Privacy Policy

Information we collect

• Account details: your first and last name, email address, mobile number and company name. Your password is stored only as a secure hash.
• Verification: one-time codes sent to your email and mobile number to confirm they are yours and to reset your password.
• Devices you work with: serial numbers, device names and types, the configuration values you read or write (passwords such as Wi-Fi, APN and server keys are encrypted and never shown), who owns or shares each device, and when the app last connected to it over Bluetooth.
• Location: when you record a device update, the app attaches your phone's GPS position and the matching address. Location is only used while the app is open, never in the background.
• Notifications: a push notification token for your phone, together with its model, operating system version and app version, and whether you have read each notification.
• Support messages you send us in the app.
• App usage statistics (Android): Google Firebase Analytics collects anonymous information such as app opens, screens viewed, app version and phone model, so we can see how the app is used and fix problems.

The camera is used only to scan QR codes for serial numbers; images are not stored or sent. Bluetooth is used only to talk to your devices.

How we use it

We use this information to run the service: to sign you in, verify your contact details, control who may view, configure or share each device, keep device records and history, send you notifications, and answer support requests. We do not sell your information, show advertising, or track you across other apps or websites.

Who we share it with

Only with the service providers needed to run the service, under their own privacy terms:

• Google Firebase Cloud Messaging, to deliver push notifications.
• Google Firebase Analytics, for the Android app usage statistics described above.
• Resend, to send email verification codes.
• SMSPortal, to send SMS verification codes.

The service itself, including its database, runs on GSM Systems' own server. A device owner and the people they share a device with can see that device's records. We disclose information to authorities only when the law requires it.

How long we keep it

We keep your account information while your account exists. Notifications are deleted automatically after the period set by the manufacturer. When you delete your account, your name, email, mobile number, company and password are erased; device history is kept without being linked to you.

Your choices and rights

• Delete your account at any time in the app: More, then Account & Security, then Delete account.
• No access to the app? Email jp@gsmsystems.co.za from the email address of your account with the subject "Delete my account". We confirm the request and delete the account within 30 days, as described under How long we keep it.
• Turn off push notifications or location access in your phone's settings.
• Ask us for a copy of your information, or to correct it, by emailing jp@gsmsystems.co.za. You may also complain to the Information Regulator of South Africa.

Security

All traffic between the app, the panel and our server is encrypted (HTTPS). Passwords are hashed, sensitive device settings are encrypted, and access to each device is checked on the server for every request.

Children

The service is meant for professional use and is not directed at children under 16.

Changes and contact

We will update this page if the way we handle information changes, and show the new effective date above. Questions: jp@gsmsystems.co.za.