Security Privacy Policy

Our Privacy Policy was updated on June 25, 2021.

Please take a moment to familiarize yourself with our privacy practices and let us know if you have any questions.

Introduction

Security is an app provided by Xiaomi and its affiliated companies (hereinafter referred to as "Xiaomi", "we", "our" or "us") for clearing trash on your device, finding and neutralizing viruses, optimizing performance for gaming, saving battery, managing apps, and more.

We are committed to protecting your privacy. This Privacy Policy sets out the principles on which Security operates, and constitutes an important part of Xiaomi Privacy Policy. In the event of inconsistency between this Privacy Policy and Xiaomi Privacy Policy with respect to Security, the former shall prevail. For the terms and conditions not stipulated in this Privacy Policy, Xiaomi Privacy Policy shall prevail. Should you have any questions about our data handling practices as summarized in this Privacy Policy, please contact us via https://privacy.mi.com/support to address your specific concerns.

This Privacy Policy is designed with your needs in mind, and it is important that you have a comprehensive understanding of our personal information collection and usage practices, while ensuring that ultimately, you have control of your personal information provided to us. This Privacy Policy explains how we collect, use, disclose, process, and store any information that you give us when you use Security. Under this Privacy Policy, "personal information" means information that can be used to directly or indirectly identify an individual, either from that information alone or from that information combined with other information about that individual available to us. We will use your personal information strictly following this Privacy Policy.

Ultimately, what we want is the best for all our users. Should you have any questions about our data handling practices as summarized in this Privacy Policy, please contact us via https://privacy.mi.com/support to address your specific concerns. We will be happy to hear from you.

1. What information we collect and how we use it

1.1 Personal information that we collect and use with your authorization

The purpose of collecting personal information is to provide you with products and/or services, and to ensure that we comply with applicable laws, regulations, and other regulatory requirements. You have the right to choose whether or not to provide the information we have requested, but in most cases, if you do not provide your personal information, we may not be able to provide you with our products or services or respond to your queries. Features and services that may need to collect your personal information include:

1.1.1 Essential functionality of Security

A) Device check-up

With Security, you can check your device settings, storage, and cache for security issues and fix any issues found. During a check-up, we may collect device information such as Android ID, device model, MIUI version information, app version numbers and release types, carrier information, and device settings (language and region only). This information is stored locally on your device.

B) Blocklist

Blocklist helps you block unwanted calls and messages and malicious websites. To block spam messages, we may collect information such as your Xiaomi Account ID, blocked numbers and exceptions, and items added to keyword blocklist and keyword exceptions. Of the aforementioned, your Xiaomi Account ID is stored locally on your device.

To identify and block spam messages, we use information about these blocked numbers marked by users on our servers. To this end, we may collect information such as device type, MIUI version information, app version information, carrier information, device settings (language and region only), OAID and Android ID, blocked numbers and exceptions, and items added to keyword blocklist and keyword exceptions. The purpose of collecting this information is to update your blocklist when necessary and to provide user-specific services based on your device settings. This information is stored locally on your device.

To check if a website or a specific URL is safe, we collect information such as device model, MIUI version information, OAID, the version numbers of the current virus database and antivirus engine, the URLs of the websites you visit, browser information, and network communication errors. This information is stored locally on your device, except for OAID, the website URLs, and browser information.

C) Security scan

With Security, you can scan your device for viruses and threats, protect your device against potentially harmful apps, and keep your payments secure. In order to provide these services, we may collect a variety of device information such as GUID, OAID, IMSI, MAC address, local and server IP addresses, device information and manufacturer, Android and MIUI version information, carrier information, network type, file names, package names of the used payment apps, checksums and timestamps, user actions, names of detected viruses and the version number of the current virus database, version numbers of third-party apps, and network communication error information. We collect and analyze this information to keep our virus definitions up-to-date. The types of information we collect depend in part on which services you use in Security.

When you use Cloud virus scan, we collect information such as third-party app names, their version numbers and app sizes, WLAN SSID and BSSID, and device model in order to identify malicious apps on your device.

