PRIVACY POLICY - EZTRAK
Last updated: 8/28/2026
Applies to: the EZTRAK mobile application for Android (package com.eztrak.app)
1. WHO WE ARE
The EZTRAK app is a business tool. It is not available to the general public.
You can only use it if your employer is an EZTRAK customer and has issued you
an account. There is no public sign-up.
Roles. For the material, purchase order, and turnaround records you create in
the app, your employer is the data controller and we act as a data processor
on their behalf, under our agreement with them. Your employer decides what is
recorded, who can see it, and how long it is kept. Where we determine the
purposes of processing ourselves - for example, keeping the service secure and
operational - we act as a controller.
If you want to know how your employer uses your data, contact them directly.
Their own privacy notice applies alongside this one.
2. WHAT THE APP COLLECTS
2.1 Account and identity information
When you sign in, the app redirects you to your organisation's identity
provider. We do not see or handle your password - it is entered on your
identity provider's own sign-in page.
After a successful sign-in, the app receives and stores:
- your organisation identifier (tenant), which you type in before signing in;
- your user profile as your identity provider returns it. This typically
includes a unique user ID, your name, and your work email address or
username. The exact fields are configured by your organisation, not by us;
- your permission set within EZTRAK, which controls what you are allowed to
do;
- access and refresh tokens that keep you signed in.
The app requests only the "openid" and "offline_access" scopes.
2.2 Work records you create
As you use the app, the following is recorded against your user account and
sent to your organisation's EZTRAK system:
- purchase order numbers, item descriptions, item numbers, units of measure,
and the quantities you stage, restage, or issue;
- yard locations you move material to;
- the end user or recipient you issue material to;
- turnaround record (TWR) numbers, package identifiers, equipment and line
numbers;
- field status and QA status changes, including timestamps;
- the material manager PIN entered to authorise a movement, which is checked
to confirm who authorised the work.
Each of these actions is attributable to you. That is the purpose of the app:
your employer needs an auditable record of who moved which material and when.
2.3 Photos and documents
When you attach evidence to an item, the app accesses:
- the camera, to photograph material and scan barcodes;
- your photo library, only for images you explicitly select;
- files you explicitly select, for mill test reports and similar documents.
We only receive images and files you actively choose or capture. The app does
not scan, index, or upload your photo library in the background.
2.4 Network status
The app checks whether the device currently has a connection, so it knows
whether to send work immediately or hold it on the device. This check tells us
only whether a connection exists.
3. WHAT THE APP DOES NOT COLLECT
The app does NOT collect, access, or transmit:
- precise or approximate device location, or GPS data;
- your contacts, calendar, call logs, SMS, or microphone;
- an advertising identifier;
- health, financial, or biometric data;
- browsing history outside the app.
The app contains no advertising, no analytics SDK, no crash-reporting SDK, and
no third-party tracking of any kind. We do not sell or rent personal data, and
we do not share it with data brokers or advertisers.
4. WHERE DATA IS STORED
4.1 On your device
- Credentials. Access tokens, refresh tokens, your profile, your permission
set, and your tenant identifier are stored in the operating system's
encrypted keystore (Android Keystore), not in ordinary app storage.
- Cached purchase orders. Purchase order results are saved to a local
database so the same PO stays usable without a connection.
- Queued work. Photos, documents, and status updates captured offline are
held in a local database and in the app's private storage until they are
uploaded.
App-private storage is not readable by other apps on a non-rooted device.
4.2 On our servers
Data you submit is transmitted over HTTPS (TLS) to your organisation's EZTRAK
environment, reached through gateway.eztrak.net and your organisation's
identity host. It is stored in the EZTRAK platform under your employer's
tenant and is governed by our agreement with them.
Hosting region: US.
5. RETENTION AND DELETION
- Signing out deletes your tokens, profile, permissions, and tenant
identifier from the device.
- Signing out does not clear queued uploads or cached purchase order data.
Work captured offline stays on the device so it is not lost - that is
deliberate. It is removed when it uploads successfully, when you delete it
from the offline queue screen, or when the app is uninstalled.
- Uninstalling the app removes all EZTRAK data from the device.
- Records already submitted to your organisation's EZTRAK system are
retained according to your employer's retention policy and our contract
with them. Uninstalling the app does not delete them.
6. YOUR RIGHTS
Depending on where you live, you may have the right to access, correct,
export, restrict, or delete your personal data, and to object to certain
processing.
Because your employer controls the records you create in EZTRAK, please direct
these requests to your employer first - typically your material management
team, IT department, or data protection officer. We will assist them in
responding, as required by our agreement with them.
If you believe we hold data about you as a controller, or your employer has
not responded, contact us at jason@precisionmaterial.net. We aim to respond within
[30] days.
You may also lodge a complaint with your local data protection authority.
7. LEGAL BASES FOR PROCESSING (UK/EU USERS)
Where the UK GDPR or EU GDPR applies, we rely on:
- Contract - to provide the app to you under our agreement with your
employer;
- Legitimate interests - to keep the service secure, prevent misuse, and
maintain an auditable record of material movements;
- Legal obligation - where record-keeping is required by law or by industry
safety and quality standards.
International transfers, where they occur, are made under [TRANSFER MECHANISM,
e.g. UK IDTA / EU Standard Contractual Clauses].
8. SECURITY
We protect data in transit with TLS, store credentials in the operating
system's encrypted keystore, and enforce per-user permissions on every action.
Access to the EZTRAK platform is restricted to authorised personnel.
No system is completely secure. If a breach affects your personal data, we
will notify your employer and, where required, the relevant supervisory
authority, within the timescales the law requires.
9. CHILDREN
EZTRAK is a workplace application intended for adults in professional roles.
It is not directed at children, and we do not knowingly collect data from
anyone under 16.
10. CHANGES TO THIS POLICY
We may update this policy. When we do, we will change the "Last updated" date
above. If a change materially affects how we handle your personal data, we
will notify your employer, who will inform affected users. Continuing to use
the app after a change means you accept the updated policy.
11. CONTACT
Email: jason@precisionmaterial.net