PRIVACY POLICY

This Privacy Policy describes how GMS Jain Jewellers Private Limited ("we", "us", "the Company") collects, uses, stores, and protects information through the Nirman mobile application (the "App").

The App has two kinds of users. Anyone may open the App to view today's live gold and silver rates — this requires no account and collects no location, no camera access, and no personal data. Authorised staff of GMS Jain Jewellers Private Limited may additionally log in to use the sales, inventory and attendance portal, which collects location and other data as described below.

By using this App you consent to the data practices described in this policy. If you do not agree, please discontinue use of the App.

The gold and silver rates shown in the App are indicative reference rates drawn from live market data. They are not an offer to buy or sell, and they are not the final counter price.

The actual in-store price of any item will differ and depends on making charges, GST, hallmarking, design, weight and purity, among other factors. Please confirm the final price at our counter before any purchase.

Public visitors: Anyone may use the App to view live gold and silver rates. No login, registration, or permission is required, and no personal data, location, or camera access is involved.

Staff portal (login required): The sales, inventory and attendance features are restricted to authorised users of GMS Jain Jewellers Private Limited — employees, field sales representatives, and administrators. Staff accounts are created and managed by company administrators; users cannot self-register.

The location, camera, and account data described below applies only to logged-in staff, never to public visitors viewing rates.

Viewing live rates collects no personal data. Everything below is collected only after you log in as authorised staff and use the sales portal. Public visitors who only view rates are not covered by any of the collection described here.

1. Precise Location Data (logged-in staff only)

Once an authorised staff member logs in, the App collects the device's precise GPS location (latitude, longitude, accuracy in metres) approximately every 5 minutes. This includes collection while the App is in the background (i.e., when the App is not actively on screen). It is never collected from public users, and never before a staff member has logged in and accepted the location disclosure.

A persistent notification labelled "Nirman — Location Active" is displayed on your device at all times when location sharing is active.

2. Attendance Data

When using the attendance feature, the App records:

• Check-in and check-out time
• Location at the time of attendance
• Photographs taken via front or rear camera (only when you initiate the capture)
• Reverse-geocoded address of your check-in/check-out location

3. Account Credentials

Your username, assigned role, and permission level. This information is set by your employer — no personal details are entered during registration.

4. Sales & Inventory Activity

Transactions you process (inventory scans, sales entries, returns, product requirement requests, draft sales) are stored and linked to your user account for business record-keeping.

5. Camera & Barcode Data

The App uses your camera to scan QR codes and barcodes on jewellery items. Scanned data is processed locally on your device using Google ML Kit. No images or barcode data are sent to Google.

6. Technical Data

Device operating system version and App version number — used solely for compatibility checks and troubleshooting.

Data	Purpose
GPS Location	Monitor field sales visits, route coverage, and verify customer visits
Attendance Records	Record employee working hours and verify visit locations
Sales/Inventory	Process jewellery transactions, generate invoices and reports
Camera/Barcode	Scan and identify jewellery items by QR code for inventory and sales
Technical Data	Ensure App compatibility and deliver updates

We do not sell, rent, trade, or share your data with any third party for advertising, marketing, analytics, or any purpose unrelated to business operations.

This applies only to logged-in staff. Public users who view rates are never located. For authorised staff, the App collects location even when the App is closed or not in use. This is necessary because:

• Field sales staff visit multiple customers throughout the day across different locations
• The company needs to verify visit coverage and travel routes for operational planning
• Accurate attendance records require location data at check-in/check-out times regardless of whether the App is actively open

You are always informed of active location sharing through a visible, persistent notification on your device. You can stop background location at any time by:

• Revoking location permission in your device's Settings → Apps → Nirman → Permissions
• Force-stopping the App from device Settings

Camera access is used for two purposes only:

• Barcode/QR scanning: To identify jewellery items during inventory and sales workflows
• Attendance photos: To capture optional photographs at check-in time

The camera is only activated when you explicitly open the scanner or attendance screen. No images are captured or transmitted without your direct action.

• All data is transmitted via HTTPS (TLS-encrypted connections).
• Data is stored in a secured MySQL database on servers managed by GMS Jain Jewellers Private Limited.
• Access to stored data is restricted to authorised administrators only.
• Passwords are encrypted using bcrypt hashing — we never store plain-text passwords.
• Login is protected by reCAPTCHA verification and rate limiting to prevent brute-force attacks.
• Sessions enforce single-device login — logging in on a new device automatically terminates the previous session.
• Location logs are retained for up to 12 months for operational records, after which they are deleted.

You have the right to:

• Access: Request a summary of all data collected about you
• Correction: Request correction of inaccurate records
• Deletion: Request permanent deletion of your account and all associated data
• Portability: Request your data in a portable format

To exercise any of these rights, email admin@themayajewels.com or visit our Data Deletion Request page.

Deletion requests are processed within 30 days of identity verification.

Service	Usage	Data Shared
Google Play Services	GPS location via FusedLocationProviderClient	None — location is processed locally
Google ML Kit	On-device barcode/QR scanning	None — fully on-device
Google reCAPTCHA	Bot protection on web login	IP address, browser metadata

No other third-party analytics, advertising, or tracking services are used.

The rate-viewing feature is suitable for a general audience. The staff portal is intended only for employed adults (18 years and above). We do not knowingly collect personal information from anyone under 18. If we learn that staff-portal data has been collected from a minor, it will be deleted immediately.

We may update this Privacy Policy from time to time. Significant changes will be communicated through the App or by your employer. Continued use of the App constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page indicates the most recent revision.

GMS Jain Jewellers Private Limited

127, Rani Jhansi Road, Fountain Chowk,
Ludhiana — 141001, Punjab, India

Email: admin@themayajewels.com

Phone: +91 98143 00654, +91 98559 13999

Web Portal: app.themayajewels.com