Xiaomi Privacy

Content

Our privacy policy was updated on January 15, 2021.

Please take some time to familiarize yourself with our privacy policy, and feel free to contact us if you have any questions.

About Us

Xiaomi Singapore Pte. Ltd., Xiaomi Technology Netherlands B.V., and affiliated companies under Xiaomi Group (referring to the affiliated companies disclosed in the latest annual report of Xiaomi Group, click here to view details in the 'Recent Financial Reports') (hereinafter referred to as 'Xiaomi' or 'we') attach great importance to your privacy. This privacy policy was formulated with full consideration of your needs. You will have a comprehensive understanding of our personal information collection and usage practices, while ensuring that you ultimately have control over the personal information you provide to Xiaomi, which is crucial.

About this privacy policy

Except for specific Xiaomi products or services with independent privacy policies, this Privacy Policy applies to all Xiaomi devices, websites, or applications that reference or link to this Privacy Policy. This Privacy Policy sets out how Xiaomi collects, uses, discloses, processes, and protects personal information provided to us or collected by us when you use our products or services on our websites (https://www.mi.com, https://en.miui.com, https://account.xiaomi.com) and the applications we provide on mobile devices. If a specific Xiaomi product or service has a separate privacy policy, that separate privacy policy will take precedence. For parts not covered by the separate privacy policy of the product or service, this Privacy Policy shall apply. Depending on factors such as the device model you use, service version, or location, how specific products or services collect and process your personal information may vary. You should refer to the separate privacy policy for detailed information.

Unless otherwise specified by the laws applicable in your region, under this Privacy Policy, 'personal information' refers to information that can identify a specific individual either on its own or when combined with other information. We will strictly adhere to the Privacy Policy in using this information. When necessary, based on applicable laws, personal information should also include sensitive personal data or information.

How can we help you

Finally, we hope to bring you the best experience. If you have any questions about the data processing practices described in this privacy policy, please contact us at https://privacy.mi.com/support so that we can address your specific needs. We are happy to receive your feedback.

1 What information do we collect and how do we use it?

1.1 What Information We Collect

In order to provide you with our services, we need you to provide the information necessary for using the service. We will only collect information necessary to achieve specific, clear, and legitimate purposes, and ensure that this information will not be further processed in a manner incompatible with those purposes. You have the right to choose whether to provide the information we request, but in most cases, if you refuse, we may not be able to provide you with the corresponding services or respond to the issues you encounter.

Based on the service you choose, we may collect one or more of the following information:

1.1.1 Personal Information You Provide to Us Voluntarily

We will collect the personal information you provide when using the corresponding services based on your selection. For example, if you use Xiaomi's online shopping service, you may provide your name, contact information, email address, delivery address, order information, invoice information, as well as bank account number, bank account holder's name, credit card number, and other related information; if you use Xiaomi Cloud Sync service, you may upload relevant data to Xiaomi Cloud Sync; if you create an account, you may provide your birthday, gender, account security settings, and other related information; if you participate in marketing promotions, you may provide us with your nickname, email address, photos, videos, or other required information; if you participate in our events or win prizes, you may provide us with your name, phone number, and address.

1.1.2 Information We Collect When You Use the Service

• Information related to your device or SIM card: such as IMEI/OAID, GAID number, IMSI number, MAC address, serial number, system version and type, ROM version, Android version, Android ID, Space ID, SIM card operator and location, screen display information, device input information, device activation time, device manufacturer information and model name, network operator, connection type, hardware basic configuration information, sales channel and usage-related information (such as CPU, memory, battery usage, device resolution, device temperature, camera lens model, screen-on times, and unlock times).

• Information designated by third-party service providers and business partners related to you: We may collect and use advertising IDs assigned by third-party service providers and business partners.

• Information related to the use of your application: Including unique identifiers within the application (such as VAID number, OAID, AAID number, Instance ID), basic application information such as application list, application ID information, SDK version, system update settings, application settings (region, language, time zone, font), time of entering/exiting the application foreground, and application status records (such as download, installation, update, deletion).

