跳到正文
Keyless
/

隐私政策

生效日期:2026 年 10 月 13 日

本政策适用于 Keyless 微信小程序、Keyless iOS 应用、本网站及配套的蓝牙车钥匙设备(以下统称“Keyless”)。我们只为提供开锁、关锁、钥匙分享和设备更新等功能处理必要的信息。

收集的信息

  • 账号信息:通过微信登录时,获取微信提供的用户标识(openid / unionid);你授权时,获取手机号、昵称和头像。通过短信登录时,获取中国内地手机号。通过 Google 登录时,获取 Google 账号标识、姓名、头像,以及已验证的邮箱地址。
  • 设备信息:钥匙序列号、硬件标识、蓝牙名称与地址、固件版本,以及你为钥匙设置的名称。
  • 使用记录:绑定、开锁、关锁、邀请、授权变更等操作的时间、操作人和来源,钥匙上报的运行日志,以及你主动提交的诊断报告。
  • 手机配对信息:手机与钥匙配对时的配对编号、蓝牙发射功率和关锁延时等设置。
  • 登录状态:登录凭证(仅保存摘要)、应用生成的设备编号和手机系统类型,用于保持登录和发现异常登录。

车辆定位

iOS 应用的“自动记录位置”默认关闭。开启后,在手机与钥匙断开连接时记录手机所在位置,仅在本机加密保存,不上传服务器。此功能需要位置权限,包括精确位置与后台定位;你可以随时在应用或系统设置中关闭。

早期测试版本曾将这类位置上传至服务器。这些记录只对记录它的用户可见,目前已停止接收新的上传;如需删除,请联系客服。

打开导航时,应用把坐标交给你选择的地图应用(Apple 地图、高德地图或 Google 地图),之后的处理适用该地图应用的隐私政策。

使用目的

  • 登录、识别账号,以及在多台手机间同步你的钥匙与授权。
  • 验证开锁、关锁及管理操作的权限,保护车辆安全。
  • 向车主和授权用户显示操作记录。
  • 提供固件更新、排查连接和设备故障。
  • 防止短信滥用、暴力登录等安全风险。

我们不出售个人信息,不用于广告,也未接入第三方统计、广告或崩溃上报工具。

Google 账号数据

Google 登录仅请求基本资料(openid、email、profile),用于创建和识别 Keyless 账号以及显示你的名称与头像。邮箱不用于合并账号或发送营销信息。Keyless 对 Google API 所获信息的使用和传输遵守 Google API Services User Data Policy,包括其中的有限使用(Limited Use)要求。

共享与第三方服务

我们只在提供功能所必需时,与以下服务方处理相关信息:

  • 腾讯微信:微信登录、获取你授权的手机号、生成邀请小程序码。
  • 阿里云:服务器托管、短信验证码、人机验证,以及固件文件存储。
  • Google:iOS 应用中的 Google 登录。

你邀请他人共同用车时,对方可以看到当前钥匙的名称及其自身权限范围内的操作记录;车主可以看到设备的全部操作记录。除法律法规要求外,我们不向其他第三方提供你的个人信息。

存储与安全

信息存储在中国内地的服务器。传输使用 HTTPS 加密,登录凭证和验证码以摘要形式保存,钥匙与手机之间的指令经过加密和身份验证。

短信验证码记录在过期后 1 天内删除,授权会话在到期后清除。账号、设备和操作记录在你使用服务期间保留;撤销的邀请和授权保留记录,用于核对历史操作。

你的权利

  • 在应用中修改昵称和头像,解绑钥匙,撤销邀请或移除授权用户。
  • 关闭“自动记录位置”,或在系统设置中撤回位置、蓝牙权限。
  • 查询、更正或删除个人信息,或注销账号:应用内暂未提供注销入口,请联系客服办理。

未成年人

Keyless 面向车主及其授权的驾驶人使用,不面向未满 14 周岁的儿童。

政策更新

功能或信息处理方式变化时,我们会更新本页面并修改生效日期。

联系我们

对本政策或个人信息处理有疑问,请联系客服。

Privacy Policy

Effective date: 13 October 2026

This policy covers the Keyless WeChat Mini Program, the Keyless iOS app, this website and the Bluetooth car key device (together, “Keyless”). We process only the information needed to lock and unlock, share keys and update devices.

Information we collect

  • Account: with WeChat sign-in, the WeChat user identifiers (openid / unionid), and, if you allow it, your phone number, nickname and avatar. With SMS sign-in, your mainland China phone number. With Google sign-in, your Google account ID, name, profile photo and verified email address.
  • Device: the key’s serial number, hardware ID, Bluetooth name and address, firmware version, and the name you give the key.
  • Activity: the time, person and source of actions such as binding, locking, unlocking, invitations and access changes; operating logs reported by the key; and diagnostic reports you choose to send.
  • Phone pairing: the pairing ID and settings such as Bluetooth transmit power and locking delay.
  • Sign-in state: session credentials (stored only as hashes), an app-generated device ID and the phone platform, used to keep you signed in and detect unusual sign-ins.

Vehicle location

“Record location automatically” in the iOS app is off by default. When on, it records your phone’s location when the phone disconnects from the key. The location is encrypted and stored only on your phone, not uploaded. It needs location permission, including precise and background location, and can be turned off at any time in the app or in system settings.

Earlier test versions uploaded these locations to our server. Those records are visible only to the user who recorded them, and new uploads are no longer accepted. Contact customer support to have them deleted.

When you start navigation, the app passes the coordinates to the map app you choose (Apple Maps, Amap or Google Maps). That app’s privacy policy then applies.

How we use information

  • Sign you in, identify your account and keep your keys and access in sync across phones.
  • Check permission for locking, unlocking and management actions to protect your car.
  • Show activity history to the owner and authorised users.
  • Deliver firmware updates and troubleshoot connection and device problems.
  • Prevent SMS abuse, brute-force sign-ins and other security risks.

We do not sell personal information or use it for advertising, and we do not use third-party analytics, advertising or crash reporting tools.

Google user data

Google sign-in requests only basic profile scopes (openid, email, profile). They are used to create and identify your Keyless account and to show your name and photo. Your email is not used to merge accounts or for marketing. Keyless’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing and service providers

We process information with the following providers only as needed to run Keyless:

  • Tencent WeChat: WeChat sign-in, phone numbers you authorise, and Mini Program codes for invitations.
  • Alibaba Cloud: server hosting, SMS codes, CAPTCHA and firmware file storage.
  • Google: Google sign-in in the iOS app.

People you invite can see the key’s name and the activity within their own access. The owner can see all activity for the device. We do not otherwise provide your personal information to third parties unless required by law.

Storage and security

Information is stored on servers in mainland China. Traffic is encrypted with HTTPS, credentials and codes are stored as hashes, and commands between the key and your phone are encrypted and authenticated.

SMS code records are deleted within one day of expiry, and authorisation sessions are cleared after they expire. Account, device and activity records are kept while you use the service. Revoked invitations and access are kept as records so past actions can be verified.

Your choices and rights

  • Change your nickname and avatar, unbind keys, revoke invitations or remove authorised users in the app.
  • Turn off “Record location automatically”, or withdraw location and Bluetooth permissions in system settings.
  • Access, correct or delete your personal information, or close your account: there is no in-app option yet, so please contact customer support.

Children

Keyless is intended for car owners and the drivers they authorise. It is not directed at children under 14.

Changes

When features or data practices change, we update this page and its effective date.

Contact

For questions about this policy or your personal information, please contact customer support.

Keyless
隐私政策Privacy Policy用户协议Terms of Service