Privacy Policy
Effective 2026-05-27 · Vintract Technologies, Bengaluru
Vintract Mobile (the "App") is a workplace inventory and production tracking tool installed by manufacturing companies and their employees ("Customers"). This policy explains what data the App handles, how it is stored, and your rights.
1. Data we collect
- Account credentials. Your work email and password are sent to your Customer's Vintract backend to issue a signed token (JWT). The password is never stored on the device.
- Session token. The JWT issued by your Customer's backend is stored locally in the device's secure storage (iOS Keychain / Android Keystore) so you don't need to log in every time. It is removed when you sign out.
- Workspace pointer. The workspace code you entered (e.g. "motley-hsr") and the resolved API base URL are stored locally so the App knows which backend to talk to.
- SKU scans. When you scan a barcode or type an SKU code, the value is sent to your Customer's backend to look up the item. We do not retain images from the camera.
- Movement records. Receive-inward, move-to-floor, waste-log and production updates you submit are sent to your Customer's backend, attributed to your user account.
2. Data we do not collect
- We do not collect location data.
- We do not collect contacts, photos (other than the live camera viewfinder used briefly during a scan), or other phone-stored personal data.
- We do not show advertising and do not use third-party analytics SDKs that profile you.
3. Camera access
The App requests camera permission so it can scan SKU barcodes printed on items in the factory. Frames from the camera are processed on-device only and are never saved or transmitted. The decoded barcode text is sent to your Customer's backend to resolve the item.
4. Where your data lives
The App is "universal" — it does not have a Vintract-central data store. All business data (items, movements, orders, waste records) lives in your Customer's own Vintract backend, hosted on AWS infrastructure in a region chosen by your Customer (typically ap-south-1 / Mumbai for Indian Customers). Vintract Technologies processes data only as instructed by your Customer.
5. Retention and deletion
Business data retention follows your Customer's policy. To request that your account be deactivated or your records removed, contact your administrator. They can also reach Vintract support directly at admin@vintract.com on your behalf.
You can sign out of the App at any time from Profile → Sign out, which immediately removes your session token and cached account details from the device.
6. Children
The App is designed for use by employees of manufacturing Customers and is not intended for or marketed to anyone under 16 years of age.
7. Changes
We may update this policy. Material changes will be communicated through the App or by email to your Customer. The "Effective" date at the top reflects the current version.
8. Contact
Questions? Write to admin@vintract.com.