Version:v20241126

Mi Roaming Privacy Policy

Our Privacy Policy was updated on November 13th, 2024.

Please take a moment to familiarize yourself with our privacy practices and let us know if you have any questions.

Introduction

The global access to the Internet refers to the service provided by Xiaomi Inc. and its affiliated companies (hereinafter refer to as "Xiaomi", "we", "our" or "us") to domestic users who can access the Internet by using the demestic data traffic (hereinafter referred to as the "domestic data traffic"); meanwhile, Xiaomi or we will provide demestic users with the global data roaming service of virtual SIM card, namely, "global access to the Internet" service.

We take your privacy very seriously. This Privacy Policy sets out the privacy representations and commitments on global access to the Internet, and constitutes an important part and parcel of the Xiaomi Privacy Policy. In the event of inconsistency between this Privacy Policy and Xiaomi Privacy Policy with respect to special covenants and agreements on global access to the Internet, the former shall prevail. For the terms and conditions not stipulated in this Privacy Policy, Xiaomi Privacy Policy shall prevail. Particularly with respect to covenants and agreements on "protection of minors' information, security measures and cross-border transmission", you should read the Xiaomi Privacy Policy carefully.

This Privacy Policy is designed with your needs in mind, and you must have a comprehensive understanding of our personal information collection and usage practices while ensuring that ultimately, you have control of your personal information provided to us. This Privacy Policy explains how we collect, use, disclose, process and store any information that you give us when you use our Mi Roaming. Under this Privacy Policy, "personal information" means information that can be used to directly or indirectly identify an individual, either from that information alone or from that information combined with other information about that individual available to Xiaomi. We will use your personal information strictly following this Privacy Policy.

Ultimately, what we want is the best for all our users. Should you have any questions with our data handling practices as summarized in this Privacy Policy, please contact us at https://privacy.mi.com/support to address your specific concerns. We will appreciate your feedback.

1. What information is collected by us and how do we use it?

1.1 Personal information that we collect and use with your authorization

The purpose of collecting personal information is to provide you with products and/or services and to ensure that we comply with applicable laws, regulations and other regulatory requirements. You have the right to choose whether or not to provide the information we have requested, but in most cases, if you do not provide your personal information, we may not be able to provide you with our services or respond to your queries. The related features include:

1.1.1 Real name authentication of account

When you use the domestic data traffic top-up service, we need your real name information as required by the relevant laws and regulations or by the service provider. Therefore, we may collect your name, ID card number, photos on the front and back of your ID card and your live face photo to judge your identity.

Besides, we will also collect information on your Mi Account and unique device identifier (IMEI/OAID (Android Q new devices)/FID), in order to create the user identifier of global access to the Internet and domestic data traffic for you.

1.1.2 Order placing

Before you places an order, we will collect your information like networking type, physical card operator, and device information (including mobile phone model, Android and MIUI system version number, system country and language, CPU type), in order to judge whether your device has global access to the Internet or not and adjust the content and form of services we provide to you.

When you purchase a package, the system will generate an order of the package purchased by you. We may collect your information on Mi account and order, including order number, starting, ending, activating and purchase time of the order, number of purchase, status of order, period of validity, product ID, and region and amount of order, in order to verify your identity, determine the deal and provide the payment or settlement service.

1.1.3 Use

When you use our Mi Roaming service, we may collect your network operator, network type, and mobile country code (MCC) information in order to analyze our quality of service such as network signal and speed, as well as optimize our user experience. At the same time, in order to analyze the compatibility of the positioning device model and the Mi Roaming app, we may also collect your mobile phone model, Android version number, MIUI version, and app version information. We will constantly use your above information to improve and optimize our service.

1.1.4 Customer service and after-sale service functions

Our online customer service and after-sale service functions will use your information on your account and order. To ensure the security of your account, our online customer service staff will use your account information to check your identity. When you need us to provide you with the customer service and after-sale service pertaining to your order information, we will inquire your order information. You may provide other information apart from the information above when communicating with our customer service staff, such as reason for refund and result of refund.

1.1.5 Mi Carrier Services

Mi Carrier Services provides users with services such as top up, domestic mobile data purchase, and current SIM card service package inquiry. In order to provide these services, we may collect your phone number and mobile operator code when you use the Mi Carrier Service. When you purchase products or services in the Mi Carrier Service, we may collect the information from the purchase order generated to complete the top up. The purchase order information will be linked to your Mi Account.

1.2 Personal information you may choose whether to authorize us to collect and use

1.2.1 To make your purchase experience more convenient and smoother, we may collect and use your personal information in our additional functions. For example, we may collect your location information to analyze the signal and network problems when you surf the Internet. We may also invoke the access to your mobile storage to store data. If you do not provide such personal information, you can still purchase and use a package, but may not enjoy the convenience after adjustment of the additional functions.

