Bakattuwa Shelf Out of Stock Detection System Privacy Policy

1. Introduction

At Bakattuwa, we prioritize your privacy and data security. This Privacy Policy outlines how Bakattuwa (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you use our Shelf Out of Stock Detection System (the “System”) through our two mobile applications: Bakattuwa Customer and Bakattuwa Worker (collectively, the “Apps”). The System enables offline retail stores to detect shelf out-of-stock incidents in real-time. By using the Apps or System, you consent to the practices described in this policy. We are committed to safeguarding your data using secure AWS services and ensuring no third-party data selling.

2. Information We Collect

We collect the following information to operate the System and provide its core functionality:

• Account Information: Your name, email address, and profile details collected via Google Single Sign-On (SSO) for account authentication and communication.
• Image and Location Data: The Bakattuwa Customer and Worker Apps capture up to two images per minute in the background when connected to a retail store via QR code scan. These images are sent to our AWS cloud for processing to detect out-of-stock incidents. GPS location data is collected with the images to associate them with the specific store location.
• Store Connection Data: When you scan a QR code upon entering a retail store, we collect data to connect your device to the store’s WiFi network and associate your session with that store for real-time processing and notifications.
• Device and Usage Information: Device model, operating system version, unique device identifiers, IP address, app interactions, crash reports, and anonymized analytics to optimize performance and improve the System.
• Notification Preferences (Worker App Only): Preferences for receiving notifications in the Bakattuwa Worker App when empty stock spots are detected in the store where you work.

3. How We Use Your Information

We use your information solely to operate and enhance the System and Apps, including:

• Authenticating users via Google SSO and managing accounts.
• Processing images and GPS data to detect shelf out-of-stock incidents in real-time.
• Sending notifications to workers via the Bakattuwa Worker App when empty stock spots are detected in their assigned store.
• Facilitating store connections via QR code scans and store WiFi for seamless data transmission.
• Analyzing anonymized usage and device data to improve App performance, troubleshoot issues, and enhance the System.
• Ensuring security and preventing misuse of the System.
• Complying with legal and regulatory obligations.

Your data is used exclusively for the System’s functionality and is not used for marketing or other unrelated purposes.

4. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for their marketing purposes. Data sharing is limited to:

• Service Providers: Trusted providers, such as AWS for secure data storage and processing, access data only to support the System’s operations under strict confidentiality agreements.
• Legal Compliance: We may disclose data if required by law, court order, or to protect our rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with equivalent privacy protections.

5. Data Security

Your privacy and security are our top priorities. All data, including images, is stored securely in AWS with encryption in transit (TLS) and at rest. Images are processed in real-time and deleted immediately after processing to detect out-of-stock incidents. We implement industry-standard security measures, including access controls, regular security audits, and monitoring, to protect against unauthorized access or data breaches. However, no system is entirely secure, and we cannot guarantee absolute security.

6. Data Retention

Images are deleted immediately after processing. Account information, store connection data, and notification preferences are retained until you delete your account or request data deletion. Anonymized usage data may be retained for analytical purposes. Upon account deletion, all personal data is permanently removed from our systems.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access, review, or correct your account data within the Apps.
• Delete your account and associated data via App settings.
• Manage notification preferences or revoke camera and location permissions through your device settings.
• Control Google SSO permissions via your Google account settings.
• Contact us to request data access, correction, or deletion.

8. Children’s Privacy

The System is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we discover such data has been collected, we will delete it promptly.

9. International Data Transfers

Your data may be processed and stored in jurisdictions outside your country through AWS services. We ensure appropriate safeguards, such as standard contractual clauses, to comply with data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last updated” date. Significant changes may be communicated via email or in-app notifications.

11. Contact Us

For questions, concerns, or data requests, please contact us at sanugakuruppu.info@gmail.com.