Privacy Policy
Last Updated: January 2026 • Effective Date: January 1, 2026 • Governed by Google Play Developer Policies & Data Protection Standards
1. Introduction & Applicability
This Privacy Policy outlines how Aryon ("we," "our," or "us"), operated under HotBird Communications Pvt. Ltd, collects, utilizes, stores, and protects personal and technical user information.
This policy specifically applies to all users of our Android Mobile Applications (including Aryon Radius App, Aryon Connect, and Aryon IPTV), web applications, management portals, and cloud infrastructure services.
2. Information We Collect
We collect only the minimum required information necessary to provide seamless broadband subscriber self-service, ISP billing synchronization, and account authentication:
Username, registered subscriber ID, phone number, work email address, and authentication tokens assigned by your network operator.
Device model, operating system version, and Firebase Cloud Messaging (FCM) device tokens utilized to deliver urgent alerts, payment reminders, and maintenance notices.
Active IP address, live upload/download bandwidth usage counters (GB), session start/end timestamps, and NAS connection logs.
Package subscription history, digital payment receipt metadata, support ticket logs, and direct customer assistance chat messages.
3. Android Application Permissions
Our Android applications request the following system permissions solely to execute essential product functionality:
- INTERNET & ACCESS_NETWORK_STATE: Required to communicate with your ISP's RADIUS database server, fetch live data balances, and verify account connectivity.
- POST_NOTIFICATIONS: Required on Android 13 (API level 33) and above to send real-time push notifications regarding billing expiry, automated renewal receipts, and network status updates via Firebase Cloud Messaging.
- DOWNLOAD_WITHOUT_NOTIFICATION / WRITE_EXTERNAL_STORAGE: Optional permission utilized when you choose to download or export digital PDF payment receipts to your device.
4. How We Use Collected Information
All collected data is utilized exclusively for legitimate business and operational services:
- Authenticating subscriber credentials via RADIUS / MikroTik AAA protocols.
- Displaying real-time bandwidth consumption meters and active session logs.
- Facilitating automated invoice generation and verifiable payment receipts.
- Delivering push notifications regarding system maintenance and billing cycles.
- Tracking and resolving customer support complaints and connectivity tickets.
- Preventing unauthorized access, fraudulent logins, and operational downtime.
5. Third-Party Services & SDKs
We do not sell, rent, or trade your personal information. We partner only with verified infrastructure providers and SDKs required to operate the applications:
- Google Play Services & Firebase Cloud Messaging (FCM): Used to handle secure message transport and device notification dispatching.
- AAA RADIUS & MikroTik RouterOS APIs: Used by your local Internet Service Provider to apply bandwidth profiles and authenticate network sessions.
- Authorized Payment Gateways: Integrated payment processors for verifying invoice transactions (payment credentials are encrypted and never stored on our servers).
6. User Data Deletion & Account Rights
In full compliance with Google Play User Data policies, users have the right to request the deletion of their account, personal details, and session records:
How to submit a Data Deletion Request:
To permanently delete your user account, profile records, device tokens, or customer support history, please send an email from your registered email address to:
Subject Line: "Account and Data Deletion Request". Please include your Subscriber ID or Username. We will verify your identity and confirm permanent deletion within 30 business days.
7. Children's Privacy (COPPA Compliance)
Our mobile applications and enterprise platforms are intended strictly for general audiences and commercial subscribers. We do not knowingly collect, solicit, or maintain personally identifiable information from children under the age of 13. If you believe a minor has provided us with personal information, please notify us immediately at team@aryon.tech and we will expeditiously remove such data.
8. Data Security & Retention
Authentication sessions utilize signed JWT tokens with strict timeout periods. Data is stored in enterprise-grade secured data centers with role-based access control (RBAC). We retain personal data only for the period necessary to deliver operational broadband services or comply with statutory legal obligations.
9. Contact & Governance Information
For any inquiries regarding this Privacy Policy, compliance audits, or data rights, please contact our data governance team: