Privacy Policy – APAN

Last updated: September 2025

This Privacy Policy explains how APAN (“APAN”, “we”, “us” or “our”) collects, uses, discloses, and protects information when you use our mobile applications and web services (collectively, the “Services”). It is intended to meet the disclosure expectations of Google Play’s Data safety section and common privacy laws (e.g., GDPR, PDPA Malaysia, CCPA/CPRA).

Summary: We collect only what we need to deliver as part of assignment management, proof-of-visit, and operations workflows; we do not sell your data; we secure it; and you can request access or deletion anytime.

1) Scope & Data Controller

APAN provides mobile and web apps for assignment, proof-of-delivery/visit, and field-operations management. The data controller for personal data processed through the Services is:

Agile Advance Sdn. Bhd.
Email: [email protected]

If you access the Services under a company account (e.g., client or contractor of APAN), that company may also act as an independent data controller for the data it enters and manages within APAN.

2) Information We Collect

Account & Contact Data: Name, email, phone, company, role, login identifiers, authentication logs.
Assignment & Operational Data: Job/assignment IDs, visit outcomes, notes, timestamps, routing/order info.
Location Data: Precise and/or approximate location when enabled, including foreground and (if explicitly allowed) background location for route tracking and proof-of-visit.
Media & Files: Photos, videos, audio clips, and documents captured or uploaded as proof-of-visit or for reporting; file metadata.
Device & Technical Data: Device model, OS/version, app version, language, time zone, crash logs, performance data, and device identifiers.
Usage Data: Feature usage, button taps, session duration, referrers, and in-app events.
Communications: Support requests, emails, in-app chat/messages, and related metadata.

3) Android & iOS App Permissions

Permission	Purpose	Required?
Location	Proof-of-visit, route tracking, geo-watermarking photos.	Core feature; background only if enabled.
Camera	Capture visit photos/videos as evidence.	Required for capture features.
Photos/Media/Files	Attach and upload files; cache media offline.	Required when uploading or caching media.
Microphone	Optional voice notes tied to assignments.	Optional.
Notifications	Job/assignment alerts and reminders.	Optional but recommended.

4) How We Use Information

Provide, operate, and secure the Services.
Manage assignments, plan routes, capture proof-of-visit, and generate reports.
Send communications (alerts, reminders, status changes).
Improve performance, reliability, and user experience.
Comply with legal obligations and enforce terms.

6) Google Play “Data safety” Summary

We collect location, personal info, media, app activity, and device IDs.
We do not sell or share outside your organization.
Data is encrypted in transit and at rest.
You may request data deletion.

7) Data Retention

We keep data only as long as necessary for operations, compliance, and contracts. All personal and operational data is retained for up to 45 days. After this period, the data is automatically deleted from our systems, including backups, unless a longer retention period is required by law.

8) Security

We use TLS encryption, access controls, audit logs, hardened servers, and backups. No method is 100% secure, but we continuously improve safeguards.

9) Your Privacy Rights

Access and request a copy of your data.
Request correction or deletion.
Withdraw consent by disabling permissions.
Submit requests: [email protected]

10) Children’s Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect or solicit personal information from anyone under 18. If you are under 18, please do not use our Services or provide any information. If we learn that we have collected data from a child under 18, we will delete it promptly. Parents or guardians may contact us at [email protected] if they believe a child has provided data.

11) International Transfers

We may process data on servers outside your country. Safeguards such as contractual clauses are used for cross-border transfers.

12) Automated Decision-Making

APAN does not make legally significant automated decisions. Automated scoring or flags (e.g., route efficiency) are only tools for human review.

13) Cookies & Web Tracking

Our websites may use cookies for session management, security, and analytics. Mobile apps do not use third-party ad trackers.

14) Changes to This Policy

We may revise this Policy. Updates will be posted here and in-app, with the "Last updated" date adjusted.

15) Contact Us

Questions or requests? Contact: [email protected].