No cameras or audio
No cameras, no audio recording, no voices. Sound is sent as a decibel level only.
We measure the building.
Not the people in it.
What Smart Monitor sensors record, how the data is protected, who owns it and how long it is kept. Answers for data protection, IT and information governance teams.
- No cameras
- No audio recording
- Encrypted
- UK hosted
AT A GLANCE
Six things to know about your data
The short version. Every point is explained in the questions below.
Encrypted, UK hosted
Data is encrypted from the sensor onwards and stored in the UK.
Yours, and only yours
Your data belongs to you. We never sell it or use it for advertising.
Your staff only
Only your authorised staff can see your buildings.
Deleted on schedule
Data is deleted on a published schedule, and within 90 days when a contract ends.
Privacy notice up front
The privacy notice is available in the app without signing in.
01 / WHAT THE SENSORS RECORD
What the sensors record
Sensors report conditions in a room, such as temperature, humidity or a sound level. They do not see, hear or identify the people living there.
Do the sensors record audio or conversations?+
No. Some sensors measure sound level. The sensor works out a decibel figure itself and sends only that number, such as an average and a peak. No audio is stored or sent, so nothing can be listened to or replayed.
Do the sensors have cameras?+
No. None of our sensors has a camera, and they cannot take photos or video.
What do the sensors measure?+
It depends on the model: temperature, humidity, carbon dioxide, light level, sound level, water use and leaks, or the status of a fire-safety device.
Do the sensors track or identify people?+
No. Readings are linked to a room or property, not to a named person. Where a sensor has a motion detector, it reports only whether a room is in use (yes or no). It cannot see or identify anyone.
Do the sensors collect personal data?+
No names, images, voices or contact details are collected. In a home with a single occupant, UK GDPR can treat readings as relating to that person, so every reading gets the same protection.
Could a sensor be switched to record something else?+
No. Our installers configure settings on the device itself. The platform sends no commands to sensors and cannot turn on a measurement a sensor does not have. Each radio message is only tens to a couple of hundred bytes, which is far too small to carry sound or pictures.
Are photos ever stored?+
Only when a person chooses to add one, for example a surveyor recording mould. Location data is removed from residents’ photos before they are stored.
FROM SENSOR TO SCREEN
Protected at every step
Each reading is encrypted before it leaves the device and stays protected all the way to the people allowed to see it.
- 01 / SENSOREncrypted at source
Every message is encrypted with AES-128 before it leaves the device, using keys unique to that sensor.
- 02 / RADIO NETWORKChecked in transit
Gateways relay messages without being able to read them. An altered or replayed message is rejected.
- 03 / PLATFORMStored encrypted in London
Readings arrive over TLS 1.2 or higher and are stored encrypted on Amazon Web Services in London.
- 04 / PEOPLEMulti-factor sign-in
Staff sign in with multi-factor authentication, and each role sees only what it needs.
02 / CYBER SECURITY
How the platform is secured
Encryption, UK hosting, controlled access and independent testing.
How is data protected in transit?+
Each message is encrypted at the sensor (AES-128, with keys unique to that sensor). Gateways pass messages on without being able to read them, and altered or replayed messages are rejected. From the network onwards, every connection uses HTTPS (TLS 1.2 or higher).
How is data protected when it is stored?+
The database, cache and message queues are all encrypted. Servers sit in private networks with no public internet address, behind a web application firewall.
Where is the data hosted?+
On Amazon Web Services in London. Data does not leave the UK for hosting.
Who can access the data?+
Only your authorised staff. They sign in with multi-factor authentication, and no passwords are stored on our platform. Each organisation sees only its own buildings, and automated tests check that boundary on every code change. Roles limit what each person can do, and key actions are recorded in an audit trail that cannot be edited.
Can readings be altered?+
No one can edit a reading through the app, its API or our admin tools.
Has the platform been tested?+
Yes. A penetration test in September 2026 found no critical, high or medium issues, and all 43 cross-organisation and permission checks held. Backups are kept for 35 days, and a full restore was tested in September 2026.
03 / DATA OWNERSHIP AND USE
Who owns the data and how it is used
You stay in control. We process data only on your instructions, and only to keep homes safe and healthy.
Who owns the data?+
You do. You are the data controller, and Smart Installers acts as your data processor under UK GDPR, working only on your instructions.
What is the data used for?+
Spotting damp, mould, cold, leaks and safety risks, directing repairs, and evidencing compliance (for landlords, Awaab’s Law). Nothing else.
Is the data sold or shared?+
No. We do not sell data or share it with advertisers. The service sets no advertising or analytics cookies and uses no third-party tracking.
Is AI used?+
Some optional features use AI to help draft reports. The AI service only reads the information needed for that report: it does not store your data or use it to train its models.
04 / RETENTION, DELETION AND BREACHES
How long data is kept, and what happens next
A published retention schedule, enforced automatically, with a clear exit at contract end.
How long is data kept?+
Sensor readings stay on the platform for 3 years and are then archived securely, up to 7 years in total. Compliance case records are kept for 7 years after the case closes, as legal evidence. AI conversations are kept for 12 months. The schedule is enforced automatically every day.
Can we get our data out?+
Yes. Reports, exports and evidence packs are available at any time, and a full export of your organisation’s data is available on request or at contract end.
What happens when a contract ends?+
You can take an export first. Your data is then deleted or anonymised within 90 days.
What if there is a data breach?+
We tell you within 48 hours of becoming aware. As controller, you decide whether to report it to the ICO.
What about individuals’ rights?+
Users can download their own data and delete their account in the app. Requests about building data come to you, as controller.
This page covers data collected by Smart Monitor. For how this website handles your information, read our privacy policy. Information checked 6 November 2026.
QUESTIONS ABOUT YOUR DATA?
Ask us anything.
Ask us anything.
We’ll show you the detail.
Email info@smart-installers.co.uk. Residents can read
the privacy notice in the app without signing in.