• Information generated when you use the system service: For example, your badges, user level, check-in information, browsing history in the Xiaomi community; your internal messages in the Xiaomi community (visible only to the sender and receiver); your audio playback history and search keywords in the music service; your likes, comments, favorites, shares, and search keywords in the theme service; your system language, country and region, network status, and app list in the negative screen service; information generated when you use the lock screen magazine, including region, Internet Protocol (IP) address, content provider, magazine change frequency, number of image views, image viewing mode, image viewing duration, clicks and article exposure, subscription information.

• Location Information (Applicable to Specific Services/Features Only): If you use location-related services (such as navigation software, weather information, device tracking), we may collect various information related to the approximate or precise location of your device. For example, region, country code, city code, mobile network code, mobile country code, cell identifiers, latitude and longitude information, time zone settings, and language settings. You can disable location services for each app at any time in Settings (Settings > App Settings > Authorization Management > App Permission Management > Permission Management > Location).

• Log Information: Information related to your use of certain features, applications, and websites. For example, Cookie and other identifier technologies, Internet Protocol (IP) addresses, network request information, temporary message history, standard system logs, error crash information, log information generated by using the service (such as registration time, access time, activity time, etc.).

• Other information: Environmental characteristic value (ECV), which is information generated from Xiaomi account, device identifier, Wi-Fi connection, and geographical location information.

1.1.3 Information from Third Parties

In some cases permitted by law, we may obtain your personal information from third parties. For example:

• For security and anti-fraud purposes, for specific accounts, financial transactions, and other services, with your authorization, your information (such as phone number) will be verified through legitimate sources.

• By specifying unique identifiers (such as IMEI/OAID/GAID obtained from advertisers) and in specific cases, receiving partial conversion data related to your use of advertising services (such as click-through rates) for advertising model optimization, we provide corresponding advertising services to you.

• We may also obtain certain information from third-party social networking services, such as account, nickname, avatar, and email (for example, when you use a social network account to log in to Xiaomi services).

• Information provided by others about you, such as your shipping address provided to us by other users when purchasing products for you on the Xiaomi Store.

1.1.4 Non-personal Information

We may also collect other information that cannot directly or indirectly identify specific individuals and is not considered personal information under applicable local laws. This type of information is referred to as non-personal information. We may collect, use, transfer, and disclose non-personal information. Here are some examples of how we collect and use non-personal information in an aggregated form.

• May contain statistical data generated when you use specific services (such as anonymous device-related information, daily active events, page visit events, page visit duration events, session events).

• Network monitoring data (such as request duration, request and error counts, etc.).

• Application crash events (such as logs generated automatically after an application crash).

The purpose of collecting such information is to improve the services we provide to you. The types and amount of information we collect will depend on how you use our products and/or services.

We will aggregate such information to help us provide you with more useful information and understand which parts of our website, products, or services you are most interested in. For example, we may only need to know the number of active users within a day, without needing to know who these active users are on that day, so aggregated data is sufficient for us to conduct statistical analysis. We will strive to separate your personal information from non-personal information as much as possible and ensure that these two types of information are used separately. If we combine non-personal information with personal information, during the period of combination, such information will be treated as personal information.

1.2 How will this personal information be used

Our purpose in collecting personal information is to provide you with products and/or services, and to ensure that we comply with applicable laws, regulations, and other normative documents. This includes:

• Provide, process, maintain, improve, develop our products or services provided to you, such as delivery, activation, verification, after-sales, customer support, and advertising promotion.

• For security purposes such as loss prevention and fraud prevention, assist in identifying users, verifying identities, etc. We will only use your information for anti-fraud purposes when both of the following conditions are met: absolutely necessary; using the information to assess compliance with Xiaomi's legitimate interests in protecting users and services.

• Handle your questions or requests about devices and services, such as answering customer inquiries, sending system and application notifications, managing activities you participate in such as sweepstakes.

• Carry out relevant promotional activities, such as providing promotional and sales materials and updates. Unless otherwise required by applicable law, if you no longer wish to receive certain categories of promotional information, you can refuse such services by using the opt-out method provided in the information (such as the unsubscribe link at the bottom of the email). Please refer to 'Your Rights' below.

• Internal purposes, such as data analysis, research, and development of statistical information related to the use of our products or services, to better improve our products or services. For example, machine learning or model algorithm training after de-identification processing.

• Optimize device performance, such as analyzing memory usage of applications or CPU utilization of applications.

• Store and maintain information related to you for our business operations (such as business statistics) or to fulfill legal obligations.

• Processing data based on Xiaomi's legitimate interests (where applicable under judicial jurisdiction, such as GDPR). Legitimate interests include enabling us to more effectively manage and operate our business, and provide our products and/or services; safeguarding the security of our business, systems, products, services, and customers (including for the purposes of loss prevention and anti-fraud); internal management; compliance with internal regulations and processes; and other legitimate interests described in this privacy policy.

For example, in order to ensure the security of our services, help us further understand the performance of the application, we may record relevant information, such as your usage frequency, crash log information, overall usage, performance data, and application source; to prevent unauthorized vendors from unlocking devices, we may collect Xiaomi account, computer serial number, Internet Protocol (IP) address, your device serial number, and device information.

• Provide local services that do not require communication with our servers, such as using note services on your device side.

• Other purposes with your consent.

About how we use your information (which may include personal information), more detailed examples are provided below:

• Activate and register the Xiaomi product or service you purchased.

• Create and maintain your Xiaomi account. The personal information you provide when creating a Xiaomi account on the website or mobile device can be used to establish your personal Xiaomi account and profile page.

• Process your order. Information related to e-commerce orders is used to process orders and related after-sales services, including customer support and reshipment. In addition, the order number will be used to verify the actual delivery of orders and packages by logistics partners. Recipient information, including name, address, phone number, and postal code, will be used for delivery. Email addresses are used to send you package tracking information. The list of purchased items is used to print invoices and allows you to identify the items in the package.

• Participate in activities within the Xiaomi community. Personal information related to the Xiaomi community or other similar social platforms may be used for personal profile display, interacting with other users, and participating in activities within the Xiaomi community.

• Provide system services. The following information (device or SIM card related information, including GAID number, IMEI number, IMSI number, phone number, device number, device operating system, MAC address, device category, system and performance information, and location information such as mobile country code, mobile network code, location area code, and cell identity) can be used to activate system services.

• Diagnosis activation failed. The relevant geographical information is used to evaluate SIM card activation failures (such as Short Message Service (SMS) gateway and network failures) to identify the network operator for the service and notify the network operator.

• Provide other system services. The information collected when you use system services will be used to enable the functionality of that service, as well as to provide service optimization, such as downloading, updating, registering, executing, or optimizing activities related to system services. For example, personal information collected by the theme store may be used to provide personalized theme recommendation services based on your download and browsing history.

• Find Device. After your device is lost or stolen, Xiaomi's 'Find Device' feature can help you locate and protect your device. You can use the location information provided by the device to locate your device on the map, erase device content, or lock the device. When you actively search for your device, the system will obtain geographical location information through your device; in some cases, we will obtain this information through cell towers or Wi-Fi hotspots. You can enable or disable this feature at any time in Settings (Settings-Xiaomi Account-Cloud Service-Find Device).

• Record the geographical location information of the photo. You can record geographical location information when taking photos. This information will be visible in the photo folder and saved in the photo's properties. If you do not want to record your geographical location information when taking photos, you can always disable this feature in the device camera settings.

• Provide information transmission function (such as Mi Chat, network SMS). If you download and use Mi Chat, the information collected by Mi Chat may be used to activate this service and identify users and information recipients. In addition, chat records will be saved for you to reload historical chats after reinstalling the application or for synchronization between devices. The phone numbers of senders and recipients, as well as information about network SMS accounts, can be used for network SMS service activation to make the service work, including message routing selection.

• Provide location-based services. When using system services, we or third-party service providers may use location information in cooperation with business partners (for more detailed information, please refer to 'How We Share, Transfer, and Publicly Disclose Your Personal Information') to provide services for you and provide a better user experience based on accurate location, such as weather information, location access (as part of the Android platform). You can turn off location services in settings at any time, or turn off location services for a specific application.

• Improve user experience through data, hardware, and software analysis. Some optional features, such as the user experience program, allow Xiaomi to analyze how users use device, system services, and other services provided by Xiaomi to enhance user experience, such as sending crash reports. Xiaomi will also conduct analysis on hardware and software to further enhance user experience.

• Use Mobile Manager/Tablet Manager. The information collected may be used for security and system maintenance functions, such as virus scanning, power-saving mode, blacklist, cleaner, etc. Some of these functions are provided by third-party service providers and/or business partners (for more detailed information, please refer to 'How We Share, Transfer, and Publicly Disclose Your Personal Information'). Non-personal information such as virus definition lists will be used for virus scanning functions.

• Provide push services. Xiaomi account, GAID number, FCM token, Android ID, Space ID (only applicable to the spare space function on Xiaomi devices) may be used to provide Xiaomi push services and Xiaomi notification services, to evaluate advertising effectiveness, and to send you notifications from the system about software updates or new product releases, including sales and promotional information. In order to provide you with the above services, we will collect relevant information about your applications (application version ID, application package name) and device-related information (model, brand). We may use your personal information based on push services (whether through information push integrated in the service, email, or other means) and provide or promote products or services of ours and related third parties to you. The above services will only occur with your consent and in compliance with applicable legal requirements. You can refuse to receive marketing information from us and third parties at any time by changing the preference settings under the device settings, or by using third-party applications/websites of Xiaomi push to manage your preference settings. Please refer to 'Your Rights' below.

• Verify user identity. Xiaomi uses ECV values to assist in verifying user identity and prevent unauthorized logins.

• Collect user feedback. The feedback you choose to provide is very important to help Xiaomi improve its services. In order to promptly address the feedback you provide, Xiaomi may use the personal information you provide to contact you and keep records for problem resolution and service improvement.

• Send notifications. We may use your personal information to send important notifications, such as notifications about orders and changes to our terms, conditions, and policies. As this information is crucial for communication between you and Xiaomi, it is not recommended to refuse to receive such information.

• Carry out promotional activities. If you participate in a lottery, contest, or similar promotional activity through Xiaomi's social media platforms, we may use the personal information you provide to send you such rewards.

• Provide personalized user services and content, including advertisements. In order to protect your privacy, we will use a unique identifier instead of your name, email, or other information that can directly identify you to provide you with personalized products, services, and activities, including advertisements.

We may combine this information with other information (including information from different services or devices such as computers, mobile phones, smart TVs, and other connected devices) to provide and improve our products, services, content, and advertising.

For example, we may use the details of your Xiaomi account in all services that require a Xiaomi account. At the same time, in order to provide you with a better experience and improve our services, in compliance with relevant laws and regulations or with your consent, we may organize information from different products, services, or devices related to you into tags to provide recommendations, customized content, and personalized features.

For personalized ads, these ads will be based on factors such as your activities, usage, and preferences related to our applications and services. We create profiles by analyzing this information, grouping individuals with common characteristics, and assigning your personal information to one or more groups. Targeted advertising will only be carried out with your consent when required by applicable law. You have the right to refuse personalized ads and user profiles at any time, including identification analysis for direct marketing purposes.

