Privacy Policy
1. Overview
The app is the official ordering and loyalty-rewards application of the Company (the Company). It is used by the Company's business partners — distributors, retailers and plumbers — and by the Company's office staff, to place and track orders, view stock, and follow the reward points earned on confirmed orders.
This privacy policy explains what personal information the app handles, how it is
used, who it is shared with, how long it is kept, and the choices you have. It
applies to the Android application and the linked web application served from
this website.
2. About the app
The app is a private, business-internal tool. It is not a public service. Access is limited to people who already have an account created by the Company — typically:
- Company administrators and authorised office staff.
- Operators — office staff who manage the whole system on the Company's behalf.
- Distributors who hold their own stock and supply retailers.
- Retailers who stock and sell the Company's products.
- Plumbers enrolled in the Company's loyalty-rewards programme.
You cannot self-register through the app or the website. Accounts are provisioned by the Company. You sign in with the mobile number registered for you by the Company.
3. Who controls the data
Data controller (decides what is processed and why)
The Company is the data controller. The Company decides which information about its partners and staff is collected, who is given an account, and how long records are kept, in line with its existing business and record-keeping practices.
Data processor (operates the technical platform)
VM Technologies is the technology provider that builds and operates the platform on the Company's behalf. VM Technologies only processes data on the Company's instructions; it does not use the information for its own purposes, does not sell it, and does not share it with advertisers.
4. What we collect
The app handles the following categories of information:
Provided by the Company (not by you)
| Category | Examples |
|---|---|
| Partner / staff profile | Full name, role (Admin / Operator / Distributor / Retailer / Plumber), mobile number, address, an optional ID number, and the account that registered you. |
| Orders | Orders placed for or by you — products, quantities, site/reference, the retailer and plumber involved, and the order status (pending / confirmed). |
| Stock | Stock allotments to distributors and retailers, and the resulting available balances. |
| Rewards | Reward points earned on confirmed orders, reward slabs reached, and gifts recorded as redeemed. |
| Attachments | Any photograph a user attaches to an order or a gift record. |
| Audit information | A record of which staff account performed which action (e.g. who confirmed an order, allotted stock, or edited a record), with a timestamp — used for internal accountability. |
Collected from you when you use the app
| Category | Examples |
|---|---|
| Account & sign-in | Your registered mobile number and password. The password is stored in encrypted form and protected by access controls; it is used only to sign you in. |
| Photographs | Any photo you choose to capture or select to attach to an order or gift record. Optional. |
| Device and notification information | Firebase Cloud Messaging (FCM) device token (required to send push notifications), Android version and platform. We do not collect your contacts, calendar, location, IMEI, advertising identifier, or browsing history. |
| Operational logs | Server error logs (route, status, error message) captured to diagnose technical issues. Kept for a short period; not used for advertising or analytics. |
What the app does NOT collect. No location data, no contacts, no calendar entries, no SMS/call logs, no microphone recordings, no advertising ID, no browsing history outside the app, no biometrics. We do not use third-party analytics, advertising, or attribution SDKs.
5. How we use it
- To let you sign in and identify you as a partner or staff member.
- To show the orders, stock and reward points that belong to you (or that fall within your role).
- To place, confirm and track orders, and to keep stock balances accurate.
- To calculate reward points and show reward slabs, gifts and progress to plumbers.
- To send push notifications when something relevant happens — for example an order being confirmed, or a new scheme or offer going live.
- To let you export statements and reports to your device.
- To keep an internal audit trail of staff actions for accountability.
- To debug technical errors and keep the platform reliable and secure.
We do not use your information for advertising, marketing profiling, or any purpose unrelated to running the Company's day-to-day business.
6. App permissions explained
The Android app requests the following device permissions when needed:
| Permission | Why the app uses it |
|---|---|
| Internet & network state | To connect to the Company's secure server to read and update records. |
| Notifications (Android 13+) | To deliver push notifications about orders and offers, and to confirm when an exported report has finished downloading. You can turn this off any time from the device's app settings. |
| Camera | Only when you choose to capture a photo — for example a picture attached to an order or gift record. Optional. |
| Photos & media | Only when you choose a photo already saved on your phone to attach. Optional. |
Saving an exported report (Excel/statement) to your Downloads folder uses the Android system's media store and needs no storage permission. The app does not request access to your contacts, calendar, microphone, precise location, body sensors, or call logs, and does not request all-files access.
8. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Google Firebase Cloud Messaging (FCM) | Deliver push notifications to your Android device. | FCM device token, notification title, short body, deep-link target inside the app. |
| Google Play Services (on Android) | Receive FCM messages on the device. | As required by the platform; no profile or business content is sent to Google by us beyond the notification itself. |
We do not embed third-party advertising networks, analytics SDKs (Google Analytics, Firebase Analytics, Crashlytics, Mixpanel, etc.), attribution SDKs, social-login SDKs, or any other third-party tracker.
9. Data security
- All traffic between the app and the server is encrypted using HTTPS (TLS).
- Passwords are stored in encrypted form and protected by per-account access controls.
- Records are protected by role-based access controls; you only see what your role and permissions allow.
- Each client's data is stored in a logically separate database (per-tenant isolation).
- Administrative changes are captured in an internal audit log with the actor and timestamp.
- Backups are taken on a regular schedule, stored on the same secure infrastructure, and retained for a limited time.
No system is perfectly secure. If we become aware of a breach that affects your information, we will notify the Company promptly so it can inform affected users and the relevant authorities as required by law.
10. Data retention
- Active partners and staff: Records are kept for as long as you hold an active account with the Company.
- Past partners and staff: Order, stock and reward records are retained for the period required by the Company's record-keeping policy and by applicable Indian accounting/tax regulations (typically several years, for reconciliation and audit).
- Operational logs and backups: Short-lived, kept for diagnostic and disaster-recovery purposes only, then rotated out.
- Push notification tokens: Removed when you sign out or uninstall the app. Inactive tokens are also pruned when Firebase reports them as no longer registered.
11. Children and minors
The app is a business tool intended for adults (18 years or older) who are the Company's business partners or staff. It is not designed for, marketed to, or intended for use by children, and it does not knowingly collect information from children.
12. Your rights
Subject to applicable law (including the Digital Personal Data Protection Act, 2023 in India), you may have the following rights with respect to your personal information:
- Access — ask what information is held about you.
- Correction — ask for inaccurate information to be corrected.
- Erasure — ask for your information to be deleted, subject to lawful retention requirements.
- Grievance — raise concerns about how your information is handled.
- Withdraw push notifications — turn off notifications any time from the device settings.
Because the Company is the data controller, requests of this kind should be addressed to the Company (see Contact us). Requests will be answered within a reasonable time, normally within 30 days.
13. How to request account / data deletion
To request deletion of your account or the personal information held about you, send a written request to the Company at the contact details below, with:
- Your full name and your role (distributor / retailer / plumber / staff).
- Your registered mobile number.
- A short description of the data you want deleted.
The Company will verify your identity, action the request, and confirm back. Some information may be retained for legitimate accounting, tax, or audit purposes even after the rest is deleted — the Company will tell you what is being retained and why.
If you simply want to stop using the app, you can uninstall it from your device at any time. Uninstalling does not delete the records the Company holds about you on the server.
14. Changes to this policy
We may update this privacy policy from time to time — for example when we add new features or when a relevant law changes. The “Last updated” date at the top of this page shows when the most recent change was made. For material changes, the Company will notify users in-app or by direct message. Continued use of the app after a change means you accept the updated policy.
15. Contact us
The Company is the data controller for purposes of this policy. To exercise any of the rights described above, or to ask anything about how your information is handled, please contact:
The Company
For technical questions relating to the platform (VM Technologies is the data processor), the Company can forward your enquiry, or you may contact the developer directly:
VM Technologies (developer & maintainer)
Website: www.techvm.in
Email: support@techvm.in