yAppointment Scanner App Privacy Policy

The yAppointment Scanner is a companion mobile application used by a business's own staff and employees to scan barcodes and QR codes for warehouse and inventory management, goods receipt, stock-taking (inventory sessions), and the validation of passes, tickets, and other credentials issued through the yAppointment platform. The app is not intended for use by end customers or consumers.

The business that deploys yAppointment and operates the Scanner app ("the Business") is the data controller for the operational data processed through the app, including staff accounts, inventory records, and scanned credentials. LohiSoft s.r.o., the provider of the yAppointment platform, acts as a data processor / service provider on behalf of the Business. LohiSoft s.r.o. Komenskeho 317/135 Sturovo, 943 01 Slovak Republic Email: info@yappointment.com

The app requests the following device permissions and access:

• Camera – Used solely to scan barcodes and QR codes in real time. The app does not capture, store, or transmit photographs or video; only the decoded code value is processed.
• Local network – The app may connect to the Business's local network or backend service to communicate with the yAppointment backend.
• Internet – Required to synchronize scans and inventory operations with the yAppointment backend server.

The app processes the following data:

• Authentication token – A JWT issued when the staff user logs in with their yAppointment account, used to identify the user and their company/tenant.
• Scanned codes – The decoded value of barcodes and QR codes scanned during warehouse, inventory, and credential-validation operations.
• Stock, inventory, and credential operations – The results of scans (e.g. stock adjustments, goods receipt entries, pass/ticket validation outcomes) linked to the staff user's account and the Business's company ID.

Scanned codes and the resulting stock, inventory, and credential operations are transmitted to the Business's yAppointment backend (api.yappointment.com) over encrypted HTTPS connections and synchronized in real time over a secure WebSocket connection (wss.yappointment.com). In collaborative inventory sessions, relevant events are broadcast to other authorized devices of the same company so staff can work together on the same stock-taking session. The app does not transmit data to any third party other than those listed under 'Third-Party Services' below.

The authentication token is stored on-device using the platform's secure storage mechanisms (the iOS Keychain or Android's encrypted storage, accessed through a dedicated secure-storage plugin). App settings and preferences are stored locally on the device. If the device is temporarily offline, pending scan operations may be queued and stored locally until connectivity is restored and they can be synchronized with the backend.

The app does not collect crash reports or diagnostic data, and does not send any such data to a third-party service. If the app crashes, Apple and Google may make aggregated crash reports available to us through their own developer consoles, subject to the diagnostics settings you control on your device. That happens at the operating-system level, not through the app.

All communication between the app and the yAppointment backend uses HTTPS and secure WebSocket (WSS) connections. Access is scoped to the staff user's authenticated account and the Business's company ID, so staff can only view and modify data belonging to their own company. The authentication token is stored using the operating system's secure storage mechanisms.

The app does not use advertising SDKs, marketing trackers, third-party analytics, or third-party crash-reporting services. Barcode and QR code recognition runs on the device itself using Google ML Kit; the camera frames used for recognition are processed locally and are never uploaded.

Staff users processed as data subjects have the right to access, correct, or request deletion of their personal data. Because the Business using yAppointment is the data controller for operational data created through the app, requests relating to your employment or work data should first be directed to your employer (the Business). You may also contact LohiSoft s.r.o. directly using the details below, and we will forward or assist with your request as appropriate.

We may update this Privacy Policy from time to time to reflect changes to the app or applicable law. Material changes will be reflected in an updated 'Last updated' date at the top of this page. We recommend reviewing this policy periodically.

For questions about this privacy policy: LohiSoft s.r.o. Komenskeho 317/135, Sturovo, 943 01, Slovak Republic Email: info@yappointment.com