Privacy Policy – Alledio Multi‑Sensor App

Version 2.0.0 · Effective 26 October 2026

This policy covers only the Alledio Multi‑Sensor mobile app for iOS and Android. It does not cover the alledio.com website, which has its own privacy policy.

1. Who is responsible

Andivi d.o.o.
Zagrebška cesta 102, 2000 Maribor, Slovenia
Company registration number: 3896030000
Email: info@alledio.com

Andivi d.o.o. publishes the app under the developer name "Andivi d.o.o." and is the data controller for anything described in this policy. Andivi has not appointed a Data Protection Officer; please use the email above for all privacy questions.

2. What the app does

The Alledio Multi‑Sensor app is a setup tool for your own Alledio Multi‑Sensor. It connects your phone to the sensor's local Wi‑Fi network and shows the sensor's configuration screens. The app talks only to that sensor, at the local address 192.168.4.1. There is no Andivi account, no login to Andivi, and no Andivi cloud service in the app.

3. The app does not collect personal data

The app does not collect, store, or transmit personal data to Andivi. It does not send personal data to any other company. It contains no analytics, advertising, crash‑reporting, or push‑notification services. No third‑party software component in the app transmits user data. The app does not contact Expo's update service.

4. Location permission (Android)

Android asks for precise location so the app can see which Wi‑Fi network the phone is on. Android requires this permission before any app may read the name of the connected Wi‑Fi network. The app does not read GPS coordinates and does not send a location anywhere. The permission is used only on your device, and only for the Wi‑Fi connection to your sensor.

On Android 13 and later, the app also asks for "nearby Wi‑Fi devices", for the same purpose: connecting to your sensor's Wi‑Fi network.

On iOS the app does not ask for location. iOS shows two prompts: "Local Network" (so the app can reach the sensor over Wi‑Fi to load its configuration screens) and the system "Ready to Scan" NFC sheet ("Interact with nearby NFC devices"). iOS also shows its standard confirmation when the app joins the sensor's Wi‑Fi network.

5. NFC tag and Wi‑Fi credentials

Each sensor carries an NFC tag containing the name and password of the sensor's own Wi‑Fi network. When you tap your phone on the tag, the app reads these two values, uses them to join that sensor's network, and keeps them only on your phone. They are never uploaded to Andivi or anyone else.

On iPhone, the same values may arrive as a link of the form prod.alledio.com/multisensor?ssid=…&password=…. When the app is installed, iOS hands this link directly to the app, and the app reads the Wi‑Fi name and password locally. The app does not send this link or its contents to alledio.com. iOS itself may contact prod.alledio.com once to verify that such links belong to the app; that check does not include the Wi‑Fi name or password.

If the app is not installed, your phone opens the link in a web browser instead. In that case the web server at prod.alledio.com receives the link as a normal web request, which includes the Wi‑Fi name and password, and may record it in standard server logs. Install the app before tapping the tag to avoid this.

6. Data sent to your sensor

Everything you enter in the app is sent only to your own sensor over the local Wi‑Fi network. Andivi does not receive any of it. This includes:

• Configuration values and settings.
• The sensor's login name and password.
• Certificate files you choose with the system file picker. The app sends the file to the sensor and discards it from memory after a successful upload. A temporary copy made by the file picker may remain in the app's cache until the operating system clears it; the app does not save certificates in its settings.
• Firmware‑update commands. "Check for updates" and "Install" only send a flag to the sensor; the sensor then checks for and downloads firmware itself. The app does not download firmware and does not contact any Andivi or Alledio server for this.
• The Diagnostics switch. This writes an on/off flag to the sensor. When on, the sensor itself sends diagnostic reports to a cloud service; the app does not send these reports. Details of the sensor's own network connections are described in the sensor documentation.

7. Sensor readings

The app shows live readings from the sensor (such as temperature, humidity, CO₂, presence, and related calculated values). These are displayed directly from the sensor, kept only in memory while the screen is open, and are not stored by the app or sent to Andivi.

8. Data kept on your phone

The app stores only a few display preferences on your phone: dark mode, a display‑style switch, and calibration numbers. These stay on the device and are removed when you uninstall the app.

9. Children

The app is not directed at children and is not intended for anyone under 16 years of age.

10. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, correct, and delete your personal data, and to object to its processing. Because Andivi does not hold any app user data on its servers, there is nothing for Andivi to access, correct, or delete on your behalf. Data stored on your sensor can be managed through the sensor's configuration screens; data stored on your phone can be removed by uninstalling the app. You may also lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec) or your local supervisory authority.

The app is available worldwide, and the same terms – no collection of personal data by Andivi – apply to users in every country.

11. Changes and contact

If the app's behaviour changes in a way that affects this policy, we will publish an updated version at alledio.com/app-privacy with a new version number and effective date. Questions: info@alledio.com.