1. Who We Are and What We Do

Acute builds and operates ERP, point-of-sale and business software on the open-source Frappe framework. Our customers are businesses ("Customer Companies"). Most of our mobile applications are used either by a Customer Company's staff or by a Customer Company's own customers, and the data entered through them is stored in that Customer Company's ERP system hosted by Acute.

2. Mobile Applications Covered by This Policy

This policy applies to each application below as published on the Google Play Store and the Apple App Store. Where an application is published by a development partner, it is done on behalf of and under the authority of Acute Tech Software Solutions WLL, which remains the owner of the application and the data controller.

3. Information We Collect

3.1 Information You Provide

• Account details: Name, email address, mobile number and password when you register or sign in.
• Company identifiers: A company code or Customer Company name used to connect an application to the correct ERP site.
• Business records you enter: Depending on the application, customers, leads, sales orders, invoices, receipts and payment references, delivery details, visit notes and tasks.
• Communications: Messages, enquiries and support requests you send us.

3.2 Information Collected Automatically

• Session data: An authentication token kept in your device's secure storage so you stay signed in.
• Device and technical data: Device type, operating system version and, on the website, IP address and browser type.
• Role data: The company, warehouse, route or price list assigned to your account, loaded from the ERP to decide what you may see.

Our mobile applications do not collect precise or approximate location data, contacts, photos or advertising identifiers, and contain no advertising SDKs. Where an application uses Firebase Cloud Messaging for push notifications, Google receives a device push token; no advertising or analytics data is shared. Tools used by each application are listed in section 4.

3.3 Data Stored on Your Device

Applications keep a local copy of your connection settings, session and recently viewed records in encrypted storage and a local database so that screens load quickly. This data is removed when you sign out or uninstall the application.

4. Device Permissions and Third-Party Tools, by Application

You can revoke any permission in your device settings. Features that depend on the permission will stop working; everything else will continue.

5. How We Use Your Information

• To authenticate you and connect you to the correct Customer Company ERP site.
• To provide the application's functions: ordering, invoicing, receipts, catalogue, reports, tasks and notifications.
• To respond to enquiries and provide technical support.
• To keep the Services secure and prevent misuse.
• To comply with legal, accounting and tax obligations that apply to us or to Customer Companies.
• On the website only, to send updates or offers you have asked for.

We do not sell personal data and do not use data from our mobile applications for advertising or profiling.

6. Sharing of Information

We share personal data only with:

• The relevant Customer Company: Whose ERP system stores the business data entered through an application and whose authorised staff can see it.
• Hosting providers: ERP sites are hosted on Frappe Cloud. Providers process data only on our instructions.
• Development partners: Such as Cortexlumora Private Limited, for building, maintaining and supporting the applications, under confidentiality agreements.
• Service providers: For the website, such as hosting and email.
• Authorities: When required by law.

7. Cookies (Website Only)

The website uses cookies for basic functionality and traffic measurement. Our mobile applications do not use cookies or web tracking. You can disable cookies in your browser; some website features may then not work.

8. Data Security

Traffic between the applications and our servers is encrypted with HTTPS (TLS). Credentials and session tokens are stored in the device's secure storage (Android Keystore / iOS Keychain). Access to ERP data is restricted by the roles assigned to each account.

9. Data Retention

Account data is kept while the account is active. Business records are kept for as long as the Customer Company keeps its ERP subscription and as required by Qatari commercial and tax law. Local data on a device is cleared on sign-out or uninstall.

10. Your Rights and Data Deletion

You may ask to access, correct or delete the personal data we hold about you, or withdraw consent to marketing emails.

User accounts for our applications are created and approved by Acute or by the Customer Company's administrator, not by the applications themselves.

To delete your account and personal data from any application listed in section 2, either:

• Ask your Customer Company's administrator to disable and delete your user in the ERP; or
• Email admin@acutetechwll.com from the address registered on your account, stating the application name and "delete my account".

We confirm receipt within 7 days and complete deletion within 30 days. Business records that a Customer Company must keep by law (orders, invoices, receipts) are retained by that company and de-linked from your personal profile.

11. Children

The Services are intended for adults aged 18 and over. We do not knowingly collect data from children.

12. International Transfers

Customer Company ERP sites may be hosted outside Qatar. Where that is the case we require the hosting provider to apply security measures equivalent to those described in this policy.

13. Changes to This Policy

We may update this policy from time to time. The current version, with its effective date, is always at this URL. Material changes affecting a mobile application will also be announced inside that application.

14. Contact Us