Privacy Policy
Last updated: 8 September 2026 · Applies to the Zentronix mobile app (com.altboltapp.sss)
Overview
Zentronix is a workforce management app used by field staff such as security officers, cleaners, technicians and event crews. This policy explains what personal information the Zentronix mobile app collects, how it is used, and the choices you have.
In most cases you use Zentronix because an employer, agency or organisation has deployed it to manage your work (your "Organisation"). Your Organisation decides what data is collected and why, and is the data controller for that information. Zentronix provides the software and processes data on the Organisation's instructions. If you have questions about your data, you can contact your Organisation or us using the details in section 13.
Information we collect
Account and profile
Your name, work email or phone number, employee or staff ID, job role, assigned sites, and any certifications or licences (including their expiry dates). You or your Organisation may also add a profile photo. This information is typically created for you by your Organisation.
Location data
When you are on an active duty session, the app collects your device's precise GPS location, including while the app is in the background or the screen is locked. Location is used to:
- verify and timestamp your clock-in and clock-out;
- record the location where checkpoint scans and reports are made;
- monitor site geofence boundaries and generate an alert if you leave the boundary during a shift;
- build the GPS trail included in your shift report.
Location collection begins when you start duty and stops when you end duty. It is not collected when you are off shift.
Camera, photos and scans
Photos or videos you capture or select for incident reports, checklists and visitor logs, and the identifiers of QR codes and NFC tags you scan (with the time and location of the scan).
Activity and shift data
Clock-in/out times, patrol tours, completed checklists, incident reports, visitor logs, panic alerts, and notes you enter.
Device information
Device model, operating system and version, app version, device identifiers, network connection state, and battery level and charging status (used to alert your supervisor to a low-battery device during a shift).
Push notification token
A messaging token from Google Firebase Cloud Messaging so we can deliver shift and safety notifications to your device.
Diagnostics
Crash reports and basic error and performance logs to keep the app working reliably.
How we use information
- Deliver scheduling, duty tracking and site monitoring features.
- Generate shift reports and support accurate timekeeping and invoicing based on verified hours.
- Send you notifications, reminders and safety alerts.
- Support worker and site safety, including panic alerts and geofence breach alerts.
- Provide support, investigate issues and prevent fraud or misuse.
- Comply with legal obligations and enforce agreements.
Legal bases
Where the UK GDPR, EU GDPR or similar laws apply, we and your Organisation rely on:
- Performance of a contract — to operate the service for your Organisation and administer your work assignments.
- Legitimate interests — operational safety, accurate billing, security and service improvement, balanced against your rights.
- Legal obligation — where we must retain or disclose information by law.
- Consent — for device-level permissions (location, camera, notifications), which you grant in your device settings and can withdraw there at any time.
How information is shared
- Your Organisation — its authorised admins, managers and supervisors can see your profile, schedule, location during duty, activity and reports.
- Your Organisation's clients — shift reports (which may include your name, hours, activity log and GPS trail) may be sent to the client responsible for the site you worked.
- Service providers — cloud hosting and file storage (including Amazon Web Services), Google Firebase for push messaging, email delivery providers, and crash-reporting tools. They process data under contract and only on our instructions.
- Legal and safety — where required by law, regulation or legal process, or to protect the rights, property or safety of any person.
- Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.
Location permissions
Core duty features need background location. On Android this means granting "Allow all the time" and allowing the app to run a foreground service, which shows a persistent notification while tracking is active. On iOS this means granting "Always" location access.
You can change or revoke these permissions at any time in your device settings. Doing so will stop location-dependent features — including clock-in verification, checkpoint location, and geofence alerts — from working, and your Organisation may not be able to confirm site coverage.
Data retention
Shift, activity and location records are retained for as long as your Organisation requires them and as needed for timekeeping, billing, dispute resolution and legal compliance, after which they are deleted or anonymised. Diagnostic logs are kept for a shorter period, normally up to 12 months. Your Organisation sets the specific retention periods that apply to you.
Security
Data is encrypted in transit using TLS. We apply access controls, restrict administrative access to authorised personnel, and store files with reputable cloud providers. No method of transmission or storage is completely secure, but we work to protect your information and review our practices regularly.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, or to receive a copy of it in a portable format. Because your Organisation is usually the controller, the quickest route is to contact them directly. You can also contact us at the address in section 13 and we will help or route your request appropriately.
You can control device permissions (location, camera, notifications) in your device settings at any time.
Children
Zentronix is intended for use by working adults in an employment or contracting relationship. It is not directed to children and we do not knowingly collect personal information from anyone under 16.
International transfers
Your information may be processed and stored in countries other than the one you live in, including where our service providers operate. Where required, we use appropriate safeguards such as standard contractual clauses for these transfers.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date above, and for material changes we will provide notice in the app where practical.
Contact us
For any question about this policy or your personal information, contact: