Important Notice & Restricted Scope: SecondHand OMS is an enterprise order, device, and inventory management platform designed exclusively for authorized retail shop personnel, refurbished smartphone technicians, and management. Access to this application is strictly restricted to pre-authorized Gmail and organizational email accounts provisioned by the store administrator. Public user self-registration is neither supported nor available.
1. Introduction
This Privacy Policy outlines how SecondHand OMS ("we", "our", or "the Application") collects, uses, protects, and discloses information when authorized employees, technicians, and store managers use our mobile application. We are committed to transparency, customer data protection, and full adherence to the Google Play Developer Program Policies.
2. Authorized Gmail & Access Controls
SecondHand OMS is operated in a closed, controlled operational environment. Access is governed by strict authorization safeguards:
- Authorized Gmail / Email Verification: Only email addresses explicitly whitelisted and provisioned by the system administrator can authenticate and access the application.
- No Public Registration: General public accounts cannot be registered from the application interface.
- Role-Based Access: Authorized users are assigned granular roles (e.g., Administrator, Store Manager, Cashier, Technician) that govern what business records, financial figures, and customer data they are permitted to view.
3. Information We Collect
To deliver essential second-hand mobile phone order management, trade-in processing, inventory tracking, and sales invoicing, the Application processes the following categories of data:
A. Authorized User Account Data
- Identity Information: Authorized user name, authorized Gmail / corporate email address, and assigned role.
- Authentication Tokens: Secure cryptographic session tokens stored locally in encrypted application storage.
B. Device & Inventory Information
- Hardware Identifiers: International Mobile Equipment Identity (IMEI / IMEI2) numbers, serial numbers, brand, model, storage capacity, and color.
- Diagnostic & Condition Records: Battery health percentage, screen condition, functional check results, and technician repair notes.
- Financial & Operational Data: Purchase acquisition price, selling price, warranty terms, and transaction timestamps.
C. Customer Information (KYC & Anti-Theft Compliance)
When recording device purchases (buybacks/trade-ins) or sales, the Application collects customer information strictly as required by local statutory laws governing second-hand goods trade:
- Customer full name and contact phone number.
- Customer residential/business address.
- Government-issued identification number or verification reference (to satisfy legal second-hand ownership transfer and anti-stolen goods compliance).
D. Device Permissions & Hardware Usage
| Permission / Feature |
Technical Identifier |
Operational Purpose |
| Camera |
android.permission.CAMERA |
Used strictly in real-time to scan 1D barcodes and 2D QR codes (IMEI labels, product barcodes, server pairing QR codes) and capture device condition photographs. No background video or audio is ever captured. |
| Biometric Authentication |
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT |
Provides optional local biometric authentication (fingerprint or facial unlock) for authorized users before viewing sensitive financial data or authorizing transactions. Biometric data remains entirely on the physical device inside Android's secure enclave and is NEVER transmitted to external servers. |
| Internet & Networking |
android.permission.INTERNET |
Used exclusively to establish encrypted TLS/HTTPS connections between the mobile app and the store's designated Order Management System backend server. |
Local Biometric Privacy Guarantee: When you enable biometric lock, the application utilizes the native Android BiometricPrompt API. SecondHand OMS never receives, processes, or stores your biometric templates or fingerprint raw data. Verification is handled strictly by your device's hardware security module.
4. How We Use the Information
Information collected via the Application is utilized exclusively for genuine business operational purposes:
- Authenticating authorized shop employees and preventing unauthorized access.
- Accurately cataloging and searching devices by IMEI and barcode.
- Generating legal bills of sale, buyback vouchers, warranty documentation, and thermal receipts.
- Maintaining legal records required by consumer protection and second-hand goods anti-theft regulations.
- Facilitating store performance analytics and inventory health tracking.
5. Data Sharing & Third-Party Disclosure
We respect the privacy of our users and customers:
- No Sale of Data: We never sell, rent, lease, or monetize customer or business data to data brokers, advertisers, or marketing agencies.
- Third-Party Ad Networks: SecondHand OMS contains zero third-party advertisements or ad tracking SDKs.
- Legal Disclosures: Information may only be disclosed to law enforcement or regulatory authorities when strictly required by binding legal process or statutory second-hand registry compliance.
6. Data Storage & Security Safeguards
We enforce rigorous security standards to safeguard all data processed by the Application:
- Encryption in Transit: All communications between the app and server use Transport Layer Security (TLS/HTTPS).
- Secure Storage: Authentication tokens and sensitive session data are stored in Android's private, encrypted sandboxed storage.
- Financial Masking: Sensitive financial metrics and costs can be masked on screen to prevent shoulder-surfing in retail counter environments.
- Automatic Session Timeout: Sessions can be configured to auto-lock after periods of inactivity.
7. Data Retention & Account Deletion Policy
In adherence to Google Play Developer policies regarding user data and account deletion:
- Authorized User Account Removal: An administrator may revoke or delete an authorized Gmail account at any time via the management dashboard. Upon revocation, access tokens are invalidated immediately.
- Customer Data Rights: Customers whose details were entered during a transaction may request access to, correction of, or deletion of their personal records by contacting the store administrator or our privacy team, subject to statutory secondhand record retention periods required by law.
- Deletion Contact: To request account de-authorization or personal data deletion, submit a request to our support email with the subject line "Data Deletion Request - SecondHand OMS".
8. Children's Privacy
SecondHand OMS is strictly a business-to-business retail management utility. It is not designed, marketed, or intended for use by children under the age of 13 (or the minimum legal age in your jurisdiction). We do not knowingly collect personal information from children.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect operational updates or changes to legal and regulatory requirements. When amendments are made, the "Last Updated" date at the top of this policy will be revised.