Privacy Policy

Last updated: 20 November 2025

This Privacy Policy explains how DRTC (“the App”, “we”, “us”, or “our”) collects, uses, and protects information when it is used by shop owners and their employees for personal shop inventory and billing management.

The App is intended for private use by a shop owner and authorized employees only, and is not a consumer-facing shopping app for the general public.

1. Who is responsible for your data?

The data collected through the App is primarily controlled and managed by the shop owner or business using the App (referred to as the “Admin”).

For any questions about this Privacy Policy or data practices, you may contact:

Controller: YOUR_COMPANY_OR_SHOP_NAME
Email: YOUR_CONTACT_EMAIL@example.com

2. What data do we collect?

2.1 Account & Profile Information

For Admins and employees using the App, we may collect:

Name
Email address
Phone number (used for login and employee management)
Profile photo (if added)

2.2 OTP for Employee Management

When the Admin adds an employee, an OTP (One-Time Password) may be used for verification purposes. The OTP is processed via an external OTP/SMS service provider.

If your device or Android version offers automatic OTP reading, the App may use it only to automatically fill the OTP field. It is not used for any other purpose.

2.3 Inventory, Cart & Billing Data

As this is an inventory management and billing app, we process data such as:

Products and inventory items
Orders and items added to cart by employees on behalf of customers
Bill details and totals
Generated PDF invoices/bills

Only authorized employees can use the App to add items to cart and generate bills for customers. There is no payment gateway and the App does not process customer online payments.

2.4 Crash Logs & Technical Data

To improve stability and fix errors, the App collects:

Crash logs
Basic technical information related to the crash (such as device model, OS version)

This is done through a crash reporting tool (for example, Firebase Crashlytics or a similar service).

2.5 Access to Photos / Media (Images Only)

The App may request permission to read images on your device (e.g., READ_MEDIA_IMAGES) so that the Admin or employees can attach or select images (for example, product photos).

We:

Do not scan or collect all your photos in the background.
Only access the images that you explicitly select inside the App.

2.6 Data We Do Not Intentionally Collect

We do not intentionally collect:

Customer residential addresses (unless the Admin manually stores them in text fields)
Precise GPS location
Contacts, call logs, or SMS content (other than OTP processing as described)
Any biometric data
Payment card details (no payment gateway is integrated)

3. How do we use your data?

We use the collected data for the following purposes:

Account creation and management for Admins and employees.
Inventory and billing operations, including creating carts, orders, and PDF bills.
Security and verification, including OTP-based steps when adding employees.
App functionality, such as showing product images and user profile photos.
Diagnostics and crash fixing using crash logs and technical data.

We do not use your data for advertising or marketing, and we do not show ads inside the App.

4. Do we share your data with third parties?

We do not sell your personal information to third parties. We may share data only with necessary service providers, such as:

Backend hosting & database – Our backend APIs and database (e.g., hosted on AWS with MongoDB) store App data such as user profiles, inventory, orders, and bills.
OTP / SMS provider – To send and verify OTPs when adding employees.
Crash reporting service – To collect crash logs (e.g., Firebase Crashlytics).

These providers are used only to operate and improve the App and are not authorized to use your data for their own marketing purposes.

The App does not integrate any ad network (such as AdMob or Facebook Ads) and does not show ads.

5. Where and how is data stored?

The App does not primarily store long-term data locally on the device. Instead:

Data is stored on our server infrastructure (for example, on AWS with MongoDB).
Certain temporary data or cached data may be stored on the device to improve performance.
Generated bills may be stored on the server and/or exported as PDF files on the device used by the employee.

5.1 Data Retention

We keep data for as long as it is needed by the Admin to operate their shop, manage inventory, and maintain billing records, as well as for any legitimate business or legal requirements.

The Admin (shop owner) has control over when to delete or stop using data stored in the App, for example by deleting records or stopping the use of the App.

6. Your rights and choices

This App is designed primarily for a shop owner (Admin) and their employees, not for the general public. If you are:

An employee using the App – You should contact your Admin (shop owner) if you want to correct or remove your profile details from the system.
A customer of a shop using this App – Any information about you is held and controlled by that shop. Please contact the shop directly for any request regarding your information.

At this time, the App does not provide a direct in-app option for account deletion or data deletion by end users. However, the Admin can update or delete records within their system according to their own policies.

You may also contact us at YOUR_CONTACT_EMAIL@example.com for questions related to this Privacy Policy.

7. Permissions used by the App

The App may request the following Android permissions:

INTERNET – To communicate securely with our backend server (e.g., on AWS) and to sync inventory, users, and billing data.
CAMERA – For features such as scanning or capturing images (for example, product photos or QR/barcodes), if implemented by the Admin.
READ_MEDIA_IMAGES – To allow you to select images (e.g., product photos or profile images) from your device. The App only accesses images that you explicitly select.

We do not request permissions for location, contacts, call logs, or SMS content other than what may be required for OTP processing as described above.

8. Data security

We use reasonable technical and organizational measures to protect your information, including secure communication with our servers where applicable. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Admins are also responsible for keeping their login credentials and devices secure, and for controlling which employees are authorized to access the App.

9. Children’s privacy

The App is intended for use by shop owners and employees and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the App after changes are made means you accept the revised policy.

11. Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, you can contact us at:

Email: YOUR_CONTACT_EMAIL@example.com