ConnectedTub Mobile App - Privacy Policy

Effective Date: November 4, 2025

Applies to: Canada and United States

1. Introduction

This Privacy Policy applies to the ConnectedTub mobile application.
It explains how we collect, use, store, and protect your personal information when you use our mobile applications or voice skills in Canada or the United States, in compliance with applicable privacy laws including the Personal Information Protection and Electronic Documents Act (PIPEDA) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We collect only the information necessary to provide and improve our services, including:

• Personal information you provide (name, email address, postal code, profile picture).
  • Name: Name typed in the application is used for future communications.
  • Email: Device pairing and authentication services with the third-party OAUT partners. The name and profile picture is obtained from these services during authentication.  The information obtained in this manner is not used by our services.
  • Postal code: used for updates optimizations.
• Usage data (frequency of use, preferred temperature, schedules, diagnostics).
• Device and technical data (device model, operating system, unique identifiers).
• Bluetooth and Wi-Fi connection information is not shared with the cloud.
• Voice command data processed by voice assistant to enable functionality.

The mobile app does not access your microphone, camera, or contacts. Voice assistants use the device's microphone to process voice commands.

3. How We Use Information

We use your data to:

• Operate and personalize your ConnectedTub experience.
• Provide real-time control, diagnostics, and connectivity with your smart bathtub system.
• Analyze aggregated usage trends and user behavior to better understand how our products and features are used, and to improve future designs and user experience.
• Improve app performance and reliability through analytics.
• Manage your account and respond to support requests.
• Comply with legal obligations and prevent misuse or fraud.

We do not use your personal information for targeted advertising or marketing without your explicit consent.

4. Data Sharing and Third Parties

We do not sell or rent your data.
We may share limited technical or diagnostic information with trusted third-party service providers strictly for:

• Cloud hosting and data storage on third-party systems.
• Mobile analytics and crash reporting, which helps us identify and fix errors, improve stability, and understand general app performance. Data collected includes anonymized technical information such as device type, OS version, and crash logs. It does not contain personal or identifiable user data.
• Authentication information using third-party services, which allows the authentication of the user before using our services.  The information shared includes email and authentication tokens.

All third-party providers operate under confidentiality and data-protection agreements consistent with this policy.

5. Tracking and Advertising

The ConnectedTub App and Alexa Skill do not use tracking technologies for advertising or cross-app tracking purposes.

We do not collect advertising identifiers, and we do not use any third-party SDKs for marketing, remarketing, or behavioral profiling.

Any analytics performed are limited to aggregated and anonymized data used solely to improve system performance and user experience.

6. Data Retention and Deletion

We retain personal and technical data only for as long as it is necessary to provide the ConnectedTub services, maintain functionality, and comply with applicable legal, warranty, or safety requirements.

Account information and technical records may be kept for diagnostic or maintenance purposes as long as reasonably needed for operational support.

We do not automatically delete inactive accounts or usage data after a specific period, but users may request the deletion of their personal information at any time by contacting privacy@cgair.com.

Upon verified request, we will delete or anonymize the relevant personal data unless retention is required by law or necessary to maintain the integrity and security of our systems.

7. User Age / Intended Audience

The ConnectedTub services are designed for an age 13 and up.
We do not intentionally collect or process information about users’ age or date of birth, and the services do not include any content or features directed specifically at children.
All users should ensure they use the app responsibly and in accordance with local regulations and supervision where applicable.

8. Regional Rights and Legal Bases

This policy applies only to users located in Canada and the United States.

• In Canada, we comply with PIPEDA and provincial privacy laws.
• In the U.S., we comply with CCPA for California residents.

You have the right to request access to, correction of, or deletion of your personal data by contacting privacy@cgair.com.

9. App Store and Platform Declarations

CG Air Systèmes Inc. declares all data-collection and usage practices in product listings.

These declarations are kept consistent with this Privacy Policy and updated before each new release.

10. Access to Policy

You can access this Privacy Policy at any time from our website:

www.cgair.com/connectedtub-app-privacy-policy

11. Updates

We may update this Privacy Policy from time to time.
When we make significant changes, we will update the Effective Date and notify users via in-app notice or email.

12. Contact

For any questions or requests regarding your personal data, please contact us at:
privacy@cgair.com