Privacy Policy

EFFECTIVE DATE: JUNE 19, 2026

1. Introduction

Bhavyon Buildtech Private Limited (“Bhavyon Buildtech”, “we”, “our”, or “us”) is a technology company incorporated in India, with its registered office at Manikonda, Hyderabad, Telangana – 500042. We develop and operate smart construction management software designed to help field teams and project managers work more efficiently.

This Privacy Policy describes how we collect, use, store, share, and protect personal information when you use the InfraOS (the “App”), our Android mobile application available on the Google Play Store. It also explains your rights with respect to your personal data and how you can exercise those rights.

By installing and using the InfraOS, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein. If you do not agree with any part of this policy, please do not use the App.

This Privacy Policy is effective as of May 9, 2026. It applies exclusively to the InfraOS on the Android platform and does not govern any other products, services, or websites operated by Bhavyon Buildtech unless explicitly stated.

The InfraOS is intended for use by construction field engineers, site supervisors, and other construction professionals who have been assigned access by their employing organisation through the Bhavyon Buildtech Admin Web Platform. Use of the App is subject to your organisation’s policies in addition to this Privacy Policy.

2. Information We Collect

The InfraOS collects several categories of personal and device data in order to deliver its core functionality. We collect only the data that is necessary for the purposes described in this policy. The table below provides a comprehensive overview of the data we collect, why we collect it, and how long we retain it.

Data Type	What We Collect	Why We Collect It	How Long We Keep It
Location Data	Precise GPS coordinates and accuracy radius at the time of a progress submission	To verify that the field engineer is physically present at the designated project site when submitting progress updates; to enforce geo-boundary validation rules configured by the admin	Retained for the duration of the user account; deleted upon account closure or upon request
Camera / Photos	Photographs taken through the in-app camera at the time of a progress submission	To document on-site progress, provide visual evidence of work completed, and attach photographic records to progress submissions viewable by project administrators	Retained for the duration of the user account; subject to the organisation’s media retention policy
Video	Short video clips recorded through the in-app camera during progress submissions	To provide richer documentation of site conditions and work progress beyond what static photographs can capture	Retained for the duration of the user account; subject to the organisation’s media retention policy
Audio / Voice Recordings	Voice notes recorded by the user within the App	To allow field engineers to attach spoken progress notes to submissions; voice recordings may be transcribed to text using a speech-to-text service to improve searchability and accessibility	Retained for the duration of the user account; subject to the organisation’s media retention policy
Device Information	Device model, manufacturer, Android OS version, and App version number	To provide technical support, diagnose compatibility issues, and generate crash reports that help us improve App stability	90 days from collection, after which it is automatically purged from our systems
Account Information	User ID, full name, email address, and assigned role within the organisation	To authenticate the user, control access to features and data based on role, and associate submissions with the correct user account	Retained for the duration of the user account; deleted upon account closure or upon request
App Activity	Records of progress submissions made, tasks viewed, data sync events, and login/logout timestamps	To maintain a complete and tamper-evident audit trail of field activity, support project management reporting, and enable administrators to track progress against project milestones	Retained for the duration of the user account; deleted upon account closure or upon request

We do not collect financial information, payment card details, government-issued identification numbers, or any sensitive personal data beyond what is listed above. We do not collect data from your contacts, calendar, or other apps installed on your device.

3. How We Use Your Information

Authentication and Access Control

Your account information (user ID, email address, and role) is used to authenticate your identity when you log in to the App. We use JSON Web Tokens (JWT) to manage authenticated sessions securely. Your assigned role determines which features, projects, and data you can access within the App, ensuring that each user sees only the information relevant to their responsibilities.

Enabling Progress Submissions

The primary function of the InfraOS is to allow field engineers to submit progress updates for construction tasks. When you create a submission, the App associates your account information, the current timestamp, any attached media (photos, videos, voice notes), and your GPS location with the submission record. This data is transmitted to the Bhavyon Buildtech backend and made available to authorised administrators through the Admin Web Platform.

GPS Verification and Geo-Boundary Validation

We collect your precise GPS location at the moment you submit a progress update. This location data is used to verify that you are physically present at the designated project site. Administrators may configure geo-boundary rules that require submissions to originate from within a defined radius of the site. If your location falls outside the permitted boundary, the App will notify you and may prevent the submission from being recorded. Location data is not collected continuously in the background; it is captured only at the point of submission.

Cloud Storage of Media Files

Photographs, videos, and voice recordings captured through the App are uploaded to Google Cloud Storage upon submission. These files are stored securely and linked to the corresponding submission record. Access to stored media is restricted to authorised administrators within your organisation and to Bhavyon Buildtech personnel who require access for technical support or maintenance purposes.

Voice Transcription

When you record a voice note within the App, the audio file may be processed by a speech-to-text service to generate a text transcript. This transcript is stored alongside the audio recording and attached to the relevant submission. Transcription improves the searchability of submission notes and makes the content accessible to administrators who may prefer to read rather than listen to notes. The audio file and its transcript are treated with the same level of security and access control as other submission media.

Data Synchronisation

The App synchronises data between your device and the Bhavyon Buildtech backend servers. This includes downloading task assignments, project details, and configuration updates from the server, and uploading completed submissions and media files to the server. Synchronisation occurs automatically when an internet connection is available. When offline, data is stored locally on your device and synchronised the next time connectivity is restored.

App Improvement and Technical Support

Device information and app activity logs are used to identify and resolve technical issues, improve App performance, and plan future feature development. Crash reports generated by the App help our engineering team diagnose and fix bugs. This data is analysed in aggregate where possible and is not used to make automated decisions about individual users.

4. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for commercial or marketing purposes. We share your data only in the limited circumstances described below.

Google Cloud Storage

Media files (photographs, videos, and voice recordings) submitted through the App are stored on Google Cloud Storage, a cloud infrastructure service provided by Google LLC. Google processes these files solely as a data processor acting on our instructions and does not use your data for its own purposes. Files are stored in data centres subject to Google’s security and compliance standards. For more information, please refer to the Google Cloud Privacy Notice.

Your Employer or Organisation

The InfraOS is a professional tool deployed by organisations (your employer or contracting organisation) through the Bhavyon Buildtech Admin Web Platform. Authorised administrators within your organisation have access to the progress submissions, media files, location data, and activity logs associated with your account. This access is a core feature of the platform and is necessary for project management and oversight. Your organisation is responsible for its own data handling practices with respect to the data it accesses through the Admin Platform.

Legal Requirements and Safety

We may disclose your personal information if we are required to do so by applicable law, regulation, court order, or governmental authority. We may also disclose information where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Bhavyon Buildtech, our users, or the public, or to detect, prevent, or address fraud, security, or technical issues.

Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify affected users via email or a prominent notice within the App prior to any such transfer and will ensure that the receiving entity is bound by privacy obligations no less protective than those described in this policy.

No Third-Party Advertising

The InfraOS does not display third-party advertisements and does not share your personal data with advertising networks, data brokers, or analytics companies for advertising purposes. We do not use your data to build advertising profiles or to target you with personalised advertisements on any platform.

5. Permissions Required

The InfraOS requests the following Android permissions in order to deliver its functionality. Each permission is requested only when the relevant feature is first used, and you will be prompted by the Android operating system to grant or deny each permission. Denying a permission may limit or prevent certain features of the App from functioning correctly.

Permission	Why It Is Required	When It Is Used
CAMERA	Required to capture photographs and record video clips for attachment to progress submissions	When the user taps the camera button within a progress submission form to take a photo or record a video
RECORD_AUDIO	Required to record voice notes that can be attached to progress submissions as audio evidence or transcribed to text	When the user activates the voice note recording feature within a progress submission form
ACCESS_FINE_LOCATION	Required to obtain precise GPS coordinates for site-presence verification at the time of a progress submission	When the user submits a progress update; location is captured once at the moment of submission and is not tracked continuously
ACCESS_COARSE_LOCATION	Used as a fallback location method when precise GPS is unavailable, providing an approximate location based on network signals	When precise GPS is unavailable or takes too long to acquire during a progress submission
INTERNET	Required to synchronise submission data, media files, task assignments, and configuration updates between the App and the Bhavyon Buildtech backend servers	Continuously when an internet connection is available, to keep data in sync
ACCESS_NETWORK_STATE	Required to detect whether the device has an active internet connection, enabling the App to switch between online and offline modes appropriately	Continuously in the background to monitor connectivity status and trigger synchronisation when connectivity is restored
READ_EXTERNAL_STORAGE	Required on older Android versions (below Android 10) to access media files saved to the device storage for attachment to submissions	When the user selects an existing photo or video from device storage to attach to a submission
WRITE_EXTERNAL_STORAGE	Required on older Android versions (below Android 10) to temporarily save captured photos and videos to device storage before they are uploaded to the cloud	When the user captures a photo or video within the App; temporary files are deleted after successful upload

You can review and manage App permissions at any time through your device’s Settings > Apps > InfraOS > Permissions. Revoking a permission after it has been granted will not delete any data already collected under that permission.

6. Offline Data Storage

The InfraOS is designed to function in environments where internet connectivity may be intermittent or unavailable, which is common on active construction sites. To support this, the App stores data locally on your device using a SQLite database embedded within the App’s private storage area.

When you are offline, progress submissions, task data, and captured media are stored locally on your device until an internet connection becomes available. Once connectivity is restored, the App automatically synchronises all pending data with the Bhavyon Buildtech backend servers. You will be notified within the App of any pending offline submissions awaiting synchronisation.

All data transmitted between the App and our servers is encrypted in transit using HTTPS with TLS (Transport Layer Security) encryption. This ensures that your data cannot be intercepted or read by unauthorised parties during transmission.

The local SQLite database is stored within the App’s private data directory on your device, which is not accessible to other apps without root access. The database contains submission records, task assignments, and cached configuration data necessary for offline operation.

When you log out of the App, all locally stored data — including the SQLite database contents, cached media files, and authentication tokens — is securely cleared from your device. This ensures that your data is not accessible to anyone who subsequently uses the device. If you uninstall the App, all locally stored data is also removed by the Android operating system.

7. Google Cloud Storage

Media files submitted through the InfraOS — including photographs, video clips, and voice recordings — are uploaded to and stored on Google Cloud Storage, a managed object storage service provided by Google LLC. We use Google Cloud Storage because it provides enterprise-grade security, high availability, and the scalability required to handle media files from multiple concurrent users across multiple construction projects.

Each media file is stored with a unique, non-guessable identifier and is associated with the specific submission record to which it belongs. Files are not publicly accessible; access is controlled through signed URLs and server-side access controls that restrict retrieval to authorised requests from the Bhavyon Buildtech backend.

Only authorised admin users within your organisation, who have been granted the appropriate role permissions through the Admin Web Platform, can view and download media files submitted by field engineers. Bhavyon Buildtech personnel may access stored files only for the purposes of technical support, maintenance, or as required by law.

Google Cloud Storage infrastructure is certified to international security standards including ISO 27001, SOC 2, and SOC 3. Data stored in Google Cloud Storage is encrypted at rest by default using AES-256 encryption. For further details on Google’s data handling practices, please refer to the Google Cloud Privacy Notice.

Media files are stored in Google Cloud Storage regions selected to comply with applicable data residency requirements. We will update this policy if we change the storage region in a way that materially affects your data.

8. Data Security

We take the security of your personal data seriously and have implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

Encryption in Transit

All data transmitted between the InfraOS and our backend servers is encrypted using HTTPS with TLS (Transport Layer Security). This applies to all API requests, media file uploads, and data synchronisation operations. We enforce HTTPS for all connections and do not permit unencrypted HTTP communication.

Authentication

User authentication is managed using JSON Web Tokens (JWT). Upon successful login, the App receives a signed JWT that is used to authenticate subsequent API requests. Tokens are short-lived and are refreshed automatically. Tokens are stored securely in the App’s private storage and are invalidated upon logout.

