Privacy Policy

Definitions

This section sets out the main terms used throughout the Privacy Policy to describe data types, roles and technical concepts relevant to Solyara devices and services.

Personal data refers to any information that identifies or can reasonably identify an individual. Examples include name, email address, postal address, phone number, device identifiers, network addresses, billing details, voice recordings, images captured by devices and usage records.

Processing means any operation performed on personal data, whether automated or manual, such as collection, storage, retrieval, transfer, anonymization, analysis and deletion necessary to provide and improve our services.

User refers to any individual who registers an account with Solyara, operates a Solyara device, uses the companion app or interacts with our services, whether as an owner, household member or guest.

Service refers to the Solyara product ecosystem, including AI-enabled devices marketed under the Solyara brand, cloud services hosted at mkayara.biz, companion mobile and web applications, firmware updates and customer support channels.

Cookies and similar technologies are small data files or identifiers stored on a device to enable website functionality, remember preferences, and collect analytics. They may be set by Solyara or by third parties on our behalf.

Purposes of processing

We process personal data for a limited set of purposes necessary to operate devices, deliver services, maintain security and comply with legal obligations. Each processing activity is mapped to a specific purpose.

• To operate and maintain Solyara devices and related cloud services, including authentication, firmware updates and remote diagnostics.
• To provide customer support and respond to inquiries, troubleshooting requests and warranty claims.
• To analyze usage patterns and performance metrics to improve device reliability and user experience, using aggregated or de‑identified data where practical.
• To enable personalization features, such as routines and recommendations based on device settings and explicit user preferences.
• To detect, prevent and contribute security incidents, fraud or misuse of our services.
• To process orders, payments and manage billing and delivery logistics in connection with purchases and subscriptions.
• To comply with applicable laws and regulatory requests and to defend legal claims when required.
• For marketing communications only where users have provided consent or where permitted by law, and offering clear opt-out mechanisms.

Legal basis for processing

Where required by law, we identify the legal bases for processing personal data. These bases may vary depending on the user’s jurisdiction and the specific processing activity.

• Performance of a contract: processing necessary to provide the products and services requested by the user, such as device operation and customer support.
• Consent: where users explicitly agree to processing for optional features, marketing communications or the processing of sensitive categories of data.
• Legitimate interests: limited internal uses such as fraud detection, security, and service improvement, balanced against user rights and expectations.
• Legal obligation: processing required to comply with laws, court orders or government requests.

Rights under GDPR and similar laws

If you are located in the European Economic Area, United Kingdom or other jurisdictions with comparable rules, you may have additional rights regarding your personal data. We describe common rights below and how to exercise them.

• Right of access: you can request a copy of personal data we hold about you and information about processing.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: subject to legal and contractual limits, you can request deletion of personal data we process about you.
• Right to restriction: you may ask to limit processing in certain circumstances, for example while a dispute is resolved.
• Right to data portability: where applicable, you can request a machine-readable copy of data you provided to us.
• Right to object: you can object to processing based on legitimate interests or direct marketing; we will respect choices in accordance with applicable law.

Cookies and similar technologies

We use cookies and related tools on our websites and apps to support core functionality, remember preferences and gather analytics to improve our services.

Types of technologies used include session cookies, persistent cookies, local storage and web beacons. Some cookies are essential for site operation, while others support analytics and optional features.

We classify cookies as strictly necessary, performance and analytics, functional and marketing. Advertising cookies are used only with consent where required by law.

You can manage cookie preferences through your browser or device settings and via consent controls presented on our website. Disabling certain cookies may affect functionality.

View our Cookie Policy for details

Data sharing

Solyara shares data only in ways that support the purposes described in this policy, and with safeguards to protect personal data. Below are typical categories of recipients.

• Internal teams and affiliates that require access to carry out services such as device operations, billing and support.
• Service providers and vendors, including cloud hosts, analytics providers and payment processors acting under contract and confidentiality obligations.
• Integration partners when you enable account linkages with third-party platforms or smart home ecosystems.
• Legal and regulatory authorities when disclosure is necessary to comply with legal obligations, court orders or to protect safety.
• Potential buyers or partners in the event of a business transfer, merger or acquisition, with confidentiality protections applied.
• Aggregated or anonymized data that no longer identifies individuals and may be shared publicly for research and product improvement.

International transfers

Data may be stored and processed in jurisdictions outside Singapore where our service providers operate. Such transfers are necessary to provide the service and may involve countries with different data protection laws.

When transferring data internationally, we apply safeguards such as contractual data protection terms, encryption and vendor due diligence to maintain an adequate level of protection.

Data retention

We retain personal data only as long as necessary for the purposes described, consistent with legal, regulatory and contractual obligations. Retention periods vary by category of data and purpose.

Account information is retained for the duration of the account and for a reasonable period afterward to comply with record‑keeping obligations and to address disputes; retention periods may extend up to seven years where required by law.

Support communications, chat logs and user-submitted diagnostic data are typically retained for a defined period to enable effective support and quality assurance, commonly up to 12 months unless longer retention is justified.

Security and access logs are retained for operational and security purposes. Typical retention ranges between 6 and 24 months depending on the log type and legal requirements.

When data is no longer required, we delete or anonymize it in accordance with our data retention schedules. Deletion requests are subject to verification and legal constraints.

Security

Solyara implements technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure and destruction. Measures are regularly reviewed and updated to reflect changes in technology and risk.

• Encryption in transit using industry-standard TLS and encryption at rest for sensitive data where practical.
• Access controls and role-based permissions to limit data access to authorized personnel on a need-to-know basis.
• Regular security assessments, patch management and monitoring to detect and respond to incidents promptly.

Your rights and choices

You may exercise rights such as access, correction, deletion and objection where applicable. We verify requests to protect privacy and may need to retain certain information to comply with legal obligations or to operate devices.

• To exercise your rights or for privacy inquiries, contact [email protected] or write to Solyara, 1 Jalan Dusun, Singapore, 329363. We aim to respond to verified requests within the timeframes required by applicable law.
• Access: You may request a copy of personal data that Solyara holds about you, subject to applicable exceptions and verification of identity.
• Correction: If your personal data is inaccurate or incomplete, you may request correction so that records reflect current information.
• Deletion: Where retention is no longer necessary or permitted by law, you may request deletion of personal data, subject to legal or contractual retention obligations.
• Restriction: You may ask us to restrict processing of your personal data in certain circumstances, for example while we verify a dispute about accuracy.
• Data portability: To the extent applicable law allows, you may request a machine-readable copy of personal data you provided to Solyara for transfer to another provider.
• Objection: You may object to certain processing activities, such as processing for direct marketing purposes, where applicable under law.
• Withdraw consent: If processing is based on consent, you may withdraw that consent at any time; withdrawal will not affect processing that occurred prior to withdrawal.

How to exercise your rights

To exercise any of the rights listed above, submit a request to our privacy contact with sufficient detail to locate the relevant records. We may need to verify your identity before fulfilling requests. Include your full name, email, mailing address, and a clear description of the data or action requested.

[email protected]

We aim to respond to valid requests within a reasonable period consistent with applicable law. Typical response time is 30 days from receipt of a complete request; where more time is permitted by law, we will notify you and explain the reason for the extension.