##

Gainz Service App Privacy Policy

## ### Agreement ### This is a legal agreement between Customer (Business/Organization) and Gainz Software for use of the Services. By using our Service/s you agree to be bound by the terms and conditions of this agreement. If Customer does not agree to this agreement, Customer may not use our Service/s. ### Important privacy information: Notice to End Users / Gainz Service App Users ### Our Services are intended for use by Businesses, which then makes Gainz Service available to used by employees, contractors and other authorized users. The owner of the data and information collected during the use of Gainz Service App is the Business/Organization which has subscribed to the Services. The organization is the administrator of the Services and is responsible for the accounts and/or Service sites over which it has control. Please direct your data privacy questions to your administrator, as your use of the Services is subject to that organization's policies. We are not responsible for the privacy or security practices of an administrator's organization, which may be different than this policy. Administrators are able to: - require you to reset your account password - restrict, suspend or terminate your access to the Services - access information in and about your account - access or retain information stored as part of your account - change the email address associated with your account Please contact your organization or refer to your administrator’s organizational policies for more information. ### Relevant Android permissions requested by VelociTrack Android app ### - android.permission.ACCESS_NETWORK_STATE - is needed for monitoring network connections. - android.permission.ACCESS_COARSE_LOCATION - Allows an app to access precise location. Gainz Service is a field service/work and activity tracking app using phone GPS, hence access to GPS is needed. - android.permission.ACCESS_FINE_LOCATION - Allows an app to access precise location. Gainz Service is a field service/work and activity tracking app using phone GPS, hence access to GPS is needed. - android.permission.WRITE_EXTERNAL_STORAGE - save the camera picture or similar proof of action function. save a report generated from the server side of the app. - android.permission.INTERNET - to check whether the phone is able to communicate with the back-end services. - android.permission.READ_EXTERNAL_STORAGE - required to upload images, proof of completion or other documents to the back-end services. - android.permission.CAMERA - to use camera for face autentication or similar function. ### Privacy-relevant iOs permissions requested by Gainz Service iOs app ### - Privacy - Location Usage - Location is needed to create or update Clock In,Clock Out or update an activity where location is required - Privacy - Location When In Use Usage - Location is used to display in the map where are you and where you have been. - Privacy - Camera - to use camera for face autentication or similar function. ### Overview ### We are committed to ensuring that your privacy is protected. We will only use the information that we collect about you lawfully in accordance with The EU's General Data Protection Regulation (GDPR). All data that we collect is used solely for providing a service to you. In particular: - We do not sell, share or otherwise disclose your data to anyone; - We do not mine your data for patterns; - We do not use your data to target ads; - We do not access your location data without your permission. ### Information that we collect ### ##### Information for Billing and Technical Support ##### - Customer Business Name, Address and Phone No - used for billing and invoicing; - Customer Contact Name, E-mail, Phone for Accounts Payable and Technical Support ##### Information for app usage ##### - App Username and password - used to authenticate users to the Gainz Service App; - App User Phone No - used to identify device and communicate to App User if required. - App User E-mail - used for notifying App users of changes in service and for resetting forgotten passwords; ##### We collect minimum information required for GPS tracking: ##### - GPS location data - sent by your GPS device or mobile device when you run our tracking software. We transmit the following data: your GPS coordinates, speed, altitude, angle, current time and various sensor parameters. We do not transmit your phone number, contact lists or any other data stored on your mobile device; ##### Other Information ##### - HTTP requests - as most web services, we maintain logs of all incoming HTTP requests. Web logs contain IP addresses, requested URLs, referral URLs, and other similar attributes provided by your browser. - Cookies: - Cookies are small files that are temporarily stored by your web browser. They are used solely for session management (remembering who you are once you login) and for storing preferences. We use traffic log cookies to identify which pages are being used.This helps us analyze data about web page traffic and improve our website in order to tailor it to Customer needs. We only use this information for statistical analysis purposes. - Most of our cookies expire as soon as you log out or close the browser window. - We recommend that you enable cookie support in your browser as many features of our website will not work otherwise. - Security: Your data is stored on secure servers. We have taken further steps to prevent unauthorized access to your data, including running firewall software and keeping our servers up-to-date with security patches. That said, we cannot guarantee nondisclosure of personal information due to factors beyond our control. If you suspect that your account has been compromised, please contact us as soon as possible. - Connections: Connections are secured by Secure Sockets Layer (SSL). SSL is a standard security technology for establishing an encrypted link between a server and a client. - Account creation, login and recovery system was developed using latest authentication standards to prevent any hacking possibility. - During account creation, collected data is encrypted using one way encryption algorithm and being saved to database. One way encryption makes impossible to decrypt data. Data can be verified only using comparison method performed by genuine author. ##### Rights of access, correction and objection ##### You may request access to the personal data that is collected and to correct data that may be inaccurate. In some cases, on your request, account and other collected data can be completely removed. Gainz Software reserves the right to request proper identification of you prior to providing personal data or rectifying any inaccurate data. ##### Data retention ##### We will retain your information for as long as your account is active or as needed to provide you services. Once it is no longer needed it is deleted automatically. ##### Contact Information ##### You may contact us as provided below if you need: - you have questions or comments about our Privacy Policy; and/or - wish to make corrections to any personally identifiable information you have provided; - By E-mail us at privacy@gainz.com ##### Changes ##### Gainz Software may change this agreement at any time for any reason by posting the modified agreement on website. Updated/Effective date: 1 Sep, 2023 ##### Gainz Privacy Policy ##### Our additional Privacy Policy can be found at https://www.gainz.com/privacy-policy