Privacy Policy
Last updated: October 9, 2026
Barang Gudang ("the Application") is used to manage inventory records. This policy explains what data the Application processes, why, where it is stored, who can see it, and the choices you have. It is written with reference to Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
1. Data we process
Account data: the email address and name of the Google account or email address used to sign in.
Access request data: full name, employee number (NRK, optional), sector, requested role and notes, plus the approval decision (approver name, time and, if rejected, the reason).
Inventory data: item code, name, location, sector, unit, brand, unit price, acquisition year, description and barcode or QR label.
Transaction data: incoming, outgoing and adjustment records with quantities, notes and timestamps. Outgoing records may include the requester's name, NRK or PJLP ID, post, team and the name of the approving head. Loss reports may include the reporting officer's details.
Item photos taken or selected by the user.
Letterhead and signatory details for official documents (office name, address, signatory names, employee IDs, titles and logo). These are stored only on the device and are never uploaded.
Technical data: crash reports and usage statistics through Firebase Crashlytics and Google Analytics for Firebase. You can turn this off in the Application: menu ☰ › Data diagnostik.
Barcode and QR scanning happens on the device. Camera frames are not stored or uploaded; the scanned code is only used to look up items. The Application does not collect location data, contacts or advertising identifiers.
2. How we use data
Data is used only to record inventory and its movements, keep staff accountable for those movements, control who can access the data, produce official documents (handover reports, stock cards and mutation reports), and keep the Application stable. Data is not used for advertising and is never sold.
3. Device permissions
Camera: to scan barcodes and QR codes and to take item photos, only when you open those features.
Notifications: to show export progress and access request decisions. On Android 13 and later you are asked first, and you can refuse.
Internet and network status: to synchronize data and detect offline mode.
Background data sync: so long synchronization and export jobs can finish when you leave the screen.
The Application does not request storage permission. Files are chosen through Android's own file picker, and only the file you pick is accessed.
4. Item photos
Photos are stored in the Google Drive of the staff member who uploads them and shared as "anyone with the link can view", so other staff devices can display them. Anyone holding a photo's link can open it. For this reason, photos must show items only, never documents, faces or personal data. Location (GPS) data is removed from every photo before upload.
5. Where data is stored
On your device, so the Application works offline.
Google Firebase (Authentication and Cloud Firestore): accounts, access requests, inventory and transaction data.
Google Drive: item photos.
Firebase Crashlytics and Google Analytics for Firebase: technical data.
Google processes this data as a service provider for the Application. Its servers may be located outside Indonesia.
6. Who can see data
Only approved accounts, according to their role and sector, enforced by security rules on the server. The only exception is item photo links, described in section 4.
7. Retention
Inventory and transaction data is kept as long as it is needed for inventory administration and applicable record-keeping rules. Transaction history is never deleted, to preserve the audit trail. Account data is deleted on request (see the Delete Account page). Data stored on a device is removed by uninstalling the Application or clearing its storage in Android settings; changes not yet synchronized are then lost.
8. Security
Data is transmitted over encrypted connections (HTTPS). Server-side rules restrict access by role. Passwords are handled by Firebase Authentication and are never stored on the device.
9. Your rights and choices
You may request access to, correction of, or deletion of your personal data through your administrator or by email, except data that must be kept for accountability. You can turn off technical data collection in the Application, revoke camera or notification permissions in Android settings, and request deletion of your account at any time.
10. Children
The Application is not directed to children. It is intended for authorized staff who manage inventory.
11. Changes to this policy
Updates are published on this page with a new "Last updated" date.
12. Contact
Developer: Eon Dubz
Email: eondubz@gmail.com