Privacy Policy

App Name: Restriction BZA

Effective Date: December 21, 2025

Restriction BZA is an internal application designed exclusively for authorized colleagues. This policy outlines how we handle data to ensure a secure and restricted environment.

1. Data Collection & Authentication

To maintain strict security, we collect and process the following:

• Authorized Email Whitelist: We store a list of pre-approved email addresses on our server. Only users whose emails are present in this database can access the app.
• Google/Firebase Auth: We use Firebase Authentication. When you log in via Gmail, we access your email address to verify your identity against our internal whitelist.
• User Permissions: We store your assigned role (Viewer or Editor) to control app functionality.

2. Purpose of Data Use

Your data is used solely for:

• Verifying identity and granting access.
• Managing "Viewer" vs "Editor" permissions.
• Maintaining an audit log of changes made by Editors for internal accountability.

3. Data Sharing

We do not share your personal data with third parties. Data is processed through Google Firebase (our infrastructure provider) and is protected by their enterprise-grade security protocols.

4. Your Rights

Under the Digital Personal Data Protection Act (DPDP), you have the right to access your profile information, request corrections, or ask for the removal of your access and associated data upon leaving the organization.

5. Security

We implement industry-standard encryption and Firebase Security Rules to ensure that internal data remains confidential and protected from unauthorized external access.