Privacy Policy

1. About this policy

The BECO Staff App (“the App”) is an internal business tool provided by BECO (“BECO”, “we”, “us”) for use by its authorized employees and contractors (“staff”, “you”). It is published on Google Play and the Apple App Store so that BECO staff can install it, but it is not a consumer product — you can only use it with a staff account issued by a BECO administrator.

This policy explains what personal and device data the App accesses, why, where it goes, and how it is protected. It applies to the Android and iOS versions. Because the App is a work tool, BECO is the controller of the data processed through it, and your use is also governed by BECO’s internal HR, IT, and data-protection policies.

2. Summary

• The App sends the data you enter, and the account data it needs, only to BECO’s own servers (https://appservice.beco.so) over an encrypted HTTPS/TLS connection.
• No advertising. No third-party analytics, attribution, or tracking SDKs. No data brokers. Your data is never sold.
• The App does not request or collect your location, contacts, calendar, microphone, call logs, or SMS.
• Face ID / fingerprint unlock is handled entirely by your device’s operating system. The App never receives or stores your biometric data.
• When you photograph a meter, the digits are read on your device; the photo is uploaded to BECO only when you save the reading.

3. Data the App collects and uses

a. Account and identity

Username and password (entered at sign-in), one-time passcode (OTP / TOTP), and, from your BECO staff record: employee ID, full name, work phone number, work email, job title / role, assigned branch and zones, permission set, and a profile photo if you set one.
Why: to authenticate you, maintain your signed-in session, show your profile, and limit the records and actions available to you to your role, branch, and assigned zones.

b. Session and security data

An authentication token / session cookie, and a local on/off setting for biometric app-unlock.
Why: to keep you securely signed in between launches and to let you lock the App with biometrics. The token is stored only in the device secure keystore (Android Keystore–backed encrypted storage; iOS Keychain).

c. Work data you create or act on

Tasks, technical tickets, work orders and work-order requests, checklist items, materials, asset-maintenance lines, related tickets, payment requests, leave applications, the attendance figures shown back to you, notifications addressed to you, and leads (for CRM staff).
Why: to let you carry out your job and to keep BECO’s operational records.

d. Customer and field data (Sales / meter agents)

• Customer name, contact number, address, account / party identifiers, and outstanding-invoice information — limited to customers in the zones assigned to you.
• Cash receipts and payment allocations you record.
• Customer complaints and justifications you submit.
• Meter readings: the customer / meter, the current reading, the calculated usage and billing figures, and a photo of the meter.
• Meter-scan provenance: the value the on-device scanner read, its confidence score, and whether the final value was scanned or manually overridden.

Why: to collect payments, record consumption, raise complaints, and keep billing auditable.

e. Photos and camera

Meter photos you capture for a reading, and a profile photo you take or choose from your photo library.
Why: only for the two actions above, and only when you start them.

f. Device and technical data

Network connection state (to detect when you are offline); the request metadata inherent to any internet call (such as the IP address BECO’s server sees, and timestamps); and the App version, used for an update check against a BECO server.

The App contains no third-party analytics, advertising, attribution, or crash-reporting SDK, and does not collect an advertising identifier. Operating-system crash reporting, if enabled on your device, is controlled by your own device settings and is sent to Apple or Google — not to BECO through the App.

4. On-device processing of meter photos

When you photograph a meter, the App runs text recognition locally on your device to check that the display is legible and to pre-fill the digits. This step runs entirely on the device; the image is not sent to any third party for it. The meter photo and the reading are transmitted to BECO’s server only when you save the reading, after which BECO’s server may re-check the photo as part of its own billing controls.

5. Permissions the App requests

You can decline or later revoke the Camera, Photos, and Biometric permissions in your device settings. The related features become unavailable, but the rest of the App keeps working.

6. How your data is shared

• With BECO. All data flows to BECO’s backend, where it is handled under BECO’s internal data-protection and records policies and is accessible to authorized BECO personnel on a need-to-know basis.
• With service providers. BECO uses infrastructure and hosting providers to run its backend. They process data only to provide that infrastructure to BECO and under contract.
• For legal reasons. BECO may disclose data where required by applicable law or to protect its rights, property, or the safety of others.
• The App does not share data with advertising networks or data brokers, and BECO does not sell your data.

7. Where data is stored

• On the device: only your session credentials (encrypted in the platform keystore) and small app settings. Work data is not kept in a local database after you sign out.
• On BECO’s servers: operated by BECO and its hosting providers. If BECO’s hosting is outside your country, your data may be processed there under BECO’s contractual safeguards.

8. Data retention

• Device: session credentials and any cached data are cleared when you log out, when your session expires, or when you uninstall the App.
• Server: operational and financial records created through the App (for example meter readings, cash receipts, work orders, leave applications) are retained by BECO for as long as needed for business, accounting, audit, and legal purposes, in line with BECO’s retention schedule.

9. Security

• All network traffic uses HTTPS/TLS.
• Credentials are stored only in the platform secure keystore (Android Keystore / iOS Keychain) — never in plain files, logs, or screenshots.
• Access is protected by login plus one-time passcode, automatic session expiry, and role / branch / zone scoping enforced by the server.
• An optional biometric lock adds a local barrier to opening the App.
• Diagnostic logging of request and response bodies is disabled for authenticated traffic in released builds, and tokens, passwords, OTPs, and customer / financial data are redacted from any logs.

10. Your rights and choices

Because the App is an employer-provided tool, requests to access, correct, or delete your personal data, and questions about how BECO uses it, should go to your BECO HR or IT administrator, or to the contact in section 13. You can also control the Camera, Photos, and Biometric permissions in your device settings, and sign out at any time to clear local data.

11. Children

The App is a workplace tool for adults. It is not directed to children and is not offered to minors through general consumer channels.

12. Changes to this policy

We may update this policy as the App changes. Material changes will be shown by a new “Last updated” date and, where appropriate, an in-app or administrator notice.

13. Contact

BECO
BANADIR ELECTRIC Co. BN0000
Privacy contact: it@beco.so