Reflection Field – Privacy Policy
This policy explains how the Reflection Field mobile app (package com.enableyou.reflection) collects, uses and protects information. Reflection Field is the field companion to the Reflection ERP platform, built and operated by Enable Engineering Ventures Private Limited (“Enable”, “we”, “us”).
The app is for employees and contractors of organisations that use Reflection (for example, inspection and testing companies). You can only sign in with an account that your organisation has created for you. Your organisation decides what data is recorded about your work and is the controller of that data; Enable processes it on the organisation’s behalf to provide the service.
Information the app collects
- Account details – your name, work email address, role and the organisation (customer code) you sign in to. Your sign-in token is stored in encrypted storage on your device.
- Precise location – only when you mark attendance or record a site visit, and only while the app is open. Location is attached to that attendance or visit record. The app does not track location in the background.
- Photos and files – images you take with the camera or pick from your device, and documents you attach (for example inspection photos, expense receipts, leave documents, or a photo of a printed report you choose to scan). The camera is used only when you start one of these actions.
- Work records – service orders, inspection and test reports, observations, attendance, leave requests and expense claims you create or update.
- Device push token – a Firebase Cloud Messaging token so we can send you work notifications (such as new job assignments or approvals). You can turn notifications off in your device settings.
- Offline data – while you are offline, drafts are kept in a local database on your device and sent to the server when you reconnect.
The app does not contain advertising, does not use advertising identifiers, and does not sell or rent personal information.
How we use it
- To sign you in and show the work assigned to you.
- To record attendance, site visits, inspection reports, leave and expenses for your organisation.
- To send notifications about your work.
- To read text from a photographed report when you choose the “Scan report” feature, so you can review and apply it.
- To keep the service secure, diagnose problems and support your organisation.
Who we share it with
- Your organisation – administrators and managers in your organisation can see the records you create, according to the permissions they set.
- Service providers that host and run the service for us: Amazon Web Services (servers, database and file storage, in India and the EU), Google Firebase (push notifications), and, for some organisations’ document-scanning features, an AI text-recognition provider that processes the submitted image only to return the extracted text.
- Legal reasons – where required by law or to protect rights and safety.
Security
All data is sent over encrypted HTTPS connections. Sign-in tokens are kept in the device’s secure storage. Access to data on our servers is restricted to authorised personnel and to your organisation’s permitted users.
Retention and account / data deletion
Records are kept for as long as your organisation keeps its Reflection account, or as your organisation’s policies and applicable law require. Signing out ends your session on the device. Offline drafts and cached work data stay in the app’s private storage on the device until they are synced or the app is uninstalled; uninstalling the app (or clearing its data in Android settings) removes them.
To delete your account or request deletion of your personal data, ask your organisation’s Reflection administrator, or email engineering@enableyou.co with the subject “Reflection Field data deletion”, your name, work email and organisation. We will act on the request with your organisation within 30 days. Some records may need to be kept where the law or your organisation’s legitimate business needs require it (for example, signed inspection reports or financial records).
Your rights
Depending on where you live (including under India’s Digital Personal Data Protection Act, 2023 and the EU GDPR), you may have the right to access, correct or delete your personal data, and to withdraw consent. Contact your organisation or us using the details below.
Children
Reflection Field is a workplace app and is not intended for anyone under 18.
Changes
We may update this policy. The effective date above shows when it last changed.
Contact
Enable Engineering Ventures Private Limited
Email: engineering@enableyou.co
Web: enableyou.co