Privacy Policy

Last updated: August 8, 2026 · Effective: August 6, 2026

1. Who We Are

AOVIS is a brand operated by Fifth Key Element Co., Limited, a company registered in Hong Kong (Unit 1009, 10F, King Center, 5-9 Ka Hing Road, Kwai Chung, Hong Kong). We are the data controller for personal information collected through our products and services.

Privacy inquiries: [email protected]

Domains and Communications

AOVIS operates its services primarily through the official website https://aovis.app, which serves as the primary source of truth for all terms, policies, and service information.

The auxiliary domains https://aovis.us and https://aovis.uk are operated by the same company, Fifth Key Element Co., Limited, and automatically redirect to the primary domain at https://aovis.app.

Official communications may use the @aovis.us domain. All customer accounts, services, data processing, and policies are governed by the terms, policies, and legal documents published on https://aovis.app.

By using our services, you acknowledge that aovis.app is our primary domain and that aovis.us and aovis.uk are auxiliary domains that automatically redirect to the primary domain at https://aovis.app and are part of the AOVIS service infrastructure.

2. Information We Collect

Account information: Name, email address, login method (Google, Apple, or email magic link), account preferences.
Device information: Device serial number, UID, firmware version, 4G network connection status, SIM ICCID, device online/offline state.
Push notification tokens: The push token that Apple (APNs) or Google (FCM) issues to the AOVIS app on each phone you sign in on. We use it only to deliver notifications to that phone; when you sign out or turn notifications off, the app unregisters the token and we stop sending to it.
Video and audio data: Event-triggered video clips, AOV recording segments, keyframe thumbnails captured by your AOVIS camera. AOVIS cameras include a microphone, and recorded clips and live streams may include audio captured from the area around the camera. Two-way audio is transmitted only during a talk session that you or an authorized user of your account actively initiates.
AI processing data: AI-generated event summaries (text), semantic search index vectors, event classification tags.
Subscription and payment information: Subscription tier, billing cycle, Stripe transaction ID. We do not store your full card number.
Cellular data plan information: SIM activation status, data usage records, plan type.
Location data (geofence automation only): Geofence automation is an optional feature that is not available in every version of the AOVIS app; where it is available and you turn it on, the app uses your phone's location to determine whether you have arrived at or left your own home area. That determination is made on your phone. The app sends us only the resulting arrival or departure event for the camera you configured — we do not receive or store your coordinates, address, geofence radius, or location history. This automation is off by default, is used solely to switch that camera's arming mode, and is never sold or shared.
Usage and diagnostic data: App interaction logs, device connectivity metrics, crash reports, push notification delivery status.
Customer support communications: Emails and support tickets you submit to us.

We do not use advertising trackers, analytics cookies, or sell your data to third parties.

Because your camera can record audio as well as video, laws in your location may require you to give notice to, or obtain consent from, people who may be recorded. You are responsible for meeting those requirements; see Section 6 of our Terms of Service.

3. How We Use Your Information

Account creation, authentication, and management
Device connection, signaling, and remote access
Cloud video storage and event playback
AI Summary and Smart Search feature processing
Subscription billing and cellular plan management
Push notifications (event alerts, plan expiration warnings, AI results)
Geofence arming automation, where the feature is available in your version of the app and you have turned it on — switching a camera between Home, Away, and Disarmed when you arrive at or leave your home area. Arming mode affects which notifications you receive; it does not stop your camera from recording.
Platform security, abuse prevention, and operational monitoring
Customer support

AI Features: What We Do Not Do

AOVIS cameras do not perform facial recognition. Our AI is designed to classify detected events into general categories such as person, vehicle, pet, package, and fire. We do not create, collect, store, or compare face-geometry or hand-geometry scans, face templates, voiceprints, or any other biometric identifier, and we do not use these features to identify specific individuals.

AOVIS does not use your video or audio recordings, thumbnails, or AI-generated summaries to train, fine-tune, or otherwise develop any artificial intelligence or machine learning model. We train no models of our own; our AI features send your content to Amazon Bedrock for inference only. Separately, and as a distinct commitment by our service provider, Amazon does not use customer data to train or improve its foundation models.

App Permissions

The AOVIS app asks your phone for the following permissions. Each is requested from inside the app, and you can change your answer at any time in your phone's settings. Declining a permission turns off only the feature that needs it; the rest of the app continues to work.

Camera: Used to scan the QR code on your AOVIS camera or its packaging when you add a camera to your account. That is the only thing we use your phone's camera for — watching live video from your AOVIS camera, where live view is available in your version of the app, does not use your phone's camera, and we never capture photos or video from your phone in the background.
Microphone: Used only for two-way talk, where that feature is available in your version of the app, so that your voice can be sent to the camera while a talk session you started is open. We do not listen through or record your phone's microphone at any other time.
Bluetooth: Used during setup to find your AOVIS camera nearby and send it your Wi-Fi settings. We do not use Bluetooth scanning to determine, infer, or collect your location, and we do not use it to detect nearby people, beacons, or other people's devices. On Android 11 and earlier, the operating system requires an app to hold a location permission before it can scan for Bluetooth devices at all; where that applies, the permission is used solely to find your camera during setup, and no location is derived from it or sent to us.
Notifications: Used to show the alerts described in Section 3 — event alerts, plan expiration warnings, and AI results — on your phone. Turning notifications off does not stop your camera from recording or change what is saved to your account.

4. Information We Share

We share your information only with the following service providers, acting as data processors on our behalf:

Amazon Web Services (USA): Cloud infrastructure including video storage (Amazon S3, Amazon Kinesis Video Streams), device connectivity and signaling (AWS IoT Core, KVS WebRTC), and push notifications (Amazon SNS). All data is stored and processed in the United States.
Amazon Bedrock (USA): AI processing for AI Summary and Smart Search using Amazon Nova foundation models. Video clips are processed for analysis and results are stored in the United States. Amazon does not use customer data to train or improve its foundation models.
Stripe (USA): Payment processing for subscriptions purchased through aovis.app.
Eiotclub (USA): MVNO partner for cellular data plan activation and management.
Apple APNs / Google FCM: Push notification delivery to your device.

We do not sell your personal information. We do not share your data with advertisers or unaffiliated third parties, other than as described in Section 8 (Law Enforcement Requests).

5. Data Location

All user data — including video content, AI processing results, payment records, and device signaling metadata — is stored and processed in the United States. We do not transfer your data to mainland China or any other jurisdiction outside the United States in the normal course of operations.

Fifth Key Element Co., Limited is headquartered in Hong Kong. Our technical support personnel may remotely access operational systems from Hong Kong for maintenance purposes. Such access is limited to system-level operations and does not involve browsing individual user video content.

6. Data Retention

Cloud video storage: Retained according to your subscription plan. Activation trials provide rolling 24-hour event history for the activated device; paid account cloud plans provide rolling 7-day or 30-day event history for eligible AOVIS cameras covered by the plan. Videos are automatically deleted when they exceed the applicable retention window.
AI Summary and Smart Search data: Retained for the duration of your active trial or paid cloud subscription, subject to the applicable event-history window and account status. Deleted within 30 days following account closure.
Account data: Deleted within 30 days of account closure upon request.

7. Your Rights

You may submit an account deletion request through your Account Center at any time, or email [email protected] to request access, correction, or deletion of your personal data, or to withdraw consent for AI features.

When you submit an account deletion request, some records may need to be retained for legal, tax, payment, warranty, fraud prevention, security, or support purposes. We will review your request and contact you by email.

How to Exercise Your Privacy Rights

Through your account. The fastest route is from inside your account. The profile page of your Account Center has a self-service account deletion request, and the same request can be submitted from the AOVIS app. A request submitted this way is already tied to your account, so we do not need to verify your identity separately.

By email. Email [email protected] from the email address on your AOVIS account and tell us what you are asking for — access to your data, correction, deletion, or withdrawal of consent for AI features. Include your device serial number or an order reference if you have one, as it helps us find the right records.

How we verify a request. AOVIS accounts have no password: you sign in with Google, Apple, or a one-time email link. We verify a privacy request by confirming that it comes from the account itself — either submitted while you are signed in, or sent from the email address on the account. If we cannot match a request to an account that way, we may ask for information that helps us do so, such as a device serial number or order reference. We will not ask for more information than we need to verify the request, and we may decline a request we are unable to verify.

How long it takes. We review requests as they arrive and respond by email within a reasonable timeframe. If a request is complex or we need more information from you to act on it, we will tell you.

Cost. Making a privacy request costs nothing. We will not deny you service, charge you a different price, or provide you a different level of service because you exercised a privacy right.

California Residents (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, access, delete, and opt out of the sale of your personal information. AOVIS does not sell your personal information. To submit a privacy request, contact [email protected].

8. Law Enforcement Requests

We disclose customer information to law enforcement or other government authorities only where we are required to do so by valid legal process, such as a search warrant, court order, or subpoena issued by a court or authority of competent jurisdiction. We review each request we receive and object to, or narrow, requests we believe to be overbroad or legally deficient.

Where a government authority asks us to disclose information without legal process on the basis of an emergency, we evaluate the request case by case against the standard in 18 U.S.C. §2702(b)(8) — whether we believe in good faith that an emergency involving danger of death or serious physical injury to a person requires disclosure without delay. Absent your consent or a legally binding order, we do not share your video with law enforcement.

Our policy is to notify you, at the email address on your account, before we respond to legal process seeking your information, so that you have an opportunity to seek legal advice or to challenge the request yourself. We will not do so where a court order or applicable law prohibits us from giving notice, or where giving notice would create a risk of the kind described by the emergency standard above; where we are prohibited from giving notice, we will notify you once the prohibition expires or is lifted. Where we disclose without delay under the emergency standard, we give notice afterwards instead.

AOVIS does not operate any dedicated law-enforcement portal, video request program, or bulk footage-sharing arrangement, and we do not participate in any third-party surveillance or footage-request network. Law enforcement requests are directed to [email protected].

Our Law Enforcement Guidelines describe in more detail what legal process we require for each category of information, how requests must be submitted, when we notify affected customers, and how we handle emergency and non-U.S. requests.

9. Data Security and Breach Notification

AOVIS accounts are passwordless. You sign in with Google, Apple, or a one-time email link, and we never create, store, or ask you for an AOVIS account password — so there is no AOVIS password of yours that can be guessed, reused from another site, or stolen from us.

Our internal administrative tools do not provide employee access to customer video streams or recordings. Those tools cover customer, order, payment, SIM, subscription, and device-provisioning records; they contain no live view, no playback, and no clip download, and they cannot generate a link that would provide any of those.

Live view of a camera is available only to the signed-in account that owns the camera, or to an account the owner has shared it with, and is issued as short-lived credentials scoped to that one camera, which expire on their own. Links to stored video and thumbnails are likewise time-limited. Our production servers reach AWS services through an assigned AWS IAM role; no long-lived AWS access keys are embedded in our application.

If we determine that a security incident has compromised your personal information, we will notify you and any regulators to whom notice is owed, in the manner and within the timeframes required by applicable law.

10. Do Not Track Signals

Some browsers offer a “Do Not Track” (DNT) setting. There is no common industry standard for how to interpret DNT signals, and our website does not respond to them. We do not track you across third-party websites or services, and we do not allow third parties to collect personally identifiable information about your activity on our site over time and across other sites.

11. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact [email protected] if you believe a child has provided us personal information.

12. Changes to This Policy

We will notify you of material changes through the app or by email at least 14 days before changes take effect.

13. Contact

[email protected]
Fifth Key Element Co., Limited
Unit 1009, 10F, King Center, 5-9 Ka Hing Road, Kwai Chung, Hong Kong