Your data. Clearly explained.

Privacy Policy

This policy explains how YOGO Flow collects, uses, shares, protects, retains, and deletes data while you scan, map, and deploy robots on site—and the choices available to you.

1. Overview

YOGO Flow is a field deployment app for YOGO ROBOT robots. It helps deployment technicians connect to a robot, scan and build site maps, manage sites and floors, run cloud-side map calculation, and sync robot logs.

Shanghai Yogo Robot Co., Ltd., operating under the YOGO ROBOT brand ("YOGO ROBOT," "we," "us," or "our"), is responsible for the personal data processed in connection with the app.

We process only the data needed to provide app functionality, connect to your robot, protect the service, meet legal obligations, or carry out another purpose with your consent. We do not sell personal data, and we do not use your data for personalized advertising.

Data minimization We process only what login, site/map work, robot connectivity, and cloud calculation actually require.
Local robot connection Scan and point-cloud data are mostly exchanged directly between your phone and the robot over a Wi-Fi connection you control.
No sale of data We do not exchange personal or sensitive user data with third parties for money.
Deletion available You may request deletion of your account and associated data using the process below.
Organization-provisioned accounts. YOGO Flow is a business tool for YOGO ROBOT deployment personnel and partners. Most accounts are created and assigned by your organization's YOGO ROBOT administrator rather than through self-registration in the app. Sign-in uses your phone number with a password or a one-time SMS code.

2. Data we process

The data we process depends on the features you use. The table distinguishes data you provide, data exchanged with a robot over a local connection, and data generated automatically while the app operates.

Category Data Purpose and source
Account and authentication Phone number, login password, one-time SMS verification code, user ID, account/role type, access token, refresh token, token expiration time, and a client identifier. Provided by you at sign-in, or generated by our service, to verify identity, maintain your session, and prevent unauthorized access. We do not offer public self-registration; accounts are typically provisioned by your organization.
Site and project data Selected site (name, address, site identifier), associated site documents, and your recent site search history. Selected or searched by you while using the app, so you can pick the correct deployment site, load related building and floor information, and quickly return to recent sites.
Scan mapping and robot connection The robot's Wi-Fi hotspot name (SSID) and connection status, the content of a QR code you scan to join that hotspot, real-time scan data streamed from the robot (map images, nearby device list, scan status), point cloud data, building/floor/map-area selections, and the map packages and preview images you save. Generated while you connect your phone to a robot's local Wi-Fi hotspot and run the scanning wizard, so you can build, preview, save, and manage maps. This data is mostly exchanged directly between your phone and the robot over that local connection.
Cloud map calculation A map-calculation service access token and its expiration time, and the scan or map data you submit for cloud-side calculation. Generated or uploaded by the app when you start cloud map calculation, so our service can compute and return a finished map.
Robot and device logs Robot operating and diagnostic logs, including large log files that are downloaded in chunks and repackaged on your device before upload. Retrieved from the robot and, when you choose to sync or upload them, sent to our service to diagnose issues and support your deployment work.
Device and network request data Interface language, selected gateway/region, client identifier, IP address, request time, API path, response status, and similar request or security logs. Processed automatically during network requests to return localized content, route requests to the correct regional server, maintain reliability, prevent abuse, and diagnose failures. Human-readable request logs are also written to your device for local debugging; this is not a separate analytics stream.
On-device storage Access token, refresh token, a cached account profile, language and region preference, selected gateway, selected site and site documents, site search history, cloud map-calculation token, and your privacy-notice acknowledgement status. Stored in the app's local storage on your device to keep you signed in, remember your settings, and avoid unnecessary network requests.

Camera

The camera is used only to scan the QR code printed on or shown by a robot so the app can join its Wi-Fi hotspot. The app does not use the camera to take or save photos, and it does not access your photo library.

Data the current version does not actively access

The current version does not track your GPS location, and it does not access contacts, SMS, call logs, microphone data, health data, your photo library, the list of installed apps, or persistent device identifiers for its business features. It does not include advertising or third-party analytics SDKs, and it does not offer Google or other social sign-in. If this changes, we will update this policy and, where required, provide a prominent in-app disclosure and obtain consent first.

3. How we use data

We use the data described above to:

  • Create and manage accounts, verify identity, maintain sessions, and protect account security.
  • Let you connect to a robot's Wi-Fi hotspot, run the scanning wizard, and build, preview, and save maps.
  • Run cloud-side map calculation and return finished maps and previews.
  • Sync and diagnose robot logs to support deployment and troubleshooting.
  • Save your selected site, floors, and recent searches so you can resume work quickly.
  • Provide localized content, route requests to the right regional server, and perform necessary caching.
  • Measure feature reliability, detect failures or abuse, and improve app performance.
  • Comply with applicable laws, regulatory requirements, and valid legal processes.
  • Carry out another specific purpose that we describe to you and, when required, obtain your consent.

4. Sharing and third-party services

We do not sell personal data. We transfer or disclose data only when needed in the following circumstances:

  • Your robot, over a local connection. Scan data, point cloud data, and status information are exchanged directly with the robot you connect to over Wi-Fi. This local exchange is necessary for the scanning feature to work and is not a transfer to a third party.
  • Infrastructure and storage providers. We may use contracted cloud hosting, object storage, content delivery, operations, and security providers to run YOGO Flow, store map packages and robot logs, and perform cloud map calculation. Providers may process only the data needed to perform their services under our instructions and contractual safeguards.
  • Authorized business personnel. Authorized YOGO ROBOT deployment, support, or technical personnel—and, where applicable, your organization's administrator—may access necessary account and site information to support your deployment work and manage organization accounts.
  • Law and safety. We may disclose necessary information to comply with law, court orders, or regulatory requirements, or to protect the lawful rights and safety of users, the public, us, and our affiliates.
  • Organizational changes. In a merger, acquisition, reorganization, or asset transfer, we may transfer necessary information as permitted by law and require the recipient to continue protecting it or provide you with appropriate notice.