D) Installing apps via USB

We add some restrictions to installation of apps via USB to prevent malicious apps from being installed on your device from a computer. For example, installation of apps via USB will be automatically turned off if no SIM card is detected, or if the current SIM card has been used in seven or more mobile phones within 6 months. To determine the aforementioned, we collect information such as your Xiaomi Account ID, OAID, and SIM card ID and IP address.

E) Flash prevention

To prevent a non-MIUI build from being flashed to your device, we collect information including Android and MIUI version information, Android ID, device name, device settings (language and region only), OAID, system configuration, usage information, system settings, network type, and default package names.

F) Managing app permissions

When you use Security to manage app permissions, we collect device information such as carrier information, Android version and type, MIUI version and type, and device settings (language and region only). To help you control which capabilities or information that an app can access, we collect information such as installed apps and the apps that are set to Autostart. This information is stored locally on your device.

To restrict app permissions to chain start (i.e., start other apps automatically) to the minimum necessary, we collect information on MIUI version, app version, carrier information, and other device information such as Android ID, device settings (language and region only), and installed apps and their versions. Android ID, carrier information, installed apps and their version information are stored locally on your device.

G) Controlling data usage

You can use this feature to manage your mobile data and usage, purchase mobile data, and view WLAN and mobile data usage for individual apps.

When you top up your data, we collect information such as your Xiaomi Account ID, carrier information, SIM card registration location, IMSI, Android ID, app version number, SMS verification code, and the data plan purchased within the app. This information is stored locally on your device, except for carrier information, Xiaomi Account ID, and SIM card registration location. When you update carrier information manually within the app settings, we collect information such as Android ID, service number of your carrier, and messages sent from your carrier. We use this information to modify our carrier message template.

To keep track of data usage for individual apps, we collect information including package names, WLAN and mobile data usage, peak and off-peak data usage, and when WLAN or mobile data is on. This data will be saved locally on your device.

To provide better services and user experience, we upload information including encrypted Android ID, OAID, remaining data balance, and data usage when you turn on Report data usage info. You can turn it off in Security > Data usage > Settings, and use other features of the app as usual; we won't upload the aforementioned information when this feature is turned off.

H) Battery optimization

When you use Battery optimization to view battery consumption or optimize battery usage, we collect device information such as Android ID, MIUI version and type, carrier information, device settings (language and region only), and downloaded apps. This information is stored locally on your device.

I) App management

You can use this feature to lock apps, set app permissions, and create dual apps. In order to provide these services, we collect device information including your encrypted OAID, carrier information, Android and MIUI version information, Android ID, device settings (language and region only), network type, and API level. The types of information we collect depend in part on which services you use in Security. This information is stored locally on your device, except for OAID.

1.2 Personal information you may choose whether to authorize us to collect and use

1.2.1 In addition to the essential functionality mentioned above, we provide additional features to improve device performance. When you turn on those features, you allow us to collect information about you. The additional features include:

Game Turbo

Game Turbo improves gaming performance on your device. It boosts network speed, silences notifications, and helps you answer calls hands free. In order to provide these services, we collect device information such as Android and MIUI version information, app information, carrier information, device settings (language and region only), encrypted OAID and Android ID, Xiaomi Account ID, IMSI, IP address, and request time. This information is stored locally on your device, except for your OAID, Xiaomi Account ID, and IMSI.

1.2.2 To tailor in-app content, we use algorithms to recommend products and services. To this end, we collect device information when you use features such as Virus scan, Battery optimization, Game Turbo and Boost speed. This information may include Android ID, encrypted OAID, carrier information, device information, Android and MIUI version information, app version information, device settings (language and region only), network type, and API level. This information is stored locally on your device, except for OAID.

We may combine data we collect across services and from your different devices to deliver a consistent cross-device experience and to personalize our content, services, and recommendations. You may opt out at any time by turning off recommendations in Security > Settings > Privacy > Personalized recommendations.

