Nodi APP

Nodi APP Privacy Policy

App
Nodi APP (Android application ID: com.highlands.nodi.user)
Data controller
Shanghai Highlands Software Technology Co., Ltd
Contact
info@nodienergy.com
Effective date
15 August 2026
Last updated
15 August 2026

Preamble

Welcome to Nodi APP. Before you begin using this application and its related services, we kindly ask you to read this Privacy Policy in full, so that you may fully understand how your personal data will be processed.

This Privacy Policy applies to all users of Nodi APP, including users located within the European Union and the European Economic Area (EU/EEA). With respect to users in the EU, this Privacy Policy is aligned with the requirements of the General Data Protection Regulation (GDPR) and shall be governed by the GDPR where applicable.

By registering for and using the services provided by Nodi APP, you confirm that you have read, understood and agreed to be bound by all the terms of this Privacy Policy. If you do not agree to any part of this Privacy Policy, please do not complete the registration or use this application, and immediately terminate the registration process.

If you have any questions regarding this Privacy Policy or data protection matters, please do not hesitate to contact us at: info@nodienergy.com. We will provide you with further clarification in accordance with your request.

By ticking “I agree to the Nodi APP Privacy Policy” during registration, or by otherwise actually using the services of this application, you shall be deemed to have read and agreed to the entire content of this Privacy Policy and to have voluntarily accepted its binding effect.

Policy Updates

We reserve the right to amend this Privacy Policy from time to time. Once the amended content is published in the application, it shall automatically supersede the previous version without separate individual notice. You may review the latest version in the application at any time. If you continue to use the services of this application after a Privacy Policy update, you shall be deemed to have accepted the updated terms; if you do not accept the updated content, please immediately cease using the relevant services.

Permissions

In order to provide services to you, improve the product experience and safeguard the security of your account, we may need to request certain system permissions. Sensitive permissions such as location, camera and photo album are disabled by default and will only be enabled within the scope of your authorization after we obtain your explicit consent. You may at any time review the types and purposes of the permissions we invoke in “Settings - System Permissions”, and manage or disable them in a unified manner.

The permissions this application actually requests, and the purposes for which they are used, are as follows:

Permission Purpose Scope
Location To center the map and help you locate and select the address of your photovoltaic power station. Foreground only, while you are using the map picker. The application does not collect your location in the background and does not run a foreground service for location.
Camera To scan the QR code of a device when you add or bind that device. Only while the scanner screen is open. Frames are processed on your device and are not uploaded by us.
Photos and images To let you select an image — for example a photograph of your electricity bill — when you submit an application. Only the individual items you select. On Android 13 and above the system photo picker is used, so the application does not request broad storage or media-library permissions.
Notifications To deliver device alerts, alarm messages and system notices to you. You may disable notifications at any time in your system settings.
Files and documents To let you choose a document to upload, and to open documents such as signed agreements that you have downloaded. The system file picker is used; the application does not request storage permissions.

1. General Terms

1.1 Use of Services

This application provides services to users worldwide. In the course of your use, you shall comply with applicable laws and shall not in any manner attack, disrupt or interfere with the normal operation of this application or its related systems. Should we discover that you have engaged in such conduct, we shall be entitled to take appropriate measures in accordance with applicable law, including but not limited to suspending or terminating your access to this application, and we reserve the right to pursue your legal liability.

1.2 Communication Costs

Any internet access and related communication costs incurred in the course of using this application (including but not limited to telephone charges and data charges) shall be borne by you, and we shall not be liable for such costs.

2. User Accounts

2.1 Registration and Ownership of Accounts

You may register an account through this application and use the related services. The account is provided to you for your use of the services, and you retain all rights to your own personal data. The application, its software and its platform remain our property or that of our licensors. This application shall not bear any responsibility for the unauthorized use of your account resulting from hacking attacks, password leakage or your own negligence.

2.2 Truthfulness and Compliance of Registration Information

When filling in or modifying your registration information, you shall ensure that the information provided is complete, truthful and accurate. Such information is an important basis for you to recover your account and password; any losses and problems caused by incomplete, untruthful or inaccurate information shall be borne by you. Please do not register names that are uncivilized, unhealthy or that contain discriminatory, insulting or obscene content. If we discover that an account name contains inappropriate text or unsuitable content, we shall not bear any responsibility for such account and reserve the right to suspend or terminate the use of such account.

2.3 Handling of Account Irregularities

If your account is used without authorization or presents a security issue, you shall notify us immediately. Upon receiving a request concerning the suspension of an account, we will ask you to provide the relevant registration information and verify the circumstances; we will then take the corresponding measures after confirming that the information is truthful and accurate. If the information you provide cannot be verified, we shall have the right to reject your request.

2.4 Prohibition of Unlawful Registration

No organization or individual may register an account on this application unlawfully. You shall not register using false or fraudulent personal, company or organizational information, nor shall you use this application to organize, reproduce or disseminate unlawful or infringing content.

2.5 Information Security Safeguards

We have established a systematic mechanism for safeguarding user information security and are committed to protecting the security of your account and personal information.

3. Data Privacy

3.1 Data Controller and Processing Principles

Data controller: Shanghai Highlands Software Technology Co., Ltd (the developer of Nodi APP).

Contact for data protection matters: info@nodienergy.com.

We act as the data controller with respect to the personal information you provide as a data subject. This Privacy Policy applies to all services provided by this application and to all data subjects (including users and customers) who access or use such services. We shall process data lawfully, fairly and transparently on the basis of consent that is freely given, specific, informed and unambiguous, and we undertake to fulfill all our legal obligations under the GDPR.

Legal Bases for Processing:

Data Retention Periods:

Categories of Personal Data:

3.2 Registration Prerequisite and Account Cancellation

Before accessing certain functions and content of the services, you are required to complete customer registration and create an application account, and you must accept the data protection terms set out in this Privacy Policy and the manner in which we process your personal data. In any case, where the provision of services requires you to register and provide personal data, your request to delete such data shall result in the cancellation of your registration, and your application account shall be deleted accordingly.

3.3 Deleting Your Account and Your Data

You may request the deletion of your account and of the personal data associated with it at any time, by either of the following methods:

  1. In the application: sign in, open Me → Settings and tap Delete Account, then confirm with the verification code sent to your registered email address. For security reasons, if your account still has photovoltaic power stations associated with it, you will be asked to remove or transfer those stations before the account can be deleted.
  2. By email: if you cannot sign in, write to us at info@nodienergy.com from your registered email address. We may ask you to verify your identity before we act on the request.

Once your account is deleted, you will no longer be able to use the services that require an account, and the personal data associated with the account will be deleted or anonymized in accordance with the retention periods set out in section 3.1.

3.4 Provision of Required Information

Certain information that this application requires you to provide constitutes mandatory information necessary for the provision of services. In the absence of such information, we may be unable to complete your registration or provide the services. Furthermore, after you successfully register as a customer, we will also collect necessary information regarding your use of the services (e.g. registered mobile phone number, email address, country, router account number, etc.) to ensure the normal operation of the system.

3.5 Purposes of Data Processing

This application collects and processes all data provided by you, whether manually or automatically, solely for the purposes agreed between the parties, including:

  1. managing your application account so that you can use the services normally and access your devices;
  2. sending you personalized notifications based on your usage of the application and portal;
  3. where you have separately and expressly authorized us to do so, we may automatically process your data to create a user profile, which is built upon the data you provide during customer registration and the data generated by your use of paid services. Such profiles will be used by us and may be transferred to third-party companies with which we cooperate, in order to send you commercial communications regarding our own products and services as well as those of such third-party companies, in all cases in a personalized manner consistent with your consumption and business preferences. This profiling does not produce legal effects or similarly significantly affect you and does not constitute automated decision-making within the meaning of Article 22 GDPR. You may withdraw this authorization at any time.

4. Privacy Protection and Use of Information

4.1 Principles of Privacy Protection

We place great importance on the protection of your privacy and will collect, use, store and protect your personal information in accordance with this Privacy Policy. Your use of this application indicates your consent to the relevant provisions of this Privacy Policy. We undertake to use your personal information solely for the purposes and within the scope described in this Privacy Policy, and to take reasonable security measures to safeguard it.

4.2 Collection and Use of Information

  1. The personal information we may collect includes, but is not limited to: your registered account information, contact details, information relating to the photovoltaic power station where you are located, and behavioral data such as operation records generated during your use of this application. The primary purposes of collecting the above information are: to implement the monitoring and management functions of the photovoltaic power station, to provide you with better and more personalized services, and to ensure the safety of both you and the power station.

  2. This application is developed on the Flutter cross-platform framework. During your use, we may need to collect your device information (including device model, operating system name and version, and App version number) for the purpose of providing message push services and, where you voluntarily submit feedback, to assist us in locating and resolving issues. Without your consent, we will not collect your unique device identifiers.

