Privacy Policy for Tech Terrain IT Ltd. Applications

01Information We May Collect

Depending on the application and its features, we may collect or process the following types of information:

• User name, email address, mobile number and user profile information
• Login and authentication information
• Device information such as device model, operating system version, app version, and device identifier
• IP address and technical log information
• Application usage data such as features used, actions performed, access time, and error logs
• Data entered by users into the application
• Organization-related operational data required for providing software services
• Appointment, schedule, attendance, leave, approval, report, prescription, patient, customer, employee, transaction, or operational data, depending on the specific application
• Files, images, or documents uploaded by authorized users, where applicable

We only collect data that is necessary to provide, operate, maintain, improve, and secure our applications and services.

02Sensitive and Professional Data

Some Tech Terrain IT Ltd. applications may be used in healthcare, HR, enterprise resource planning, customer management, accounting, reporting, or administrative environments.

Depending on the application, authorized users may enter or process sensitive, professional, or organization-specific data, such as patient-related information, employee information, appointment information, prescription information, attendance records, financial records, customer information, or operational reports.

Such data is used only for the purpose of providing the relevant application functionality and services to the authorized users or client organization.

03Location Data

Not all Tech Terrain IT Ltd. applications collect or use location data.

Some Tech Terrain IT Ltd. applications do not request, collect, or use location data. For example, if an application does not contain any location-based feature, it will not access the user's location.

However, some applications may request access to location data only when location-based features are required for that specific application. Depending on the application and enabled features, location data may be used to:

• Show the user's current location on a map
• Verify attendance, visit, movement, or workforce-related activities
• Detect entry into or exit from user-defined geofence areas
• Trigger location-based alerts, notifications, sound, or vibration
• Enable location-based events to work even when the app is closed or not in use, where background location access is required for the app's core functionality

If an application requires background location access, the app will provide clear disclosure and request user consent as required before collecting background location data.

If a user denies location permission, the application will continue to work, except for features that specifically require location access.

04Camera, Storage, Files, and Media Access

Some applications may request camera, storage, file, image, or media access depending on the required functionality. These permissions may be used for:

• Uploading profile photos or documents
• Capturing or uploading images required for official tasks
• Attaching files, reports, or supporting documents
• Generating, viewing, downloading, or sharing application-related files

We access such files only when the user allows permission or actively uses the related feature.

05How We Use Data

We may use collected or processed data to:

• Provide application features and software services
• Authenticate users and manage secure access
• Maintain user accounts and role-based permissions
• Process user-submitted information
• Generate reports and dashboards
• Manage appointments, schedules, attendance, leave, approval, prescription, patient, customer, employee, transaction, or operational records, depending on the application
• Improve application performance, usability, and reliability
• Provide technical support and troubleshooting
• Monitor system security and prevent unauthorized access
• Communicate service-related notices, updates, or support information
• Comply with applicable laws, regulations, contractual obligations, and client requirements

We do not use personal data for unauthorized advertising or unrelated third-party marketing.

06Data Sharing and Disclosure

Tech Terrain IT Ltd. does not sell or rent personal data, sensitive data, patient data, employee data, customer data, financial data, or location data.

We may share limited data only in the following cases:

• With authorized users of the same organization based on their role and permission
• With client organizations that own, operate, or manage the relevant data
• With trusted hosting, infrastructure, maintenance, or technical support providers
• With legal, regulatory, or government authorities, if required by applicable law
• With service providers necessary for operating the application, such as cloud hosting, database hosting, notification service, analytics, crash reporting, map service, or payment gateway, where applicable

Any such sharing is limited to what is necessary for operating, supporting, securing, or legally maintaining the services.

07Third-Party Services

Some applications may use third-party services for hosting, analytics, crash reporting, notification delivery, map services, payment processing, or other technical purposes.

These third-party services may collect limited technical or transactional information as required for their functionality. Their data processing is governed by their respective privacy policies and service terms.

We use third-party services only to support application operation, security, performance, and service delivery.

Depending on the application, we may process subscription and purchase verification information, including product ID, purchase token, subscription status, and expiry information through authorized app stores and payment platforms such as Google Play.

08Data Security

We take reasonable technical and organizational measures to protect user data from unauthorized access, misuse, loss, disclosure, alteration, or destruction. Security measures may include:

• User authentication
• Role-based access control
• Server-side access restrictions
• Secure database management
• Data backup and monitoring
• Access control for technical support
• Application and server-level security practices

However, no digital system, internet transmission, or electronic storage method can be guaranteed to be completely secure. Users are responsible for keeping their login credentials confidential and using the application in an authorized manner.

09Data Retention

We retain data only as long as necessary to provide application services, fulfill contractual obligations, maintain records, support users, resolve disputes, ensure security, and comply with legal or regulatory requirements.

Data retention periods may vary depending on the type of application, client organization, legal requirement, and operational purpose.

10Data Correction and Deletion

Authorized users or client organizations may request correction, update, or deletion of their data by contacting Tech Terrain IT Ltd. or the relevant organization administrator.

Data deletion requests will be handled subject to applicable laws, contractual obligations, security requirements, backup policies, and legitimate operational needs.

Some data may need to be retained for legal, audit, reporting, dispute resolution, or compliance purposes.

11User Rights and Choices

Depending on the application and applicable law, users may have the right to:

• Access their personal data
• Request correction of inaccurate data
• Request deletion of data, where applicable
• Withdraw certain permissions from device settings
• Contact us regarding privacy-related questions or concerns

Users can manage app permissions such as location, camera, storage, notification, or other device permissions from their device settings.

12Children's Privacy

Our applications are generally intended for authorized organizational users, professionals, employees, administrators, clients, or service users.

Our applications are not intended to knowingly collect personal information directly from children without proper authorization, parental consent, institutional permission, or legal basis where applicable.

If we become aware that data from a child has been collected without appropriate authorization, we will take reasonable steps to address the issue.

13Cookies and Web Technologies

Our web applications or web-based services may use cookies, sessions, browser storage, or similar technologies to maintain login sessions, improve user experience, secure access, and support application functionality.

Users may control cookies through browser settings, but disabling cookies may affect some application features.

14International Data Processing

Depending on hosting, infrastructure, or service configuration, data may be stored or processed on servers located in Bangladesh or other countries.

We take reasonable steps to ensure that data is handled securely and in accordance with this Privacy Policy.

15Changes to This Privacy Policy

Tech Terrain IT Ltd. may update this Privacy Policy from time to time to reflect changes in our applications, services, legal requirements, or operational practices.

When we update this Privacy Policy, we will revise the effective date at the top of this page. Users are encouraged to review this page periodically.

16Contact Us

For any questions, concerns, complaints, or data-related requests regarding this Privacy Policy or our data practices, please contact us: