IoT Privacy White Paper - Xiaomi

3.2 Mi Robot Vacuum and Privacy

Introduction

The Mi Robot Vacuum is a smart device that helps you to clean your floor. It supports multiple functions in terms of cleaning tasks, such as: i) enabling you to manage device operations, ii) selecting a desired cleaning mode, iii) managing room cleaning tasks, iv) customizing a cleaning layout/plan and v) designating specific cleaning areas.

In order to make the robot cleaning more intelligent, we have added extra vision sensor besides the laser sensor system. We are very cautious about the involvement of camera. In order to collect minimal user data, we have involved device computing capabilities. With device computing, we only extract image patten and match with the patten database locally, instead of comparing the image itself. In addition, we do not store the image on local storage, and will not upload the image to the server, either, and we delete the image once the image patten extracted.

Data Collection and Usage

1) Pairing with Device and Synchronizing Data

We collect the Mi Account ID, MAC address and SN of the device to validate your device ownership.

2) Network Connection

We collect network-related information (when your device is connected to a network) in order to set up and maintain the connection to the device. This includes the current Wi-Fi connection mode (LAN, remote), IP address assigned to the device, Wi-Fi signal strength, received signal strength indication (i.e., RSSI of the device), MAC address, and the name (SSID) and password of the Wi-Fi network provided by you.

3) Basic Information

We collect the device name, battery level, location in which the device is installed (e.g. living room), operation status, firmware version and cleaning area, to display the status of the robot in the Xiaomi/Mi Home app.

4) Status Record

We will collect related parameters such as cleaning mode, water level and voice message sound volume to provide your settings and confirm the status of your robot.

5) House Floor Map

Your device needs to know its position in the house in order to create accurate cleaning paths and avoid missing anything out or repeated cleaning. The device will scan the fuzzy contour layout of the room and upload it to the server and Xiaomi/Mi Home app to display the room map and provide the related functions. Such map information includes:

  • Floor Layout: We will collect information about the floor layout generated by the device after each cleaning task, and information about the zone coverage and zone name, restricted areas (areas not allowed for cleaning) and virtual walls (i.e., locations where the device is unable to pass) which have been set by you.

  • Ceiling Features: We will collect information about the ceiling and any objects attached to it (i.e., suspended ceilings and light fixtures). Information about ceiling features is collected on models using visual navigation technology (such as Mi Robot Vacuum-Mop 1C and Mi Robot Vacuum-Mop 2 Pro+). Such information will only be processed on the local device and will not be uploaded to our server.

figure

figure

6) Cleaning Record

We will collect cleaning process records, which include cleaning zones, modes, time, duration, and coverage. Such records are used to display usage records and to help you learn about the area, duration, zone of each cleaning task, as well as the accumulated time and area, and the total number of clean-ups.

7) Information about Consumables

We will collect information relating to consumables, including usage time and remaining life of consumables, with such information being used to notify you of your usage of consumables.

8) Scheduled Cleaning and DND

We will collect scheduled cleaning time, DND time, and time zone settings to provide the timing activation of related functions.

figure

figure

9) Data Analysis

We collect product interaction data (e.g., clicks, failed connections, viewing activities) from the Xiaomi/Mi Home app plug-in for a statistical analysis of the usage and status of these functions. Such data is collected only if you have previously agreed to join the User Experience Improvement Program.

Privacy by Design

Mi Robot Vacuum only collects the data which is required to provide its functions. For example, functions which rely on the house floor map, such as: i) selected rooms cleaning, ii) designated area cleaning, iii) spot cleaning, and iv) cleaning record viewing. The relevant algorithms required for the Mi Robot Vacuum to perform obstacle avoidance and route planning are completely deployed and executed locally on the device. The surrounding environment information temporarily collected during the process will be used and discarded in real time, and will not be saved or uploaded to the server. In addition, all the image data collected from top or front cameras will not be saved locally or uploaded to the server. It will be discarded after processing on device.

To ensure the security of your data, all the data in transit is encrypted via HTTPS, and the house floor map will be encrypted by AES-128 before transmission. And all cleaning records are encrypted by AES-128 at rest.

We not only provide the functions for your data rights to be met (i.e., by enabling you to access, delete, and download your data), but also support some specific features when we design the functions. For example, Mi Robot Vacuum provides you with a local mode option. After turning the option on, all house floor map and cleaning records are processed and saved locally on the device only, and are not uploaded to the server.

figure

figure

Appendix 2: Data Inventory for Mi Robot Vacuum

TypeType of DataIdentification QualifierPurposeData Transmission Encryption MeasuresData Storage Encryption MeasuresData Retention Policy
IdentifiersMi Account ID
Identified
App Functionality
Device Functionality
Analytics

HTTPS

No Encryption

Per user's request
MAC
Identified
App Functionality
Device Functionality

HTTPS

HTTPS

No Encryption

Per user's request
SN
Identified
App Functionality
Device Functionality

No Transmission
Not StoredNot Applicable
Usage DataProduct Interaction
Identified
Analytics

HTTPS

AES-128

Per user's request
DiagnosticsCrash Data
Identified
Analytics

HTTPS

HTTPS

AES-128

AES-128

Factory Reset

Per user's request
Performance Data
Identified
Analytics

HTTPS

HTTPS

AES-128

AES-128

Factory Reset

Per user's request
Other DataWi-Fi Password
Identified
App Functionality
Device Functionality

UDP

WPA Passphrase

Factory Reset
Other Network Connection Information
Identified
App Functionality
Device Functionality

MQTT

HTTPS

No Encryption

No Encryption

Factory Reset

Per user's request
Basic Information
Identified
App Functionality
Device Functionality

MQTT

HTTPS

No Encryption

No Encryption

Factory Reset

Per user's request
Status Record Information
Identified
App Functionality
Device Functionality

MQTT

HTTPS

No Encryption

No Encryption

Factory Reset

Per user's request
Floor Layout Information
Identified
App Functionality
Device Functionality

HTTPS

HTTPS

AES-128

AES-128

Factory Reset

Per user's request
Ceiling Features Information
Identified
App Functionality
Device Functionality

No Transmission
Not Stored

Discarded after milliseconds of processing time
Cleaning Record Information
Identified
App Functionality
Device Functionality

HTTPS

HTTPS

AES-128

AES-128

Factory Reset

Per user's request
Information about Consumables
Identified
App Functionality
Device Functionality

MQTT

HTTPS

No Encryption

No Encryption

Factory Reset

Per user's request
Scheduled Cleaning and DND Information
Identified
App Functionality
Device Functionality

MQTT

HTTPS

No Encryption

No Encryption

Factory Reset

Per user's request