PRIVACY POLICY

Privacy &
data handling.

Ecomtrack is a B2B SaaS application designed for warehouse staff to track packing operations in real-time. This document explains what data we collect, how we use it, and your rights.

01 / SCOPEWho this applies to

This Privacy Policy covers the Ecomtrack mobile application (iOS and Android) and its associated backend service at app.ecomtrack.me. It applies to warehouse staff users who use the app with credentials issued by their employer (the business client subscribing to Ecomtrack).

Ecomtrack is not intended for individual consumers and is not available for personal use. There are no in-app purchases.

02 / DATA WE COLLECTWhat information we process

To provide the service, we process the following categories of data:

• Account credentials — Staff ID and name, issued by the employer's administrator. We do not collect personal email, phone number, or government identifiers from end users.
• Operational data — Order tracking codes scanned via QR/barcode, scan timestamps, device identifier, and order classification (new / duplicate). This data is essential for fulfilling the warehouse tracking function.
• Device tokens — A push notification token (provided by Firebase Cloud Messaging) tied to your device, used solely to deliver in-app operational alerts.
• Locale & region — Your selected display language and regional backend preference, stored locally on your device.
• Local cache — A 30-day rolling history of scanned orders is stored only on your device for offline statistics. It is not transmitted to any third party.

We do not collect: location data, contacts, photos, microphone input, biometric data, advertising identifiers, browsing history, or any other personal data not listed above.

03 / HOW WE USE DATAPurposes of processing

• Authenticate staff sessions and route requests to the correct backend region.
• Forward scanned order codes via secure WebSocket to the operator's backend for warehouse tracking.
• Deliver real-time push notifications (e.g., duplicate scan warnings) to authorized devices.
• Provide on-device statistics (today's count, 30-day history) for the staff member's reference.
• Maintain audit logs for the operator's business compliance.

04 / DATA SHARINGThird-party services

We share data with the following service providers strictly for operational purposes:

• Google Firebase (Cloud Messaging) — to deliver push notifications. Firebase processes the device token; see Google's privacy policy at policies.google.com/privacy.
• Apple Push Notification service / Google Play Services — to deliver notifications via the OS-level notification system.
• Your employer (the business client) — as the data controller, your employer has access to operational data you produce while using the app on their behalf. This is governed by their own internal policies and the enterprise contract with Ecomtrack.

We do not sell, rent, or share your data with advertisers, analytics brokers, or any other third party for marketing purposes.

05 / DATA RETENTIONHow long data is kept

• On-device cache — automatically purged after 30 days. Cleared if you uninstall the app.
• Backend operational data — retained per the enterprise contract with your employer, typically governed by their data retention policy.
• Authentication tokens — invalidated upon logout. Cleared if you uninstall the app.
• Push notification tokens — refreshed periodically; revoked when you uninstall.

06 / SECURITYHow data is protected

All network communication uses HTTPS / WSS with TLS encryption. Authentication uses JWT tokens transmitted via secure channels. Local data on your device is stored using the OS-provided keychain / SharedPreferences sandbox.

Access to backend infrastructure is restricted, audited, and limited to authorized personnel for operational and support purposes only.

07 / YOUR RIGHTSWhat you can request

Because Ecomtrack processes data on behalf of your employer (the business client), most data subject requests should be directed to your employer's administrator. They can:

• Review or export the operational data tied to your staff account.
• Delete or anonymize your staff account and associated data.
• Update your displayed name and credentials.

You may also uninstall the app at any time to remove all locally cached data from your device immediately. To request data we process directly, contact us using the details below.

08 / CHILDRENAge restrictions

Ecomtrack is intended exclusively for adult professional warehouse staff. The app is not directed at, and we do not knowingly collect data from, anyone under the age of 16.

09 / CHANGESUpdates to this policy

We may update this Privacy Policy as the service evolves or as required by law. The "UPDATED" date at the top will reflect any revision. Material changes will be communicated through the app or via your employer's administrator.

10 / CONTACTHow to reach us

For privacy questions, data requests, or operational concerns: