Article 1. General Provisions & Executive Summary
The Xplora Smartwatch system—comprising cellular-enabled smart wearable hardware, the Guardian Mobile Application, encrypted telemetry pipelines, and mobile network service subscriptions—collects and transmits operational device telemetry, network diagnostics, and real-time geospatial location data to Xplora Technologies Inc., XPLORA Mobile AS, and XPLORA TECHNOLOGIES AS. Such detailed telemetry is vital to maintaining critical safety functionality including real-time location mapping, geofenced safe-zone boundary alerts, automated SOS dispatch, and parent-managed contact white-listing.
Data privacy and user security form the cornerstone of Xplora hardware manufacturing and software engineering. We strictly adhere to national telecommunication acts, European Union General Data Protection Regulation (EU GDPR), United States Children’s Online Privacy Protection Act (COPPA), and global telecom security mandates. All data collection processes are handled using strict end-to-end encryption standards to provide complete protection for young users and peace of mind for parents and international telecom partners.
Article 2. Data Controllers, Data Processors & Global Storage Infrastructure
The entity responsible for processing personal data depends on the operational geographic jurisdiction of the registered device and mobile subscriber account:
- North America & International Importers: Xplora Technologies Inc. (Reg. No. 84-4847142) acts as the Data Controller.
- Nordic Region (Norway, Sweden, Denmark, Finland, Iceland): Xplora Mobile AS (Org. No. 814 499 022) acts as the Data Controller.
- European Union & Rest of World: Xplora Technologies AS (Reg. No. 916 752 628) acts as the Data Controller.
To ensure high service availability, fault tolerance, and security compliance, Xplora engages authorized Data Processors under strict data protection agreements (DPAs). Primary cloud processing and storage infrastructures are hosted via Amazon Web Services (AWS) in Dublin, Ireland, and Frankfurt, Germany. Cross-border transfers adhere to EU Standard Contractual Clauses (SCCs) and high-level AES-256 encryption protocols during transit and at rest.
Article 3. Technical Categories of Data Collected
To provide reliable location tracking, instant parental notification, and encrypted cellular connectivity, Xplora collects the following specific data categories:
| Data Classification | Technical Scope & Collected Data Fields | Primary Purpose & Usage |
|---|---|---|
| Mobile Application Data | Device Type, OS Version, Push Token, App Installation ID, Parent Phone Number, Encrypted Credentials. | Authentication, account synchronization, security notifications, app functionality. |
| Smartwatch Telemetry | Device IMEI, SIM IMSI, Hardware MAC Address, Firmware Build, Battery Status, Signal Strength metrics. | Network registration, over-the-air (OTA) updates, hardware diagnostic management. |
| Geospatial Data | GPS Coordinates, Wi-Fi BSSID triangulation points, Cellular Tower ID, Location Timestamps. | Real-time location display on Guardian App, safe-zone entry/exit alert triggers. |
| Contact & Messaging Data | Parent-approved Whitelisted Phone Numbers, Contact Nicknames, Contact Avatars, Encrypted Voice/Text messages. | Restricting calls/messages exclusively to trusted contacts; blocking unsolicited calls. |
Article 4. Children’s Privacy Policy (COPPA & GDPR Article 8 Compliance)
Special Safeguards for Users Under 18
Xplora enforces strict safeguards regarding child safety. Children’s wearable devices operate as closed-loop environments: open web browsing is completely disabled, app downloads are prohibited, and social media access is blocked. Communication is limited exclusively to contacts pre-authorized by parents via the Guardian App.
In full compliance with COPPA (US) and GDPR Article 8 (EU), Xplora does not collect data from children under 18 without verified parental consent. Parental control features include:
- Revocation of Consent: Parents can withdraw consent for location or activity data processing at any time via Guardian app settings.
- Access & Export Rights: Parents have full authority to request complete data logs accumulated by their child’s smartwatch device.
- Permanent Deletion: Parents may submit binding requests for complete account and device data purging across server backups.
Article 5. Data Retention & Automated Deletion Schedules
Xplora follows data minimization practices, retaining personal data only for as long as necessary to provide service functionality or satisfy regulatory obligations:
- Real-time Location Data: Location logs and GPS telemetry history are automatically wiped from active application databases after 72 hours.
- Chat Messages & Audio Clips: Communication history sent between the watch and the Guardian app is automatically purged after 30 days.
- Account Deactivation & Purge: When an account deactivation request is initiated, a 45-day grace period is provided for reactivation. Following this period, all customer records are permanently deleted from primary databases within 7 days.
Article 6. Third-Party Data Non-Disclosure & Commercial Integrity
Xplora guarantees that personal information and location logs are never sold, rented, or monetized for third-party commercial marketing or profiling purposes under any circumstances. Third-party data transfers occur strictly under legal or operational conditions:
- Emergency service providers (e.g., dispatch centers) when an emergency SOS trigger requires immediate assistance location routing.
- Authorized cellular carrier partners for voice routing, text messaging service delivery, and subscriber authentication.
- Law enforcement authorities upon receiving binding, legally valid judicial warrants or legal directives.
Have Questions Regarding Procurement or Technical Compliance?
Our dedicated data protection team and B2B hardware experts are ready to provide full regulatory documentation, technical spec sheets, and compliance verification for global buyers and retail partners.
Send an Inquiry