11 Degrees

Privacy Policy

The short version: your home runs on your own hardware, and control stays local whenever you are on your own network. We store an account, your hub's address, and diagnostics that tell us whether your home is working. We sell nothing and advertise nothing. The long version follows.

Version
1.0
Last updated
11 September 2026
Data fiduciary
Schnell Energy Equipments Private Limited

01Introduction

This Privacy Policy describes how 11 Degrees (“we”, “our”, “us”) — a product of Schnell Energy Equipments Private Limited — collects, uses, stores and protects personal data, in compliance with:

  • the Digital Personal Data Protection Act, 2023 (“DPDP Act”);
  • the Information Technology Act, 2000;
  • the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
  • the CERT-In guidelines on IoT cybersecurity (2022).

By using the App, you consent to the practices set out below.

02Data we collect

A. Personal data stored in the cloud

We collect only the following, and only to create and maintain your account:

  • your name;
  • your email address;
  • your mobile number, where you provide it for sign-in or to be contacted;
  • your password, stored hashed and salted — never in plain text.

We also store the local network address of your hub, so that the App can find it when your phone is on your home network.

B. Non-personal technical data, processed locally only

The following is processed on your device or on your local network and is not stored in our cloud. Where you use remote access from outside your premises, the commands and states needed to serve that session are relayed through our remote-access service in transit only, and are not retained:

  • Matter device identifiers;
  • commissioning tokens;
  • room and floor assignments;
  • device states — on or off, brightness, temperature and similar;
  • routines and automation logic;
  • network interaction data required for onboarding;
  • home layout metadata;
  • local system logs.

C. Diagnostic and reliability data

To keep a home working we collect operational events from the App, the hub and the hardware — and we would rather name them than describe ourselves as collecting nothing:

  • device commands and the resulting state changes, with the room or floor they relate to;
  • errors, crashes and diagnostic traces;
  • connection health between the App, the hub and your devices;
  • firmware and app versions in use.

These are used to diagnose faults, fix defects and improve reliability — so that a switch that fails in your home can be identified rather than guessed at. Events are grouped by hub, not sold, and not used to build a profile of you for any commercial purpose.

D. No advertising or behavioural profiling

We do not use:

  • advertising identifiers;
  • advertising or marketing trackers;
  • behavioural profiling for targeting or resale;
  • data brokers of any kind.
The distinction is the one that matters: we measure whether your home is working, not what you are like. Nothing collected is sold, and nothing is used to advertise to you.

03Purpose of processing

We use your data only for the following purposes.

3.1 Account management (cloud)

  • user onboarding;
  • authentication;
  • password reset;
  • security notifications.

3.2 Local processing (edge only)

  • Matter device onboarding;
  • local device-state logic;
  • local automation execution;
  • secure commissioning.

When your phone is on your home network, the control path stays on it. When you control your home remotely, that traffic is relayed through our remote-access service to reach your hub, encrypted in transit and not stored.

3.3 Diagnostics and reliability

Separately from the control path, the operational events described in §2C are collected to diagnose faults, fix defects and improve reliability. This is a distinct flow with a distinct purpose, and it is the reason we do not claim to collect nothing.

Processing is carried out on the basis of:

  • your consent;
  • performance of the service you have asked us to provide;
  • legitimate uses permitted under the DPDP Act — for example, the prevention of fraud.

05Data localisation (India)

  • All personal data is stored on India-based cloud servers, within the India region of a global cloud provider.
  • Device-state, home-layout and automation data are not stored by us. Where remote access relays them in transit, that relay runs on India-region infrastructure.
  • Data is exported outside India only where legally required under the DPDP Act.

06Data retention

  • Account data is retained for as long as your account is active.
  • On a deletion request, account data is erased within 30 days, subject to any legal obligation to retain it.
  • Remote-access traffic is not retained after delivery.
  • Diagnostic events (§2C) are retained only as long as they are useful for fault diagnosis and reliability engineering, and are grouped by hub rather than held as a personal history.

07Security controls

In line with CERT-In guidance, we implement:

  • TLS 1.2 or higher for all cloud communications;
  • zero-trust access controls;
  • encryption at rest using AES-256;
  • periodic penetration testing;
  • no default passwords and no backdoor access;
  • secure commissioning in accordance with the Matter standard;
  • strong credential hashing (bcrypt / Argon2);
  • role-based access control internally;
  • data minimisation at the architectural level.

You remain responsible for maintaining a secure Wi-Fi configuration and for safeguarding your own devices.

08Your rights under the DPDP Act, 2023

You may:

  • request access to your personal data;
  • correct inaccuracies;
  • request erasure;
  • withdraw your consent;
  • appoint a nominee to exercise these rights on your behalf.

Requests may be made to privacy@schnellenergy.com.

09Children's data

We do not intentionally collect data from children under 18 years of age. Where such data is discovered, it will be erased in accordance with our obligations under the DPDP Act.

10Sharing of data

We do not sell or monetise personal data. We may share data only with:

  • India-region cloud service providers;
  • law enforcement, where legally required;
  • third parties strictly for account or identity verification.

We do not sell, broker or monetise smart-home device data, and we do not share it with advertisers. The diagnostic events described in §2C reach our own India-region analytics infrastructure and no third party beyond the cloud providers that host it.

11International transfers

By default, no international transfers occur. Where a transfer is unavoidable for legal compliance, it follows the safeguards approved under the DPDP Act.

12Grievance Officer

As required by the Information Technology Rules, the following officer may be contacted in respect of any grievance concerning your personal data.

Grievance Officer
[Name to be appointed]
Email
grievance@schnellenergy.com
Address
Schnell Energy Equipments Private Limited, Bldg No. 6, 4, Lions Club Road, Ranganayaki Nagar, Dhamu Nagar, Periyanaickenpalayam, Gudalur, Tamil Nadu 641020, India
Response time
Within 15 days, as prescribed by the IT Rules.

13Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by in-app notice or by email.

14Contact

Support
support@schnellenergy.com
Registered office
Schnell Energy Equipments Private Limited, 9/174, Railway Station Road, Periyanaickenpalayam, Coimbatore 641020, Tamil Nadu, India
Corporate identity number
U31900TZ2008PTC014277