Privacy Policy — KPFC LC Scanner
1. Information we collect
- Account information you provide at login: email, password, name.
- Device identifier (Android ID) and device model, used to register and approve the device for staff use.
- Invoice numbers and invoice GUIDs that you scan or search with the app.
- Your current approximate or precise location, including latitude, longitude, and accuracy, when you approve a shop return at a fixed shop where geofencing is enabled.
- A locally-stored PIN hash (SHA-256) used to unlock the app on your device.
2. How we use this information
- To authenticate staff against KPFC's shop and admin servers.
- To allow approved devices to mark invoices as dispatched, approve returns, and look up invoice details.
- To verify that a geofenced shop-return approval takes place at the assigned shop and to retain an auditable approval record.
- To prevent unauthorised devices from accessing internal systems.
3. Where the data goes
All data is transmitted over HTTPS only to servers operated by KPFC Builders on the kpfcbuilders.com domain. We do not share data with third parties, advertisers, or analytics providers.
4. Data retention
Account and device records are retained for the duration of your employment with KPFC Builders and for any period required by law or internal audit policy. Location submitted with a shop-return approval is retained with that approval and its audit history for the period required by KPFC's operational, fraud-prevention, and audit policies.
5. Data deletion
To request deletion of your account, device registration, or personal data, contact KPFC Builders IT / HR at githae.francis@gmail.com. Approval and location audit records may be retained where required by law, fraud-prevention controls, or KPFC's internal audit policy.
6. Device permissions used
- Camera — to scan invoice QR codes.
- Approximate and precise location — requested only while you are using the app to approve a shop return at a geofenced fixed shop. The app does not request background location and does not continuously track your location.
- Internet & Network state — to communicate with KPFC servers and to queue scans while offline.
- Vibrate — to confirm successful scans haptically.
7. Children
The app is not directed at, nor intended for, children under 13.
8. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change.
9. Contact
KPFC Builders
Kikuyu, Kenya
githae.francis@gmail.com