Last updated: 03 September 2026

This Privacy Policy explains how SMADE (Imagin’Office, 77 Bd de la Bataille de Stalingrad, 69100 Villeurbanne, France — “SMADE”, “we”, “us”) collects, uses, shares and protects personal data through the S-HUB Connect mobile application for iOS. It complements our Legal Terms and is designed to meet Apple’s App Store requirements and applicable data-protection law, including the EU General Data Protection Regulation (GDPR).

What the app does

S-HUB Connect helps organisations locate their tracked assets. While the app runs, your device detects nearby Bluetooth Low Energy (BLE) signals, pairs them with your device’s location, and securely sends these observations to our servers so that the position of tracked assets can be determined and shown to authorised users. You sign in with your S-HUB account to view the assets that belong to your organisation.

Data we collect and why

Location

Your device’s precise and approximate location, including while the app is in the background if you grant “Always” access. Each detected signal is paired with your location and sent to our servers; without a position, an observation has no operational value.

Nearby Bluetooth signals

The advertisement data broadcast over Bluetooth by nearby devices, which may include signals from devices that are not yours. These are captured and transmitted, together with your location, so your device can contribute observations that power the asset-location service.

Motion and activity

Whether your device is moving or stationary. This is used on your device only, to reduce battery consumption when you are not moving, and is not transmitted to our servers.

Account information

The email address and name associated with your S-HUB account, and your organisation, used to authenticate you and show the assets you are entitled to see.

Device and diagnostic data

A device identifier, the app and operating-system version, crash reports and other technical diagnostics, used to operate, secure and troubleshoot the service.

We do not use your data for advertising, and we do not track you across other companies’ apps or websites. The app therefore does not request App Tracking Transparency permission.

How we use your data

• Detect tracked assets and determine where they were observed.
• Authenticate you and display your organisation’s assets.
• Operate, secure, maintain and improve the service.
• Comply with our legal obligations.

Legal bases (GDPR)

Where the GDPR applies, we rely on the performance of a contract with your organisation to provide the asset-tracking service; on your consent, given through the operating-system permission prompts, for access to location, Bluetooth and motion data; and on our legitimate interest in securing and improving the service. You may withdraw permission at any time (see “Your privacy controls”).

Who we share data with

We share data with the technology and infrastructure providers who operate the asset-location network and hosting on our behalf, under contract and only for the purposes described in this policy. We may also disclose data where required by law, or to protect rights, safety and security. We do not sell your personal data.

How long we keep data

Observations stored on your device are kept only briefly: data that has been uploaded is removed after a few days, and data that could not yet be uploaded is dropped after at most 14 days. On our servers, personal data is retained only for as long as necessary for the purposes described above and to meet our legal obligations.

Your privacy controls

Directly in the app:

• Pause data collection from the “Privacy & data” screen — scanning, location use and uploads stop immediately, and the choice persists until you turn it back on.
• Delete the observations stored on your device from the same screen. This does not remove your account credentials.
• Sign out at any time from your account menu — this also removes your device’s gateway credential.

From iOS Settings, you can revoke the app’s Bluetooth, Location or Motion access at any time; the app continues to work with reduced functionality.

Your rights

Subject to applicable law, you may request access to your personal data, its correction or deletion, a portable copy, and the restriction of or objection to certain processing, and you may withdraw consent. You also have the right to lodge a complaint with your data-protection authority — in France, the Commission Nationale de l’Informatique et des Libertés (CNIL). To exercise your rights, contact us using the details below.

Data security

Data in transit is protected with encryption (HTTPS/TLS), and credentials are stored in the device’s secure keystore (Keychain). We apply technical and organisational measures appropriate to the risk; however, no method of transmission or storage is completely secure.

Children

S-HUB Connect is a professional tool and is not directed at children. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the “Last updated” date above and, where appropriate, through the app.

Contact

SMADE
Imagin’Office, 77 Bd de la Bataille de Stalingrad, 69100 Villeurbanne, France
hello@smade.io