3.2 Mi Robot Vacuum and Privacy
Introduction
The Mi Robot Vacuum is a smart device that helps you to clean your floor. It supports multiple functions in terms of cleaning tasks, such as: i) enabling you to manage device operations, ii) selecting a desired cleaning mode, iii) managing room cleaning tasks, iv) customizing a cleaning layout/plan and v) designating specific cleaning areas.
In order to make the robot cleaning more intelligent, we have added extra vision sensor besides the laser sensor system. We are very cautious about the involvement of camera. In order to collect minimal user data, we have involved device computing capabilities. With device computing, we only extract image patten and match with the patten database locally, instead of comparing the image itself. In addition, we do not store the image on local storage, and will not upload the image to the server, either, and we delete the image once the image patten extracted.
Data Collection and Usage
1) Pairing with Device and Synchronizing Data
We collect the Mi Account ID, MAC address and SN of the device to validate your device ownership.
2) Network Connection
We collect network-related information (when your device is connected to a network) in order to set up and maintain the connection to the device. This includes the current Wi-Fi connection mode (LAN, remote), IP address assigned to the device, Wi-Fi signal strength, received signal strength indication (i.e., RSSI of the device), MAC address, and the name (SSID) and password of the Wi-Fi network provided by you.
3) Basic Information
We collect the device name, battery level, location in which the device is installed (e.g. living room), operation status, firmware version and cleaning area, to display the status of the robot in the Xiaomi/Mi Home app.
4) Status Record
We will collect related parameters such as cleaning mode, water level and voice message sound volume to provide your settings and confirm the status of your robot.
5) House Floor Map
Your device needs to know its position in the house in order to create accurate cleaning paths and avoid missing anything out or repeated cleaning. The device will scan the fuzzy contour layout of the room and upload it to the server and Xiaomi/Mi Home app to display the room map and provide the related functions. Such map information includes:
Floor Layout: We will collect information about the floor layout generated by the device after each cleaning task, and information about the zone coverage and zone name, restricted areas (areas not allowed for cleaning) and virtual walls (i.e., locations where the device is unable to pass) which have been set by you.
Ceiling Features: We will collect information about the ceiling and any objects attached to it (i.e., suspended ceilings and light fixtures). Information about ceiling features is collected on models using visual navigation technology (such as Mi Robot Vacuum-Mop 1C and Mi Robot Vacuum-Mop 2 Pro+). Such information will only be processed on the local device and will not be uploaded to our server.
6) Cleaning Record
We will collect cleaning process records, which include cleaning zones, modes, time, duration, and coverage. Such records are used to display usage records and to help you learn about the area, duration, zone of each cleaning task, as well as the accumulated time and area, and the total number of clean-ups.
7) Information about Consumables
We will collect information relating to consumables, including usage time and remaining life of consumables, with such information being used to notify you of your usage of consumables.
8) Scheduled Cleaning and DND
We will collect scheduled cleaning time, DND time, and time zone settings to provide the timing activation of related functions.
9) Data Analysis
We collect product interaction data (e.g., clicks, failed connections, viewing activities) from the Xiaomi/Mi Home app plug-in for a statistical analysis of the usage and status of these functions. Such data is collected only if you have previously agreed to join the User Experience Improvement Program.
Privacy by Design
Mi Robot Vacuum only collects the data which is required to provide its functions. For example, functions which rely on the house floor map, such as: i) selected rooms cleaning, ii) designated area cleaning, iii) spot cleaning, and iv) cleaning record viewing. The relevant algorithms required for the Mi Robot Vacuum to perform obstacle avoidance and route planning are completely deployed and executed locally on the device. The surrounding environment information temporarily collected during the process will be used and discarded in real time, and will not be saved or uploaded to the server. In addition, all the image data collected from top or front cameras will not be saved locally or uploaded to the server. It will be discarded after processing on device.
To ensure the security of your data, all the data in transit is encrypted via HTTPS, and the house floor map will be encrypted by AES-128 before transmission. And all cleaning records are encrypted by AES-128 at rest.
We not only provide the functions for your data rights to be met (i.e., by enabling you to access, delete, and download your data), but also support some specific features when we design the functions. For example, Mi Robot Vacuum provides you with a local mode option. After turning the option on, all house floor map and cleaning records are processed and saved locally on the device only, and are not uploaded to the server.
Appendix 2: Data Inventory for Mi Robot Vacuum
Type | Type of Data | Identification Qualifier | Purpose | Data Transmission Encryption Measures | Data Storage Encryption Measures | Data Retention Policy |
---|---|---|---|---|---|---|
Identifiers | Mi Account ID | Identified | App Functionality Device Functionality Analytics | HTTPS | No Encryption | Per user's request |
MAC | Identified | App Functionality Device Functionality | HTTPS HTTPS | No Encryption | Per user's request | |
SN | Identified | App Functionality Device Functionality | No Transmission | Not Stored | Not Applicable | |
Usage Data | Product Interaction | Identified | Analytics | HTTPS | AES-128 | Per user's request |
Diagnostics | Crash Data | Identified | Analytics | HTTPS HTTPS | AES-128 AES-128 | Factory Reset Per user's request |
Performance Data | Identified | Analytics | HTTPS HTTPS | AES-128 AES-128 | Factory Reset Per user's request | |
Other Data | Wi-Fi Password | Identified | App Functionality Device Functionality | UDP | WPA Passphrase | Factory Reset |
Other Network Connection Information | Identified | App Functionality Device Functionality | MQTT HTTPS | No Encryption No Encryption | Factory Reset Per user's request | |
Basic Information | Identified | App Functionality Device Functionality | MQTT HTTPS | No Encryption No Encryption | Factory Reset Per user's request | |
Status Record Information | Identified | App Functionality Device Functionality | MQTT HTTPS | No Encryption No Encryption | Factory Reset Per user's request | |
Floor Layout Information | Identified | App Functionality Device Functionality | HTTPS HTTPS | AES-128 AES-128 | Factory Reset Per user's request | |
Ceiling Features Information | Identified | App Functionality Device Functionality | No Transmission | Not Stored | Discarded after milliseconds of processing time | |
Cleaning Record Information | Identified | App Functionality Device Functionality | HTTPS HTTPS | AES-128 AES-128 | Factory Reset Per user's request | |
Information about Consumables | Identified | App Functionality Device Functionality | MQTT HTTPS | No Encryption No Encryption | Factory Reset Per user's request | |
Scheduled Cleaning and DND Information | Identified | App Functionality Device Functionality | MQTT HTTPS | No Encryption No Encryption | Factory Reset Per user's request |