Privacy Policy -iNTrack

Privacy Policy

iNTrack

Last updated: June 20, 2026

Welcome to iNTrack, an inventory and warehouse management application developed by AP&T Business Solutions. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

1. Information We Collect

To provide a secure and efficient inventory/warehouse management workflow, iNTrack collects and processes certain information from your device.

A. Device and Session Identifiers

• Device ID / MAC Address: We retrieve your device's unique identifier (MAC address / Device ID) to register and authorize your physical terminal/PDA with your company's server.

• Device Information: We collect hardware specifications such as device manufacturer, model, operating system version, device name, and app version. This information is used for session tracking, troubleshooting, licensing verification, and device registration.

• FCM Token: We retrieve a Firebase Cloud Messaging (FCM) token to establish active login sessions and deliver push notifications.

• Device Storage Metrics: We read device storage capacity and available memory for display in the App Data & Storage admin screen. This data is not transmitted to any external server.

B. Personal and Account Data

• User Credentials: When you log in, we process your username and password. Passwords are hashed locally using SHA-256 before verification. This information is used strictly to authenticate you against your organization's database.

• Microsoft Sign-In (Optional): If your organization uses Microsoft Single Sign-On (SSO), your authentication is handled by Microsoft's identity platform. We receive only a login confirmation; your Microsoft password is never processed or stored by iNTrack.

C. Login Session Data

When you successfully log in, a session record is transmitted to your organization's server containing:

• Company code and user code

• Terminal/device ID

• FCM session token

• Login date and time

• App version, device type, and OS version

• Session status (active/inactive)

This data is used to manage active sessions, enforce single-device login policies, and support IT administration.

D. Operational Data

• Inventory and Transaction Records: The App processes inventory items, stock counts, warehouse movements, purchase orders, pick lists, sales documents, and related business records. This data is stored locally in a secure database and synced with your organization's server.

2. Device Permissions We Request

To perform its core functions (barcode scanning, printing, RFID reading, and photo capture), the App requests the following permissions:

Camera

• Android: android.permission.CAMERA

• iOS: NSCameraUsageDescription

• Purpose: Used to scan barcodes, QR codes, and take photos of items or documents.

Photo Library (iOS Only)

• iOS: NSPhotoLibraryUsageDescription

• Purpose: Used to select images from your device's photo library for QR code scanning or attaching photos to inventory records. Photos are only uploaded to your organization's backend when explicitly required.

Bluetooth

• Android: BLUETOOTH, BLUETOOTH_ADMIN, BLUETOOTH_SCAN, BLUETOOTH_CONNECT

• iOS: NSBluetoothAlwaysUsageDescription, NSBluetoothPeripheralUsageDescription

• Purpose: Used to detect, connect, and print labels to thermal Bluetooth printers, and to pair with external UHF RFID scanners (e.g., NewLand MT93, Urovo DT610).

Location

• Android: ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION

• iOS: NSLocationWhenInUseUsageDescription

• Purpose: Required by the operating system to perform Bluetooth scanning for nearby printers and RFID readers. We do not track, store, or share your physical location.

Network State

• Android: ACCESS_WIFI_STATE, ACCESS_NETWORK_STATE

• Purpose: Used to detect internet connectivity and determine whether data synchronization with your organization's server is possible.

Local Storage / Files

• Purpose: Used to write local SQLite database records, store app configuration, and cache images for offline use.

Internet

• Android: android.permission.INTERNET

• Purpose: Used to synchronize inventory records and session tokens with your organization's backend APIs, validate software licenses, and receive push notifications.

Sound and Vibration

• Purpose: The App uses device vibration and audio feedback to alert users during barcode and RFID scanning operations. No data is collected through these features.

3. How We Use Your Information

We use the collected information for the following purposes:

• To authenticate users and verify active login sessions.

• To sync inventory, warehouse movements, and stock count data with your organization's servers.

• To print labels and scan barcodes/RFID tags using external hardware.

• To validate and manage your software license.

• To register and authorize your device with your organization's system.

• To deliver push notifications related to document status and operational alerts.

• To troubleshoot technical issues and monitor app stability.

4. Data Sharing and Third Parties

iNTrack is an enterprise-oriented application.

• Your Organization: All operational data, usernames, session records, and device identifiers are transmitted directly to your employer's or organization's private backend server (via the URL configured during terminal setup).

• AP&T Licensing Server: We send your device serial number, license key, app bundle identifier, and basic device information to our licensing validation server (validatelicense.apntbs.com) to verify your software license, register devices, check license validity, and manage license migrations. No personal user data (such as names, passwords, or inventory records) is sent to this server.

• Firebase Cloud Messaging (Google): We use Firebase Cloud Messaging to manage push notification sessions. Firebase may collect certain device identifiers in accordance with Google's Privacy Policy (https://policies.google.com/privacy).

• Microsoft Identity Platform (Optional): If your organization enables Microsoft SSO, authentication data is processed by Microsoft in accordance with Microsoft's Privacy Statement (https://privacy.microsoft.com). iNTrack does not receive or store your Microsoft password.

• No Third-Party Advertising: We do not sell, rent, or trade your data. We do not use third-party advertising trackers or monetization SDKs.

5. Data Retention and Deletion

• Local Data: You can clear all cached files, local SQLite databases, and saved configurations by using the "Clear Storage & Restart App" button located in the App Data & Storage admin screen.

• Server Data: Since user accounts and transactions are managed by your employer/organization, data retention and deletion policies on the server side are governed by your organization.

• Licensing Data: Device registration records on the AP&T licensing server are retained for the duration of your active license. Upon license expiration or revocation, device records may be removed.

• Deletion Requests: To request the deletion of your account or associated data, please contact your organization's IT administrator or send an email to support@apntbs.com.

6. Security of Your Data

We implement appropriate technical and organizational security measures to protect your data, including:

• Secure communication channels (HTTPS) for all primary network requests to your organization's servers and Firebase services.

• SHA-256 hashing of passwords on the device before any transmission or verification.

• Local SQLite databases confined to the App's protected sandbox, inaccessible to other applications.

• Authentication tokens for licensed API communication.

Note: Certain licensing validation requests may be transmitted over standard HTTP. We are actively working to migrate all endpoints to HTTPS.

7. Children's Privacy

iNTrack is an enterprise business application designed for use by authorized employees of organizations. It is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at support@apntbs.com, and we will promptly delete such information.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this document. We encourage you to review this Privacy Policy periodically.

9. Governing Law

This Privacy Policy shall be governed by and construed in accordance with applicable laws. Any disputes arising from or related to this Privacy Policy will be subject to the jurisdiction of competent courts in the location of AP&T Business Solutions' registered office.

10. Contact Us

If you have any questions or suggestions about this Privacy Policy, do not hesitate to contact us at:

Developer / Organization Name: AP&T Business Solutions 

Support Email: support@apntbs.com 

Website: https://apntbs.com