📅 Last updated: July 30, 2026 | Effective date: July 30, 2026
This policy applies only to the
AB Price Admin app, used by authorised staff to manage branches, orders, inventory and attendance. It is not the customer-facing AB Price app — see the
AB Price customer app privacy policy for that app. AB Price Admin is distributed only to employees of Ayyappa Best Price and is not available to the general public.
1. Information We Collect
Account Information
- Staff Credentials: name, email address, phone number, and password, created and managed by an administrator.
- Role & Branch Assignment: the branch(es), role, and permissions assigned to your account.
Attendance & Facial Recognition Data
- Attendance Photos: a photo captured by the device camera each time you check in or check out, used to verify identity at the point of attendance.
- Facial Embeddings: a mathematical representation of your enrolled face(s), generated on-device using Google ML Kit, used to match you against future check-in/check-out photos. Embeddings cannot be used to reconstruct a viewable photo.
- Punch Metadata: check-in/check-out timestamps, match confidence score, and the device used.
Device & Operational Information
- Device Identifiers: used to approve and recognise devices authorised to access the admin panel.
- Business Records: orders, inventory, stock transfers, supplier, GRN, payment, and customer-order data that you view or manage as part of your role.
- Uploaded Files: product/category images and documents you upload while managing the catalogue or suppliers.
- Push Notification Token: a Firebase Cloud Messaging device token, used to deliver order and attendance alerts to your device.
2. How We Use Your Information
- Authenticate staff and enforce role-based access to branches and features.
- Record and verify attendance via facial recognition matching.
- Operate point-of-sale, inventory, order, and supplier management features.
- Approve and manage devices authorised to access the admin panel.
- Send real-time alerts for new orders, attendance events, and system notifications.
- Investigate discrepancies, prevent unauthorised access, and maintain accurate business records.
- Comply with applicable labour, tax, and record-keeping laws.
3. Biometric Data Handling
Because attendance uses facial recognition, we treat face photos and embeddings as sensitive data with additional safeguards:
- Collected only from staff who are enrolled for attendance at their branch — enrollment is performed by an administrator, not self-service.
- Used solely to verify identity at check-in/check-out. Never used for marketing, profiling, or any purpose outside attendance tracking.
- Never sold, and never shared with any third party outside Ayyappa Best Price.
- Stored on our servers with access restricted to authorised administrators.
- Retained for as long as you remain enrolled for attendance, or as required by applicable labour record-keeping law, and deleted on request or when an administrator removes your enrollment (e.g. on offboarding).
- You may ask your branch administrator or HR at any time to review or delete your enrolled face data.
4. How We Share Information
We do not sell staff data to third parties. Information is shared only:
- Internally: with administrators and managers who need it to run branch operations, per role-based permissions.
- Service Providers: infrastructure and messaging providers that support the app (e.g. Firebase Cloud Messaging for push notifications, cloud hosting), under confidentiality obligations.
- Legal Requirements: when required by law, regulation, or valid legal process.
5. Data Security
- All data transmitted between the app and our servers is encrypted using HTTPS/TLS.
- Passwords are hashed and never stored in plain text.
- Devices must be explicitly approved by an administrator before they can access the admin panel.
- Access to attendance and business records is restricted by role-based permissions.
6. Data Retention
Account, attendance, and business-record data is retained for as long as your account is active or as required by applicable tax, labour, and accounting record-keeping laws. Face photos and embeddings are removed when your attendance enrollment is deleted by an administrator.
7. Your Rights
As a staff member, you may contact your branch administrator or the address below to:
- Request access to the personal data held about your account.
- Request correction of inaccurate account information.
- Request deletion of your attendance enrollment (face photos and embeddings).
Business records you created or handled as part of your role (orders, GRNs, etc.) are retained as company operational records even after account access ends.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the admin panel or to the email address associated with your account. The "Last Updated" date above reflects the latest revision.