BG5 Mobile Application — Privacy Policy

Effective date: 8/9/2026
Last updated: 8/9/2026

1. About this Privacy Policy

This Privacy Policy applies to the BG5 mobile application (also referred to as BGMobile or BioGeorge, package com.structint.biogeorge) (the “App“) published on Google Play by Structural Integrity Associates, Inc. (“SIA,” “we,” “us,” or “our“). The App is developed to collect, view, and manage data from SIA’s BioGeorge / BG5 biofilm-growth monitoring controllers.

This Privacy Policy explains what information the App accesses or collects, how we use it, with whom we share it, how long we retain it, how we secure it, and the rights you have over it. This policy applies only to the App. Your use of SIA’s website, www.structint.com, and the BG5 product website, si-biofilmgrowth.com, is governed by the separate SIA Online Privacy Policy at https://www.structint.com/privacy-security-terms/.

2. Developer and Legal Entity

The App is published on Google Play under the developer name Anup Aggarwal on behalf of the following legal entity, which is the data controller for information described in this Privacy Policy:

• Legal entity: Structural Integrity Associates, Inc.
• Registered address: 11515 Vanstory Dr Ste 125, Huntersville, NC 28078-6385, United States
• Company contact: info@structint.com · +1-877-474-7693
• App/developer contact: aaggarwal@structint.com · +1-480-651-2338

3. Information the App Collects and Processes

The App is designed for industrial users of BG5/BioGeorge biofilm-growth monitoring hardware. It collects only what is needed for the App’s core functionality — biofilm-monitoring device communication, optional cloud sign-in, and optional cloud storage of controller logs. It does not collect precise location, contacts, SMS, call logs, health data, photos/videos, microphone or camera data.

3.1 Account Information (Only If You Choose to Sign In)

If you choose to use the App’s optional cloud sign-in, we collect and process:

• Your email address and password, submitted to create and authenticate your account via Firebase Authentication (a Google LLC service).

When you use Firebase Authentication, the Firebase Authentication SDK also automatically collects the following data on our behalf, to secure and operate the sign-in service:

• IP address, collected by Firebase to provide added security and prevent abuse during sign-up and authentication;
• User-agent strings, including whether the App uses FirebaseUI, the version of the Authentication SDK, and the platform of the device, used to provide, maintain, and improve Firebase services;
• The Firebase Android App ID of the App (this is not the App’s package name); and
• A generated unique Firebase Authentication user identifier stored with your account.

3.2 Files / App Data (Only When You Are Signed In)

When you are signed in, the App uses Cloud Storage for Firebase to allow you to upload controller-log downloads to SIA’s Firebase project:

• Controller logs (files) that you choose to upload from the App.
• When Cloud Storage for Firebase is used together with Firebase Authentication, every request automatically includes your Firebase Authentication user identifier so the file is associated with your account.
• Firebase automatically collects the SDK version and Firebase Android App ID as part of standard request headers.

3.3 Bluetooth (Device and Nearby Devices)

The App uses Bluetooth to discover and communicate with your BioGeorge/BG5 controller so the App can display readings and download controller logs to your device.

• On some older versions of Android, the operating system may require the location permission to be granted in order to perform Bluetooth Low Energy (BLE) scanning. Where the operating system requires this permission for BLE scanning, the App requests it only to enable Bluetooth device discovery. The App does not use this permission to determine, collect, store, or share your geographic location.
• Bluetooth data exchanged with the controller stays between your device and the controller and is not automatically transmitted by the App to SIA, except for controller-log content that you choose to upload to Firebase Storage as described in Section 3.2 or share as described in Section 3.4.

3.4 User-Initiated Sharing of Log Files

The App lets you export or share log files using the standard Android system share sheet (for example, to email, cloud storage, or messaging apps of your choice). This sharing is initiated by you and directed by you; the App does not share these files with third parties automatically.

3.5 Information the App Does Not Collect

The App does not collect: your name (beyond what you supply as part of your email address), your precise or approximate geographic location for tracking purposes, your contacts, your photos, videos or audio files, SMS or call-related data, health data, or an inventory of other apps on your device.

4. How We Use the Information

We use the information described in Section 3 only to provide, secure, maintain, and improve the App and the BG5 service. Specifically:

• App functionality — authenticating you, associating your uploaded controller logs with your account, discovering and communicating with your BG5 controller, and enabling the log-share feature you initiate.
• Security and abuse prevention — Firebase Authentication uses your IP address to add security and prevent abuse during sign-up and sign-in.
• Service reliability and improvement — Firebase collects user-agent strings and SDK/app metadata to provide, maintain, and improve Firebase services on which the App depends.

We do not use App data for advertising, and we do not sell personal or sensitive user data.

5. How We Share the Information

We share information only in the limited ways described below.

5.1 Service Providers Acting on Our Behalf

We use Google LLC as a service provider through the Firebase Authentication and Cloud Storage for Firebase services to host account credentials and controller-log uploads for the App. Google processes this data on our behalf as a data processor under the Firebase Data Processing and Security Terms, and Firebase does not transfer this data to third parties except to sub-processors that assist in providing Firebase services or in accordance with our instructions.

Firebase encrypts the collected end-user data in transit using HTTPS.

5.2 Legal and Business Transfers

We may disclose information if we are required to do so to comply with applicable law, regulation, court order, or other legal process; to enforce agreements with you; to respond to claims that your use of the App violates the rights of a third party; or, in the event of a merger, acquisition, or sale of assets, as part of the transferred business assets, in each case with legally adequate notice where required.

5.3 User-Directed Sharing

If you use the Android system share sheet to export a log file from the App, the file is delivered by the operating system to the destination app or contact you select. SIA does not control, and is not responsible for, the privacy practices of those third-party destinations.

5.4 No Sale of Personal Information

We do not sell your personal information or share it for cross-context behavioral advertising, and we do not permit third-party SDKs in the App to do so.

6. Data Retention

We retain personal information only for as long as needed to provide the App and the BG5 service and to satisfy our legal, tax, accounting, security, and fraud-prevention obligations.

• Account information (email address, Firebase user identifier, password credential): retained for as long as your account remains active. If you request account deletion (see Section 7), we delete the account and the associated user data within 30 days, except where a longer period is required for security, fraud prevention, or regulatory compliance.
• Uploaded controller logs: retained in Firebase Storage for as long as your account remains active or until you delete them from within the App or request deletion.
• Firebase-generated diagnostic identifiers (IP address, user-agent strings, App/SDK IDs) are retained by Firebase per Google’s Firebase Data Processing and Security Terms.
• Residual anonymous or aggregate information that does not identify you may be retained indefinitely.

7. Account and Data Deletion

You can request deletion of your BG5 account and the personal data associated with it at any time in either of the following ways:

• Web (available even if you have uninstalled the App): Submit an account-deletion request at https://si-biofilmgrowth.com/bg5-account-deletion or by emailing info@structint.com with the subject line “BG5 account deletion” and the email address associated with your account.

When we receive a verified request, we will delete the account, associated Firebase Authentication user record, and controller logs uploaded to Firebase Storage that are associated with the account, and instruct our service provider (Google/Firebase) to do the same, subject only to legally-permitted retention exceptions such as security, fraud prevention, or regulatory compliance.

8. Security

We handle personal and sensitive user data securely. In particular:

• All data transmitted between the App and Firebase (including account credentials and controller-log uploads) is transmitted over HTTPS using modern cryptography.
• Access to the SIA Firebase project is restricted to authorized SIA personnel.
• SIA maintains organizational security controls, including third-party security assessments, mandatory security-awareness training for employees, and continuous monitoring of security and compliance status.

No method of transmission or storage is 100% secure; however, we work to protect your information consistent with these controls and applicable law.

9. Your Privacy Rights

Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, port, or restrict processing of it, or to object to processing and withdraw consent. To exercise any of these rights, contact us at info@structint.com.

California residents additionally have the rights described in the California Consumer Privacy Act, including the right to know, the right to delete, the right to correct, the right to know what personal information (if any) is sold or shared, and the right to non-discrimination. SIA does not sell or share your personal information. To exercise these rights, submit a request to info@structint.com or call 1-877-474-7693.