PRIVACY POLICY

This Privacy Policy describes how GMS Jain Jewellers Private Limited ("we", "us", "the Company") collects, uses, stores, and protects information through the Nirman mobile application (the "App").

This App is a proprietary internal business tool used exclusively by authorised employees and field sales representatives of GMS Jain Jewellers Private Limited. It is not intended for public or consumer use.

By installing and using this App, you consent to the data practices described in this policy. If you do not agree, please uninstall the App and contact your manager.

This App is not available to the general public. Access is restricted to:

• Employees of GMS Jain Jewellers Private Limited
• Authorised field sales representatives
• Company administrators

User accounts are created and managed exclusively by company administrators. Users cannot self-register.

1. Precise Location Data

The App collects your device's precise GPS location (latitude, longitude, accuracy in metres) approximately every 5 minutes. This includes collection while the App is in the background (i.e., when the App is not actively on screen).

A persistent notification labelled "Nirman — Location Active" is displayed on your device at all times when location sharing is active.

2. Attendance Data

When using the attendance feature, the App records:

• Check-in and check-out time
• Location at the time of attendance
• Photographs taken via front or rear camera (only when you initiate the capture)
• Reverse-geocoded address of your check-in/check-out location

3. Account Credentials

Your username, assigned role, and permission level. This information is set by your employer — no personal details are entered during registration.

4. Sales & Inventory Activity

Transactions you process (inventory scans, sales entries, returns, product requirement requests, draft sales) are stored and linked to your user account for business record-keeping.

5. Camera & Barcode Data

The App uses your camera to scan QR codes and barcodes on jewellery items. Scanned data is processed locally on your device using Google ML Kit. No images or barcode data are sent to Google.

6. Technical Data

Device operating system version and App version number — used solely for compatibility checks and troubleshooting.

Data	Purpose
GPS Location	Monitor field sales visits, route coverage, and verify customer visits
Attendance Records	Record employee working hours and verify visit locations
Sales/Inventory	Process jewellery transactions, generate invoices and reports
Camera/Barcode	Scan and identify jewellery items by QR code for inventory and sales
Technical Data	Ensure App compatibility and deliver updates

We do not sell, rent, trade, or share your data with any third party for advertising, marketing, analytics, or any purpose unrelated to business operations.

This App collects location data even when the App is closed or not in use. This is necessary because:

• Field sales staff visit multiple customers throughout the day across different locations
• The company needs to verify visit coverage and travel routes for operational planning
• Accurate attendance records require location data at check-in/check-out times regardless of whether the App is actively open

You are always informed of active location sharing through a visible, persistent notification on your device. You can stop background location at any time by:

• Revoking location permission in your device's Settings → Apps → Nirman → Permissions
• Force-stopping the App from device Settings

Camera access is used for two purposes only:

• Barcode/QR scanning: To identify jewellery items during inventory and sales workflows
• Attendance photos: To capture optional photographs at check-in time

The camera is only activated when you explicitly open the scanner or attendance screen. No images are captured or transmitted without your direct action.

• All data is transmitted via HTTPS (TLS-encrypted connections).
• Data is stored in a secured MySQL database on servers managed by GMS Jain Jewellers Private Limited.
• Access to stored data is restricted to authorised administrators only.
• Passwords are encrypted using bcrypt hashing — we never store plain-text passwords.
• Login is protected by reCAPTCHA verification and rate limiting to prevent brute-force attacks.
• Sessions enforce single-device login — logging in on a new device automatically terminates the previous session.
• Location logs are retained for up to 12 months for operational records, after which they are deleted.

You have the right to:

• Access: Request a summary of all data collected about you
• Correction: Request correction of inaccurate records
• Deletion: Request permanent deletion of your account and all associated data
• Portability: Request your data in a portable format

To exercise any of these rights, email admin@themayajewels.com or visit our Data Deletion Request page.

Deletion requests are processed within 30 days of identity verification.

Service	Usage	Data Shared
Google Play Services	GPS location via FusedLocationProviderClient	None — location is processed locally
Google ML Kit	On-device barcode/QR scanning	None — fully on-device
Google reCAPTCHA	Bot protection on web login	IP address, browser metadata

No other third-party analytics, advertising, or tracking services are used.

This App is strictly for use by employed adults (18 years and above). We do not knowingly collect personal information from anyone under 18. If we learn that data has been collected from a minor, it will be deleted immediately.

We may update this Privacy Policy from time to time. Significant changes will be communicated through the App or by your employer. Continued use of the App constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page indicates the most recent revision.

GMS Jain Jewellers Private Limited

127, Rani Jhansi Road, Fountain Chowk,
Ludhiana — 141001, Punjab, India

Email: admin@themayajewels.com

Phone: +91 98143 00654, +91 98559 13999

Web Portal: app.themayajewels.com