**Due to the reasons for the merger information above and the requirements of applicable laws, we will provide you with specific control mechanisms for such integration. You have the right to refuse the processing of personal information for direct marketing purposes and actions such as automated decision-making. To exercise the above rights, you can turn it on or off at any time in Settings (Settings > Password & Security > Privacy > Ad Services or Settings > Password & Security > System Security > Ad Services), you can also contact us via https://privacy.mi.com/support, or refer to the control mechanisms described in the separate privacy policies of each product or service. Please refer to 'Your Rights' below.

2 How we use Cookies and similar technologies

Xiaomi and third-party service providers and business partners use technologies such as cookies, tags, and scripts (for more detailed information, please refer to the 'How We Share, Transfer, and Publicly Disclose Your Personal Information' below). These technologies are used to analyze trends, manage the website, track your website activities, and collect statistical information about the entire user base. We receive individual or aggregated analysis reports collected through the above technologies. These technologies help us better understand your behavior, enabling us to know which parts of our website you browse, measure the effectiveness of advertising and web searches, and make improvements.

• Log Files: Like most websites, we collect specific information and store it in log files. This type of information may include Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We do not link automatically collected log data to other information we collect.

• Local Storage-HTML5/Flash: We use local storage objects (LSO), such as HTML5 or Flash, to store content and preferences. Third parties who work with us to provide certain features on our website or deliver advertising based on your web browsing behavior may also collect and store relevant information through HTML5 or Flash Cookies. Various browsers provide their own management tools to delete HTML5 local storage objects. You can click here to manage Flash Cookies.

• Advertising Cookies: We work with third-party service providers and business partners (for more detailed information, please refer to 'How We Share, Transfer, and Publicly Disclose Your Personal Information' below) to display advertisements on our website or manage our advertisements on other websites. Our third-party service providers and business partners may use advertising cookies to collect your online activities and personal interest information to provide you with advertisements highly relevant to your user profile and interests. We will obtain your explicit prior consent before providing you with advertising services. If you do not wish this information to be used to serve you targeted advertisements based on your interests, you can opt out by managing your cookie settings.

• Mobile Analytics: In some mobile applications, we use analytics cookies to collect information about how visitors use our website. The information collected by these cookies includes the frequency of your use of the application, events occurring within the application, cumulative usage, performance data, and instances of application crashes. We do not associate the information stored in the analytics software with any personal information you submit in the mobile application.

3 How do we share, transfer, and publicly disclose your personal information

3.1 Share

We will not sell any personal information to third parties.

We may sometimes share your personal information with third parties (as defined below) to provide or improve our products or services, including providing products or services at your request. Specific information about data sharing is provided below.

3.1.1 Sharing You Choose to Share

With your explicit consent or active choice, share information within the scope authorized/requested by you with the specified third party. For example, you use your Xiaomi account to quickly log in to a third-party website or app.

3.1.2 Sharing Information with Our Group

In order to engage in commercial operations smoothly and provide you with all the functions of our products or services, we may share your personal information with other affiliated companies of Xiaomi from time to time.

3.1.3 Sharing Information with Companies in Our Ecosystem

Xiaomi collaborates with a group of distinctive companies to form the Xiaomi ecosystem. Xiaomi ecosystem companies are independent entities invested in and operated by Xiaomi, each being an expert in their respective fields. Xiaomi may disclose your personal information to Xiaomi ecosystem companies to provide and enhance products or services from existing Xiaomi ecosystem companies (including software, hardware). Some products or services still use the Xiaomi brand, while others may use their own brand. Xiaomi ecosystem companies may occasionally share data related to products or services with the Xiaomi brand with Xiaomi to provide software, hardware services, and deliver better functionality and user experience. Xiaomi will adopt appropriate management and technical measures to ensure the security of your personal information processing, including but not limited to encryption protection of personal information.

3.1.4 Sharing with Third-Party Service Providers and Business Partners

To ensure that we provide you with the products and services described in this privacy policy, we may need to share your personal information with our third-party service providers and business partners.

