Australia’s privacy regulator opened an investigation on 7 October 2026 into the maker of HeyCyan, the phone app used by Kmart’s Anko smart glasses and other inexpensive models. The OAIC is examining the company’s handling of personal information; it has not announced a breach finding or a ban. For owners, the immediate issue is understanding which company receives information from their wearable camera.
The investigation concerns Shenzhen Qingcheng Future Technology Co. Ltd, rather than a finding against every retailer selling compatible glasses. The OAIC says the China-based developer did not respond to preliminary inquiries about recording, access and storage. Privacy Commissioner Carly Kind said formal investigation would allow the regulator to use compulsory information-gathering powers.
The regulator also wrote to retailers expressing its concerns. HeyCyan supports features including calls, music and a voice assistant, with information gathered by the glasses collected through the app for processing, according to the OAIC. A familiar shopfront therefore does not, by itself, explain the software service behind the device.
The commissioner’s separate assessment explains why that distinction matters: the entity holding personal information may be the software provider, rather than the retailer. Kind also warned that choosing not to investigate other businesses at this stage should not be treated as a conclusion about their compliance.
Bystanders face a different problem from the person wearing the glasses. They may have no account, app or settings screen through which to manage the recording. Kind noted that details such as a name badge, uniform or location can help make someone identifiable. She also said the OAIC had not yet identified facial-recognition capabilities in smart glasses available in Australia. Recording a face and identifying it automatically are different activities.
The Guardian reported that Kmart’s website no longer listed the glasses on Wednesday; it had approached the retailer for comment.
Owners can begin by checking the app actually installed on their phone. On Android, Google’s instructions direct users to Settings, then Apps, the relevant app and Permissions. Review any access listed there, including photos, microphone, location or nearby devices. Available controls depend on the phone and Android version, and restricting a permission may affect the feature that uses it.
On iPhone, Apple’s guidance points to Settings, then Privacy & Security, where access can be reviewed by category. Its App Privacy Report can also show how apps use granted permissions and their network activity. These controls help inspect the phone’s behaviour; they should not be mistaken for a complete audit of a connected pair of glasses.
Removing permissions is also different from deleting previously collected information. Google Play explains that some collection is not managed through permissions and that users may need to request deletion through the app or developer. Owners should check the app’s privacy policy and deletion process before assuming that uninstalling resolves earlier collection.
Australians considering these glasses now have two separate decisions: whether their recording is appropriate for the people around them, and whether they understand the service handling it. The investigation should help clarify the second question, but its outcome remains open.
