Last updated · 24 September 2026

Privacy.
By design.

This policy is issued by Pavin, Dubai, United Arab Emirates, the data controller for the pavin.tech website and the Pavin Lock app. Sections 01 to 03 cover palm-vein identity. Section 04 covers the app.

01 — What we collect

PAVIN captures a single derivative of your palm-vein pattern — a one-way mathematical template. The raw infrared image is never stored, transmitted, or made viewable. The template alone cannot be reversed into an image of your hand.

02 — Where it lives

Templates are encrypted at rest and bound to hardware enclaves in our UAE infrastructure. They are not synced to third-party clouds, not sold, and not shared with advertisers.

03 — Your rights

You may revoke your enrolment at any time. Revocation deletes the template irrecoverably from primary storage and all backups within 30 days.

04 — The Pavin Lock app

When you create an account in the app we collect your email address, the name you choose, your phone's push-notification token, and the locks you pair together with their access events (who opened a door, and when). We use this to run your account, control your locks, and send you sign-in codes, security and lock alerts, and password resets by email and push notification. We do not send marketing email and we do not sell this data.

Two service providers process this data on our behalf: the cloud platform of our lock hardware partner, for device control, and our email and push provider, for delivering messages. Data is kept while your account exists. You can delete your account from inside the app at any time; this removes your account data and your locks' cloud records.

05 — Contact