This includes our logistics suppliers, data centers, data storage facilities, customer service providers, advertising and marketing service providers, and other business partners. These third parties may process your personal information on behalf of Xiaomi or for one or more purposes outlined in this privacy policy. We ensure that only personal information necessary to provide you with services is shared for legitimate, lawful, necessary, specific, and explicit purposes. Xiaomi conducts due diligence and enters into contracts to ensure that third-party service providers comply with privacy laws applicable in your jurisdiction. Third-party service providers may also have their subprocessors.

To provide effectiveness measurement, analysis, and other commercial services, we may also share information in aggregated form with third parties (such as advertisers on our website) (non-personal information). We use the information we have to help advertisers and other partners evaluate the effectiveness and coverage of their ads and services, understand the types of audiences using their services, and how people interact with their websites, apps, and services. We may also share general usage trends of our services, such as the number of customers in specific groups who purchase certain products or engage in certain transactions.

3.1.5 Others

In accordance with legal provisions, legal procedures, litigation, and/or requests made by public institutions and government departments in accordance with the law, Xiaomi may need to disclose your personal information. If disclosure is necessary or appropriate for reasons of national security, law enforcement, or other matters of public importance, we may also disclose information about you.

To execute our terms or protect our business, rights, assets, or products, or to protect users, or for the purposes of detecting, preventing, and addressing fraud, unauthorized use of products, violations of our terms or policies, or other harmful or illegal activities, disclosure is reasonably necessary, and we may also disclose information about you. (In some cases, within the scope permitted by local data protection laws, Xiaomi may collect, use, or disclose your personal information without your consent.) This may include providing information to public or government agencies; exchanging information with third-party partners about the reliability of your account to prevent fraud, violations, and other harmful activities inside and outside our products.

Besides, we may share your personal information with the following individuals:

• Our accountants, auditors, lawyers, or similar advisors, when we ask them for professional advice.

• Investors and other relevant third parties, in the event of an actual or potential sale or other corporate transaction involving entities within Xiaomi Group.

• Other third parties detailed in this privacy policy or notified to you in other ways, may disclose specific information with your authorization.

3.2 Transfer

Except as otherwise provided below, Xiaomi will not transfer your information to any third party:

• Obtain your explicit consent.

• If Xiaomi is involved in a merger, acquisition, or sale of all or part of its assets, your personal information may be affected. We will provide prominent notice via email and/or on our website or other appropriate means to inform you of any changes in ownership or usage rights regarding your personal information, as well as any choices you may have regarding your personal information.

• In cases explained in this privacy policy or otherwise notified to you.

3.3 Disclosure

In the following cases, Xiaomi may disclose your personal information:

• When we need to announce the winners of promotions, contests, or giveaways, we will only disclose limited information.

• When we have obtained your explicit consent, or information disclosed by you through our services such as social media pages or public forums.

• Based on legal or reasonable grounds for public disclosure: including legal norms, legal procedures, litigation, or requirements from government regulatory authorities.

4 How we store and protect your personal information

4.1 Xiaomi's Security Measures

We are committed to protecting the security of your personal information. In order to prevent unauthorized access, disclosure, or similar risks, we have implemented all legally required physical, electronic, and managerial measures and processes to safeguard the information we collect from your mobile devices and the Xiaomi website. We will ensure that your personal information is protected in accordance with applicable laws.

For example, when you visit your Xiaomi account, you can choose our two-step verification process to enhance security, and we strongly recommend using this method. When you send or receive information from our servers using Xiaomi devices, we ensure that it is encrypted using Transport Layer Security (TLS) and other appropriate algorithms.

Your personal information is stored on secure servers and protected within controlled facilities. We classify your information based on importance and sensitivity, ensuring that your personal information has the appropriate security level. Similarly, we have specific access control measures for cloud-based data storage, and we regularly review information collection, storage, and processing practices, including physical security measures, to prevent any unauthorized access and use.

