BhoomiTrack — Privacy Policy
Last updated: 27 August 2026
BhoomiTrack is a construction-material inventory app for site owners and site managers. This policy explains what the app collects, why, who it is shared with, how long it is kept, and how to get it deleted.
BhoomiTrack is a business tool. The people who use it are the owner of a construction company and the managers of that company's sites. It is not intended for children.
1. Who is responsible
BhoomiTrack is operated by the app's publisher, contactable at [email protected]. Questions about this policy, about your data, or a request to delete it should go to that address.
2. What the app collects
Information you give us
| Data | When | Why |
|---|---|---|
| Name | Sign-up | Identifies who issued or approved a material slip |
| Email address | Owner sign-up | Sign-in, and delivering a password-reset code |
| Phone number | Manager sign-up | Sign-in — managers sign in by phone |
| Password | Sign-up | Sign-in. Stored only as a bcrypt hash; never in readable form |
| Company name | Registration | Separates your records from every other company's |
| Site names and locations | In use | The sites you track material against. Free text you type — the app does not read your device location |
| Material, quantity and cost records | In use | The inventory, issue slips and requests that are the product |
| Messages | In use | The in-app chat between an owner and a site manager |
Information collected automatically
| Data | Why |
|---|---|
| A push notification token for the device | To notify an owner of a new pending slip, and a manager of an approval or rejection. Not used for advertising |
| Crash and error diagnostics — stack trace, device model, Android version, app version | To find and fix crashes. Collected by Google Firebase Crashlytics |
| An audit record of stock and slip decisions — who changed what, and when | Material is worth money and disputes happen. The audit trail is a core feature, not analytics |
3. Why we process it, and the legal basis
- To provide the service — you cannot have an inventory record without the inventory data. This is performance of the contract between you and us.
- To keep the account secure — sign-in, password reset, session revocation. Legitimate interest.
- To keep the app working — crash diagnostics. Legitimate interest.
We do not sell personal data, and we do not share it for advertising.
4. Who else sees it
Other people inside your own company see what the product is designed to show them: the owner sees every site, and a manager sees the sites they are assigned to. No user of one company can see another company's data.
Outside that, data is handled only by the service providers that run the app:
| Provider | Role |
|---|---|
| MongoDB Atlas | Database hosting |
| Render | Application server hosting |
| Google Firebase (Cloud Messaging, Crashlytics) | Push notifications and crash reporting |
| An email delivery provider | Sending password-reset codes |
| Sentry | Server error monitoring |
These providers process data on our instructions only. We may also disclose data where the law requires it.
5. Where it is stored, and how it is protected
- All traffic between the app and the server uses HTTPS.
- Passwords are stored as bcrypt hashes. Password-reset codes are hashed too, expire, and are single-use.
- Each company's records are isolated at the API — a request carrying one company's sign-in cannot read another's.
- Sign-in sessions can be revoked; signing out or a permission change invalidates the session immediately.
Data is stored on servers operated by the providers named above.
6. How long it is kept
- While your account is active — for as long as you keep using BhoomiTrack.
- After you delete your account — your personal profile is removed and permanently purged after a 30-day recovery window.
- Company records — the slips, inventory movements and audit entries belonging to the company are kept as the company's business records, with the individual no longer identified. This is the same principle as a signed paper delivery note: it stays in the company's file.
- Crash diagnostics — retained by Firebase Crashlytics for up to 90 days.
7. Your rights and choices
- Delete your account, from inside the app — open the account menu and choose Delete account. See Account & data deletion for the full description and for how to request deletion without the app.
- Get a copy of your data — the app can export your organisation's records. You can also ask us at the address above.
- Correct your details — from within the app, or by asking us.
- Turn off notifications — in Android Settings → Apps → BhoomiTrack → Notifications. The app keeps working.
Depending on where you live, you may also have rights of access, rectification, erasure, restriction, portability and objection. Write to us and we will answer within 30 days.
8. Children
BhoomiTrack is a workplace tool intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
9. Changes to this policy
If this policy changes materially we will update the date at the top and, where the change affects how your data is used, notify you in the app.
10. Contact
BhoomiTrack · Account & data deletion