Titan Air

Privacy Policy

Effective 5 November 2026

Titan Air (“Titan Air”, “we”, “us”) makes air purifiers and hand dryers and runs the online services that manage them. This policy explains what personal information we handle, why, who we share it with and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. About this policy

This policy covers:

  • the Titan Air website and dashboard at titanair.au, used by homeowners, businesses, installers and our staff;
  • the Titan Air mobile app, used to set up, install and look after devices;
  • Titan Air devices, and the information they send to our cloud service; and
  • our integrations with other services, such as Google Home.

If your employer or another organisation gave you access to Titan Air, that organisation also decides how information about its sites and devices is used, and its own privacy policy may apply as well.

2. What we collect

Your account

  • Your name, email address and, if you add one, a profile photo.
  • Your password, which we store only as a salted one-way hash. If you sign in with Google or Apple, we receive your account identifier, name and email address from them instead of a password.
  • The organisations you belong to, your role in each and the sites you can see.
  • Invitations you send or receive, including the invited person’s email address.

Organisations, sites and installations

  • Organisation names and billing email addresses.
  • Site names, street addresses and map coordinates, and the areas inside a site where devices are installed.
  • Installation and service records: who installed or serviced a device, when, and photos taken during the work.

Orders and payments

  • What you order, the delivery name and address, and the order and delivery status.
  • Card payments are processed by Stripe. We never receive or store your full card number; we keep the payment status and the reference Stripe gives us.

Information from devices

Each device sends information about itself and the room it is in, including:

  • its serial number, model, firmware version, settings, faults and whether it is online;
  • readings such as air quality, temperature and humidity, and usage such as run time, UV-C lamp time, sprays and hand-dryer cycles;
  • the state of consumables such as filters and fragrance liquid;
  • whether someone is present nearby, as a simple yes or no from a radar sensor. Devices have no camera, and they do not record or send sound;
  • for devices with a screen, how many times each advertisement was played (not who watched it); and
  • where the device is, either from the address entered for its site, from the installer’s phone during setup, or estimated from nearby Wi-Fi networks and mobile cells.

The Wi-Fi network name a device uses is stored with its settings. The Wi-Fi password is stored only on the device itself, never on our servers.

The mobile app

  • The app uses Bluetooth to find and set up nearby Titan Air devices.
  • If you allow it, the app reads your phone’s location once, when you ask it to fill in an installation address. It does not track your location in the background.
  • Photos you take for an installation or service record are uploaded with that record.

Google Home

If you link your Titan Air account to Google Home, we keep a record of the link and of the access tokens we issue to Google (stored only as one-way hashes). See “Who we share it with” for what Google receives.

Technical and security information

  • The IP address and browser or app details of each sign-in session, and of important account and administration actions, which we record in an audit log.
  • Anonymous, aggregated website usage statistics from Vercel Web Analytics. It does not use cookies or identify you.
  • A bot check from Cloudflare Turnstile on some sign-up and sign-in forms, which looks at your browser and connection to tell people from automated traffic.

3. How we use it

  • To create and secure your account, sign you in and verify your email address.
  • To run the service: show devices, sites, readings and alerts in the dashboard and app, apply settings you change, update device firmware and deliver content to devices with screens.
  • To schedule maintenance, track consumables, and process, deliver and support orders.
  • To report advertisement plays to the organisations that run campaigns.
  • To send service emails such as sign-in codes, invitations and order updates. We do not send marketing email without your consent.
  • To provide support. Titan Air support staff can view an account to help you, and this is logged.
  • To keep the service secure, prevent fraud and abuse, and investigate problems.
  • To improve our products, using aggregated information wherever we can.
  • To meet our legal obligations, for example tax and consumer law.

We do not sell personal information, and we do not use it for third-party advertising.

4. Who we share it with

Within your organisation

People in your organisation can see the sites and devices their role allows, and administrators can see members’ names, email addresses and roles. Installers and service partners see the devices and sites they work on.

Service providers

We use these providers to run Titan Air. They may only use the information to provide their service to us:

  • Vercel: website hosting, file storage (photos, firmware, advertisement media) and anonymous web analytics.
  • Neon: our database.
  • Stripe: card payments.
  • Resend: sending service email.
  • Cloudflare: the Turnstile bot check.
  • Our device messaging (MQTT) provider: carrying messages between devices and our cloud.
  • Google and Apple: “Sign in with Google” and “Sign in with Apple”, if you choose them.
  • OpenStreetMap: map tiles in the dashboard. Your browser loads the tiles directly, so the tile servers see your IP address and the map area you view.

Google Home, when you link it

Google receives the names, types, settings and current state of the air purifiers you can manage (on or off, fan speed, scent and air-quality mode, air quality and filter life). It can send commands you give it, and we tell Google when their state changes. Google’s use of this information is covered by Google’s privacy policy. You can unlink at any time in your Titan Air account settings or in the Google Home app.

Other disclosures

We may disclose information when the law requires it, to protect people’s safety or our rights, or as part of a sale or restructure of our business, in which case the information stays covered by this policy.

5. Storage outside Australia

Our database and web hosting are in the United States, and some of the providers above may process information in other countries where they operate. We choose providers with strong security practices and contractual privacy commitments, and we take reasonable steps so that they handle personal information consistently with the Australian Privacy Principles.

6. How we protect it

  • Information travels encrypted (HTTPS/TLS) between your browser or app, our servers and the devices. Each device has its own credentials for our cloud.
  • Passwords and access tokens are stored only as one-way hashes.
  • Access is limited by role. Staff access is limited to people who need it, and administrative actions are logged.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

7. How long we keep it

  • Detailed device readings: 90 days. Device events: about 13 months.
  • Daily device summaries: for as long as the device is in service with your organisation.
  • Sign-in sessions: deleted up to 30 days after they end. Email verification codes: deleted after a day.
  • Google Home access tokens: deleted soon after they expire or you unlink.
  • Account, organisation and site information: while your account or organisation is active. When you ask us to delete it, we delete or de-identify it unless we need it for the reasons below.
  • Orders, payments and audit records: as long as tax, consumer and other laws require, or as needed to resolve disputes.

8. Cookies and similar technologies

The website uses only the cookies it needs to work:

  • titanair_access_token and titanair_refresh_token keep you signed in.
  • titanair_org remembers which of your organisations you are working in.

Your light or dark theme choice is saved in your browser’s local storage. We do not use advertising or tracking cookies.

9. Your choices and rights

  • Access and correction. You can see and change your name, email address, password and profile photo in your account settings. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it.
  • Deletion. Ask us to delete your account. Some records, such as orders, may have to be kept for the periods described above.
  • Google Home. Unlink it in your account settings or in the Google Home app. We then stop sharing with Google and revoke Google’s access.
  • Location and Bluetooth. You can turn these permissions off in your phone’s settings. Some setup features will then not work.

Email privacy@titanair.au to make a request. We will respond within 30 days and may need to confirm your identity first. If we refuse a request, we will explain why.

10. Children

Titan Air is not intended for children under 16, and we do not knowingly collect their personal information. Devices installed in public places do not identify the people who use them.

11. Questions and complaints

If you have a question, or think we have mishandled your personal information, email privacy@titanair.au. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

12. Changes to this policy

We may update this policy as our products and the law change. We will post the new version on this page with a new effective date. If a change significantly affects how we use your personal information, we will tell you by email or in the dashboard first.