WHAT THE POLICIES SAY

Roborock (Beijing Roborock Technology Co., Ltd., publicly listed on Shanghai's STAR Market under ticker 688169) makes robot vacuums and the companion app that controls them. The app's privacy policy discloses collection of device identifiers (MAC address, DID), network information (router SSID, IP), and coarse location, and states personal information is disclosed to third-party service providers and affiliates 'only with your authorization.' The iOS App Store privacy label lists Photos/Videos and Audio Data as data linked to the user's identity, reflecting the camera and microphone present on some models. Roborock's own security-disclosure page documents a 2021 vulnerability (insecure random-number generation on devices connected to Tuya's IoT cloud, exposing device info, cleaning data and maps in transit) affecting five named models, which the company marked 'Resolved.' No FTC or other regulator order was identified.

TIMELINE

NO ENTRIES ON FILE YET.

TOOLS WE RECOMMEND

PLUS

RECEIPTS

6 ON FILE

[2022-01-13] · COLLECTION

Roborock's app privacy policy states it collects device information (MAC address, DID serial number, network information), coarse location where required for specific functions, and router network information (SSID; password is stored only on-device and not uploaded).

files.roborock.com ↗

OWNERSHIP TRANSPARENCY

The Shanghai Stock Exchange's own STAR Market listing page identifies Beijing Roborock Technology Co., Ltd. as the publicly listed entity under ticker 688169, confirming the ownership structure is traceable via a regulator-hosted listing page.

sse.com.cn ↗

[2022-01-13] · SHARING

Roborock's privacy policy states that disclosure of personal information to third-party service providers and affiliates occurs only with the user's authorization, and that Roborock contractually binds any Third-Party Service Provider to applicable data-protection standards.

files.roborock.com ↗

[2025-07-02] · SHARING

Roborock's website-level privacy policy states it does not sell any personal information to third parties and does not share personal information with other third parties except under specifically enumerated circumstances (such as with explicit consent).

global.roborock.com ↗

[2021-09-15] · TRACK RECORD

Roborock's own security-disclosure page, titled 'Disclosure: Security Vulnerability on Tuya IoT Cloud (Resolved) Sep 15, 2021,' describes a 2021 vulnerability in which devices connected to Tuya's IoT cloud used an insecure random-number generator during channel negotiation, undermining the security of transmitted device info, cleaning data, maps, and settings for a named set of affected models (Roborock S6, S5 Max, S6 Pure, S6 MaxV, S4), and marks the issue as resolved.

global.roborock.com ↗

TRACKING TECH

The Roborock iOS app's App Store privacy label lists Photos or Videos and Audio Data among data collected and linked to the user's identity, reflecting the camera and microphone present on some Roborock models used for mapping and remote monitoring features.

apps.apple.com ↗

LAST REVIEWED 2026-08-19 · METHODOLOGY v1.7