Your privacy is important to us. This Privacy Policy explains how IoTDevTek, LLC ("we,"
"our," or "us") collects, uses, discloses, and safeguards your information when you use our mobile
application, WellMAV™, related web services, and connected hardware.
By using WellMAV, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Authentication & Account Data
Because WellMAV requires user authentication, we collect and store credentials and profile details directly
on our own secure infrastructure to create, personalize, and protect your account:
User Name: Collected to personalize your experience and display your identity within
the app user interface.
Email Address: Required for account creation, identity verification, password resets,
and account-related communications.
User Login Identifier: Your email address or designated login handle used as your
unique credential.
Account Password: Securely collected and processed using strong cryptographic hashing
algorithms on our private server framework to protect your account from unauthorized access.
Account Data & User Preferences: Saved directly to our private database to maintain
your personalized configuration.
Connected Hardware & Sensor Data
To provide the app's core monitoring and control features, WellMAV communicates with your connected hardware
to collect:
Hardware Specifications: Device firmware version and hardware type.
Sensor Telemetry: Operational metrics including pump amperage (amps).
System Status: Binary operational states, including switch on/off states and pump
on/off status.
Firebase Services (Push Notifications)
We use Google Firebase (Firebase Cloud Messaging) for the sole purpose of sending push
notifications to your device. For this service to work, the app collects:
Device Tokens: A unique, anonymous identifier generated by your mobile operating system
(such as Apple iOS) and Firebase to route notifications specifically to your device.
Notification Analytics: Basic data regarding whether a notification was delivered or
opened, used strictly to improve our messaging.
Note: Firebase does not collect or have access to your account name, email address, password, user login,
sensor data, or core database records.
Our Hosting Service & Database Data
All core application features are powered by our own private hosting service and secure database, which
stores:
App-Specific User Data: Core user profiles, user preferences, historical
sensor metrics, and app usage details necessary for the app to function.
Server Logs: Standard operational logs including device types, sensor types, access
times, and unique hardware identifiers. We do not collect or log IP addresses. These logs are used
strictly for system security and performance monitoring.
2. How We Use Your Data
We use the collected data exclusively to provide and improve the WellMAV experience, specifically to:
Authenticate your identity, secure your login session, and grant access to your account via our host.
Display your user name and personalized configuration details within the application dashboard.
Deliver relevant updates, alerts, and system reminders via Firebase push notifications.
Maintain and operate our backend servers and custom database securely.
Monitor app performance, troubleshoot technical errors, and ensure system security.
3. Data Storage, Security, and Transit
Data Transit Security: We enforce strict industry-standard encryption protocols for all
data in transit. The WellMAV mobile application communicates with our hosting services exclusively over
encrypted HTTPS connections, ensuring user emails, logins, and passwords are secure. Your
connected hardware device communicates with our host services using Secure MQTT (MQTTS) via
standard open-source cryptographic libraries to prevent interception or tampering.
Storage & Infrastructure: Your name, email address, user login credentials, hashed
password, and hardware sensor history are processed and stored exclusively on our own secure hosting
servers. Anonymized device tokens are managed by Google Firebase infrastructure to route push
notifications.
Cellular Network Transit: Hardware telemetry is transmitted over encrypted commercial
cellular IoT network channels. Cellular network carriers function strictly as data transport conduits
and do not access, process, or store account credentials or personal profile records.
Security Measures: We implement strict administrative, technical, and physical security
measures—including cryptographic password hashing—to protect your personal data against unauthorized
access, loss, or alteration.
Retention: We retain your personal data, sensor history, and device notification tokens
only for as long as your WellMAV account is active or as needed to provide you with our services.
4. Third-Party Data Sharing & No Sale of Data
We do not sell, rent, trade, or share your personal data with third-party advertisers or commercial data
brokers for monetary or other consideration. We do not engage in targeted cross-context behavioral
advertising. Your data is handled only by our infrastructure service providers (our private hosting
facility, secure cellular carriers for data transit, and Google Firebase for push notifications) strictly as
required to operate the service.
5. Your Rights and Data Deletion
You have the right to access, update, correct, or delete your account information at any time. You can turn
off push notifications at any time through your mobile operating system settings (such as iOS). If you wish
to permanently delete your account and all associated data (including your name, email address, login
credentials, and historical sensor logs) from our database, you may:
Use the Delete Account option directly within the WellMAV Account Settings.
Processing Timeline & Retention: Upon receiving your request via the app or web page,
your account will be deactivated immediately, and the permanent deletion process will be completed within
a few minutes. All associated personal data and operational records are completely purged
from our servers, except for specific records we are legally required to retain by applicable law.
6. Children's Privacy
Our services and hardware products are not directed to or intended for children under the age of 13 (or the
applicable age of consent in your jurisdiction). We do not knowingly collect personal information from
children. If we discover that a child has provided us with personal information without parental consent, we
will take immediate steps to delete that data from our systems. If you believe a child has submitted
personal data to us, please contact us at support@iotdevtek.com.
7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new
Privacy Policy on this page and updating the "Last Updated" date at the top.
8. Contact Us
If you have any questions or suggestions about this Privacy Policy, please contact us: