Privacy Policy

Vivamus is a mobile application published by OFY MEDIA CO LIMITED ("we," "our," or "us"). It provides employees and authorised users of our client companies with mobile access to two internal business systems: Vivamus Stok (production and inventory management) and Vivamus ERP (sales, customers and collections).

The app is not intended for the general public. Access requires an account created by a system administrator; there is no public sign-up. This policy describes how information is handled when you use the app.

The app transmits the following information to our servers:

• Your username and password, sent only to authenticate you
• Your account identifier, display name and, where provided, your email address
• A short device label (for example "iPhone") recorded with your session so administrators can identify active sessions

• Customer and company records, which may include a contact person's name, telephone or mobile number, email address, city, and tax details
• Orders, returns, collections, payment terms, discounts and sales targets
• Production, packaging, shipment, stock, product, raw material and formulation records
• User accounts created by administrators, including name and optional email address

This business information belongs to the company operating the system. It is entered by authorised users in the course of their work and is stored in that company's database.

Information is used only to operate the application:

• Authentication: to verify your identity and keep you signed in
• Authorisation: to determine which screens and records your role allows you to see
• App functionality: to display, create and update the business records described above
• Security: to detect unauthorised access and protect account integrity
• Legal compliance: to meet obligations under applicable law, including commercial record-keeping requirements

We do not use your information for advertising, profiling, behavioural analytics or automated decision-making.

After you sign in, the app stores a session token in the operating system's secure storage (Keychain on iOS, Keystore on Android) so that you do not have to sign in every time you open the app. The app also stores which of the two systems you last selected.

Your password is never stored on the device. Signing out or deleting the app removes the stored session token.

We do not sell your information and we do not share it with advertisers, data brokers or analytics providers. Information may be disclosed only in these limited circumstances:

Business records are visible to authorised users and administrators of the company whose system you are using, according to the permissions assigned to your role.

Application data is stored on servers operated on our behalf by our hosting provider. The provider processes data only to host the service and may not use it for its own purposes.

We may disclose information where required by law, court order or a lawful request from a competent authority, or to establish, exercise or defend legal claims.

If our business is merged, acquired or reorganised, information may be transferred to the successor entity, which will remain bound by this policy.

We apply the following measures to protect information:

• All communication between the app and our servers is encrypted with HTTPS (TLS)
• Passwords are stored only as salted cryptographic hashes, never in readable form
• Session tokens are stored as hashes on the server and in secure device storage on your phone
• Sessions expire automatically and can be revoked by signing out
• Access to records is restricted by role-based permissions

No method of transmission or storage is completely secure. While we take these measures seriously, we cannot guarantee absolute security.

• Account data: retained while your account is active and for a reasonable period after it is closed
• Session tokens: expire automatically and are deleted after expiry
• Business records: retained by the operating company for as long as needed for its operations and for any period required by commercial and tax law

When information is no longer required, it is deleted or anonymised.

Depending on where you live, you may have the right to access your personal data, to have inaccurate data corrected, to request deletion, to object to or restrict processing, and to receive a copy of your data in a portable format.

Because accounts are created and managed by the company you work for, please contact your system administrator first for account changes or deletion. You can also write to us and we will assist or direct your request to the appropriate party.

Vivamus is a workplace application intended for adult employees and authorised users. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided information to us, contact us and we will delete it.

Information may be stored or processed on servers located outside your country of residence, where data protection rules may differ. Where such transfers take place, we apply appropriate safeguards, including standard contractual clauses where required by applicable law.

We may update this policy to reflect changes in the app, our practices or legal requirements. Material changes will be announced on this page and, where appropriate, within the app. The "Last Updated" date shows when the policy was last revised. Continued use of the app after an update means you accept the revised policy.

For questions about this policy or how the app handles information, contact us:

• Privacy: privacy@ofymedia.co
• Support: support@ofymedia.co
• Website: https://ofymedia.co
• Developer: OFY MEDIA CO LIMITED