Privacy Policy
Version 2.0 · Effective 19 October 2026
What ESAVVO collects, why we collect it, who we share it with, how long we keep it, and the rights you have. Written to be read straight through.
1. Introduction
ESAVVO Co., Ltd. (“ESAVVO”, “we”, “us”) designs and sells AI Glasses and Finder Card trackers, together with the ESAVVO mobile app and the website at esavvo.com.
This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to:
- our websites, including esavvo.com;
- the ESAVVO app for iOS and Android;
- our AI Glasses; and
- our Finder Card Air and Finder Card Core accessories.
Version 2.0, effective 19 October 2026. If we make a material change we will post the new version here and tell you in the app or by email. If you have questions about this policy, write to esavvo@esavvo.com.
2. Information We Collect
2.1 Information you give us
- Account information — your name, email address, password or sign-in token, country or region, preferred language, and the products you register.
- Order and payment information — the items you bought, the amount, shipping address and contact number. Card and bank details are handled directly by our payment processor; we do not store them.
- Support, warranty and returns — your messages, any photos you choose to attach, the case number, the order number, and where local law requires it for a refund, a government-issued ID.
- Marketing preferences — your email address and consent record, only if you choose to subscribe.
2.2 Information from your devices
- model, firmware version and app version;
- pairing state and connection history;
- battery and charging health, and basic error or crash logs;
- settings you have chosen in the app or on the glasses.
This is what keeps the product working, updates secure and warranty claims fair. Crash and diagnostic reporting is optional and off unless you turn it on.
2.3 Voice and AI features
The glasses use a microphone array with bone-conduction pickup for the wake word, voice commands, reminders and calls. Core processing runs on the device, as described in section 4. We handle the audio of a request only once the wake word has been detected, and only to produce the result you asked for.
2.4 Finder Card
Finder Card Air and Finder Card Core connect over Bluetooth Low Energy. The card broadcasts a rotating identifier so your phone, or another device in the ESAVVO finding network, can estimate proximity and report a last-known location to your account. The card itself does not know where it is.
2.5 Website information
When you visit esavvo.com we receive your IP address, browser and device type, the pages you view and the time of your visit, together with the cookies described in section 6.
3. How We Use Your Information
We use personal information only for the purposes below.
- To provide what you bought — processing payment, fraud checks, shipping, customs paperwork and delivery.
- To run the products — pairing, firmware updates, warranty service and security fixes.
- To provide AI and audio features — on the device by default, and in our cloud only where you switch such a feature on.
- To support you — answering questions and handling repairs, returns and refunds.
- To keep things secure — preventing abuse and fraud, and responding to incidents.
- To improve the products — aggregated, de-identified usage and reliability statistics.
- To meet our legal duties — tax, accounting, audit and lawful requests.
- To market to you — only with your consent, which you can withdraw at any time.
Where the law requires a legal basis — for example in the EEA, the UK and Switzerland — we rely on: performance of a contract for orders, product operation and support; consent for optional cloud AI features and for marketing; legitimate interests for security and product improvement; and legal obligation for tax, accounting and lawful requests.
We do not use your personal information for automated decisions that produce legal or similarly significant effects, and we do not build advertising profiles from your use of the glasses.
4. On-Device Processing and AI Features
Most of what the glasses do happens on the glasses.
- The wake word, voice commands, reminders, timers, notifications and on-device translation are processed locally.
- Music, maps and offline content you load are held in the 64 GB of local storage and stay there.
- If you switch on a feature that needs the cloud — such as translation into additional languages — the speech for that request is sent to our cloud provider to produce the result. It is not stored beyond that request.
- Our current AI Glasses are not equipped with a camera, and we do not collect photographs or video from the eyewear.
- We do not use your voice, your conversations or your support messages to train AI models — ours or anyone else’s.
You can turn the assistant off in settings, which stops wake-word detection, and you can leave cloud-based features switched off entirely and keep using the glasses.
5. How We Share Your Information
We do not sell your personal information, and we do not share it so that others can advertise to you across other sites and apps. We share it only in these situations:
- Service providers — payment processing and fraud screening, shipping and customs, cloud hosting, email delivery and our support desk. They act on our instructions, may not use your information for their own purposes, and must delete or return it when the work is done.
- Our group companies — for hosting, security, engineering and support, limited to staff who need access for a specific task.
- At your direction — for example a repair centre or carrier during a case, limited to what that case needs. Apps you connect to the glasses are covered by their own privacy policies.
- Legal and safety — where the law requires it, or to prevent serious harm. We check that each request is lawful and properly issued, and we tell you unless the law forbids it.
6. Cookies
esavvo.com uses a small number of cookies:
- Strictly necessary — session, cart, checkout, security and load balancing. The shop does not work without them.
- Preferences — language, region and your cookie choices.
- First-party analytics — aggregated statistics with truncated IP addresses, used to fix pages people leave. You can refuse these in the cookie banner.
- Advertising or retargeting cookies — we do not use them, and we do not embed third-party advertising pixels.
You can also block or clear cookies in your browser settings; the rest of the site keeps working.
7. Data Retention
We keep personal information only as long as we need it for the purpose it was collected, and then delete or de-identify it.
- Account and product registration — while your account is open, then 12 months.
- Orders, invoices and tax records — 7 years, as accounting and tax law requires.
- Support cases and repair history — 24 months after the case is closed.
- Device diagnostics you send us — 90 days.
- Finder Card location history — 30 days, then overwritten.
- Website analytics — 14 months.
- Marketing consent and unsubscribe records — until you withdraw, plus 24 months.
- Security and access logs — 12 months.
Where a legal hold or an open dispute applies, we keep the relevant records until it is resolved.
8. Data Security
We protect personal information with technical and organisational measures appropriate to its sensitivity:
- encryption in transit for everything the app and the website send, and encryption at rest for cloud storage;
- signed and verified firmware, so a modified update cannot be installed;
- pairing bound to your account, and local storage that other apps cannot read;
- a factory reset that wipes pairings and local content;
- least-privilege access with multi-factor authentication for our administrative systems, and logging of access to production data;
- a review of any service provider before it handles personal information on our behalf.
If a breach affects your personal information we will investigate, contain it, and notify you and the relevant regulator without undue delay. No system is perfect: if you believe your account or a device has been compromised, write to us and we will treat it as a security matter.
9. International Transfers
We are based in China and serve customers worldwide, so personal information may be transferred to and processed in countries other than yours, including by our group companies and service providers.
- For transfers out of the EEA, the UK and Switzerland we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, supported by a transfer risk assessment, or on an adequacy decision where one applies.
- Where a cloud AI feature is enabled, the speech for that request may be processed outside your country. You can leave such features off and keep processing on the device.
- You can ask for a copy of the safeguards that apply to your data by writing to esavvo@esavvo.com.
10. Your Rights
Whichever country you live in, you can ask us to:
- Give you access to the personal information we hold about you, and tell you where it came from;
- Correct anything inaccurate or incomplete;
- Delete your account and the information linked to it, except records we must keep by law;
- Provide a copy of what you gave us in a portable, machine-readable format;
- Restrict or object to certain processing, including processing based on legitimate interests;
- Withdraw consent for optional cloud AI, analytics or marketing, without losing access to the product;
- Confirm that we do not sell or share your personal information — in our case there is nothing to switch off, and we will put that in writing.
Send requests to esavvo@esavvo.com. We may verify your identity before acting, and verification never asks for more than we already hold for you. We reply within one month, or sooner where local law requires it. Where your local law allows it, you may use an authorised agent.
We will not degrade the product, raise your price or withhold a feature because you exercised a right. If we refuse a request we explain why, and the refusal is reviewed by someone who was not involved in the original decision.
If you are in the EEA, the UK or Switzerland you may complain to your national data protection authority or to the Information Commissioner’s Office. In California you may exercise the rights above under the CCPA/CPRA, and we do not sell or share personal information as those terms are defined there. In Mainland China you may exercise your rights under the PIPL, and we answer within 15 working days. Customers in Korea (PIPA), Japan (APPI), Brazil (LGPD) and Australia (Privacy Act 1988) have equivalent rights under their local law. You may complain to your local regulator at any time.
11. Children’s Privacy
Our products are made for adults. You must be at least 16 to create an ESAVVO account in the EEA, the UK and Switzerland, and at least 13 elsewhere, unless local law sets a different age. We do not knowingly collect personal information from children below those ages and we do not market to them. If you believe a child has created an account, write to esavvo@esavvo.com and we will delete the account and its data.
12. Changes to This Policy
This version is 2.0, effective 19 October 2026, last updated 19 October 2026. We will post any update on this page with a new effective date, and we will tell you in the app or by email before a change that materially affects what we collect or who we share it with takes effect. Earlier versions are available on request.
13. Contact Us
One address handles privacy questions, data rights requests and security reports.
- Email — esavvo@esavvo.com. We acknowledge within 3 business days and answer rights requests within one month.
- Post — ESAVVO Co., Ltd., 409A, Bldg 2, PingAn Fortune Center, No.1588 ShenChang Rd, Shanghai, China. Please mark it for the attention of the Privacy Team.
- What to include — the email address on your account, the product (AI Glasses, Finder Card Air or Finder Card Core) and what you would like us to do. Never send a password, a card number or a one-time code.
If you are not satisfied with our response you can complain to your local data protection authority at any time; you do not have to go through us first.