AssetCare

Effective: September 17, 2026

AssetCare ("we", "our", or "us") is operated by Invention Technology. This Privacy Policy explains what information we collect when you use the AssetCare mobile application and related services, how we use it, and the choices you have.

By using AssetCare you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Information We Collect

Account information

• Email address and hashed password when you register with email.
• Email address provided by Google when you sign in with Google.
• A workspace (organization) name, derived from your email address and editable in the app.
• The country code of your device (from the SIM or the device locale), used only to show the right payment options and pricing tier. It is not a location and is not stored as one.

Asset and tracker data

• Asset names, categories, odometer readings, installation dates, and notes you enter.
• Tracker configurations (maintenance intervals, odometer thresholds).
• Tracker events you log (service records, odometer updates).
• Expense records associated with your assets.

Subscription and payment information

• Your selected subscription plan and billing status.
• For local (Yemen) bank-transfer payments: the sender name and transaction reference you provide so we can verify the transfer. We do not collect bank account numbers or card numbers.
• For subscriptions bought through Google Play: payment is processed entirely by Google Play Billing. We receive and store only the Google order ID and purchase token needed to verify the purchase and apply your plan — we never see or store your card details.

Technical data collected automatically

• Authentication tokens, kept in your device's secure storage.
• Locally cached copies of your asset and tracker data, kept in the app's private storage on your device for offline access.

We do not collect location data, contacts, photos, camera input, device identifiers, advertising identifiers, or any other device sensor data. The app contains no advertising or analytics SDKs.

2. How We Use Your Information

• To create and manage your account and organization.
• To store, sync, and display your assets, trackers, and maintenance records.
• To process subscription payments and verify bank transfers.
• To send push notifications about upcoming or overdue maintenance (only if you grant notification permission).
• To authenticate you and protect your account (token-based auth with automatic invalidation on password change or account deletion).
• To improve the reliability and performance of our service.

We do not sell your data, use it for advertising, or share it with third parties for their own marketing purposes.

3. Data Sharing

We share your information only in the following limited circumstances:

• Google Sign-In (Google LLC) — if you choose to sign in with Google, Google provides us your email address under their Privacy Policy.
• Google Play Billing (Google LLC) — subscriptions bought in the Android app are processed by Google Play under Google's own privacy policy. We share only what is needed to verify the purchase.
• Infrastructure providers — our servers run on cloud infrastructure. Your data is stored in secured databases accessible only to our service.
• Legal obligations — we may disclose information if required by law or to protect the rights and safety of our users.

4. Data Retention

We retain your account and asset data for as long as your account is active. If you delete your account:

• Your account is soft-deleted immediately and all active sessions are invalidated.
• You have a 30-day recovery window — logging in within that window fully restores your account.
• After 30 days, your account and all associated data (assets, trackers, events, expenses) are permanently deleted from our servers.

Payment records may be retained for up to 7 years to comply with financial regulations.

5. Data Security

• Passwords are stored as bcrypt hashes — we never store plaintext passwords.
• All communication between the app and our servers uses HTTPS/TLS.
• Authentication tokens are stored in your device's secure storage and are scoped to your account. Changing your password or deleting your account immediately invalidates all tokens.
• All data is isolated per organization — no user can access another organization's data.

6. Your Rights

You have the right to:

• Access — view all your data inside the app at any time.
• Correction — update your account and asset data through the app.
• Deletion — delete your account from the app's Settings screen, or follow the steps on our account deletion page. All data is permanently erased within 30 days.
• Data portability — email us from your account address and we will send you a copy of your asset and tracker data.

To exercise any right not directly available in the app, or if you have a privacy concern, contact us at support@assetcare.einvara.com.

7. Children's Privacy

AssetCare is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date at the top of this page. For significant changes, we will notify you through the app or by email. Continued use of AssetCare after changes become effective constitutes your acceptance of the updated policy.

9. Contact Us