Version:v20240808

Recorder Privacy Policy

Our Privacy Policy was updated and took effect on 1 August 2024.

Please take a moment to familiarise yourself with our privacy practices and let us know if you have any questions.

Introduction

Recorder is an app provided by Xiaomi Inc. and our affiliates (hereinafter referred to as "Xiaomi", "we", "our", or "us") that offers features including audio recording, speech-to-text transcription, cloud sync, text summaries and translation of audio recordings, and more.

We are committed to protecting your privacy. This Privacy Policy sets out the principles on which Recorder operates, and constitutes an important part of Xiaomi Privacy Policy. In the event of inconsistency between this Privacy Policy and Xiaomi Privacy Policy with respect to Recorder, the former shall prevail. For the terms and conditions not stipulated in this Privacy Policy, Xiaomi Privacy Policy shall prevail. Terms and conditions regarding the protection of minors, security measures, and cross-border data transmission can be found in Xiaomi Privacy Policy.

This Privacy Policy is designed with your needs in mind, and you must have a comprehensive understanding of our personal information collection and usage practices while ensuring that ultimately, you have control of your personal information provided to us. This Privacy Policy explains how we collect, use, disclose, process and store any information that you give us when you use our Recorder. Under this Privacy Policy, "personal information" means information that can be used to directly or indirectly identify an individual, either from that information alone or from that information combined with other information about that individual available to Xiaomi. We will use your personal information strictly following this Privacy Policy.

Ultimately, what we want is the best for all our users. Should you have any concerns with our personal information processing practices as summarised in this Privacy Policy, please contact https://privacy.mi.com/support to address your specific concerns. We will be happy to hear from you.

1. What information we collect and how we use it

In collecting and using the information that you actively provide during the use of our products and services, as well as personal information that arises from the use of our products and services, we will follow the principles of legitimacy, legality, transparency, and necessity, and use this information for the purposes described in this Privacy Policy. If we want to use your personal information for other purposes not specified in this Privacy Policy, or use your personal information previously collected for a specific purpose for other purposes, we will inform you in a reasonable manner, and ask for your consent again before use.

1.1 Personal information you may choose whether to authorise us to collect and use

To improve your experience using Recorder, we may collect and use your personal information for the additional features below to work. If you choose not to provide this personal information, you can still use Recorder, but you may not have access to some additional features. The additional features include:

1.1.1 Text transcription (only supported on some device models)

You can use this feature to transcribe audio recordings into text. To provide this feature, we will collect audio files for recognition and transcription.

1.1.2 Text translation and AI summaries (only supported on some device models)

Transcribed audio files can be translated into other languages, or you can generate summaries of them. To provide this feature, we will collect transcribed text content of recordings to translate and summarise content. The AI summary results will be collected in order to display them to you.

1.2 You are fully informed that we may collect and use personal information without your consent if:

1.2.1 The personal information is related to the ability of the personal information controller to perform obligations stipulated by laws and regulations;

1.2.2 The personal information is vital to national security and defense;

1.2.3 The personal information is vital to public safety, public health, and major public interests;

1.2.4 The personal information is related to criminal investigations, prosecutions, trials, or execution of judgments;

1.2.5 The personal information is essential for protecting major legitimate rights (including life and property) and interests of the personal information subject or other people, but it is hard to obtain the subject's consent;

1.2.6 The personal information collected is made public by the subject at their own discretion;

1.2.7 The personal information is necessary to sign and execute a contract at the personal information subject's request;

1.2.8 The personal information is collected from public sources, such as news reports or government announcements;

1.2.9 The personal information is necessary to maintain the safe and steady operation of products and/or services provided, such as for discovering and handling faults of products and/or services;

1.2.10 The personal information controller is a news or media enterprise, and the personal information is necessary for legal news releases;

1.2.11 The personal information controller is a scientific or educational institution, and the personal information is de-identified in the results of statistical or academic research based on public interest.

1.3 Collection of personal information from third-party sources

When permitted by law, we may collect information about you from third-party sources. For example, we verify your information for specific accounts through legal means with your authorisation for the purpose of security and fraud prevention; you authorise the third-party account to sign in to use our service or authorise the import of your information (such as account name or nickname) on the third-party platform; or we collect information related to you provided by others.

1.4 Non-personally identifiable information

We may also collect other types of information which are not directly or indirectly linked to an individual (and which may not be defined as personal information). Such information may include statistical data generated when you use a specific service, such as device related information, daily usage events, page access events, page access time, session events, online monitoring data such as request duration and the number of requests and error requests, and app crash events. The purpose of such collection is to improve the services we provide to you. The type and amount of information collected depends on how you use our products and/or services.

We collect information about your activities on our website or app, such as unique device identifiers, device model, system version number, etc. We aggregate this information to help us provide more useful information to customers and understand which parts of our website, products, and/or services are of most interest to customers. Aggregated data is considered non-personal information for the purposes of this Privacy Policy. If we combine non-personally identifiable information with personal information, such information will be treated as personal information as long as it is combined.

2. How we share, transfer, and publicly disclose your personal information

2.1 Sharing

We do not sell any personal information to third parties.

We may sometimes share your personal information with third parties in order to provide or improve our products and/or services, including offering products and/or services based on your requirements. If you no longer wish to allow us to share this information, please contact us at https://privacy.mi.com/support.

2.1.1 Sharing that you actively choose or request

With your explicit consent or at your request, we will share your personal information within the scope of your consent with specific third parties designated by you.

2.1.2 Sharing information with our group

In order to successfully conduct business operations and to provide you with all the features of our products and/or services, we may share your personal information from time to time with other Xiaomi affiliates.

2.1.3 Sharing your personal information with third-party service providers

Part of the services in Recorder are provided by third-party service providers. For this reason, we need to provide some of your personal information to our partners, related parties, and third-party service providers in order to provide the services that you have requested. If we share your personal information with such third parties, we will take appropriate measures to ensure the security of the processing of your personal information, including but not limited to the encryption of your personal information. We will reasonably examine the data security environment of the companies and organisations with which we share personal information and sign data processing agreements. We will require third parties to take sufficient measures to protect your information and strictly abide by the relevant laws and regulations as well as regulatory requirements.

2.2 Transfer

Xiaomi will not transfer your information to any subject except in the following cases:

  • Where we have obtained your explicit consent;

  • If Xiaomi is involved in the merger, acquisition, or sale of all or part of its assets that may affect your personal information, we will notify you of any changes in the ownership and use and any choice you may have regarding your personal information by email and/or by posting a prominent notice on our websites or by other appropriate means;

  • In the circumstances explained in this Privacy Policy or by otherwise notifying you.

2.3 Public disclosure

Xiaomi may publicly disclose your personal information under the following circumstances:

  • Where we need to announce a winner of a promotion, competition, or sweepstake, in which case we only publish limited information;

  • Where we have obtained your explicit consent, or you have disclosed the information via our services such as on social media pages or public forums; and

  • Public disclosure based on law or reasonable grounds, including laws and regulations, legal procedures, litigation, or at the request of relevant government departments.

3. How we store and protect your personal information

3.1 Security safeguards

We are committed to keeping your personal information secure. In order to prevent unauthorised access, disclosure, or other similar risks, we have put in place all legally required physical, electronic, and managerial procedures to safeguard and secure the information we collect on your mobile device and on Xiaomi websites. We will ensure that we safeguard your personal information in accordance with applicable law.

All your personal information is stored on secure servers and protected in controlled facilities. We classify your information based on importance and sensitivity and ensure that your personal information has the required level of security. We have special access controls for cloud-based data storage, and we regularly review our information collection, storage, and processing practices, including physical security measures, to guard against any unauthorised access and use.

We conduct due diligence on business partners and third-party service providers to make sure that they are able to protect your personal information. We also check that appropriate security standards are maintained by these third parties by putting in place appropriate contractual restrictions, and where necessary, carrying out audits and assessments. In addition, our employees and those of our business partners and third party service providers who access your personal information are subject to enforceable contractual obligations of confidentiality.

We conduct security and privacy protection training courses and tests to enhance our employees' awareness of the importance of protecting personal information. We will take all practicable and legally required steps to safeguard your personal information. However, you should be aware that the use of the Internet is not entirely secure, and for this reason we cannot guarantee the security or integrity of any personal information when transferred from you or to you via the Internet.

We handle personal data breaches as required by applicable data protection law which includes, where required, notifying the breach to the relevant data protection supervisory authority and data subjects.

3.2 What you can do

You can set a unique password for Xiaomi services and not disclose your password or account information to anybody (unless such person is duly authorised by you) to avoid password leaks to other websites which may harm your account security at Xiaomi. Whenever possible, do not disclose Xiaomi verification codes you received to anyone (including those who claim to be Xiaomi customer service). Whenever you sign in as a Xiaomi Account user on Xiaomi websites, particularly on somebody else's computer or on public Internet terminals, you should always sign out at the end of your session.

