Privacy Policy

Privacy Policy

This page explains how URCA mobile apps handle user and device data.

Last updated: 2026-10-19

1. Who we are

Our mobile apps are part of the URCA ERP platform (also referred to as “URCA”, “the platform”, or “we”). URCA is a multi-tenant enterprise resource planning system; each subscribing company has its own isolated workspace and database.

This policy explains how we collect, use, store, and protect data when you use our Android apps.

2. Scope and covered apps

This policy applies to the following URCA mobile apps and any later updates or versions:

  • U-Sales — Sales and purchase invoices and reports, and it works offline.
  • U-HR — Mobile check-in and check-out, plus leave, permission, advance and other requests.
  • U-Inventory — Offline barcode stocktaking with the camera or a scanner, plus item lookup and stock by store.
  • U-Management — For top management: general overview and comprehensive vision, income statement, balance sheet and liquidity, and account review — with a biometric lock.
  • U-CRM — Clients, contacts, sales leads and tasks, with click-to-call, call outcomes and follow-ups — works offline and syncs with your company.
  • U-SOP — Kitchen and bar prep cards from the POS: ingredients, preparation method and warnings, by search or barcode scan — works offline after the first sync.
  • U-QA — Field quality inspections, audit checklists, NCR and CAPA — works offline after sync and connects to your company QMS.
  • U-Planner — Task planner (Tasker): my day, one-time and weekday recurring tasks — company-linked with sync or standalone with a device license.
  • U-Console — central platform administration app (Super Admin).

Permissions and features may differ by app, but the privacy principles below apply to all listed apps.

3. Data we may collect

Depending on the app, operating mode, and permissions granted by the user or company admin, we may process:

  • Account data: username, email or phone if provided, role and permissions, and authentication tokens.
  • Company operational data: invoices, customers, inventory, attendance, tasks, quality records, and other business data entered for work — owned by the subscribing company and not sold for advertising.
  • Device identifiers: device id or license codes tied to the device (standalone mode / activation), plus app and OS version.
  • Network and connection data: company server address (e.g. subdomain) and technical sync/error logs to improve reliability.
  • Approximate or precise location: when required for a work feature (e.g. attendance or delivery) and after the user grants location permission.
  • Device media: camera photos or barcode scanning, or Bluetooth printer connections, when the feature is used and permission is granted.

We do not request personal data that is unnecessary for the feature. Some apps only access sensitive data if enabled by the company admin or after the user grants device permission.

4. How we use data

  • Provide app services: sign-in, sync, invoices, reports, attendance, tasks, and quality workflows.
  • Operate the company workspace: store and process business data inside the company tenant according to user permissions.
  • Security and abuse prevention: authentication, access control, licensing, and rejecting unauthorized or duplicate requests.
  • Reliability: technical diagnostics and error logs — not for selling data to advertisers.
  • Legal compliance when required by applicable law.

5. Storage and operating modes

Apps may run in one of these modes (depending on the app):

  • Connected (Server) mode: data syncs with your company server on the platform over a secure connection. Business data is stored in the company’s isolated tenant database.
  • Standalone mode: data stays on the device (e.g. local SQLite) and is not sent to the company server unless you connect later. A device-bound license may be required.

Apps may keep temporary or persistent local copies for offline use, then sync when online according to company and app settings.

6. Device permissions

An app may request Android permissions based on enabled features, for example:

  • Internet: to reach the company server and sync.
  • Camera: barcode scanning or work-related photos.
  • Location: for location-based work features (e.g. attendance or delivery) when enabled.
  • Bluetooth: printers or other work peripherals.
  • Notifications: work alerts when enabled.
  • Biometrics: app lock or local verification when supported.

You can deny any non-essential permission in device settings; only the related feature may stop working.

7. Sharing with third parties

We do not sell user data. Data may be shared only in these cases:

  • Within the subscribing company: with users and admins who have access under the permission system.
  • Infrastructure providers: hosting or technical services required to run the platform, under appropriate safeguards.
  • Legal obligation: when required by a competent authority under applicable law.

App stores (such as Google Play) have their own policies for download and ratings; this policy covers URCA apps and their operational data.

8. Security

We apply reasonable technical and organizational measures, including per-company database isolation, token authentication, access permissions, and encrypted connections (HTTPS) when talking to the server. No method is 100% secure; users should protect devices and passwords.

9. Children’s privacy

URCA apps are intended for business and workplace use and are not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect children’s data. If you believe such data was collected unintentionally, contact us to delete it.

10. Retention and your rights

Business data is retained according to the subscribing company’s policies and operational/legal needs. Through your company admin or by contacting us, you may request:

  • Access to or correction of your account data within system permissions.
  • Deactivation of access or deletion of the user account by the company admin.
  • Clearing standalone data by uninstalling the app or clearing app storage (this may permanently delete local data).

Full company data deletion follows subscription and central platform administration policies, not the mobile app alone.

11. Changes to this policy

We may update this page from time to time. The “Last updated” date appears at the top. Continued use of the apps after publication means you have reviewed the updated version. For material changes we may provide an additional notice when practical.

12. Contact about privacy

For privacy questions or requests about URCA mobile apps: