Privacy
Privacy is not a mandatory page for us: it is the product itself. Here, in plain language, is what this website and the ÉCRIN HOME app know about you, and what we do with it. This translation is provided for convenience; the French version prevails.
No cookies, no trackers
This website sets no cookies and uses no third-party audience measurement tool, no advertising and no social media buttons. The ‘Facebook’ link in the footer is a simple link: nothing is loaded from Facebook until you follow it.
The visit counter
We count page views, without cookies or addresses. Each page view adds a line to a file on this website: the day and the address of the page. Nothing else: no IP address, no browser, no referring page. This file is used solely to find out which pages are read.
The contact form
When you write to us, we receive what you enter: name, email address, message, and whatever you have chosen to add (telephone, postcode, town, type of project, existing installation). This information is used solely to reply to you and to prepare a possible appointment; never for advertising, never for resale. It is kept for the duration of our exchange, then for no more than 3 years if we have no further contact from you.
The location map
The ‘Find an installer’ page shows a static map, served by this website: your browser calls no map service. The ‘directions’ link opens an external map service, which then receives your request.
Hosting
The website is hosted by OVH, in the European Union. Like any hosting provider, OVH keeps technical connection logs (IP address, pages requested), retained for security purposes in accordance with its legal obligations.
Annual options
Two options can be added to an ÉCRIN home: Cars and the Assistant. At present, your installer activates them on your Écrin, at your request; for this purpose we keep the home concerned, the option activated and its dates. Online purchase is not yet available: when it is, payment will be entrusted to a payment service provider, and this page will then state precisely what it receives, what we keep and for how long.
The Cars option
You authorise ÉCRIN with Tesla, which gives us limited, read-only access to the vehicle’s data, never your password. Your car then sends to our servers, whenever something changes: the battery level and range (at most every five minutes); the charging status (plugged in or not, charging or not, power, limit, time remaining), at most once a minute; its name and mileage (at most once an hour). Its vehicle identification number (VIN) is used to recognise it. Never the vehicle’s location, journeys or speed, which we do not request. We keep the last known status, never any history, and the access tokens issued by Tesla are encrypted. This processing is based on the performance of your contract.
When the option ends, the car stops sending anything; your Tesla account remains linked, so that you can resume without setting everything up again, until you remove it: ‘Remove my Tesla account’, in the app, erases the tokens, your cars and their last status. If the Écrin leaves the home, the home’s cars are erased with it, as are the tokens of your Tesla account if they were used only for that home. Tesla, Inc. processes your vehicle’s data on its side under its own responsibility, in accordance with its privacy policy; our exchanges with Tesla go through its European servers.
Artificial intelligence: the daily summary, the explanations, the Assistant
Every ÉCRIN home connected to our servers can receive, without an option, a written summary every morning, an explanation on request for each alert and suggested rules; the Assistant option adds conversation with the home. For this, your Écrin entrusts a text to our servers, which pass it on to an artificial intelligence provider: Anthropic (the Claude models). What is sent: the day’s figures (energy, water, solar) and the weather, the list of devices with the name of their room and their status, what is wrong, what the automations have done, and, for the Assistant, what you ask it (the text, never your voice), your first name and, when you ask it about the home, what the home knows within the limits of your permissions: the first names of the people present, the names of the gate codes, what the cameras have seen (‘a person’, ‘a vehicle’), the cars’ battery, and the family’s calendar and shopping list. Never an image, a location, an address on your network or a password, never the first name of whoever saw an alert. No profiling, no advertising.
Nothing is sent without consent. For the Assistant, your own consent is required: the ÉCRIN HOME app asks for it before your first question, on the ‘The Assistant and artificial intelligence’ screen (‘I accept’ or ‘Not now’). The daily summary and the explanation of alerts concern the home, not a person: they require the consent of an owner of the home; if you are an owner, your consent also enables the daily summary and the explanation of alerts for the home; without the consent of any owner, the summary is not written. A home tablet (a wall-mounted iPad, without an account) follows an owner’s consent. Consent is given in the app, once for all your devices. You can withdraw your consent at any time, in My account (‘Artificial intelligence’ › ‘Withdraw my consent’): the artificial intelligence then declines from the very next request. Our servers check consent before each transmission to the provider, and we record the date of each consent given or withdrawn: this is the proof of your choice. Simple commands (‘turn on the living room’) are understood by your Écrin itself, without artificial intelligence: they work with or without consent.
Our servers keep none of these texts: they count only the number of calls and their volume, per home and per day, to enforce the limits and monitor the cost. A conversation with the Assistant is forgotten after thirty minutes, and the Écrin writes nothing of it to its disk, unless you flag a reply (‘Not that’): your sentence and the reply are then kept on your Écrin, for your installer. Under its commercial terms, Anthropic does not use these texts to train its models. Anthropic is an American company: the text may be processed outside the European Union. This processing is based on your consent and, for the daily summary and the explanations, on that of an owner of the home. Your installer can also switch off artificial intelligence for the whole home, in the Écrin’s configuration.
