Asset Command Center

Privacy Policy

Asset Command Center Privacy Policy

This document explains how Asset Command Center collects, uses, and protects data from users of its mobile application.

Last updated: 10 June 2026

This Privacy Policy applies to the Asset Command Center mobile application (Android package com.qrmaintenance.mobile) and related services operated by PT YELCO ART MEDIA (we).

1. Summary

Asset Command Center is an application for asset management, QR/barcode scanning, fault reporting, inspections, maintenance tickets, preventive maintenance, calibration, and operational notifications. The application is intended for users who have been granted access by their organization or company.

2. Data We Collect

We may process the following categories of data when you use the application:

  • Account data: name, email address, role, work unit, and user identity managed through the organization’s authentication system, including Google sign-in if enabled.
  • Operational data: fault reports, maintenance tickets, inspection checklists, preventive maintenance and calibration schedules, work notes, asset label history, and asset data related to your tasks.
  • Scanning data: QR/barcode scan results that you produce for asset verification or reporting. The camera is used for scanning; we do not use the camera to record or store personal photos/videos outside the application's operational purposes.
  • Notification data: push notification device tokens (FCM) so maintenance alerts, approvals, and related activity can be sent to your device.
  • Technical data: basic device/application information needed for security, stability, and notification delivery.

3. How We Use Data

We use data to:

  • authenticate users and authorize access according to their role;
  • operate maintenance, inspection, reporting, and approval workflows;
  • send notifications about tickets, schedules, and operational activity;
  • provide asset history, labels, and reports for organizational needs;
  • maintain security, prevent misuse, and improve service reliability.

4. Storage and Third Parties

Data is processed and stored through services used to operate the application, including:

  • Supabase — database, authentication, and application data storage.
  • Google — Google sign-in (if enabled) and Firebase Cloud Messaging for push notifications.
  • Vercel — hosting for related web services, such as public report pages and the portal.

We do not sell users' personal data. Data is shared only as necessary to operate the services and in accordance with the instructions of the organization where you are registered as a user.

5. Device Permissions (Android)

The application may request the following permissions:

  • Camera — to scan QR/barcodes on asset labels.
  • Notifications — to receive maintenance alerts and related activity.
  • Vibration — to provide feedback for notifications or certain interactions.

You can disable permissions in your device settings, but some features may not work.

6. Data Retention

Data is retained while your account is active and for as long as necessary for organizational operations, audits, reporting, and applicable legal obligations. Your organization may request deletion or updates through its system administrator.

7. Data Deletion

You may request deletion or deactivation of your account and related personal data. Requests may be submitted through your organization's administrator or directly to us.

Data that may be deleted: login account, user profile, notification tokens, and application access.

Data that may be retained: submitted operational records, such as tickets, reports, checklists, and approvals, when needed by the organization for audits, reporting, or legal obligations. Identity information in historical records may be anonymized upon request.

Full guidance and the request form are available on the Data Deletion. Requests are generally processed within 30 days after identity verification.

8. Security

We apply reasonable technical and organizational safeguards, including role-based access controls, encrypted communications (HTTPS/TLS), and restrictions on data access between tenants/companies. No method of transmission or storage is 100% secure, but we work to protect data from unauthorized access.

9. User Rights

You have the right to:

  • request access to, correction of, or updates to account data through your organization's administrator;
  • request deletion or deactivation of your account through the Data Deletion;
  • withdraw device permissions, such as camera or notifications, through Android settings;
  • contact us with questions about privacy and data processing.

10. Children

This application is not intended for children under 13 and does not knowingly collect children's personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with its update date. Your continued use of the application after changes means you accept the updated policy.

12. Contact

For privacy questions or data-related requests, contact:

Contact page: Contact us