BrineLink LLC

This Privacy Policy explains how we collect, store, use, and safeguard your personal information and device telemetry when you use our mobile application and IoT hardware devices.

1. Information We Collect

A. Account Information

When you register an account in the App, we collect:

• Email address — used to uniquely identify your account, facilitate secure sign-in, and deliver critical equipment service communications.
• Authentication tokens — cryptographic session tokens managed via Supabase Auth to keep your session securely signed in without storing plaintext passwords.

B. Hardware Device & Sensor Telemetry

When you pair and operate compatible smart water monitors on your account, our cloud backend securely collects operational telemetry:

• Water Softener Monitors (BrinePulse™):
  • Time-of-Flight (ToF) laser and ultrasonic distance measurements.
  • Calculated salt depth (inches/millimeters) and tank capacity fill percentage.
  • Historical consumption metrics and refill event tracking.
• Whole-House Sediment Filter Monitors (SediPulse™):
  • 940 nm optical backscatter raw proximity counts from the integrated optical engine.
  • Calculated filter sediment loading percentage ($0\%$ clean to $100\%$ fully saturated).
  • Clean filter tare baseline counts and saturated threshold counts.
  • Filter operational health state (e.g. Filter Clean, Moderate Sediment, Replace Filter Soon, or Sensor Detached guard).
• Shared Hardware Telemetry (All Monitors):
  • Device Hardware Identification (unique Cloud ID / UUID and MAC address).
  • Device Product Type (e.g., brinepulse or sedipulse).
  • Custom device nickname assigned by you in the app.
  • Local network IP address and mDNS hostname (used for local high-speed LAN polling).
  • Wi-Fi signal strength (RSSI in dBm) for connectivity troubleshooting and diagnostic health.
  • Firmware version string to determine Over-The-Air (OTA) update compatibility.

C. Push Notification Tokens

If you opt in to receive maintenance alerts, we store an Expo / APNs / FCM push notification device token to deliver equipment alerts directly to your mobile phone (such as low salt notifications or sediment filter replacement warnings).

D. Analytics & Tracking

We do not collect third-party behavioral analytics, ad tracking identifiers, GPS location coordinates, or cross-app tracking cookies. All collected sensor telemetry is strictly dedicated to operating your water monitoring hardware.

2. How We Use Your Information

We use collected data solely to:

• Operate, sync, and display live water equipment metrics on your mobile dashboard.
• Deliver user-configured push notifications (low salt alerts and filter replacement warnings).
• Authenticate your account securely across multiple phones and tablets.
• Facilitate automated Over-The-Air (OTA) firmware updates to keep hardware secure.
• Diagnose local Wi-Fi connection quality and sensor baseline calibration accuracy.

3. Data Storage & Cloud Security

All cloud infrastructure is hosted in the United States using Supabase (built on Amazon Web Services), maintaining SOC 2 Type II compliance.

• Encryption in Transit: All communications between your hardware, mobile app, and database are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: All stored telemetry and account records are encrypted at rest using industry-standard AES-256 encryption.
• Row Level Security (RLS): Strict database Row Level Security policies guarantee that sensor readings and hardware devices can only be viewed by the verified account owner.

4. Data Sharing & Third Parties

We never sell, rent, monetize, or trade your personal or telemetry data to third parties or advertisers.

Data is processed strictly through trusted infrastructure service providers necessary to operate the application:

• Supabase Inc. — Cloud database, authentication, and backend functions (supabase.com/privacy)
• Expo (650 Industries) — Push notification delivery architecture (expo.dev/privacy)
• Apple Inc. — Apple Push Notification service (APNs) and Apple Sign-In (apple.com/privacy)
• Google LLC — Firebase Cloud Messaging infrastructure (firebase.google.com/support/privacy)

5. Your Privacy Rights & Data Deletion

You maintain full control over your personal and hardware data:

• Review Data: You can view all real-time readings and 30-day historical logs directly inside the app.
• Notification Controls: You can toggle push notifications on or off and customize warning/critical thresholds at any time in App and Device Settings.
• Account & Data Deletion: You can permanently delete your account, paired devices, and all historical sensor logs at any time via the in-app "Delete Account" button or by visiting our Account Deletion Page.

6. Children's Privacy

Our services and hardware monitors are intended for homeowners and property managers. We do not knowingly collect or solicit personal information from children under the age of 13.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Company: BrineLink LLC
• State of Registration: Texas, USA (File No. 806749758)
• Support Email: brinepulse.support@gmail.com
• Web Portal: brinepulse-22ec7.web.app