Mobile App Privacy Policy

The App may process the following categories, depending on your role, permissions, customer configuration, and use of features:

Location: the Meteoros Mobile App does not use location data for advertising. Unless clearly stated in the App and enabled by the applicable build and customer configuration, MOS does not collect location in the background.

Camera: the camera is activated only after you choose a camera-based feature and grant permission. Camera images are not used for facial recognition, advertising, or biometric identification unless a future feature is separately disclosed, legally reviewed, and enabled with an appropriate lawful basis.

NFC: NFC data is used to read compatible tags or identifiers for MOS functionality. It is not used for contactless payment processing.

We receive personal data from you, your device, your employer or customer administrator, the connected MOS environment, compatible locks/devices/gateways, identity providers, support interactions, and service providers that assist with the App.

Where GDPR or equivalent law applies, we process data on one or more of these legal bases:

Where the Digital Personal Data Protection Act, 2023 and applicable Indian rules apply, Meteoros will provide the required notice and seek consent when consent is the appropriate basis. You may withdraw consent using device settings, in-app controls where available, or by contacting desk@meteoros.io. Withdrawal does not affect processing already carried out lawfully before withdrawal, and some functions may no longer operate.

You control mobile permissions through iOS or Android settings. Refusing a permission does not prevent you from using unrelated features, but it may prevent the corresponding feature from working.

• NFC permission/availability: you can choose not to use NFC-based workflows. NFC scans may be unavailable on devices without compatible hardware.
• Camera permission: you can scan or capture only after granting camera access. You may revoke access at any time; QR/barcode scanning and photo capture will then be unavailable.
• Location permission: you can choose not to grant location access or later revoke it. Location-dependent features may then be unavailable or less accurate. Where a feature allows it, you may choose approximate rather than precise location.
• Notifications: you can enable or disable notifications in device settings. Critical safety decisions must not rely solely on push-notification delivery.
• Account and data requests: contact desk@meteoros.io or your customer administrator as described below.

We may disclose personal data to:

• the customer organisation, its administrators, authorised users, auditors, and contractors, according to its MOS configuration and access controls;
• cloud hosting, database, identity, notification, mapping/location, email, support, security, analytics, crash-reporting, and IT providers acting under contract;
• Meteoros affiliates, staff, contractors, professional advisers, insurers, and auditors who need the data for legitimate business purposes;
• competent authorities, courts, regulators, or law-enforcement bodies where legally required or necessary to protect rights, safety, or security; and
• a buyer, investor, lender, or adviser in connection with a corporate transaction, subject to applicable confidentiality and data-protection law.

We do not sell personal data. We do not use App data for third-party behavioural advertising. We do not share NFC, camera, or location data with third parties for their independent marketing purposes.

Meteoros and its providers may process data in India, the European Economic Area, and other countries where Meteoros, customers, or service providers operate. For transfers subject to GDPR, we will use an approved safeguard, such as an adequacy decision, standard contractual clauses, or another lawful mechanism, and apply supplementary measures where appropriate.

We retain personal data only as long as reasonably necessary for the purpose, customer agreement, legal obligation, security need, dispute, or retention setting that applies. The customer agreement controls Customer Data retention where Meteoros processes it on the customer's instructions.

We implement technical and organisational measures designed to protect App data, appropriate to the nature of the processing and associated risk. These may include encrypted communications, encryption at rest where appropriate, role-based access controls, least-privilege permissions, authentication safeguards, logging, secure development practices, vulnerability management, backups, and incident-response procedures.

No App, device, network, wireless connection, cloud service, or storage environment is completely secure. You must protect your device with a passcode/biometric lock where available, keep the operating system and App updated, avoid jailbroken/rooted devices, and report suspected compromise promptly.

Depending on the law that applies, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, and information about how data is processed. You may also have the right to complain to a competent data-protection authority.

To submit a request, email desk@meteoros.io with the subject line "Meteoros Mobile App Privacy Request." Include your name, account email, customer organisation, country of residence, the request type, and enough information for us to locate the relevant data. We may request identity verification to protect your data.

If the request concerns Customer Data controlled by your employer or customer organisation, we may refer the request to that organisation, which is best placed to decide and respond. For India, you may submit a grievance to desk@meteoros.io. For EEA users, requests may also be directed to the relevant supervisory authority.

MOS is intended for professional and authorised business users and is not directed to children (below the age of 18). We do not knowingly collect personal data from children (below the age of 18) through the App. Contact us at desk@meteoros.io if you believe a child has provided data.

We may update this Privacy Policy to reflect legal, technical, operational, or service changes. We will publish the revised version in the App, on meteoros.io/mobile-app-privacy, or through another appropriate channel and update the date above. Where required, we will provide additional notice or obtain consent.