Privacy Policy

Who this policy is for

24Gold is a business application for jewellery and bullion businesses. It is used by staff of businesses that subscribe to the 24Gold platform. Accounts are issued by your employer, not created in the app.

This policy explains what the 24Gold mobile app collects, why, and who it is shared with.

Your employer decides what data is recorded in 24Gold and how long it is kept. 24 Gold Solutions operates the service on their behalf. If you are an employee or a customer of one of these businesses and want your data corrected or deleted, contact that business first. We act on their instructions.

What the app collects

Your account

When you sign in, the app stores your session token and your profile — your name, user type, company and branch — on the device. If you tick “remember me”, your email address and password are saved in the device’s secure storage (Keychain on iOS, encrypted storage on Android) so the app can sign you in again.

Business records you enter

The app sends the records you create to your company’s 24Gold server. These include:

• Customers: name, gender, date of birth, occupation, religion, photo, address, phone, WhatsApp number and email.
• Identity numbers: PAN, Aadhaar and GSTIN, where your business records them, and any documents or images you attach to a customer.
• Family members of customers: name, relationship, date of birth and phone number, where recorded. These people do not use the app themselves.
• Financial records: balances, receivables, payables, credit, estimates, invoices, receipts, purchases, expenses, loans, chit schemes and repairs.
• Inventory: item tags, weights, purity, stone details and photos.
• Staff records: attendance, and salary figures where your role can see them.

Face data, for attendance

If your employer uses face attendance, the app collects face data:

• At enrolment, the app takes up to three cropped photographs of your face and computes a mathematical template from them. Both the photographs and the template are sent to your company’s 24Gold server and stored there.
• At check-in, the comparison happens on the device. Your face is matched against templates already on the device, and no photograph or template is sent. The app sends the result: which employee matched, a match score, a liveness result, the time and the device identifier.
• On a shared kiosk device, the app downloads the face templates, names and photo links of employees at that branch so it can match offline. That copy is encrypted on the device, refreshed about hourly, and usable offline for up to 24 hours.
• On a personal phone, your own face template is kept in the device’s secure storage.

Face data is used only to record attendance. It is not used to identify you anywhere else, and it is not sold or shared with anyone outside your employer’s 24Gold service.

Location

When you mark attendance from your personal phone, the app reads your location and sends the coordinates and their accuracy with the attendance record, so your employer can confirm where the attendance was marked. If the attendance is still queued because you are offline, that record, including the coordinates, stays on the device until it is sent.

On a shared kiosk device, the app checks only whether the location is being faked. It does not send coordinates.

The app does not track your location in the background or at any other time.

Camera, photos and files

The camera is used to scan tag barcodes, photograph items and products, photograph repair jobs, and for face attendance and enrolment. You can also choose existing images from your device’s gallery, and attach documents such as PDFs to a customer record. Anything you choose is uploaded to your company’s 24Gold storage.

The app does not scan or index your gallery. It reads only the files you pick.

Device information

The app creates its own random identifier for the device the first time it is needed, and keeps it in secure storage. It is not your advertising ID, IMEI or any other hardware identifier, and it is sent with enrolment and attendance records so your employer can tell devices apart.

With attendance records, the app also reports whether the device appears to be rooted or jailbroken, whether it is an emulator, and whether the location appears to be mocked. This is to prevent forged attendance.

If you connect a Bluetooth thermal printer, the printer’s address is stored on the device.

What the app does not do

• No advertising, and no advertising identifiers.
• No analytics, tracking or crash-reporting services. The app contains no third-party tracking code.
• Your data is never sold, and never shared for advertising.

Where the data goes

• Your company’s 24Gold server, at api.24gold.co.in, which holds your business records.
• Google Cloud Storage, where images and documents you upload are stored. They are served over short-lived links that expire after about a minute.
• Google Fonts, from which the app may fetch fonts when it starts. This tells Google the device’s IP address.
• Google ML Kit, which finds faces in the camera image. This runs on the device; no image is sent to Google.
• Apps you choose. If you tap to call, message, or send a catalogue or image over WhatsApp, the app hands the phone number or file to that app, and that app’s own privacy policy then applies.
• A Bluetooth printer you pair, which receives the bill content you print.

How long data is kept

Business records are kept on your company’s 24Gold server for as long as your employer keeps them, subject to the tax and accounting periods Indian law requires.

On the device:

• Signing out clears the cached business records on the device. It does not clear your saved sign-in details, your face template, the device identifier, or attendance records still queued to send.
• Uninstalling the app removes everything the app stored on that device.

Your choices

• Permissions: camera, location, Bluetooth and file access can each be refused or withdrawn in Android or iOS settings. Refusing one stops the feature that needs it: without the camera you cannot scan tags or use face attendance, and without location you cannot mark attendance from your personal phone.
• Face attendance: ask your employer whether another way to mark attendance is available to you.
• Access, correction and deletion: contact your employer, who controls the records. They can ask us to delete data, including enrolled face data, and we will act on that request. You can also write to us directly at the address below and we will pass the request to them.

Security

Sign-in tokens, saved credentials, face templates and the kiosk cache are held in the device’s secure storage, and the kiosk cache is additionally encrypted. Traffic between the app and the server uses HTTPS. Access to records inside the app depends on the role your employer gives you.

Children

24Gold is a business tool and is not directed at children. We do not knowingly collect data from children.

Changes

We will update this page when the app’s handling of data changes, and change the date at the top.

Contact

24 Gold Solutions
Email: 24goldsolutions@gmail.com
Phone: +91 90924 24916