When you open an external link or contact support using another app, website, phone service, or email provider, that third party handles data under its own privacy terms. Review those terms before using the service.

5. Permissions and your choices

  • Camera. Used only to scan a robot's Wi-Fi connection QR code. You can deny this permission and enter Wi-Fi details manually instead.
  • Location (Android). Requested only because the Android platform requires a location permission before an app may scan for or connect to Wi-Fi networks. We do not use this permission to determine or record your GPS location, and the app does not include a location/geolocation library.
  • Wi-Fi and network state. Used to read the currently connected Wi-Fi network, connect to a robot's hotspot, and detect network connectivity so the app can guide you through the scanning workflow.
  • Internet access. Used to connect to YOGO Flow cloud services and load content. It is required for core app functionality.
  • Language. You may choose the interface language in the app. The preference is stored on your device, and the corresponding language code is sent with requests so localized content can be returned.

You can review or withdraw granted permissions in your device's system settings. Withdrawing a permission may disable the feature that depends on it—such as QR-based Wi-Fi connection—but does not affect unrelated features.

6. Data security

We use administrative and technical safeguards appropriate to the risk, including HTTPS in production, authentication and access controls, server-side authorization, operational monitoring, and access restrictions for personnel and providers. Session information is stored in the device space assigned to the app. Signing out, token expiration, clearing app data, or uninstalling the app removes or invalidates the relevant local session information.

No network or storage system can guarantee absolute security. If a personal data incident is likely to affect your rights, we will take remedial measures and notify you and relevant authorities when required by applicable law.

7. Data retention

We retain data only as long as needed for the purposes described in this policy, to maintain accounts and services, resolve disputes, protect security, and meet legal obligations. Retention depends on the data category, sensitivity, purpose, whether you continue to use the service, potential risks, and applicable legal requirements.

  • Local language and region preferences, session tokens, and other on-device data are generally retained until you sign out, the token expires, you clear app data, or you uninstall the app.
  • Account profiles, selected site and site documents, map packages, point cloud data, and robot logs are generally retained while the account or organization remains active and as needed to provide the related service, or until a valid deletion request is completed.
  • Security, audit, and operational logs are retained only for a reasonable period needed to diagnose failures, prevent abuse, fulfill contracts, or meet legal obligations, after which they are deleted or de-identified.
  • After deletion, copies may remain in protected backups until the normal backup rotation completes. We do not use such backups for another purpose except disaster recovery or compliance with legal obligations.

8. Delete your account and associated data

You, or your organization's administrator on your behalf, may request deletion of a YOGO Flow account and the profile, site selections, map packages, robot logs, and usage data associated with it. Use the button below and keep the subject line “YOGO Flow Account Deletion Request.”

Request account deletion

To verify account ownership, include the registered phone number and your organization or site name, if applicable. Never send your password, verification code, or authentication token.

What happens after a request

  1. We verify that the requester is associated with the account—directly or through the organization administrator—using reasonable methods, and may ask for additional information.
  2. Once verified, we delete the account and delete or irreversibly de-identify associated data. Uninstalling the app or signing out does not itself delete the server-side account.
  3. Limited data that must be retained for legal compliance, security, fraud prevention, audit, or dispute resolution is isolated and used only for that purpose, then deleted or de-identified when the required period ends.
  4. Account deletion is generally irreversible. We will send the outcome to the contact method used for the request.

If you want to delete only a particular map package, site document, or uploaded log, use the same email address and identify the content to be deleted.

9. Your data rights

Depending on the law where you live, you may have the right to:

  • Ask whether we process your personal data and request access to or a copy of it.
  • Ask us to correct inaccurate account or profile data.
  • Request deletion of your account, specific content, or data that is no longer needed.
  • Withdraw consent, or request restriction of or object to processing, when applicable.
  • Complain to a data protection or consumer protection authority with jurisdiction.

Submit a request using the email address in “Contact us.” To protect account security, we may first verify your identity. Certain rights may be subject to exceptions and limitations under applicable law.

10. Children

YOGO Flow is a business tool intended for adult deployment technicians and personnel of YOGO ROBOT and its partners, and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided data without permission from a parent or guardian, contact us. Once verified, we will take appropriate steps, including deletion, as required by applicable law.

11. International processing

YOGO Flow lets you choose a regional gateway (for example, mainland China, global, or Brazil) or a custom domain. Depending on the gateway you select, your data may be processed by servers located in that region, which may be outside the place where you live. When a cross-border transfer occurs, we use contractual measures, access controls, encryption, or other appropriate safeguards as required by applicable law and limit processing to the purposes disclosed in this policy.

12. Policy updates

We may update this policy when app features, data practices, or legal requirements change. The revised version will display a new “Last updated” date. If a change materially affects your rights, we will provide an appropriate notice in the app or through another suitable channel and request consent again when required by law.

13. Contact us

For questions about this policy, our data practices, or a rights request, contact:

  • Data controller: Shanghai Yogo Robot Co., Ltd. (YOGO ROBOT)
  • Privacy and account deletion email: business@yogorobot.com
  • Telephone: 400-630-1899
  • Address: Building 6, Warehouse No. 2, Honghui Box, Wenshui Road, Jing'an District, Shanghai, China
  • Website: www.yogorobot.com
About this privacy policy webpage

This is a static HTML page. It does not set cookies, load third-party fonts or analytics scripts, or collect your browsing information through the page itself. External links are operated independently by their respective providers.