Xvision365 Privacy Notice
Last updated September 2026
Who we are
Xvision365 is provided by Y3K (Europe) Limited, a company registered in England and Wales, whose registered office is at Airport House, Purley Way, Croydon CR0 0XZ. Company number 03924841.
For anything in this notice, contact support@y3k.com.
We are the data controller for the personal information described here. That means we decide why and how it is used, and we are accountable for it.
What this notice covers
This notice covers the Xvision365 mobile app and the account behind it. Cloud video recording is covered separately in our Cloud Service Privacy Notice. Footage held on your own recorder is not covered here, because that footage never reaches us.
What we collect and why
| Information | Why we need it | Our lawful basis |
|---|---|---|
| Email address, password (stored hashed), country | To create and secure your account, and to send verification and password reset codes | Performance of a contract |
| Device Cloud ID, model, firmware version, the name you give it | To connect the app to your recorder and show it in your device list | Performance of a contract |
| IP address, app version, phone model and operating system, crash and error logs | To keep the service secure, diagnose faults and prevent abuse | Legitimate interests in running a secure and working service |
| Push notification token | To deliver alerts to your phone | Performance of a contract |
| Video and images passing between your recorder and your phone | To show you live and recorded video. This is relayed, not stored, unless you use cloud recording | Performance of a contract |
| Email addresses of people you share a device with | To give them access and to tell them about it | Performance of a contract |
| Support correspondence | To answer your question and keep a record of it | Legitimate interests in supporting our customers |
| Facial images and facial feature data, where you switch on face recognition | To operate the face recognition features you have chosen to use | Your explicit consent |
Face recognition
Facial data is special category data under UK data protection law and gets extra protection. We only process it if you switch face recognition on. You can switch it off and delete the stored faces at any time in the app, and we will stop. Withdrawing consent does not affect anything done before you withdrew it.
What we do not do
We do not sell your personal information. We do not use your video or images to advertise to you, and we do not use them to train artificial intelligence models.
How long we keep it
| Information | Kept for |
|---|---|
| Account details | While your account is open, then deleted within 30 days of closure |
| Device list and settings | While the device is linked to your account |
| Security and diagnostic logs | 12 months |
| Support correspondence | Two years from the last contact |
| Cloud recordings | As set out in the Cloud Service Privacy Notice |
Who we share it with
We use a small number of suppliers who process information on our instructions:
- The company that builds and operates the app platform and its servers on our behalf. We will name them here before the app is released.
- Amazon Web Services, who host those servers.
- Apple and Google, who deliver push notifications to your phone.
- Our email provider, who sends verification and account emails.
Each is bound by a written contract that limits them to acting on our instructions. We do not give your information to anyone else unless the law requires it, or we need it to establish or defend a legal claim, or you ask us to.
Where your information is processed
The servers behind the app are hosted by Amazon Web Services. Some of them are located outside the United Kingdom, and support and engineering staff outside the United Kingdom may access your information to fix faults.
Where information leaves the United Kingdom, we rely on the UK International Data Transfer Agreement, or the Addendum to the European Commission's standard contractual clauses, together with a transfer risk assessment. You can ask us for a copy of the safeguards we use.
Your rights
You have the right to ask us to give you a copy of your information, correct it, delete it, restrict how we use it, or send it to another provider. You can object to processing we carry out for our legitimate interests, and you can withdraw consent where we rely on it.
Ask us at support@y3k.com. We will respond within one month. We may need to confirm who you are first. There is no charge.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We would rather you came to us first so we can try to put it right.
Keeping your information safe
Connections between the app, your recorder and our servers are encrypted. Passwords are stored hashed and cannot be read by us. Access to systems is restricted to staff who need it. Two-step verification is available on every account and we recommend switching it on.
No system is completely secure. If a breach happens that is likely to be a risk to you, we will tell you and the Information Commissioner's Office as the law requires.
Children
This app is not for children. You must be 18 or over to hold an account. We do not knowingly collect information about children, and we will delete it if we find we have.
Changes to this notice
If we make a significant change we will tell you in the app or by email before it takes effect. The date at the top shows when this version was published.
Contact us
Y3K (Europe) Limited, Airport House, Purley Way, Croydon CR0 0XZ.
Email support@y3k.com. Telephone 020 8689 9999.
Airport House, Purley Way, Croydon CR0 0XZ, United Kingdom.
Telephone 020 8689 9999. Email support@y3k.com.