The above additional functions will require you to enable the access to your geographic location (location information) and mobile storage so as to realize the collection and use of information involved by such functions. Attention: If you enable the access, it means that you authorize us to collect and use such personal information to realize the above functions. However, if you disable the access, it means that you withdraw the authorizations; in that case, we will not collect and use your personal information in that aspect any more, and cannot provide you with the above functions corresponding to the authorizations. Your disabling the authorizations will not affect the validity of our processing of your personal information carried out upon your authorization up until the point of disabling.

1.3 You are fully informed that we may collect and use personal information without your consent if:

1.3.1 The personal information is vital to national security and defense;

1.3.2 The personal information is vital to public safety, public health, and major public interests;

1.3.3 The personal information is related to criminal investigations, prosecutions, trials, or execution of judgments;

1.3.4 The personal information is essential for protecting major legitimate rights (including life and property) and interests of the personal information subject or other people, but it is hard to obtain the subject's consent;

1.3.5 The personal information collected is made public by the subject at their own discretion;

1.3.6 The personal information is collected from public sources, such as news reports or government announcements;

1.3.7 The personal information is necessary for us to sign the contract as required by you;

1.3.8 The personal information is necessary to maintain the safe and steady operation of products and/or services provided, such as for discovering and handling faults of products and/or services;

1.3.9 The personal information is required for legal news releases; and

1.3.10 The personal information is de-identified in the results of statistical or academic research based on public interest.

2. Sharing your personal information with third-party service providers

Part of the service content in this business is provided by third party service providers. For that purpose, we need to provide the third party service providers with part of your personal information. For example, we may share your personal information with the third party service providers in the following circumstance:

  1. Virtual Card Service Providers: The virtual card service is provided by third parties such as 263.net, CITIC Telecom International, and KnowRoaming. When you use this service, we may provide information relating to your virtual card account, including product ID, product type, and product quantity, to these service providers in order to provide you with virtual card resource services.

  2. Account Real-Name Authentication Service Providers: The real-name authentication service is provided by third parties such as id5 and Megvii. During the real-name authentication process, we may provide your ID number, photos of both sides of your ID card, and full name to these service providers in order to verify the user's real name.

  3. Telecom Operator: According to your choice, mobile data is provided by a third party, i.e., China Telecom Corporation Limited Hunan Branch. Subject to your authorization and consent, we may provide your ID card photo, full name, ID number, full-faced photo and encrypted account ID, and payment order number to the third party in order to provide the mobile data service you purchased.

  4. Domestic Mobile Data Service Providers: Domestic mobile data service is provided by third parties such as Shanxi Shixun Tongda Technology Co., Ltd., Hangzhou Santi Technology Co., Ltd., Shenzhen Wanheng Technology Co., Ltd., Henan Yunzhishu Information Technology Co., Ltd., Bitefeng Technology (Beijing) Co., Ltd., Beijing Ronglian Yitong Information Technology Co., Ltd., and ASPire Information Network (Shenzhen) Co., Ltd. When you use this service, we may provide your mobile data purchase order number, order product ID, amount paid, and mobile phone number to the third party to provide the domestic mobile data service you purchased.

If we share your personal information with such third parties, we will secure your information by employing encryption. We will reasonably examine the data security environment of the companies and organizations with which we share personal information and sign data processing agreements with them; we will require third parties to take sufficient measures to protect your information and strictly abide by the relevant laws and regulations as well as regulatory requirements.

3. Retention policy

We retain personal information for the period necessary for the purpose of the information collection described in this Privacy Policy or as required by applicable laws. We will cease to retain and delete or anonymize personal information once the purpose of collection is fulfilled, or after we confirm your request for erasure, or after we terminate the operation of the corresponding product or service. An exception to this is personal information that we are processing for public interest, scientific, historical research or statistical purposes. We will continue to retain this type of information for longer than its standard retention period, where permitted based on applicable laws, even if further data processing isn't related to the original purpose of collection.

Your information will be saved within the territory of the People's Republic of China.

4. Your rights

4.1 Controlling settings

We recognize that privacy concerns differ from person to person. Therefore, we provide examples of ways we provide the global access to the Internet service for you to restrict the collection, use, disclosure or processing of your personal information and control your privacy settings:

· Switch on or off access to location or storage reading;

· Switch off access to camera and recording after real name authentication is completed;

· Tap "Profile - Settings - Personal Data" in your mobile app to modify your personal information, including nickname and gender;

· Inquire or delete the historical information you browsed, or search historical information or order information;

· Sign in or out of the Mi Account.

If you have previously agreed to us using your personal information for the aforementioned purposes, you may change your mind at any time by writing or contracting us at https://privacy.mi.com/support.

