Xystis Worker Privacy Policy

1. Scope

This policy applies to the Xystis Worker mobile app, worker activation, Bluetooth pairing with Xystis coat controllers, thermal telemetry sent to the Xystis dashboard, and local diagnostic logs or CSV exports created by the app.

This policy does not cover separate websites, services, or third-party products that have their own privacy notices.

2. Information We Collect

Account, worker, and contact information: name, email address, phone number, job title or role, site, team, supervisor, worker assignment, employer-provided worker reference, and account activation status.

Authentication and activation information: invite codes, activation links, app user identifiers, account status, activation timestamps, and device assignment records.

Bluetooth and garment device information: Bluetooth device name and identifier, garment/controller serial number or device ID, hardware revision, firmware version, app version, connection status, and signal strength.

Thermal telemetry and control data: inside garment temperature, outside or predicted outside temperature, target/setpoint temperature, heating or cooling mode, power/PWM level, battery draw/current, timestamps, sequence numbers, firmware timing values, sensor availability, and diagnostic flags.

App diagnostics and session logs: app version, build number, mobile device model, operating system version, platform, session ID, error messages, parsing status, diagnostic log entries, and local CSV export files created when a user chooses to export logs.

The current Xystis Worker app does not collect photos or selfie verification images. If Xystis later adds optional identity verification, this policy and the Google Play Data Safety declaration will be updated before launch of that feature.

The current Xystis Worker app is not designed to collect precise or approximate location. If future Android Bluetooth permissions or product features require location-related data, this policy will be updated before release.

3. How We Use Information

We use information to activate worker access, pair the app with Xystis-enabled garments, display live thermal telemetry, send telemetry to the employer's Xystis dashboard, support device assignment, troubleshoot diagnostics, maintain security, improve reliability, and respond to support, privacy, and compliance requests.

Thermal telemetry is used to operate and evaluate the Xystis garment. It is not intended to diagnose, treat, or prevent any medical condition.

4. How Information Is Shared

We may share information with the worker's employer, deployment manager, or authorized dashboard administrators; service providers that host, secure, authenticate, email, or process the Xystis platform; support providers when needed to troubleshoot the app or garment; recipients selected by the worker when they use the device share sheet to export a CSV file; and government authorities or other parties when required by law or necessary to protect rights, safety, or security.

We do not sell personal information.

5. Employer-Managed Deployments

Xystis Worker is designed for employer-managed use. A worker's employer may create or invite the worker account, assign a garment or device to the worker, view telemetry and diagnostic information associated with the worker or device, and use the data for workplace operations, testing, safety review, or product validation depending on the deployment agreement.

Workers should contact their employer for questions about internal workplace policies, employment records, or employer decisions based on dashboard information.

6. Data Retention

We keep information for as long as needed to provide the app, support the dashboard, comply with legal obligations, resolve disputes, and maintain audit records. Retention periods may vary depending on the employer deployment, testing program, and applicable agreement.

Local CSV files exported by the worker are controlled by the worker and any recipients they choose through their device share sheet.

7. Security

We use technical and organizational measures designed to protect information. These may include access controls, encrypted network transport for cloud services, authentication, and limited administrative access. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your Choices And Requests

Depending on the deployment, workers may request access, correction, deletion, or deactivation of their information by contacting privacy@xystis.com, support@xystis.com, or their employer/deployment administrator.

Some requests may need to be handled by the employer if the employer controls the worker roster or dashboard deployment.

9. Children

Xystis Worker is not designed for children and is intended for workplace use by adults.

10. International Processing

Information may be processed in the United States or other countries where Xystis or its service providers operate.

11. Changes To This Policy

We may update this policy as the app, dashboard, or deployment model changes. The effective date at the top of this policy indicates when it was last updated.

12. Contact

Xystis, Inc.

Website: https://www.xystis.com

Support: support@xystis.com

Privacy: privacy@xystis.com