5. Data Breach Emergency Response

We have established a standardized emergency response mechanism for data breaches, with the following response timelines:

Please note that disclosure through “vulnerability disclosure platforms” does not constitute a statutory breach notification procedure within the meaning of the GDPR.

6. Rights of EU Users

EU users are entitled to the following rights in accordance with applicable law:

If you wish to exercise any of the above rights, please contact us through the means set out in this document, and we will process your request within the statutory time limits.

7. Third-Party Code and Plug-ins (SDKs)

In order to ensure the stable operation of this application and to provide you with its full functionality, we integrate SDKs or similar components provided by certain authorized partners. We have conducted rigorous security assessments of the APIs and SDKs provided by such partners and require them to assume data protection obligations consistent with this Privacy Policy, and to comply with the corresponding confidentiality and security measures.

The details of the integrated SDKs are set out below:

No. SDK Name Provider Purpose Data Collected
7.1 Firebase Cloud Messaging (FCM) Google LLC Message push service (device alerts, notification reminders) FCM push token, device model and operating system version
7.2 Google Sign-In Google LLC Signing in and registering with a Google Account Google Account identifier, email address, display name and profile picture, and the ID token issued by Google
7.3 Google Maps SDK for Android / Google Maps SDK for iOS Google LLC Map display, power station address search and location selection Device location, search keywords, power station latitude/longitude, map interaction data
7.4 Google Geocoding API Google LLC Converting between addresses and geographic coordinates when you search for or confirm a power station address The address text or coordinates submitted for lookup
7.5 Google ML Kit Barcode Scanning Google LLC Scanning device QR codes when you add or bind a device Camera frames are processed on your device only and are not transmitted to Google or to us; the SDK may download model files from Google
7.6 Google Play services Location (Fused Location Provider) Google LLC Obtaining your device location so that the map can be centered on your position Device location while the application is in use (foreground only)
7.7 Unity Engine Unity Technologies 3D visualization of power station energy flow –

The application also contains an in-app browser, which is used to open the authorization page of our cooperation partner Deye at partner.deye.com when you authorize access to your Deye device account. Information you enter on that page is processed by Deye under its own privacy policy.

8. Open Source Components Notice

This software may incorporate third-party software or technology. We will disclose the use of such third-party software in accordance with applicable law and relevant agreements, by means of annexes to this Privacy Policy, dedicated folders within the installation package, an open source component declaration page, or other appropriate means.

9. Intellectual Property and Copyright

9.1 Ownership of Rights

All our rights (including goodwill and trademarks) belong to us or to our licensors. Other products, brands and trademarks appearing in this application belong to their respective brand and trademark owners.

9.2 Intellectual Property in Content and Software

All intellectual property rights in this application, including application information and service information, databases, text, images, tables, photographs, videos, audio and their combinations, as well as the relevant software compilations, source code and software (including mini-programs and scripts), belong to us. You shall not acquire or attempt to acquire such intellectual property rights in any manner. Without our written permission, you shall not use, modify, reproduce or disseminate the commercial information and materials contained in this application.

9.3 Restricted Use of Brand Features

This Privacy Policy (or terms of use) does not grant you any right to use any trademark, service mark, logo, symbol, domain name or other significant brand feature.

9.4 Limitations on Use

Except as expressly permitted by this Privacy Policy (or the terms of use), you shall not alter, modify, sell, distribute or reproduce all or part of the terms of use, nor create derivative works thereof or use them for commercial purposes.

10. Disclaimer

10.1 Information and Service Quality

We shall not be liable for the accuracy, completeness or suitability of the information contained in this service and application. Internet services are subject to uncertainties and may not fully meet your expectations, including with respect to the availability, accuracy, timeliness, security and quality of the services, as well as the suitability of any third-party content or assets. Except where we breach this Privacy Policy, we cannot guarantee that the services will be free from interruption, but we will endeavor to provide safe, reliable and accurate services in a timely manner.

10.2 Risks of Use

You shall fully acknowledge the risks that may be involved in using the online services of this application. All consequences arising from your use of the online services of this application shall be borne by you, and we shall not be liable for such risks or their consequences.

11. Miscellaneous

The copyright of this “Privacy Policy” is owned by Nodi, and Nodi reserves all rights to interpret this “Privacy Policy”.

If you have any comments or suggestions regarding this Privacy Policy, please contact us at: info@nodienergy.com.

This Privacy Policy shall take effect from the date of publication.