Password Security

User passwords are hashed using bcrypt, a strong adaptive hashing algorithm, before being stored in our database. We never store passwords in plaintext. Password hashes cannot be reversed to recover the original password. In the event of a data breach, hashed passwords would not expose your actual password.

Role-Based Access Control

Access to data within the Bhavyon Buildtech platform is governed by a role-based access control (RBAC) system. Each user is assigned a role (such as InfraOS or Administrator) that determines which data and features they can access. Field engineers can only view and submit data for projects to which they have been assigned. Administrators can only access data within their own organisation.

Encryption at Rest

Media files stored in Google Cloud Storage are encrypted at rest using AES-256 encryption, managed by Google. Database records stored on our backend servers are protected by server-level encryption and access controls.

Security Limitations

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

9. Data Retention

We retain your personal data for as long as your user account remains active or as long as is necessary to provide you with the App’s services. The specific retention periods for each category of data are described in the table in Section 2 of this policy.

Account information, progress submissions, location data, and app activity logs are retained for the duration of your account. If your account is deactivated by your organisation’s administrator, your data will be retained for a further period of up to 90 days to allow for account reactivation, after which it will be permanently deleted unless a longer retention period is required by law or by your organisation’s data retention policy.

Media files (photographs, videos, and voice recordings) are retained in accordance with the media retention policy configured by your organisation through the Admin Web Platform. Your organisation may set custom retention periods for media files based on their project documentation requirements and applicable regulatory obligations.

Device information collected for technical support purposes is retained for 90 days from the date of collection and is then automatically purged from our systems.

You may request the deletion of your personal data at any time by contacting us at support@bhavyon.com. We will process deletion requests within 30 days, subject to any legal obligations that require us to retain certain data for a longer period. Please note that deleting your account data may prevent you from using the App, as your account information is required for authentication and access.

When data is deleted, it is permanently removed from our active systems. Backup copies of deleted data may persist in our backup systems for up to 30 additional days before being overwritten in the normal course of backup rotation.

10. Children's Privacy

The InfraOS is a professional construction management tool intended exclusively for use by adults aged 18 years and older who are employed or contracted in the construction industry. The App is not designed for, directed at, or intended to be used by children.

We do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at support@bhavyon.com.

Access to the InfraOS requires an account to be created by an organisation administrator through the Admin Web Platform. Organisations are responsible for ensuring that they only create accounts for individuals who are of legal working age in their jurisdiction and who are authorised to use the App in a professional capacity.

11. Your Rights

Subject to applicable law, you have the following rights with respect to your personal data held by Bhavyon Buildtech. To exercise any of these rights, please contact us at support@bhavyon.com. We will respond to all requests within 30 days of receipt.

Right to Access

You have the right to request a copy of the personal data we hold about you. Upon a verified request, we will provide you with a summary of your account information, submission records, and any other personal data associated with your account in a commonly used, machine-readable format.

Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. If your name, email address, or other account details are incorrect, please contact us or ask your organisation’s administrator to update your account information through the Admin Web Platform.

Right to Deletion

You have the right to request the deletion of your personal data. We will honour deletion requests subject to any legal obligations that require us to retain certain data (for example, for tax, audit, or regulatory compliance purposes). Please note that deleting your account data will result in the loss of access to the App and the permanent removal of your submission history.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit that data to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where we are relying on a legitimate interest as the legal basis for processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

How to Exercise Your Rights

To exercise any of the rights described above, please send a written request to support@bhavyon.com with the subject line “Data Rights Request”. Please include your full name, the email address associated with your account, and a description of the right you wish to exercise. We may need to verify your identity before processing your request. We will respond within 30 days of receiving a complete and verified request.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, the features of the App, applicable law, or for other operational, legal, or regulatory reasons. We will indicate the date of the most recent revision at the top of this page.

When we make material changes to this policy — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify you through one or more of the following methods: a prominent notice within the App, a notification sent to the email address associated with your account, or a notice displayed when you next open the App after the update takes effect.

Your continued use of the InfraOS after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should stop using the App and contact your organisation’s administrator to deactivate your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. The most current version of this policy will always be available at https://bhavyon.com/privacy-policy.html.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing your enquiries promptly and transparently.