This Privacy Policy describes how the Sales Rep App ("App", "we", "us") collects, uses, and protects information when you use our mobile application. By using the App you agree to the practices described in this policy.
1. Who We Are
The Sales Rep App is an internal field-sales and delivery management tool used by authorised sales representatives and delivery drivers. Access is restricted to employees and contractors of the operating company.
2. Information We Collect
The App collects the following categories of information:
a) Account & Identity Information
- Name and employee ID assigned by the administrator
- Login credentials (stored as a secure hash on the server; never stored in plain text)
- Assigned route and role (sales rep / driver / admin)
b) Location Data
- Precise GPS coordinates are captured at the moment of delivery confirmation to record proof-of-delivery at a shop
- The App does not track your location continuously or in the background
- Location access is requested only when you tap "Confirm Delivery" or "Show My Location" on the route map
c) Device & Bluetooth Information
- A unique device token is registered when you first log in for security purposes (one device per account policy)
- Bluetooth is accessed exclusively to discover and connect to a thermal receipt printer that you select; no Bluetooth scanning data is stored or transmitted
- The App does not scan for or interact with any Bluetooth devices other than the printer you explicitly choose
d) Business Transaction Data
- Orders placed, products, quantities, and prices
- Delivery confirmations, delivery status, and payment amounts collected
- Customer shop names and addresses (business entities, not individual consumers)
- Photos or notes added during damage reports
e) Usage & Sync Data
- Timestamps of sync events, API requests, and delivery confirmations for audit purposes
- App version and operating-system version used for support diagnostics
3. How We Use Your Information
- Delivery verification: GPS coordinates confirm that deliveries were made at the correct location
- Order management: Transaction data is synced to the central server for invoicing, stock management, and reporting
- Security & access control: Device tokens ensure only registered devices can access the system
- Receipt printing: Bluetooth is used solely to send invoice data to your paired thermal printer
- Performance reporting: Aggregated sales and delivery data is used for internal business reporting
- Support: Device and app version information helps diagnose technical issues
4. Permissions Required
- Location (Precise, Foreground only): Required to record proof-of-delivery GPS coordinates and to display your position on the route map. This permission is used only while the App is open and active.
- Bluetooth / Nearby Devices: Required to scan for and connect to a Bluetooth thermal printer for receipt printing. No device data is stored beyond the printer name and MAC address you save.
- Internet: Required to sync orders, confirmations, and inventory data with the back-end server.
5. Data Sharing & Disclosure
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Data may be shared only in the following limited circumstances:
- Within the organisation: Business transaction data is visible to authorised administrators and managers through the web admin panel
- Hosting & infrastructure providers: The server is hosted on a cloud platform that processes data on our behalf under a data processing agreement
- Legal requirements: If required by applicable law, court order, or government authority
6. Data Storage & Retention
- All data is stored on a secured server with encrypted connections (HTTPS/TLS)
- Local on-device data is stored in an encrypted SQLite database that requires device unlock to access
- Delivery and order records are retained for the period required by applicable accounting and tax regulations (typically 5–7 years)
- GPS coordinates attached to delivery confirmations are retained as part of the delivery record for the same period
- When an employee account is deactivated, login access is revoked immediately; historical transaction records are retained for audit purposes
7. Security
We take reasonable technical and organisational measures to protect your information, including:
- All API communication uses HTTPS/TLS encryption
- Passwords are hashed using bcrypt; plain-text passwords are never stored
- Device registration tokens limit access to authorised devices
- Admin access to the web panel is protected by role-based access controls
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Children's Privacy
The App is intended solely for use by adult employees and contractors. We do not knowingly collect information from anyone under the age of 18. If you believe a minor's information has been collected, please contact us immediately.
9. Your Rights
As an authorised user of the App, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate personal data
- Request deletion of your account data (subject to legal retention obligations)
- Withdraw consent for location access at any time via your device's app settings (this will limit delivery-confirmation functionality)
To exercise these rights, contact your system administrator or reach us using the details in Section 11.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the revised policy. Significant changes will be communicated through the App or by email.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact: