Privacy Policy

Version 1.0 · Effective date: 1 July 2026. This Policy is published at fireiq.de and applies regardless of the platform through which the App is obtained.

Download as PDF

This Privacy Policy explains how FireIQ Technologies GmbH processes personal data when you use the FireIQ mobile app (the “App”), available on the Apple App Store and Google Play, together with the user account that connects the App to the FireIQ Cloud Hub.

01 · Controller

Who is responsible for your data

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

FireIQ Technologies GmbH Gleisdreieck 11 · 42651 Solingen · Germany E-mail: info@fireiq.de · Web: fireiq.de

02 · Scope

What this Policy covers

This Policy covers the processing of personal data in connection with the App and the associated FireIQ user account. Separate privacy notices apply to the fireiq.de website and to the FireIQ Cloud Hub web platform where these involve additional processing. The App is a professional tool for operators, technicians, compliance officers and service partners managing connected fire-safety equipment; it is intended for business use.

Apple Inc. and Google Ireland Ltd. act as independent controllers for the processing they perform when you download the App from their stores (e.g. store account data, download statistics). Please refer to their respective privacy policies for details.

03 · Data We Process

Categories of personal data

a) Account and authentication data

Name, e-mail address, organization, assigned role and permissions, login credentials, and settings associated with your FireIQ user account. Accounts are typically created and administered by your organization or its authorized administrator.

b) Device, log and diagnostic data

When you use the App, we process technical data required to deliver and secure the service: device model and operating-system version, App version, language settings, IP address, access timestamps, and technical event logs. Crash and diagnostic data may be processed to maintain the stability and security of the App. No third-party crash-reporting or analytics SDKs are integrated in the App.

c) Location data

The App uses your device's position only for specific functions you actively trigger – in particular the commissioning wizard, which can auto-capture the installation address of a device from your phone's position when you register a new unit. Location access requires your permission at operating-system level and can be revoked at any time in your device settings. The App does not track your location in the background.

d) Camera and photos

With your permission, the App uses the camera to scan QR codes on FireIQ devices and to take guided photos (e.g. device and type-plate photos during commissioning, or photo evidence attached to fault reports). Photos are linked to the relevant device record in the FireIQ Cloud Hub.

e) Service and activity records

Actions you perform in the App are recorded in the digital service record of the relevant device – for example activating maintenance mode, closing a job, or submitting a structured fault report. These records include your user identity, a timestamp and the action performed, and form part of the tamper-evident documentation trail that the FireIQ platform provides to operators for compliance purposes.

f) Push notifications

If you enable notifications, we process the push token assigned to your device by the operating-system provider (Apple/Google) in order to deliver alerts and status messages. You can disable notifications at any time in the App or in your device settings.

g) Equipment telemetry

Sensor data transmitted by connected FireIQ devices (e.g. pressure, temperature, humidity, motion, battery, position of the unit) relates to equipment, not to individuals, and is generally not personal data. Where telemetry is combined with user activity (e.g. a maintenance-mode entry logged to a named technician), the resulting records are processed as described under (e).

h) Support communication

If you contact our support, we process the information you provide (contact details, content of your request) to handle your enquiry.

04 · Purposes and Legal Bases

Why we process your data

We process personal data on the following legal bases under Art. 6(1) GDPR:

Providing the App and account, authentication, synchronization with the Cloud Hub (incl. offline-first sync)Account data; device and log data; service and activity recordsArt. 6(1)(b) GDPR – performance of a contract, or Art. 6(1)(f) where you use the App on behalf of your organization
Commissioning functions (address auto-capture, QR scanning, guided photos)Location data; camera and photo dataArt. 6(1)(a) GDPR – consent, given via the operating-system permission dialogs; revocable at any time
Delivering alerts and status notificationsPush tokens; account dataArt. 6(1)(a) GDPR – consent (notification opt-in), and Art. 6(1)(b) for contractually agreed alerting
Maintaining digital service records and compliance documentation for operatorsService and activity recordsArt. 6(1)(b) and Art. 6(1)(f) GDPR – legitimate interest of operators and FireIQ in verifiable, audit-ready maintenance documentation
Security, stability, fault diagnosis and abuse preventionDevice, log and diagnostic dataArt. 6(1)(f) GDPR – legitimate interest in a secure and reliable service
Support and communicationSupport communication dataArt. 6(1)(b) or (f) GDPR
Compliance with statutory obligations (e.g. commercial and tax retention duties)Data required by the respective obligationArt. 6(1)(c) GDPR

05 · App Permissions

Permissions and how to control them

  • CameraQR-code scanning, commissioning photos and fault-report photo evidence. Optional; requested only when you use these functions.
  • LocationAddress auto-capture during device commissioning. Optional; requested only when you use this function.
  • NotificationsDelivery of alerts and status messages. Optional.

All permissions can be granted or revoked at any time in your device's operating-system settings. Core App functions that do not depend on a permission remain usable if the permission is declined.

06 · Users Acting for Organizations

Business context and role-based access

The App is used in a professional context. Your organization (or the service partner you work for) typically determines which users receive accounts, which roles and permissions they hold, and how long accounts remain active. Access to data in the FireIQ platform is governed by role-based permissions: operators, technicians, compliance officers and service partners each see only the data assigned to their role and projects. Where FireIQ processes personal data on behalf of a customer organization, this is governed by a data processing agreement pursuant to Art. 28 GDPR.

07 · Recipients

Who receives your data

We share personal data only to the extent necessary to operate the App and platform:

  • Hosting providers – the FireIQ platform is hosted on EU-based cloud servers. Data is encrypted in transit and at rest.
  • Communication providers – technical service providers for the delivery of push notifications (Apple/Google), e-mail and SMS alerts.
  • Your organization and its service partners – service and activity records are visible to the operator of the equipment and its authorized service partners in line with role-based permissions.
  • Authorities – where we are legally obliged to disclose data.

Hosting providers

The FireIQ app and platform are hosted by The Real Insight GmbH, using Deutsche Telekom (T-Cloud Public) infrastructure located in the EU. Data is encrypted in transit and at rest.

Mapping and location services

Mapbox, to render maps and process device or building location data you actively provide (e.g. commissioning wizard, asset location).

Speech and transcription services

Microsoft Azure (server-side speech-to-text for live chat transcription) and Apple/Google native speech-recognition and text-to-speech services (on your device, for dictation and voice playback in the chat).

All service providers acting on our behalf are bound by data processing agreements pursuant to Art. 28 GDPR.

08 · International Transfers

Where your data is processed

Personal data is hosted and processed on servers located in the European Union. Should a transfer to a country outside the EU/EEA become necessary in individual cases (for example, in connection with push-notification delivery by Apple or Google), it takes place only where an adequacy decision of the European Commission applies or appropriate safeguards within the meaning of Art. 46 GDPR (in particular EU Standard Contractual Clauses) are in place.

09 · Retention

How long we keep your data

Account data

For the duration of the contractual relationship and account lifetime; deleted or anonymized after termination, subject to statutory retention duties.

Service and activity records

For the documentation periods required for fire-safety compliance and the term agreed with the operator, as these records form the audit trail of the equipment.

Log and diagnostic data

For a limited period appropriate to security and troubleshooting purposes, then deleted or anonymized. Server logs and diagnostic data are retained for a maximum of 30 days before automatic deletion.

Statutory retention

Where commercial or tax law (e.g. § 257 HGB, § 147 AO) requires longer storage, data is retained for the statutory period and blocked from other use.

10 · Security

How we protect your data

FireIQ applies technical and organizational measures appropriate to the risk, including encryption of data in transit and at rest, user authentication, role-based access control, and EU-based hosting. Security has been part of the platform's design from the start of development. Measures are reviewed and updated on an ongoing basis.

11 · AI Assistant and Automated Decisions

No automated decision-making

The FireIQ platform includes an AI assistant that answers plain-language questions about your fleet (e.g. device status queries) using the data you are authorized to access. The assistant is an analysis and display function; it does not make decisions that produce legal effects concerning you or similarly significantly affect you. No automated decision-making within the meaning of Art. 22 GDPR takes place.

12 · Your Rights

Your rights under the GDPR

You have the right to:

  • Access (Art. 15 GDPR) – obtain information about the personal data we process about you
  • Rectification (Art. 16 GDPR) – have inaccurate data corrected
  • Erasure (Art. 17 GDPR) – have your data deleted where the legal conditions are met
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent (Art. 7(3) GDPR) – with effect for the future, e.g. by revoking an App permission
  • Objection (Art. 21 GDPR) – you may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR

To exercise your rights, contact us at info@fireiq.de. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for FireIQ Technologies GmbH is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Düsseldorf; you may also contact the authority of your habitual residence or place of work.

13 · Minors

No use by minors

The App is a professional tool and is not directed at children or minors. We do not knowingly collect personal data from persons under 16 years of age.

14 · Changes

Changes to this Policy

We may update this Policy when the App, our services or the legal framework change. The current version is always available at fireiq.de and within the App's store listings. Material changes affecting you will be communicated appropriately, e.g. in the App.

15 · Contact

Questions about privacy

FireIQ Technologies GmbH · Gleisdreieck 11 · 42651 Solingen · Germany · info@fireiq.de · fireiq.de