We will conduct due diligence on third-party service providers and business partners to ensure they are capable of protecting your personal information. We will also check whether the third parties have adopted appropriate security standards by implementing appropriate contractual restrictions, and conducting audits and assessments when necessary. In addition, employees, third-party service providers, and business partners who access your personal information are bound by strict confidentiality obligations in their contracts.

We will conduct security and privacy protection training courses and tests to enhance employees' awareness of the importance of protecting personal information. We will take all feasible and legally required measures to protect your personal information. However, you should be aware that the use of the internet is not completely secure, therefore, we cannot guarantee the security or integrity of any personal information transmitted over the internet.

We will handle the disclosure of personal information in accordance with the requirements of applicable data protection regulations, and promptly notify the relevant regulatory authorities and data subjects of any data breach incidents when necessary.

Our information security policies and procedures are designed in accordance with international standards and are regularly audited by third parties to validate the effectiveness of security measures. Xiaomi's information systems have been certified to the ISO/IEC 27001:2013 international standard to ensure the security of your personal information. Xiaomi's e-commerce website and Mi Home IoT platform have obtained certification to the ISO/IEC 27701:2019 international standard for personal information protection, while Xiaomi's mobile system has obtained certification to the ISO/IEC 27018:2019 international standard for personal information protection in public clouds.

4.2 What can you do?

You can set a unique password for Xiaomi to prevent the leakage of your account information from other websites. Never disclose the verification code you receive to anyone, including those claiming to be Xiaomi customer service. Always log out after your session, especially when using someone else's computer or a public internet terminal, even when logging into the Xiaomi website as a Xiaomi account user.

Xiaomi is not responsible for any security breaches caused by your failure to keep your personal information confidential and resulting in third-party access to your personal information. Despite the above provisions, if there is any unauthorized use of your account by any other internet user or any other security vulnerabilities, you should notify us immediately. Your cooperation will help us protect the confidentiality of your personal information.

4.3 Accessing Other Features on Your Device

Our application may access certain features on your device, such as initiating contacts from email, storing messages, and checking Wi-Fi network status. This information is used to allow these applications to run on your device and enable you to interact with them. At any time, you can revoke permission by closing the application on your device or by contacting us at https://privacy.mi.com/support.

4.4 Retention Policy

During the period necessary for the purposes of information collection as described in this Privacy Policy and in the separate privacy policy of specific products or services, or to comply with legal requirements for retaining personal information. The specific retention period can be found on the specific service or related product pages. Personal information will be stopped from being retained, and will be deleted or anonymized, upon completion of the collection purpose, or after we have confirmed your deletion or cancellation request, or after we have terminated the operation of the corresponding product or service. Where possible, we will specify the retention period for categories, types, or fields of personal information we have identified. In determining the above retention period, we consider the following factors:

• Quantity, nature, and sensitivity of personal information

• Risks of harm caused by unauthorized use or disclosure

• The purposes for which we process personal information, and the length of time we need that specific information for those purposes

• Personal information should be kept as accurate and up-to-date as possible

• The length of time related to personal information and potential legal claims in the future

• Requirements for the retention period of certain records under other applicable laws, accounting, reporting, or regulatory provisions

In accordance with the requirements of your jurisdiction, there may be exceptions for the personal information we process for public interest, scientific, historical research, or statistical purposes. Based on applicable laws or your request, Xiaomi may continue to retain such information beyond its standard retention period, even if further data processing is unrelated to the initial collection purpose, when necessary and permitted.

5 Your Rights

You can control your personal information.

5.1 Control Settings

Xiaomi realizes that everyone has different concerns about privacy. Therefore, we provide examples of various ways Xiaomi offers for you to choose from to limit the collection, use, disclosure, or processing of your personal information and control your privacy settings:

• Open or close user experience improvement program and location access feature.

• Sign in or sign out of your Xiaomi account.

• Turn on or off Xiaomi cloud synchronization feature.

• Delete any information stored in Xiaomi Cloud through https://i.mi.com.

• Open or close other services and functions that handle sensitive or personal information. You can obtain more detailed information about the security status of your device in the Phone Manager/Tablet Manager.

If you previously agreed to our use of your personal information for the above purposes, you can change your mind by visiting https://privacy.mi.com/support to contact us.

5.2 Your Rights to Your Personal Information

In accordance with the laws and regulations applicable in your country or region, you have the right to request access, correction, or deletion of any personal information we hold about you (hereinafter referred to as 'requests'). These rights are subject to specific exclusions and exceptions as provided by applicable laws.

For more detailed information related to your personal information in your Xiaomi account, you can access and modify it through https://account.xiaomi.com or by logging into your device. For other information, you can contact us by visiting https://privacy.mi.com/support.

If you meet the following conditions, we will process your request effectively:

(1) The request is submitted through Xiaomi's proprietary request channel. To protect your information security, your request should be made in writing (unless oral requests are expressly recognized by local laws).

(2) Provide sufficient information for Xiaomi to verify your identity, ensuring that the requester is the subject of the requested information or a legally authorized person.

Once we have sufficient information to confirm that we can process your request, we will respond to your request within the time frame specified by applicable data protection laws.

Specifically:

• You have the right to receive clear, transparent, and easily understandable information about how we use your personal information and the rights you have. This is the essence of this privacy policy.

• Based on your request and applicable legal requirements, we may provide you with a free copy of the relevant records of your personal information that we have collected and processed. If you make other requests regarding this information, we may, in accordance with applicable laws and considering actual administrative costs, charge you a reasonable fee.

  • If you believe that any information we hold about you is incorrect or incomplete, you may request us to correct or complete it based on the purposes of use.

• According to the applicable laws and regulations, when we have no reason to continue using your personal information, you have the right to request us to delete your personal information. We will evaluate your deletion request, and if it meets the relevant requirements, we will take corresponding steps including technical means for processing. Please note that due to applicable legal and security technology limitations, we may not be able to immediately delete the relevant information from backup systems. In such cases, we will securely store your personal information and isolate it from any further processing until the backup can be cleared or anonymized.

• You have the right to refuse certain types of processing, including processing for direct marketing (including the use of user profiles) and, in some cases, the processing of personal information based on our legitimate interests (including user profiles).

特别地,依据某些司法管辖区的法律规定:

• You have the right to request us to restrict the processing of your personal information. We will assess your restriction request. If it complies with the General Data Protection Regulation (GDPR), we will process your information based on the specific circumstances applicable in the regulation and notify you before lifting the processing restriction.

• You have the right to refuse processing based on automated decision-making, including automated processing such as user profiling that may have legal or similar effects on you.

• You have the right to request the transfer of your personal data to another data controller in a structured, commonly used, and machine-readable format. (Data Portability)

We reserve the right to refuse to process or only partially respond to some of your requests in situations where exemptions are provided for by applicable law, or where we have other corresponding rights granted to us by applicable law, for example, requests that are clearly unfounded, excessive, or require the disclosure of third-party information. In some cases, we may charge a fee where permitted by applicable law. Requests to delete information may also be refused if we believe that such requests may in some way prevent us from lawfully using that information to establish, exercise, or defend legal claims and reasons permitted by applicable law.

5.3 Revocation of Consent

Summary
The privacy policy of Xiaomi was updated on January 15, 2021. It emphasizes the importance of privacy and outlines how personal information is collected, used, disclosed, and protected by Xiaomi and its affiliated companies. The policy applies to all Xiaomi devices, websites, and applications unless specific products or services have separate privacy policies. Personal information includes data that can identify individuals and may also involve sensitive personal data. Xiaomi collects information such as names, contact details, device-related data, application usage information, and location data for specific services. Users have the right to choose whether to provide requested information, but refusal may limit service access. Xiaomi also collects information from third parties and generates data from device usage, application usage, system services, and other sources. Users can contact Xiaomi for any privacy-related queries or special requests.