The short version
Your business data — records, messages, photos, attachments — travels between your device and your own Odoo® server. jayBird operates no service that receives it and has no access to it.The only thing Bitbolt sends to a service jayBird runs is a push notification token, so notifications can reach your device. There is no analytics SDK, no advertising SDK, and no tracking of any kind. Bitbolt creates no account — you sign in with credentials that already exist on your organization’s server.What Bitbolt sends to jayBird
A push notification token, and nothing else.To deliver notifications, Apple and Google require a per-device token. Bitbolt registers that token with a relay service jayBird operates. The registration contains the token and the platform name (ios or android). It does not contain your server address, your database name, your username, your name, or your email address. The relay cannot determine which Odoo server a device belongs to.Notification content is encrypted by your own Odoo server to a key that never leaves your device. The relay, Apple, and Google carry text they cannot read.What stays between your device and your server
Everything else: your sign-in credentials, which are submitted to your server’s own login page; the records, documents and messages you view or create; photographs you capture in the app, which are uploaded to your server as attachments; and barcode values you scan into a field.Your organization’s own privacy policy governs that data, because it is your organization’s system.What stays on your device
Server addresses and account details you add, held in the device keychain or the Android Keystore-backed store. Session cookies for the servers you sign in to. A short diagnostics log of recent activity, which you choose whether to share, redacted before it is shown. Recent notification text, so an expanded notification can show a conversation rather than a single line.None of this is transmitted anywhere by Bitbolt.Device permissions, and why
Bitbolt requests no location, no contacts, no microphone, and no access to your photo library.Children
Bitbolt is a business application intended for use by people acting for an organization. It is not directed at children and collects nothing from them.Retention and deletion
The push token is retained only while the device is registered for notifications. Removing a server in the app deletes the stored account on the device and unregisters the device with the relay; your server then stops delivering to it.To remove everything, delete the app. Data held on your organization’s Odoo server is deleted by your organization, under their own policy.Third parties
Bitbolt contains no advertising or analytics SDK. Its only third-party dependencies in the delivery path are Apple Push Notification service and Firebase Cloud Messaging, which transport notifications, and your identity provider, if your organization uses single sign-on, whose sign-in page appears during login.Bitbolt does not sell or share personal information, and there is nothing here to sell.Changes
Material changes to this policy will be published at this address with a new date at the top.