Privacy Policy

Introduction

AHL Hydraulics & Engineering ("we") operates the AHL Hydraulics mobile application and related web services (collectively, the "Services"). This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have. By installing, accessing, or using the Services you agree to the practices described in this Policy.

The Services are an internal business tool used by employees, technicians, managers, and authorized customers of AHL Hydraulics & Engineering to manage hydraulic repair workflows (job intake, dismantle, preparation, assembly, testing, packing, and reporting). The Services are not directed to the general public and are not intended for children under the age of 16.

1. Information We Collect

We collect only the information needed to operate the Services. Categories include:

a. Information you provide

• Account & profile data: name, employee ID, email address, phone number, role, profile photo, and password (stored in hashed form on our servers).
• Job & customer records: customer name and contact details, job numbers, equipment details, inspection notes, measurements, test results, signatures, and uploaded photos captured during the dismantle, preparation, assembly, testing, and packing stages.
• Support communications: messages, feedback, and other content you send to us.

b. Information collected automatically

• Device information: device model, manufacturer, operating system version, unique device identifiers, app version, language, and time zone.
• Diagnostics & crash data: stack traces, error logs, and performance metrics collected via Firebase Crashlytics to help us detect and fix bugs.
• Push notification tokens: a Firebase Cloud Messaging token used to deliver job updates and service notifications.
• Log data: IP address, access times, and the actions performed within the Services for security and audit purposes.

c. Information collected with your permission

• Camera & photos: we access the camera and photo library only when you choose to capture or upload images of equipment, parts, signatures, or QR codes for a job record.
• Location: when you grant permission, we may use approximate or precise location to tag a job site, display nearby jobs on a map, or verify on-site attendance. Location is not collected in the background.
• Storage / files: read and write access to specific folders is used to save reports, downloaded PDFs, and cached job photos on your device.
• Biometrics: if you enable biometric login, fingerprint or face authentication is performed locally by your device. Biometric data never leaves your device and is never transmitted to our servers.
• Microphone (if applicable): only used when you actively record a voice note attached to a job.

You can revoke any of these permissions at any time through your device's system settings. Revoking a permission may disable the related feature.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your user account and authenticate you when you sign in.
• Operate the core hydraulic workflow features (creating jobs, recording inspection results, generating reports).
• Display jobs, customers, and equipment data assigned to you and your team.
• Send transactional notifications (job assignments, status changes, password resets, security alerts).
• Diagnose crashes, monitor performance, and improve the stability and usability of the Services.
• Detect, prevent, and respond to fraud, abuse, security incidents, and unauthorized access.
• Comply with applicable laws, regulations, and lawful requests from authorities.

We do not use your personal information for advertising, behavioral profiling, or sale to third parties.

3. Legal Bases for Processing

Where the EU/UK General Data Protection Regulation (GDPR) or similar laws apply, we process personal data on the following legal bases: performance of a contract (providing the Services to your employer or customer organization), our legitimate interests in operating and improving the Services, compliance with legal obligations, and your consent (for example, when granting a device permission).

4. Data Sharing & Disclosure

We do not sell or rent your personal information. We disclose information only in these limited cases:

• Within your organization: with authorized colleagues, supervisors, and customers who need access to job records to do their work.
• Service providers: with the third-party processors listed above, strictly to operate the Services.
• Legal & safety: to comply with a valid legal request, court order, or to protect the rights, property, or safety of AHL Hydraulics & Engineering, our users, or the public.
• Business transfers: in connection with a merger, acquisition, restructuring, or sale of assets, in which case we will require the recipient to honor this Policy.

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, to provide the Services to your organization, and to comply with our legal, accounting, and reporting obligations. Job records and audit logs may be retained for the duration required by your employer's data retention policy. When data is no longer needed, we securely delete or anonymize it.

6. Data Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption of data in transit (HTTPS/TLS), access controls based on user role, secure password hashing, and regular monitoring of our systems. While no method of transmission or storage is completely secure, we work continuously to maintain the safety of your data.

7. Account & Data Deletion

You can request deletion of your account and associated personal data at any time by emailing privacy@ahlhydraulics.com from your registered email address with the subject "Account Deletion Request". We will verify your identity and complete the deletion within 30 days, except where we are required to retain certain records for legal, audit, or contractual reasons.

8. International Data Transfers

Your information may be processed and stored in countries other than your own, including countries that may have different data protection laws than your jurisdiction. When we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses to protect it.

9. Children's Privacy

The Services are intended for use by adult employees and authorized representatives of customer organizations. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, or applicable laws. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the app or by email. Continued use of the Services after the changes take effect constitutes your acceptance of the updated Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at: