend on the operating system and the features you use.

You can manage or withdraw permissions in your operating system or product settings. Refusing a non-essential permission does not affect unrelated features but may prevent features that depend on it from working.

11. Retention and Deletion

11.1 Where Information May Be Stored

Retention of content stored only on your devices or NAS depends on your deletion actions, NAS settings and storage lifecycle.

NAS local login and security audit logs are retained for 180 days.

11.2 Retention of Information Received by LATICX

We retain information received by LATICX for as long as necessary for the purposes for which it is processed, considering the period of service, account status, security and dispute-resolution needs, and applicable legal, tax and regulatory requirements:

• Accounts and device relationships: retained while an account is active or a device remains linked to provide the service. After account deletion or device unbinding, information no longer needed is deleted or anonymized under applicable rules, unless retention is legally required.
• Connection, security, diagnostic and analytics information: retained for the period necessary to operate the service, resolve problems and handle security incidents; retention may be extended as necessary for disputes or legal requirements.
• Customer support and after-sales records: retained for the period necessary to handle inquiries, warranty, repairs and related disputes.
• Order and transaction records: retained for the period necessary to meet transaction, tax, accounting and other legal obligations.
• Backups: retained under backup rotation and disaster recovery arrangements and deleted or overwritten within the applicable rotation cycle.

When the retention period expires or the information is no longer needed for its purpose, we delete or anonymize it in accordance with applicable law. Contact privacy@laticx.com to ask about retention arrangements for specific information.

11.3 Effects of Different Actions

• Clear App cache: primarily removes previews and other recoverable caches; it does not necessarily delete user downloads or recordings awaiting synchronization.
• Remove local App data: may remove local records and content for the current account; see the confirmation screen for the scope.
• Delete a cloud account: removes cloud mapping and affects remote access and related links, but does not automatically erase local NAS accounts, storage pools or files.
• Unbind a device: removes its relationship with the NAS and does not necessarily delete business data already on the NAS.
• Delete a file or other content: may affect only the chosen location; copies may remain in trash, backups, exports or third-party services.

Please read the specific effect shown in the product before proceeding.

12. Security

We use technical and organizational measures appropriate to risk, including transmission encryption, access control, least privilege, authentication, log auditing, vulnerability management, backup and recovery, supplier management and incident response.

Different features may provide different protections. A separate vault feature does not mean all data on the NAS is encrypted by default.

No system can guarantee absolute security. Protect credentials, devices and administrator privileges, revoke access that is no longer needed, and back up important data regularly. If a personal information incident may harm your rights or interests, we will take remedial steps and notify authorities and affected individuals as required by applicable law.

13. Children

Account registration, device administration, third-party authorization, purchases and other high-risk management actions should be performed by adults with appropriate legal capacity. Household use of Smart Calendar does not itself require a child to register a LATICX account.

Household photos, events, recordings and other content may concern children. LATICX does not obtain content stored only on a user-controlled NAS merely because it is displayed on Smart Calendar.

If you believe a child has provided personal information to LATICX without appropriate parental or guardian consent, contact us. We will investigate and take deletion or other appropriate steps as required by law. Age thresholds and guardian-consent requirements depend on the law applicable where the user is located.

14. International Processing

When you enable Google Calendar or Microsoft calendar synchronization, authorization and calendar data are processed directly between your NAS and the third-party service.

Information actually received by LATICX for accounts, device binding, connections, security, sales and fulfilment may be processed by providers outside your country or region. We complete required assessments and contractual arrangements under applicable law and disclose actual processing locations and safeguards through this policy, order pages or other appropriate notices.

To provide cloud accounts, device connectivity, customer support and related services, we may use cloud infrastructure and other service providers. Depending on your location and the services you use, relevant personal information may be processed outside your country or region. We will apply appropriate safeguards as required by applicable law and describe the service providers we use and their data processing in our Third-Party Services and Data Disclosure.

15. Your Privacy Rights

Depending on applicable law, you may have the right to:

• Confirm whether we process your information and request access or a copy;
• Correct or complete inaccurate or incomplete information;
• Delete information or close an account;
• Withdraw consent or disable non-essential permissions and optional features;
• Restrict or object to certain processing;
• Obtain a portable copy where applicable; and
• Complain to a competent supervisory authority.

You can submit a request through product settings, third-party authorization pages or privacy@laticx.com. We may verify your identity in a manner proportionate to the request to prevent unauthorized access or deletion.

Information stored only on your devices or NAS that LATICX cannot access or identify should be managed through the NAS, device or product controls. Requests to LATICX apply to information we can access or control; we provide assistance where applicable.

15.1 Users in the European Economic Area, United Kingdom and Switzerland

This section supplements the rest of this policy for individuals protected by applicable data protection laws in the European Economic Area, the United Kingdom or Switzerland. Rights and exceptions depend on the applicable law and circumstances.

Legal bases: Depending on the feature, we may rely on contract performance for information necessary to provide accounts and services you select; legal obligations for information we must retain or disclose; legitimate interests for information necessary to protect accounts, prevent fraud and maintain service security; and your consent for optional processing where consent is required by law. You may decline to provide optional information, although features that depend on it may be unavailable.

Your rights: Subject to applicable law, you may request access, correction, erasure, restriction or portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You may object to processing based on legitimate interests and may object to direct marketing at any time. You may also complain to a competent data protection authority where you live, work or the relevant event occurred; users in the UK may complain to the Information Commissioner's Office.

Requests and responses: Contact privacy@laticx.com to submit a request. We may verify identity to protect your information and will respond within applicable legal time limits. Where the GDPR or UK GDPR applies, we generally respond within one month of receipt; complex or multiple requests may be extended as permitted by law, with notice to you.

International transfers and contacts: When personal information is transferred to a location outside the area specified by applicable law, we use an applicable adequacy decision, standard contractual clauses or another lawful safeguard as appropriate. You may contact privacy@laticx.com for information about relevant transfers and safeguards.

15.2 Users in the United States

Depending on applicable state law and its scope, you may have rights to know, access, correct, delete or obtain a copy of personal information, opt out of sale, sharing, targeted advertising or certain profiling as defined by law, and appeal a request decision where applicable. You may also have rights concerning sensitive personal information. We will not discriminate against you for exercising your rights where prohibited by law.

Contact privacy@laticx.com to submit a request or appeal. We may verify identity in a manner proportionate to the request and will respond under applicable law. Information stored only on your devices or NAS that we cannot access or identify should be managed through the relevant device and product controls.

We do not sell personal information or share it for cross-context behavioral advertising. See the relevant sections of this policy and the Third-Party Services and Data Disclosure for information categories, sources, purposes, recipients and retention.

15.3 Users in Canada

Under applicable Canadian federal and provincial laws, you may request access to or correction of personal information we hold, ask questions or complain about our practices, and withdraw consent where applicable. Withdrawal may be subject to legal or contractual restrictions and may affect the provision of related services. Contact privacy@laticx.com or complain to a competent privacy regulator.

Where we rely on consent, we provide appropriate notice and choices according to the sensitivity of the information and the context.

16. Policy Updates and Contact

We may update this policy as our products, data practices or applicable law change and will show the updated date at the top.

For material changes to purposes, categories, recipients, international transfers or rights, we will notify you via the website, App, email or another prominent method. Where renewed consent is required, we will obtain it before the new processing begins.

Shenzhen Laticx Technology Co., Ltd.
Privacy: privacy@laticx.com
Customer support: support@laticx.com
Address: Tower C, Building 5, Shenzhen International Innovation Valley, Xingke 1st Street, Yuncheng Community, Xili Subdistrict, Nanshan District, Shenzhen, China

We will respond within the time required by applicable law.