This Policy explains how the Marstek application (hereinafter “this App”) collects, uses, stores, shares and protects your personal information, and how you can manage such information. We understand the importance of personal information to you and will process your personal information in accordance with the principles of lawfulness, fairness, necessity and good faith.
If you choose to use the services provided by this App (hereinafter “this Service”), you agree to the information collection and use practices described in this Policy. The personal information we collect is used to provide and improve the Service. Except as described in this Policy, we will not use or share your information with anyone.
Unless otherwise defined in this Policy, terms used in this Policy have the same meanings as in the Marstek User Service Agreement. This Policy applies to users in the European Economic Area (EEA), California in the United States, and other applicable regions.
Our contact information is as follows:
Company name: Shenzhen Huamei Xingtai Technology Co., Ltd.
Registered address: Room 101, Building 6, New Energy Vehicle Industrial Park, Jinque Road, Jinsha Community, Kengzi Street, Pingshan District, Shenzhen, China
Registration No. / Business Registration No.: 91440300692546097P (Unified Social Credit Code)
Contact for the Personal Information Protection Officer: support@marstekenergy.com
To provide you with a better experience, we may ask you to provide certain personal information when you use this Service. We only collect information necessary to implement product functions, as listed by category below:
| Data Category | Specific Content | Processing Purpose | Legal Basis (EEA) |
|---|---|---|---|
| Account information | Email address, password (stored encrypted), nickname, region and language settings | Registration, login, identity verification, account security | Performance of a contract |
| Device information | Device serial number (SN), MAC address, device model and name, firmware version | Device binding, remote monitoring and control, firmware upgrade (OTA), fault diagnosis | Performance of a contract |
| Energy usage data | Charge/discharge power, battery state of charge (SOC), generation/consumption statistics, alarm and event records | Data display in the App, historical statistics | Performance of a contract |
| Product improvement (after anonymization or aggregation) | Legitimate interests (anonymized or aggregated data only; users may object at any time) | ||
| Log data | IP address, device name, operating system version, App version and configuration, access time, crash logs | Security protection, troubleshooting, ensuring service stability | Legitimate interests |
| Usage analytics data | Page views, feature clicks, session duration (de-identified) | Improving product functions and experience | Consent (withdrawable at any time) |
| Marketing information | Email address (only when you actively subscribe) | Sending product information and update notices | Consent (unsubscribe at any time) |
We do not process special categories of personal information such as your race, religion, or political stance, and we do not process personal information for advertising profiling purposes. If you refuse to provide account information or device information, we will be unable to provide you with core functions such as account services and device control.
As a companion application for residential energy storage products, device and energy data are the core data of this App. We therefore explain them in this dedicated section:
We use your personal information for the following purposes:
We do not conduct fully automated decision-making that produces legal effects or similarly significant effects on you.
Cookies are files containing a small amount of data, usually used as anonymous unique identifiers, sent from the website you visit to your browser and stored in device memory.
This App does not actively use Cookies. Some third-party code and libraries embedded in the App may use Cookies or similar technologies (such as device identifiers and local storage) to collect information and improve their services. You may accept or reject these technologies through system or App settings; if you choose to reject them, you may not be able to use certain parts of this Service. For EEA users, non-essential storage and access will follow your consent choices.
To operate and improve this Service, we may engage third-party companies and individuals to facilitate the provision of the Service, provide the Service on our behalf, perform services related to the Service, and assist in analyzing how the Service is used. These third parties may access your personal information only to the extent necessary to complete the entrusted tasks, are bound by confidentiality obligations, and may not use it for other purposes.
The third-party services currently used by this App include:
| Third-Party Service | Purpose | Data Involved |
|---|---|---|
| Official Apple / Google push services | Message push notifications | Device push token |
| Cloud services | Data storage and computing | Account information, device and energy data |
| Email services | Verification and notification emails | Email address |
Except as described in this Policy, we will not share your personal information with any third party; we do not sell your personal information (including “sale” or “sharing” as defined under CCPA/CPRA). In the event of a merger, acquisition or asset transfer, we will require the new holder to continue to be bound by this Policy; otherwise, we will require it to obtain your consent in accordance with law.
