Smart glasses · privacy and regulation

Australia's privacy regulator opens an investigation into the HeyCyan smart-glasses app provider

Australia's OAIC announced on October 7 that it is investigating Shenzhen Qingcheng Future Technology, the provider of the HeyCyan companion app used by several low-cost smart-glasses brands. The action concerns personal-information practices; it is not a finding that a breach occurred or a nationwide ban on smart glasses.

Event date · Investigation announced October 7, 2026; preliminary inquiries began August 12, 2026

Confirmed facts

Why the regulator escalated its inquiry

The OAIC says Shenzhen Qingcheng did not respond to preliminary questions about recording, access to collected information and storage. The Privacy Commissioner therefore opened a formal investigation, enabling compulsory information-gathering powers. A failure to answer an inquiry and a proven interference with privacy are different findings; the announcement establishes the former and begins examination of the latter.

HeyCyan is used with Kmart's Anko glasses and devices sold through other retailers and marketplaces. The regulator's focus is the underlying software provider, not a conclusion that every pair of smart glasses or every retailer has the same data practices.

The companion app is part of the product's data system

According to the OAIC, connecting a smartphone to HeyCyan enables certain functions, including its voice assistant, and information gathered by the glasses is collected through the app for processing. The regulator also wrote to retailers expressing concern about devices that depend on that software.

This distinction is useful for buyers: a physical eyewear brand, an app developer and a retailer can be separate organizations. A privacy assessment should identify the service actually processing information, rather than stop at the name printed on the frame. That is HoloNexa's purchasing analysis, not a new regulatory requirement announced in this release.

What the wider inquiry does—and does not—say

In a separate October 7 blog, the Privacy Commissioner explains that preliminary inquiries covered hardware retailers, software providers and integrated technology companies. Only Shenzhen Qingcheng was under a newly announced formal investigation at that point; the absence of another investigation was explicitly not presented as a compliance endorsement.

The same blog says the OAIC had not identified facial-recognition capabilities in smart-glasses devices available on the Australian market. That statement should not be rewritten as proof that every wearable is incapable of facial recognition, nor should unsupported claims about such a feature be attached to this case.

No final outcome has been announced

The OAIC says it will await the investigation's conclusion before further comment. Remedies and potential civil-penalty proceedings depend on subsequent findings and the applicable legal thresholds. The initial announcement does not establish a penalty, mandatory product withdrawal or confirmed data leak.

Consumers and organizations can use this development to ask clearer questions about app ownership, processing and deletion. This report does not claim that replacing an app, changing a setting or choosing a different brand automatically resolves every privacy concern.

Why it matters · Analysis

Smart-glasses purchasing increasingly involves a software-service assessment as well as a hardware comparison. Low-cost devices can share a companion app even when their retail branding differs. A regulator examining that common layer may therefore affect more than one product listing. For organizations, identifying the app provider and data pathway early is more useful than treating all camera wearables as interchangeable. The investigation is consequential evidence of scrutiny, while its eventual findings remain unknown.

Related news

Back to news