Trading Staff — Privacy Policy

Trading Staff is published by One Click Applications (OCA), a software house based in Maadi, Cairo, Egypt. You can reach us at sameh.samy@oneclickapps.org or +20 110 120 1356.

Trading Staff is a workplace app for staff of businesses that use our trading and inventory system. Accounts are created and managed by your employer, not by you — there is no public sign-up. The business you work for decides what data is entered into the system and how it is used, and is the data controller for that information. OCA operates the app and the servers behind it on that business's behalf, as a data processor.

If you want your information corrected or deleted, the fastest route is your employer's system administrator. You can also write to us at the address above and we will act on the request or pass it on.

• Account and sign-in information. When you sign in, the app sends the user name or email your employer issued you, together with your password, to our servers to verify you. Passwords are transmitted over an encrypted connection and are never stored on your device. If you change your password in the app, your current and new passwords are sent for that single purpose.
• Your profile. Once you are signed in, the app receives and stores your account identifier, user name, full name, email address, phone number, job role, and the permissions assigned to you.
• Your work activity. The app shows and records the work you do in the system on your employer's behalf: cash box assignment and balance, warehouse or branch location, product and stock records, and invoices and transactions you create or view. This is your employer's business data.
• App settings stored on your device. Your chosen theme (light, dark, or system) and language preference are stored only on your device and are never sent to us.
• Technical data. Our servers keep standard logs (IP address, request time, and which part of the service was called) to keep the service secure and available, and to diagnose faults. The app also checks its own version number against our servers so we can tell you when an update is required.

To function, the app needs internet access. It does not request access to your location, camera, microphone, contacts, files, photos, or SMS.

We want to be explicit about this:

• We do not collect your location.
• We do not access your contacts, photos, files, camera, or microphone.
• We do not use advertising identifiers, and we do not show ads.
• We do not include third-party analytics, tracking, or advertising software in the app.
• We do not sell or rent your personal information to anyone, and we never will.
• We do not use your information to build advertising profiles.

• To sign you in and keep your session active.
• To show you the correct data and features for your role and permissions.
• To carry out the work you perform in the app on your employer's behalf.
• To keep the service secure, prevent unauthorised access, and diagnose faults.
• To tell you when a required app update is available.
• To meet legal, tax, or accounting obligations that apply to us or to your employer.

• Your employer. The business that issued your account can see the work you do in the system. That is the purpose of the app.
• Our hosting and infrastructure provider, which stores and runs the service on our instructions and may not use the data for its own purposes.
• Authorities or advisers, only where the law requires it or to establish or defend a legal claim.

That is the complete list. We do not share your information with advertisers, data brokers, or analytics companies.

Separately, Google Play collects its own data about app installs, updates, and crashes under Google's privacy policy. We do not control that collection.

The app keeps a small amount of data on your phone so it works quickly and does not ask you to sign in repeatedly:

• Your sign-in tokens, held in the app's private storage.
• A cached copy of your profile.
• Your theme and language settings.

Signing out clears your tokens and your cached profile. Uninstalling the app removes all of it. Other apps on your phone cannot read this data.

We keep your account and profile information for as long as your employer keeps your account active, and afterwards only for as long as our agreement with that business or the law requires. Server logs are kept for a short period and then deleted.

To delete your data:

• On your device — sign out, or uninstall the app. Both remove the app's local copy of your data immediately.
• On our servers — ask your employer's system administrator to delete or deactivate your account, or email sameh.samy@oneclickapps.org with the subject "Trading Staff — data deletion". Tell us the user name you sign in with and the business you work for. We will confirm your identity, act on the request, and reply within 30 days.

One limit worth stating plainly: invoices, cash box movements, and similar transaction records belong to your employer's accounting records. Your employer may be legally required to keep them for a set period, so those records are not always deleted along with your account. Your personal profile details are.

Depending on where you live, you may have the right to ask for a copy of your personal information, to have it corrected, to have it deleted, to restrict or object to how it is used, and to complain to your national data protection authority.

Because your employer controls your account, please raise these requests with them first. If you contact us directly, we will respond, and where we act only as a processor we will forward the request to your employer and support them in answering it.

Traffic between the app and our servers is encrypted in transit using HTTPS. Sign-in tokens are stored in the app's private, sandboxed storage. Access to your data inside the app is limited by the role and permissions your employer assigns to you, and access to our systems is limited to staff who need it to run the service.

No system is perfectly secure, but if a breach affects your personal information we will notify your employer and, where the law requires it, you and the relevant authority.

Trading Staff is a business tool intended for people employed by our customers. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has used the app, contact us and we will delete the information.

OCA is based in Egypt and serves customers in Egypt, Saudi Arabia, and elsewhere. Your information may be stored or processed in a country other than your own. Where that happens, we take steps to ensure it stays protected to the standard described in this policy and use appropriate safeguards where the law requires them.

If we change how the app handles your information, we will update this page and change the date at the top. For significant changes, we will give notice through the app or through your employer.

Questions, requests, or complaints about this policy or your data go to One Click Applications (OCA), Maadi, Cairo, Egypt — sameh.samy@oneclickapps.org, +20 110 120 1356.