We may disclose personal information in the following circumstances: with your prior consent; to comply with laws and regulations, court judgments or mandatory requirements of regulatory authorities; to protect our or the public's lawful rights, interests, property and safety from harm.
The cloud storage and cloud computing services we use comply with applicable laws and data protection requirements. If your personal information is transferred outside your jurisdiction, we will take necessary security safeguards in accordance with applicable law (such as the GDPR), including signing the European Standard Contractual Clauses (SCCs) with the recipient, to ensure that your personal information receives a level of protection equivalent to that in your region.
We avoid collecting and processing personal information unrelated to our business as much as possible. We will retain your personal information only for the period necessary to achieve the purposes described in this Privacy Policy. After you successfully apply to delete your account, we will promptly arrange deletion, stop any processing of your personal information other than storage and necessary security protection measures, and delete or anonymize such personal information after the storage period expires, unless we have otherwise expressly agreed with you or mandatory retention requirements apply by law. We determine the storage period of personal information mainly by reference to the following criteria, whichever is longer:
You may delete your account at any time through App “Profile → Delete Account”. After deletion, we will stop providing services to you and promptly delete or anonymize your personal information in accordance with law, except where retention is required by laws and regulations.
The device itself can continue to operate basic functions without an account; deleting your account will unbind the device and clear historical cloud data. Please proceed with caution.
We value your trust in providing us with personal information and adopt industry-standard security measures to protect your personal information, including: encryption during transmission (TLS), one-way encrypted password storage, encryption of sensitive data at rest, least privilege and access control, secure development processes and regular security assessments.
Please understand that no method of Internet transmission or electronic storage is 100% secure or reliable, and we cannot guarantee absolute security. If a personal information security incident occurs that may damage your rights, we will promptly notify you and report to regulatory authorities in accordance with law.
California residents have the right to know, access, delete and correct their personal information, limit the use of sensitive personal information, and not be discriminated against for exercising their rights. We do not “sell” or “share” (for cross-context behavioral advertising) your personal information, so no opt-out mechanism is required.
You may submit requests to us through the contact information in Section 14. To verify your identity, we may ask you to provide information such as your registered account email address.
For EEA (GDPR) users: We will respond within 30 days after receiving your request; if necessary due to the complexity or number of requests, we may extend the period by up to two additional months, and we will inform you of the reasons for the extension within one month of receiving the request.
For California (CCPA / CPRA) users: We will provide a substantive response within 45 days after receiving your request; if necessary, we may extend the period by up to an additional 45 days (maximum 90 days in total), and we will notify you of the reason for the extension within the 45-day period.
We will record and verify your identity; the time required for identity verification is not counted toward the statutory response deadlines above.
This Service is not directed to minors. In the EEA, the minimum digital age of consent is 16 years old (unless a Member State provides for a lower age, in which case that applies; ages 13–16 require parental consent); in the United States, the COPPA standard of 13 years old applies; in mainland China, the standard of 14 years old under the Personal Information Protection Law applies.
We do not knowingly collect personally identifiable information from children below the applicable age. If we discover that a child has provided personal information to us, we will immediately delete it from our servers. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us through the contact information in Section 14, and we will take necessary measures.
This Service may contain links to other websites. External websites are not operated by us, and we cannot control their content, privacy policies or practices and assume no responsibility for them. We strongly recommend that you review the privacy policies of these websites.
We may update this Policy from time to time. In the event of material changes, we will notify you in advance through in-App push notifications and/or email, and publish the new version of the Policy and its effective date on this page. If you do not agree to the changes, you may stop using this Service or delete your account. We recommend that you periodically review this page to stay informed of the latest version.
If you have any questions or suggestions about our Privacy Policy, or wish to exercise the rights described in Section 11, please contact us at any time at support@marstekenergy.com. We will respond within a reasonable period.