When you leave Recorder products or services to browse or use other products and/or services provided by third parties, the third party's privacy statement or related policies will apply to any personal information you provide to them. Once you navigate away from Recorder products or services, we will not have the ability nor the direct obligation to protect any personal information you provide to a third party. Please properly protect your personal information and carefully read the privacy statement or related policies provided by the third party.

Xiaomi cannot be held responsible for lapses in security caused by a third party accessing your personal information as a result of your failure to keep your personal information private. Notwithstanding the foregoing, you must notify us immediately if there is any unauthorised use of your account by any other Internet user or any other breach of security.

Your assistance will help us protect the privacy of your personal information.

3.3 Retention policy

We retain personal information for the period necessary for the purpose of the information collection described in this Privacy Policy or as required by applicable laws. We will cease to retain and delete or anonymise personal information once the purpose of collection is fulfilled, or after we confirm your request for erasure, or after we terminate the operation of the corresponding product or service. An exception to this is personal information that we are processing for public interest, scientific, historical research or statistical purposes. We will continue to retain this type of information for longer than its standard retention period, where permitted based on applicable laws, even if further data processing isn't related to the original purpose of collection.

4. Protection of minors

We take the protection of children's personal information seriously. If you are a minor between the ages of 14 and 18, you should read and agree to this Privacy Policy under the supervision and guidance of your parent or guardian before using Recorder and related services. Recorder doesn't provide services to children under 14 years of age. If you are a parent or guardian of a minor under the age of 14, and you believe that the minor has provided us with personal information, you can access it by visiting https://privacy.mi.com/support and contact us to ensure that the personal information is promptly deleted.

5. How your personal information is transferred globally

Xiaomi operates and controls facilities around the world that process and back up personal information. Currently, Xiaomi operates data centres in China, India, the United States, Germany, Russia, and Singapore. For the purposes of this Privacy Policy, your information may be transferred to these data centres in accordance with applicable law.

We may also share your personal information with our third-party service providers and business partners and, accordingly, your information may be transferred to other countries or regions. Different jurisdictions around the world may not implement the same standards of personal information protection as your jurisdiction. There may be risks under different data protection laws. However, this does not change our commitment to comply with this Privacy Policy and protect your personal information.

  • Personal information collected and generated during our operations on the Chinese mainland will be stored in data centres operated on the Chinese mainland, except for information that is permitted to be transferred across borders under applicable law.

  • The information we collect and generate in our operations in Russia is processed and stored in data centres operated in Russia, except for cross-border transmissions permitted under Russian law.

  • Personal information generated during our operations in India will be stored in data centres operated in India.

If we need to transfer your personal information outside your jurisdiction, whether to our affiliates or third-party service providers, we will do so in accordance with applicable law. We will ensure that all transfers will be made in accordance with the requirements of your applicable local data protection laws by implementing consistent and appropriate safeguards. For additional information about our security mechanisms, contact us on https://privacy.mi.com/support.

If you use our products and/or services within the European Economic Area (EEA), Xiaomi Technology Netherlands B.V. will act as the data controller and Xiaomi Technologies Singapore Pte. Ltd. will be responsible for data processing. You can find contact addresses in the "Contact us" section.

If Xiaomi transfers your data generated in the European Economic Area (EEA) to Xiaomi's affiliated organisations or third-party services provided outside the EEA, we will do so in accordance with the security mechanisms provided in the EU Standard Contractual Clauses or the General Data Protection Regulation (GDPR). For additional information about our security mechanisms, contact us on https://privacy.mi.com/support.

6. Your rights

6.1 Controlling settings

Xiaomi recognises that privacy concerns differ from person to person. Therefore, we provide examples of ways for you to restrict the collection, use, disclosure, or processing of your personal information and to control your privacy settings:

  • You can withdraw your consent to this Privacy Policy in Settings > Privacy > Withdrawal of consent.

If you have previously agreed to us using your personal information for the aforementioned purposes, you may change your mind at any time by writing to us or contacting us on https://privacy.mi.com/support.

6.2 Your rights to your personal information

Depending on applicable laws and regulations, you may have the right to access, rectification, erasure (and certain other rights) in relation to personal information that we hold about you (hereinafter referred to as "the request").

You may also access, update, and delete the details relating to the personal information in your Xiaomi Account at https://account.xiaomi.com or by signing into your account on your device. For additional information, please write to us or contact us on https://privacy.mi.com/support.

The request should meet the requirements of applicable laws and the following conditions:

  • The request is submitted through Xiaomi's exclusive request channel detailed above and for the protection of your information security, your request should be in writing (unless the local law explicitly recognises the oral request);

  • You provide sufficient information to enable Xiaomi to verify your identity and ensure that you are the data subject or legally authorised to act on the data subject's behalf.

Once we obtain sufficient information to confirm that your request can be processed, we shall proceed to respond to your request within any timeframe set out under your applicable data protection laws. In detail:

  • Based on the requirements of applicable laws, a copy of your personal data collected and processed by us will be provided to you upon your request free of charge. For any extra requests for relevant information, we may charge a reasonable fee based on actual administrative costs according to the applicable laws.

  • If any information we are holding on you is incorrect or incomplete, you are entitled to have your personal information corrected or completed based on the purpose of use.

  • Based on the requirements of applicable laws, you may have the right to request the deletion or removal of your personal information. We shall consider the grounds regarding your erasure request and take reasonable steps, including technical measures. Please note that we may not be able to immediately remove the information from the backup system due to applicable law and/or technological limitations. If this is the case, we will securely store your personal information and isolate it from any further processing until the backup can be deleted or be made anonymous.

We have the right to refuse to process requests that are not meaningful, manifestly unfounded or excessive, requests that damage others' right to privacy, extremely unrealistic requests, and requests that require disproportionate technical work, as well as requests not required under local law, regarding information that has been made public, and regarding information given under confidential conditions. If we believe that certain aspects of a request to delete the information may result in our inability to legally use the information for the establishment, exercise, or defense of legal claims or reasons permitted by applicable law, it may also be rejected.

6.3 Obtaining a copy of your personal information

You can contact us on https://privacy.mi.com/support to request a copy of your personal information that we hold. After receiving your request and verifying your identity, we will provide the personal information you gave us during the use of our services.

6.4 Withdrawal of consent

You may withdraw your consent by submitting a request in Settings > Privacy > Withdrawal of consent, including collecting, using, and/or disclosing your personal information in our possession or control. Based on the specific service you are using, you can contact us on https://privacy.mi.com/support. We will process your request within a reasonable time from when the request was made, and thereafter not collect, use and/or disclose your personal information as per your request.

Attention: Your withdrawal of consent may result in some legal consequences. Additionally, you may not be able to continue receiving the full benefit of Xiaomi's products and services, depending on how much authority you grant us to process your information when you use Recorder. The withdrawal of your consent or authorisation will not affect the validity of our processing carried out upon your authorisation up until the point of withdrawal.

6.5 Canceling a service or account

You may cancel a specific product or service as specified in this Privacy Policy. Alternatively, if no requirements are specified, you can contact us to request termination on https://privacy.mi.com/support.

7. Updating this Privacy Policy

We review this Privacy Policy periodically based on changes in business and services and may update it from time to time. If we make any significant changes to this Privacy Policy, we will notify you through a pop-up dialog in the app or an email to ensure that you understand what information we collect and how we use it. Such changes to the Privacy Policy will apply from the date of update specified in the notice. We encourage you to regularly check the Privacy Policy provided in the app for the latest information on our privacy practices. We will ask for your explicit consent when we collect additional personal information from you or when we use or disclose your personal information for new purposes.

8. Contact us

We've established a dedicated department for the protection of personal information. If you have any comments or questions about this Privacy Policy or any questions relating to Xiaomi's collection, use or disclosure of your personal information, feel free to contact us at the address below or by visiting https://privacy.mi.com/support. Please include "Privacy Policy" in your contact message. When we receive questions about personal information or requests to download or access items, we have a professional team that addresses such concerns. If your question itself involves a significant issue, we may ask you for more information. If you are not satisfied with the response you received, you can hand over the complaint to the relevant regulatory authority in your jurisdiction. If you consult us, we will provide information on the relevant complaint channels that may be applicable based on your actual situation.

Mailing address:

#018, 8th Floor, Building 6, 33 Xi'erqi Middle Road, Haidian District, Beijing

China 100085

Xiaomi Singapore Pte. Ltd.

20 Cross Street, China Court #02-12

Singapore 048422

For users in the European Economic Area (EEA):

Xiaomi Technology Netherlands B.V.

Room 04-106, Wework Strawinskylaan 4117 4th Floor, Atrium North Tower Amsterdam, 1017XD