Exclusively used for real-time barcode / QR code scanning of job cards and order tags. No photos or media are saved or uploaded.
Used via Firebase Cloud Messaging (FCM) to deliver instant job assignments, status changes, and workshop alerts.
All network traffic is encrypted via HTTPS/TLS. Access is restricted to authenticated workshop personnel and managers.
Workers and users can request account and data removal at any time through our administrator support desk.
Application Overview & Scope
The application is designed for authorized workshop artisans, workers, supervisors, and administrative personnel to receive production assignments, inspect order specifications, track gemstone records, and scan job tracking sheets in real time.
Enterprise Scope: This application is intended for commercial and internal production logistics. We do not sell, rent, or trade your personal information to any third-party advertisers or data brokers under any circumstances.
Information We Collect
To provide authenticated access and manage workshop workflows, we may collect and process the following categories of information:
A. User Account & Authentication Data
- Identity & Profile: Worker/Manager full name, email address, assigned workshop role, and internal identification number.
- Credentials: Securely hashed passwords or one-time verification tokens (OTP) used for identity verification.
- Session & Security: Authentication bearer tokens, IP addresses, and login audit timestamps.
B. Device & Diagnostic Information
- Push Notification Tokens: Firebase Cloud Messaging (FCM) registration tokens to route real-time order alerts to your active device.
- Hardware Metadata: Device model, operating system version, and application build number for crash diagnostics and UI compatibility.
C. Production & Workshop Records
- Work Logs: Order tracking barcodes scanned, item receipt confirmations, gemstone allocations, stage completion remarks, and timestamps.
Device Permissions & Usage Disclosures
In compliance with Google Play Developer Policies, the table below provides explicit disclosures on why each Android permission is requested:
| Permission | Purpose & Functionality | Data Protection Guarantee |
|---|---|---|
CAMERA
android.permission.CAMERA
|
Used exclusively for barcode and QR code scanning on physical jewelry job cards, bags, and order receipts. |
Zero Image Storage The live camera stream is processed entirely in memory on your device to decode strings. No photos or videos are captured, recorded, saved, or uploaded. |
POST_NOTIFICATIONS
android.permission.POST_NOTIFICATIONS |
Delivers real-time notifications for newly assigned jobs, priority dispatch requests, and manager remarks. | Tokens are tied only to your authenticated session. You can enable or disable push alerts at any time via Android system settings. |
INTERNET
android.permission.INTERNET
|
Connects the mobile client with the secure backend server to fetch order pipelines and sync job status changes. | All communication is strictly transmitted over HTTPS using 256-bit TLS/SSL encryption. |
VIBRATE
android.permission.VIBRATE
|
Provides haptic tactile feedback when a barcode/QR code is successfully scanned or when a push alert arrives. | Hardware-only actuation; no user data is accessed or collected. |
How We Use Your Information
We use the collected information strictly for operational and organizational workflows:
Authentication & Access
To verify your identity, maintain secure worker sessions, and enforce role-based authorization.
Barcode Verification
To validate item numbers, update production ledger statuses, and prevent manual data entry errors.
Job Alert Dispatching
To alert craftsmen when new jewelry items or rework tickets are assigned to their workstation.
Security & Audit Trails
To log timestamps and user actions for quality assurance and fraud prevention.
Third-Party Services & SDKs
The application integrates minimal third-party SDKs that are essential for core mobile infrastructure. These service providers adhere to strict data security standards:
- Google Play Services: Used for core Android runtime APIs, security verifications, and app distribution. (Google Privacy Policy)
- Google Firebase Cloud Messaging (FCM): Used to deliver push notifications to Android and iOS devices. (Firebase Privacy Terms)
Data Storage & Security Measures
We employ robust administrative, technical, and physical safeguards to protect your personal information against unauthorized access, loss, destruction, or alteration:
- Encryption in Transit: All communications between the mobile application and backend servers use modern HTTPS / TLS 1.3 encryption.
- Encrypted Credential Storage: Passwords are protected using
industry-standard
bcrypthashing algorithms with high work factors. - Device Level Protection: Session tokens are stored in private, sandboxed application storage and cleared upon sign-out.
Data Retention Policy
We retain user profile information and workshop records for as long as your worker profile remains active within the organization or as necessary to fulfill legal, manufacturing audit, and warranty obligations.
When a worker account is deactivated or archived, device notification tokens and session credentials are immediately purged from active servers.
User Rights & Account / Data Deletion
In accordance with global privacy regulations and Google Play's Data Deletion Policy, users have full rights regarding their personal data:
Right to Access
Review the personal data and work records linked to your account.Right to Rectify
Correct inaccurate contact details or profile info via your manager.Right to Erasure
Request deletion of your account and personal identifiers.How to Request Account or Data Deletion:
If you wish to delete your worker account, associated contact info, or device push registration, you may submit a request using any of the following methods:
- Send an email to
example@gmail.com with the
subject line
"Account Deletion Request - Dropbarter Worker"from your registered email address. - Contact your workshop administrator directly to deactivate and delete your worker profile in the CRM console.
Deletion requests are processed within 30 days of verification.
Children's Privacy (COPPA & GDPR-K)
Our services and mobile applications are strictly built for professional workshop artisans and enterprise workforce personnel. We do not knowingly market to or solicit personal information from children under the age of 13 (or under 16 in the European Union).
If we discover that personal data from a child has been inadvertently collected, we will immediately delete that information from our servers.
Changes to This Privacy Policy
We may revise or update this Privacy Policy from time to time to reflect modifications in our mobile application features, security standards, or regulatory obligations.
Any changes will become effective immediately upon posting the updated policy on this page with an updated "Last Updated" date. We encourage users to periodically review this page for the latest privacy practices.
Contact Information & Support
If you have questions, feedback, or data privacy requests regarding this policy or the Dropbarter Worker application, please contact our support team: