Privacy Policy for HeatSync Labs Mobile App

Last Updated: October 7, 2025

Introduction

HeatSync Labs ("we," "our," or "us") operates the HeatSync Labs mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.

Information We Collect

Information You Provide

• Device Registration: When you enable push notifications, we collect your device token to send you notifications about lab status changes and events.
• User Preferences: We store your notification preferences and settings locally on your device.

Automatically Collected Information

• Device Information: We collect basic device information including device type, operating system version, and app version for troubleshooting and analytics purposes.
• Usage Data: We may collect information about how you interact with the App to improve functionality.

How We Use Your Information

We use the collected information to:

• Send push notifications about lab door status changes
• Display lab events from our public Google Calendar
• Provide real-time lab door status information
• Improve app functionality and user experience
• Troubleshoot technical issues

Data Storage and Security

• Device tokens are stored securely in our AWS DynamoDB database
• Notification preferences are stored locally on your device
• We implement industry-standard security measures to protect your data
• We do not sell, trade, or transfer your personal information to third parties

Third-Party Services

Our App uses the following third-party services:

• Expo Push Notification Service: For delivering push notifications
• Amazon Web Services (AWS): For backend infrastructure and data storage
• ConfigCat: For feature flag management
• Google Calendar API: For displaying public lab events (read-only access)

These services may collect information as described in their respective privacy policies.

Data Retention

• Device tokens are retained as long as you have the App installed and notifications enabled
• You can remove your device token by uninstalling the App or disabling notifications in settings
• Usage data may be retained for up to 90 days for troubleshooting purposes

Your Rights

You have the right to:

• Opt out of push notifications at any time through device settings
• Request deletion of your device token
• Access information we have collected about you
• Request correction of any inaccurate information

Children's Privacy

Our App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.

California Privacy Rights (CCPA)

California residents have specific rights regarding their personal information:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Data We Collect

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

HeatSync Labs
140 W Main St
Mesa, AZ 85201
Email: operations@heatsynclabs.org