Privacy Policy

01Who this policy covers

We process data about:

• Employees and authorised contractors who sign in (drivers, operators, supervisors, operations staff, and admins)
• People whose details are stored as business contacts (for example vendor name, phone, or WhatsApp number entered by staff)

This App is not directed at children under 18. We do not knowingly create accounts for minors.

02Information we collect

We collect only what is needed to run construction-site operations. We do not use advertising SDKs, and we do not sell personal information.

2.1 Account and profile (created by your employer)

You cannot self-register. An admin or operations user creates and manages your account.

2.2 One-time passwords (OTP)

When you request a login code we store the phone number, the OTP, expiry time, and attempt count until the code is used or expires (typically a few minutes). We send the code by SMS.

2.3 Location (precise GPS)

The App uses precise location when you perform work actions that require it — not for advertising, and not for selling location history.

Typical uses:

• Attendance check-in / check-out: latitude, longitude, location name, and optional photo. If your assigned site has a geofence, check-in may be rejected if you are outside the allowed radius (default 500 metres, set by the company).
• Trips: origin and destination coordinates and names, odometer readings, and photos (including delivery photos).
• Fuel records: coordinates and location name of the fill, odometer photos, receipts.
• Site master data: site GPS and geofence radius configured by admins (not your personal movement track).

Location is collected when you use those features (for example when you tap check-in). This policy does not claim continuous background tracking. If a future app version collects location in the background, we will update this policy and the Play Store Data safety section first.

2.4 Photos, documents, and other files

Staff may upload images and files as part of the job, including attendance photos; trip and delivery photos, vendor slips; fuel odometer photos and receipts; material / inventory receipts, invoices, supporting photos; structure measurement photos; breakdown or report attachments; and profile photos. These files are stored on our servers (or our hosting provider) so authorised colleagues can review and approve work.

2.5 Operational work data

Depending on your role, the App stores work records such as attendance, trips, fuel issue/receive/allocate, materials, inventory, measurements, breakdowns, vendors, assets, roads, and internal reports. This is company operational data. It may include your name, employee ID, phone, and the photos or GPS points attached to a record.

2.6 Device and notifications

To send operational alerts we may store a push-notification device token (Firebase Cloud Messaging) linked to your account. Notification title and body are stored in the App so you can read them later.

2.7 Technical logs

Our servers and hosting provider may automatically record IP address, date/time, device or browser type, and request URLs. We use this for security, debugging, and keeping the service running, not for ads.

2.8 Web dashboard cookies

The web dashboard stores a session cookie (accessToken) so you stay signed in. It is not used for cross-site advertising. The mobile App uses on-device storage for the same purpose (login session).

The web codebase may include unused analytics helpers from a template (Google Analytics / PostHog / Meta Pixel). We do not enable advertising or product-analytics SDKs for this App unless we say so here. If that changes, we will name the provider in this policy and in Play Console Data safety.

03How we use information

• Provide the App: login, roles, attendance, trips, fuel, materials, inventory, measurements, breakdowns, reports, and notifications
• Enforce site geofencing and review exceptions (for example attendance flagged as outside the geofence)
• Let authorised staff approve or reject operational records
• Send OTPs, service notices, and work notifications
• Secure the App, prevent abuse, and diagnose faults
• Meet legal, tax, payroll, or audit obligations of the employer

04Who can see your information

Inside the company. Other authorised users see what their role allows (for example a supervisor sees their site; admins and operations staff may see more). Work photos and GPS attached to a record are visible to those roles.

Service providers (processors who help us run the App):

Legal requests. We may disclose information if required by law, regulation, or a valid legal process.

No public profiles. Employee accounts are not listed on a public storefront.

05Accounts and deletion (Play Store)

This App uses employer-managed accounts. You cannot create an account from the Play Store listing.

• To correct profile details, ask your admin or operations team, or use in-App profile fields where your role allows.
• To deactivate or delete your account and associated personal data, ask your employer’s admin. They can disable the account in the App. Remaining operational records (for example a trip you logged) may be retained by the company as business records, with your identifiers removed or kept only as required for audit, payroll, or law.

If Google Play requires an account-deletion path, use email katreshantanu@gmail.com from the same phone number / employee identity used in the App, or ask your admin. We will process employer-authorised deletion requests. We cannot delete an active employee account solely because a personal Play Store user asks, if the employer still needs the workplace record.

06Retention

Soft-deleted records may remain in backups for a short period before permanent removal.

07Security

We use HTTPS in production, access control by role, and hosting in a restricted cloud environment. No system is perfectly secure. If a breach is likely to cause serious harm, we will notify affected users and authorities as required by applicable law (including India’s Digital Personal Data Protection Act, 2023, where it applies).

08Your rights

Depending on applicable law (including DPDP, 2023 for India), you may have the right to access, correct, or request deletion of personal data, and to withdraw consent where processing is based on consent. Workplace processing is largely necessary for employment / operations instructed by your employer.

To exercise rights, contact katreshantanu@gmail.com or your admin. We may need to verify that you are the account holder or that your employer has authorised the request.

09International transfers

Primary hosting is in India (AWS Mumbai). SMS and Firebase may process limited data on their infrastructure, which can include servers outside India, under their contracts and security measures.

10Permissions the mobile App may request

We request a permission only when a feature needs it. You can refuse, but the related feature may not work.

11Children’s privacy

The App is for adult workplace use. We do not knowingly collect data from children. If an account was created in error for a minor, contact us and we will delete it.

12Changes

We may update this policy. The “Last updated” date will change. Material changes will be posted on this page (and, where required, notified in the App). Continued use after the update means you accept the revised policy.