4.2 Your rights to your personal information

Depending on applicable laws and regulations, you have the right to access, rectification, and erasure of any other personal information that we hold about you (hereinafter referred to as the request).

You may also access and update the details relating to the personal information in your Mi Account at https://account.xiaomi.com or by signing in to your account on your device. For additional information, please write to us or contact us at https://privacy.mi.com/support .

Most laws requires that the request made by the personal information subject follow specific requirements, and this Privacy Policy requires that your request satisfy the following conditions:

· Through our exclusive access of request and for the protection of your information security, your request should be in writing (unless the local law explicitly recognizes the oral request);

· Provide sufficient information to enable us to verify your identity and ensure that the applicant is the subject or legally authorized person of the requested information.

Once we obtain sufficient information to confirm that your request can be processed, we shall proceed to respond to your request within any timeframe set out under your applicable data protection laws. In detail:

Based on the requirements of applicable laws, a copy of your personal data collected and processed by us will be provided to you upon your request free of charge. For any extra requests for relevant information, we may charge a reasonable fee based on actual administrative costs according to the applicable laws.

If any information we are holding on you is incorrect or incomplete, you are entitled to have your personal information corrected or completed based on the purpose of use.

Based on the requirements of applicable laws, you have the right to request the deletion or removal of your personal information. We shall consider the grounds regarding your erasure request and take reasonable steps, including technical measures. If the right is upheld, we may not be able to immediately remove the information from the backup system due to applicable legal and security technologies. In that case, we will securely store your personal information and isolate it from any further processing until the backup can be cleared or be made anonymous. For example, according to the E-commerce Law of the People's Republic of China, information on your goods, services and transactions will be saved for no less than three years from the date of transaction completion.

We have the right to refuse to process requests that are not meaningful/entangled, requests that damage others' right of privacy, extremely unrealistic requests, requests that require disproportionate technical work, and requests not required under local law, information that have been made public, information given under confidential conditions. If we believe that certain aspects of the request to delete or access the information may result in our inability to legally use the information for the aforementioned anti-fraud and security purposes, it may also be rejected.

4.3 Withdrawal of consent

· You may withdraw your consent by submitting a request, including collecting, using, and/or disclosing your personal information in our possession or control. Based on the specific service you are using, you can contract us at https://privacy.mi.com/support. We will process your request within a reasonable time from when the request was made, and thereafter not collect, use and/or disclose your personal information as per your request.

· Attention: Your withdrawal of consent may result in some legal consequences. You may not be able to continue receiving the full benefit of Xiaomi’s products and services depending on the extent of our processing of information upon your authorization. The withdrawal of your consent or authorization will not affect the validity of our processing carried out upon your authorization up until the point of withdrawal.

4.4 Cancelling a service or account

If you wish to cancel a specific product or service, you can contact us at https://privacy.mi.com/support to request termination.

If you wish to cancel the Mi Account, please note that the cancellation will prevent you from using the full range of Xiaomi products and services. Cancellation may be prevented or delayed in certain circumstances. To protect your or others' legitimate rights and interests, we will judge whether or not to support your request for cancellation based on your use of various products and services of Xiaomi.

5. Third-party websites and services

Our Privacy Policy does not apply to products or services offered by a third party. Depending on the global access to the Internet product or service you use, it may incorporate third parties’ products or services involving virtual card support, identity authentication, and data traffic service. Some of these will be provided in the form of links to third parties’ websites, and some will be accessed in the form of SDKs, APIs, etc. Your information may also be collected when you use these products or services. For this reason, we strongly suggest that you spend time reading the third party’s privacy policy just like you read ours. We are not responsible for and cannot control how third parties use personal information which they collect from you. Our Privacy Policy does not apply to other sites linked from our services.

The following are the examples of when third party terms and privacy policies may apply when you use the specific products or services listed above:

· Third-party Telecom Operator's Privacy Policy:

o China Telecom Corporation Limited Hunan Branch's "User Privacy Policy": http://www.189.cn/hn/sy_yw/sy_yw_gwzn/101959.html

6. Contact us

If you have any comments or questions about this Privacy Policy or any questions relating to Xiaomi’s collection, use or disclosure of your personal information, please contact us at the address below referencing “Privacy Policy”. When we receive privacy or personal information questions about access/download requests, we have a professional team to solve your problems. If your question itself involves a significant issue, we may ask you for more information. If you are not satisfied with the response you received, you can hand over the complaint to the relevant regulatory authority in your jurisdiction. If you consult us, we will provide information on the relevant complaint channels that may be applicable based on your actual situation.

Mailing address:

#018, 8th Floor, Building 6, 33 Xi'erqi Middle Road, Haidian District, Beijing

China 100085

Contact form: https://privacy.mi.com/support