The Assistant’s voice mode
When you speak to the Assistant, your voice is recognised on the iPhone itself and does not leave it: no recording is sent, either to us or to a third party. Only the text of your sentence goes further, as if you had typed it. The microphone opens only when you touch the sphere; there is no continuous listening. To be spoken, the home’s reply is entrusted by our servers to Microsoft’s Azure Speech voice service, in its France region (Paris), which renders it as audio: this is the only text transmitted, and our servers keep none of it. According to Microsoft’s commitments for this service, neither the text nor the sound is retained, and they are not used to train its models. Our servers count only the number of spoken replies and their length, per home and per day. The voice speaks only in reply to the Assistant: it is therefore subject to the same consent.
Amazon Alexa (the ‘ECRIN HOME’ skill)
With the Assistant option, each person in the home can link their Amazon account to their ÉCRIN account, in the Amazon Alexa app, to control the home with their Echo speakers. Your voice is heard and understood by Amazon, under its own responsibility and in accordance with its privacy policy (the Alexa app lets you review and delete your recordings): ÉCRIN never receives your voice, only the understood request (‘turn on the living-room ceiling light’), and does not pass it to the artificial intelligence described above: Alexa does not ask for consent. Your ÉCRIN password stays with us: Amazon receives limited access to what your permissions allow.
For this, we receive your request from Amazon, already understood (the device and the command), and we send Amazon the list of devices you can control, their name, their type, the name of their room, and their status when Alexa asks for it or when it changes (on or off, level, position, setpoint, temperature). Never an image, a location, a code, the alarm status, or the first names of the people in the home; the gate, the locks, the alarm, the cameras and protected devices are never offered to Alexa. Requests pass through a relay that we operate at Amazon Web Services, in Ireland, which keeps nothing of your requests (only a technical line, without personal data: the type of request and its duration), then through our servers, in France, to your Écrin. Our servers keep what Alexa knows of the home (the names and types of devices), the encrypted authorisation to notify it of changes, and counters, never the status of your home or your sentences. Disabling the ‘ECRIN HOME’ skill in the Alexa app ends the link: as soon as Amazon notifies us, we stop writing to it and erase the authorisation; the record of the link, and what Alexa knew of the home, disappear from our servers within thirty days. This processing is based on the performance of your contract.
Amazon, Alexa, Echo and all related marks are trademarks of Amazon.com, Inc. or its affiliates.
Our Facebook Page
ÉCRIN HOME publishes on its Facebook Page through an app of our own, ‘ECRIN HOME Publication’, which can do only one thing: publish our own posts on our Page. It connects to no visitor’s Facebook account and receives no personal data: no name, no profile, no friends list. When you like, comment on or share a post on the Page, it is Meta that processes this data, under its own responsibility and in accordance with its privacy policy; we see what Facebook shows to any Page, and we export it nowhere.
Outside the European Union
The website and our servers are hosted in the European Union. The text entrusted to artificial intelligence is processed by Anthropic, which may do so in the United States, within the framework described in its privacy policy. Tesla, Inc. processes your vehicle’s data under its own responsibility, in accordance with its own policy, as Amazon does for what you say to Alexa. The app’s notifications go through Apple’s notification service, as for any iPhone app.
Your rights
The data controller is LG ÉLECTRICITÉ (SASU, RCS Fréjus 752 650 309), 204 Route du Plan de la Tour, 83120 Sainte-Maxime, the company that publishes ÉCRIN. In accordance with the GDPR (General Data Protection Regulation) and the French Data Protection Act (loi Informatique et Libertés), you may request access to your data, its rectification, its erasure, the restriction of its processing or its portability, object to processing and withdraw any consent given: write to support@ecrin-home.com or call +33 4 94 54 35 84. You can also delete your account yourself, from the app (see below). You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr). The rules for using the service are set out in the terms of use.
In the ÉCRIN HOME app
The ÉCRIN HOME app (iPhone, iPad, Apple Watch, Apple TV) controls your home. This is what we are proudest of: your home automation data (statuses, cameras, histories, habits) stays on the Écrin installed in your home. Remotely, our servers relay the app to it through an encrypted tunnel, without keeping what passes through. Here is what the app and our servers know about you, and for how long.
Your account
Your ÉCRIN account is used to recognise you and to know which homes to open to you. We keep your email address, your name, the homes you have access to and what you can do there (your role, your rooms, your hours, your dates of stay), who invited you, and the log of actions taken with this access. Your password is kept by our identity service, on our servers, and the app never sees it: it is entered, and changed, on a secure ÉCRIN page (My account › ‘Change my password’). A home tablet (a wall-mounted iPad) has no account: it belongs to the home, and the owner removes it from Configuration › People.
Deleting your account
From the app: ‘My Écrins’ › the profile button, top right › My account › ‘Delete my account’, at the very bottom (or, within the home, Configuration › People › My account). The app states what will be erased and what remains, then ‘Delete permanently’ and a final confirmation. Deletion is immediate; the app may first ask you to sign in again: this is a security measure. A confirmation email is sent to your address.
What is erased:
- your ÉCRIN account and its password, and your current sessions;
- your access to all your homes, with your permissions: each Écrin closes its door to you in less than a minute or, for an Écrin offline at that moment, as soon as it is back online;
- the phones registered for your notifications;
- your consent to artificial intelligence;
- the link with Amazon Alexa (Alexa will say that the account is unlinked), your linked Tesla account and your cars;
- the invitations awaiting your address, and those you had sent.
What remains, and why:
- in our servers’ register, an anonymised record, ‘Former member’, without name or email address, so that the logs remain consistent;
- the log of each home keeps its entries (‘Sarah opened the gate’): this is the household’s security history, kept by the owner of the home;
- the encrypted backups made before deletion (see retention periods);
- the homes themselves, with their installer, and other people’s access. If you were the sole owner of a home, the Écrin continues to work for the others, and its installer designates the new owner from among the people of the home, or hands the home over to the person taking it over.
A professional account (installer, distributor, ÉCRIN HOME team) cannot be deleted from the app: it is closed by writing to support@ecrin-home.com. Demonstration accounts (Apple review, Amazon certification) are not deleted.
Notifications
To alert you (the doorbell, the alarm, openings), your phone entrusts to our servers the token issued to it by Apple for notifications (Apple Push), together with the app’s name, its version and the device model, for each home you have access to. The text of a notification passes through our servers and Apple to reach you: we do not write it anywhere. These tokens are erased when you delete your account or when your access to a home is withdrawn; a phone that no longer has the app stops being alerted.
Location and presence
Geolocation is optional, person by person. If you enable it, your iPhone monitors the circle around the home, even when the app is closed, hence the ‘Always’ permission, and it tells your Écrin only ‘left’ or ‘back home’, with the time: never your location. Your Écrin keeps who is at home (first names) and the last twenty comings and goings, but no journeys. Our servers read none of this: remotely, they relay this message through the encrypted tunnel; only your Écrin’s encrypted backup takes a copy of it.
‘Use my current location (I am at home)’, an action by the owner to place the home on the map, sends the iPhone’s location once, as the centre of the home, to your Écrin, and to it alone. The weather is requested by your Écrin from the Norwegian Meteorological Institute (MET Norway), for the home’s location as set by your installer, rounded to 4 decimal places (about ten metres), never for a person’s location. Air quality and pollen data are requested from Atmo France by our servers, for the home’s municipality (its INSEE code): no personal data is sent. A location is never sold, nor used for advertising.
The microphone, photos, the calendar
The microphone opens only when you touch it: to speak to the visitor who rings (your voice goes to your video door entry system, through your Écrin), or to speak to your Écrin, in which case your voice is transcribed on your iPhone and does not leave it. Only the text is sent, to your Écrin and, for the Assistant and with your consent, to the artificial intelligence provider. The app records nothing.
Photos: for a wallpaper, you can take a photo or choose one. Only that photo is sent, to your Écrin, which keeps it (thirty photos at most, with its encrypted backup); the app does not browse your photo library.
The calendar: the app can add to your calendar an appointment you have confirmed to your Écrin; it reads none of them.
Artificial intelligence, the voice, Alexa, the cars
Everything is described above: artificial intelligence and your consent (nothing is sent without it, and it can be withdrawn in My account), the Assistant’s voice, Amazon Alexa and the Cars option.
How long we keep your data
- Your account and your access: for as long as your account exists. A phone to be alerted: for as long as you have access to the home.
- Your consent to artificial intelligence: until you withdraw it. The date of each consent and each withdrawal remains in the log: this is the proof of your choice.
- After your account is deleted: in the register, nothing other than the anonymised record; the log of each home stays with the home.
- Your Écrin’s backups: every night, encrypted by the Écrin itself, then stored by our servers with our hosting provider, OVHcloud, in France; the last 90 per home.
- Our servers’ backups: every night, an encrypted backup of our databases, accounts included. The working copy, on the server, is replaced after 14 nights. The encrypted archives are used to rebuild our servers after a disaster: they can be opened only with a key kept offline, in a safe, and they are currently retained with no time limit. Data erased from our databases therefore remains, unreadable, in the archives made before its erasure.
- With our hosting provider, a replaced or deleted backup remains for a further 30 days. A copy of the whole, still encrypted, is kept in our offices, in France, with no automatic deletion at present.
Erasure of your data
To have your data erased, whether that of your ÉCRIN account, of an exchange via the contact form, or any data concerning you in connection with our Facebook Page, write to support@ecrin-home.com from the address concerned, stating what you want erased. We reply within one month, and confirm to you what has been erased: your account and your access as described above, your messages and your contact details. Only what the law requires us to keep and the encrypted backups made before your request remain (see retention periods). You can also delete your ÉCRIN account yourself, from the app. What you have written on Facebook (a comment, a ‘Like’) is removed from within Facebook, where Meta keeps it; our publishing app keeps nothing of it.
A question
Write to support@ecrin-home.com or call +33 4 94 54 35 84. A person will reply to you, and your rights are described above.