1. Operator and contact
THERMOlink is developed and operated by DAGIMPEX Ltd, Georgia. Questions about this policy or personal data can be sent to support@thermolink.net.
2. Information THERMOlink processes
Account information
THERMOlink processes your email address and account identifier to create and authenticate your account. Authentication credentials are handled by Amazon Cognito. THERMOlink does not store your plaintext password in its application backend.
Device and service information
To provide the service, THERMOlink processes the identifier of the hardware you claim, the association between your account and that device, boiler status, control settings, schedules, notification preferences and command requests.
Push notifications
If notifications are enabled, THERMOlink processes a Firebase Cloud Messaging registration token so service and boiler alerts can be delivered to your device.
Camera access
The camera is used only to scan a device claim-code QR during setup. THERMOlink does not take, upload or store photos or video from this scan. You can enter the claim code manually instead.
Support communications
If you contact support, THERMOlink processes the email address and information you provide to investigate and respond to your request. Do not send passwords, authentication codes or device claim codes to support.
Technical processing
AWS and Firebase may process network and delivery information needed to authenticate requests, operate the service, deliver notifications, prevent abuse and diagnose failures.
3. How information is used
- To create, verify and secure your THERMOlink account.
- To associate your account with compatible THERMOlink hardware.
- To display status and deliver settings, schedules and commands.
- To send service and boiler notifications you have enabled.
- To respond to support, data-access and deletion requests.
- To maintain reliability, investigate failures and protect the service.
4. Service providers and sharing
THERMOlink uses the following providers to operate the app:
- Amazon Web Services: account authentication through Cognito, API processing and service infrastructure. The configured THERMOlink services operate in the AWS Europe (London) region.
- Google Firebase Cloud Messaging: delivery of push notifications to Android devices.
These providers process information on THERMOlink's behalf under their own security and privacy terms. See the AWS Privacy Notice and Google Privacy Policy.
THERMOlink does not sell personal information and does not use the app for third-party advertising.
5. Storage and security
Network communication uses HTTPS. Authentication tokens stored by the Android app are encrypted using Android Keystore-backed AES-GCM encryption where available. Android application backups are disabled. Access to backend functions requires an authenticated account.
No internet-connected system can be guaranteed completely secure. THERMOlink limits information and access to what is needed to operate the service.
6. Retention
Account and device-association information is retained while your account is active and as needed to provide the THERMOlink service. On your Android device, authentication information and the linked device identifier remain until you sign out, delete the account, clear the app's storage or uninstall the app.
After account deletion, information is removed from active account use as described below. Limited information may remain temporarily in operational logs or routine infrastructure backups where technically necessary for security, troubleshooting, abuse prevention or legal compliance. Such information is not used for ordinary product operation after deletion.
7. Account and data deletion
You can delete your account from the app under Settings > Account > Delete My Account. The deletion process removes the Cognito account, unlinks the account from its claimed device, removes its push-notification registration and clears local account credentials and the local device association.
You can also request deletion without the app at thermolink.net/account-deletion. THERMOlink may ask you to verify control of the registered email address before completing an external request.
Operational data that belongs to the physical boiler device rather than the user account may remain with that hardware after the account association is removed. It is no longer associated with the deleted account.
8. Access and correction
You may request a copy of personal information associated with your account, ask for inaccurate information to be corrected, or ask a privacy question by contacting support@thermolink.net. THERMOlink may need to verify your identity before fulfilling a request.
9. Children
THERMOlink is intended for adults responsible for compatible heating equipment. It is not directed to children, and children should not create THERMOlink accounts.
10. Changes to this policy
This policy may be updated when the app, infrastructure or legal requirements change. The effective date at the top of this page will be updated when material changes are published.