Privacy Policy
How the IDsys Online Android app handles your information.
This Privacy Policy applies to the IDsys Online Android application
(package ee.idsys.idsysonline.maui) published by IDsys OÜ
("IDsys", "we", "us"), and to the IDsys Online service the app connects to
(online.idsys.ee).
IDsys Online is a business application for inventory, asset and warehouse management. It is used by employees of organisations that have an agreement with IDsys ("Customer"). An account is required and is created by the Customer's administrator.
1. Data controller and processor
Business data entered into IDsys Online (for example items, documents, scan results and user accounts) belongs to the Customer. For that data the Customer is the data controller and IDsys processes it on the Customer's behalf. IDsys is the controller only for the technical data described in this policy that we use to operate, secure and support the app.
2. Information the app collects
| Data / permission | Why it is used |
|---|---|
| Account details username and password |
To sign you in to IDsys Online. Passwords are sent only over an encrypted connection to the IDsys Online server. |
| Location precise and approximate |
Used only while the app is in use, to attach the location to scan and tag reports (for example where an item or asset was found). The app does not track location in the background. |
| Camera | To scan barcodes and QR codes and to take photos you choose to attach in IDsys Online. Barcode images are processed on the device; only photos you attach are uploaded. |
| Device identifier and phone state | To identify the device within the Customer's IDsys Online account (for example to link a handheld scanner to its settings) and in diagnostic logs. |
| Bluetooth and NFC | To connect to RFID and barcode readers and to read NFC / RFID tags. Bluetooth scanning is not used to determine your location. |
| Storage | To save and open files such as documents and photos used in IDsys Online. |
| Diagnostic logs | Event logs containing the app version, package name and device identifier, and error reports with technical details of failures, are sent to IDsys servers to detect and fix problems. See Retention for how long they are kept. |
The app does not collect contacts, messages, call logs, calendar data or health data, and it does not show advertising.
3. How we use information
- To provide the IDsys Online service to the Customer and its users.
- To keep the app and the service secure and working correctly.
- To diagnose errors and provide support.
Processing is based on the agreement with the Customer and on our legitimate interest in operating a secure and reliable service. We do not sell personal data and do not use it for advertising or profiling.
4. Sharing
All IDsys Online servers, including the logging and error-reporting systems, are hosted and operated in house by IDsys. The app does not use third-party analytics, advertising or crash-reporting services.
We do not share personal data with third parties, except:
- with the Customer whose IDsys Online account you use;
- when required by law.
5. Security
Data between the app and IDsys servers is transmitted over encrypted HTTPS connections. Access to data is limited to authorised personnel who need it to provide the service.
6. Retention
- Business data is kept for as long as the Customer's agreement is active or as instructed by the Customer.
- Diagnostic event logs are kept for 30 days and then deleted automatically.
- Error reports are kept for 21 days and then deleted automatically.
7. Your rights and account deletion
Under the GDPR you have the right to access, correct and delete your personal data, and to object to or restrict its processing. Because accounts are managed by the Customer, please contact your organisation's IDsys Online administrator first. You can also request deletion of your account and related data by e-mailing google-play@idsys.ee from the e-mail address linked to your account. You may also lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).
You can withdraw permissions such as location, camera or Bluetooth at any time in your Android settings. Some features may stop working without them.
8. Children
The app is intended for business use and is not directed at children under 16.
9. Changes to this policy
We may update this policy from time to time. The current version is always available at policy.online.idsys.ee and the effective date above shows when it was last changed.