The maker of a Bluetooth-connected adult toy has agreed to settle a class-action lawsuit over claims that it unknowingly collected personal data that violated users’ privacy. The settlement amounts to $4 million Canadian or around $2.9 million USD.

It was revealed at the Def Con hacking conference last year that Standard Innovation, the company behind the We-Vibe 4 Plus connected sex toy, was discreetly collecting data about users of its vibrator including the temperature of the device, the time and date of each use, the vibration intensity level, the vibration mode or pattern and battery life.

Collectively, this data can be used to gauge a great deal of information regarding users’ sexual experiences.

Standard Innovation marketed the We-Vibe 4 Plus as a device that “allows couples to keep their flame ignited – together or apart.” Due to its connected nature, the vibrator can be controlled remotely by a third-party (ideally, your partner) although the hackers claimed its security was lax and thus, control of the device could be seized by anybody within Bluetooth range. Unwanted activation of a vibrator, one of the hackers said, could potentially be considered sexual assault.

As per the settlement, customers that used the vibrator and companion app will receive up to $10,000 in compensation while those that purchased the adult toy but didn’t use the app are entitled to up to $199.

Standard Innovation said in a statement that they have enhanced their privacy notice, increased app security and now provide customers with more choices in the data they share. With the settlement, the company said it can move forward with focusing on making new, innovative products for its customers.