1.3 You are fully informed that we may collect and use personal information without your consent if:

1.3.1 The personal information is vital to national security and defense;

1.3.2 The personal information is vital to public safety, public health, and major public interests;

1.3.3 The personal information is related to criminal investigations, prosecutions, trials, or execution of judgments;

1.3.4 The personal information is essential for protecting major legitimate rights (including life and property) and interests of the personal information subject or other people, but it is hard to obtain the subject's consent;

1.3.5 The personal information collected is made public by the subject at their own discretion;

1.3.6 The personal information is collected from public sources, such as news reports or government announcements;

1.3.7 The personal information is necessary for us to sign the contract as required by you;

1.3.8 The personal information is necessary to maintain the safe and steady operation of products and/or services provided, such as for discovering and handling faults of products and/or services;

1.3.9 The personal information is required for legal news releases; and

1.3.10 The personal information is de-identified in the results of statistical or academic research based on public interest.

2. Sharing your personal information with third-party service providers

Some of the services in Security are provided by third parties. We may occasionally share your personal information with third parties (as described below) in order to provide the products or services that you have requested.

2.1 When you use Cleaner, we may provide device information and version information to our third-party cleanup service providers such as Tencent and Clean Master.

2.2 When you use Security scan, we may provide device information and IP addresses to our third-party antivirus service providers such as Tencent and Antiy.

2.3 When you use Game Turbo, we may provide information including your IMSI and Xiaomi Account ID to our third-party game boosting service providers such as Sichuan Subao Network Technology.

If we share your personal information with such third parties, we will take appropriate measures to ensure the security of the processing of your personal information, including but not limited to the encryption of your personal information. We will reasonably examine the data security environment of the companies and organizations with which we share personal information and sign data processing agreements. We will require third parties to take sufficient measures to protect your information and strictly abide by the relevant laws and regulations as well as regulatory requirements.

3. Retention policy

We retain personal information for the period necessary for the purpose of information collection as described in this Privacy Policy or as required by applicable laws. We will cease to retain, and thus delete or anonymize personal information once the purpose of collection is fulfilled, or after we confirm your request for erasure, or after we terminate the operation of the corresponding product or service. An exception to this is personal information that we are processing for public interest, scientific or historical research, or statistical purposes. We will continue to retain this type of information for longer than its standard retention period, where permitted based on applicable laws, even if further data processing is not related to the original purpose of collection.

Your information will be stored within the territory of the People's Republic of China.

Information collected for personalizing content and recommendations is retained on our servers for 30 days. Device information collected for managing app permissions, including MIUI version information and device settings (language and region only), is retained for 90 days. Information collected for Game Turbo is retained for 6 months.

4. Your rights

4.1 Controlling settings

Xiaomi recognizes that privacy concerns differ from person to person. Therefore, we provide examples of ways for you to restrict the collection, use, disclosure, or processing of your personal information and to control your privacy settings:

Manage permissions for each app in Settings > Apps > Permissions;
Add phone numbers or apps to the blocklists or exceptions in Security;
Turn on or off Report data usage info in Security > Data usage > Settings.

If you have previously agreed to us using your personal information for the aforementioned purposes, you may change your mind at any time by writing to us or contacting us on https://privacy.mi.com/support.

4.2 Your rights to your personal information

Depending on applicable laws and regulations, you have the right to access, rectification, and erasure of personal information that we hold about you (hereinafter referred to as "the request").

You may also access and update the details relating to your personal information in Security on https://privacy.mi.com/support.

It will help us to process your request most efficiently if it meets the following conditions:

The request is submitted through Xiaomi's exclusive request channel detailed above and for the protection of your information security, your request should be in writing (unless the local law explicitly recognizes the oral request);
You provide sufficient information to enable Xiaomi to verify your identity and ensure that you are the data subject or legally authorized to act on the data subject's behalf.

Once we obtain sufficient information to confirm that your request can be processed, we shall proceed to respond to your request within any timeframe set out under your applicable data protection laws. In detail:

Based on the requirements of applicable laws, a copy of your personal data collected and processed by us will be provided to you upon your request free of charge. For any extra requests for relevant information, we may charge a reasonable fee based on actual administrative costs according to the applicable laws.
If any information we are holding on you is incorrect or incomplete, you are entitled to have your personal information corrected or completed based on the purpose of use.
Based on the requirements of applicable laws, you may have the right to request the deletion or removal of your personal information. We shall consider the grounds regarding your erasure request and take reasonable steps, including technical measures. Please note that we may not be able to immediately remove the information from the backup system due to applicable legal restrictions and/or security technology limitations. If this is the case, we will securely store your personal information and isolate it from any further processing until the backup can be cleared or be made anonymous.

We have the right to refuse to process requests that are not meaningful, manifestly unfounded or excessive, requests that damage others' right to privacy, extremely unrealistic requests, and requests that require disproportionate technical work, as well as requests not required under local law, regarding information that has been made public, and regarding information given under confidential conditions. If we believe that certain aspects of the request to delete or access the information may result in our inability to legally use the information for the aforementioned anti-fraud and security purposes, the request may also be rejected.

4.3 Withdrawal of consent

You may withdraw your consent previously provided to us for a particular purpose by submitting a request, including collecting, using, and/or disclosing your personal information in our possession or control. You can manage privacy permissions in Security > Settings > Allow to connect to the internet and access location. We will process your request within a reasonable time from when the request was made, and thereafter not collect, use, and/or disclose your personal information as per your request.
Please note that your withdrawal of consent may result in certain legal consequences. You may not be able to continue receiving the full benefit of Xiaomi's products and services, depending on how much authority you grant us to process your information when you use Security. The withdrawal of your consent or authorization will not affect the validity of our processing carried out upon your authorization up until the point of withdrawal.

4.4 Canceling a service or account

If you wish to cancel a specific product or service, you can contact us to request termination on https://privacy.mi.com/support.

If you wish to cancel the Xiaomi Account, please note that the cancellation will prevent you from using the full range of Xiaomi products and services. To protect your or others' legitimate rights and interests, we will judge whether or not to support your request for cancellation based on your use of various Xiaomi products and services.

5. Third-party websites and services

Our Privacy Policy does not apply to products or services offered by third parties. Security contains third-party products or services that help you to clear trash on your device, check for viruses and threats, and speed up gaming performance. Some of these products and services can be provided in the form of links to third-party websites, and some can work with the help of SDKs, APIs, etc. Your information may also be collected when you use these products or services. For this reason, we strongly suggest that you spend time reading third party service providers' privacy policies just like you read ours. We are not responsible for and cannot control how third parties use personal information which they collect from you. Our Privacy Policy does not apply to other sites linked from our services.

The following are examples of third-party terms and privacy policies that may apply when you use the specific products or services listed above:

Cleaner service providers:

Tencent's Privacy Policy: http://privacy.qq.com/

Privacy Notice of the Junk Clean Feature: https://www.cmcm.com/en/policies/privacy-for-sdk-cn

Antivirus service providers:

Tencent's Privacy Policy: http://privacy.qq.com/

Game boosting service provider:

Sichuan Subao Network Technology's Privacy Policy (Chinese only): http://www.xunyou.mobi/article-1967.html

6. Contact us

If you have any comments or questions about this Privacy Policy or any questions relating to Xiaomi's collection, use, or disclosure of your personal information, contact us via https://privacy.mi.com/support or at the address below. Please include "Privacy Policy" in your contact message. When we receive privacy or personal information requests about accessing or downloading personal information, we have a professional team to solve your problems. If your question itself involves a significant issue, we may ask you for more information. If you are not satisfied with the response you received from us in relation to your personal information, you can hand over the complaint to the relevant data protection regulatory authorities in your jurisdiction. If you consult us, we will provide information on the relevant complaint channels that may be applicable based on your actual situation.

Contact address:

#006, 6th Floor, Building 6, 33 Xi'erqi Middle Road, Haidian District, Beijing

China 100085