NATrack Privacy Policy

Scope and the parties involved

This policy covers the NATrack Android app (package com.nafoods.app) and the NATrack web app used on iPhone and iPad at nagreen.nafoods.com/ktv.

NAFOODS PASSION and NaGreen are both member companies of Nafoods Group. NAFOODS PASSION publishes the app on Google Play (developer account NFG_Natech); NaGreen decides the purposes and means of processing personal data in NATrack and is responsible for it.

Personal data contact: datmt@nafoods.com.

Who uses NATrack

NATrack is a work app for field technicians, growing-area staff and other people authorised by the organisation. You cannot create an account in the app. Accounts are issued and disabled by the organisation's administrators. The app is not intended for children.

Data we collect

Account and sign-in

• Name, email, phone number (if you sign in with it), account ID, staff ID, role and permissions.
• Your password is sent over an encrypted connection (HTTPS) to the internal management system for verification. The app's server does not store it.
• To keep you signed in, we use Google Firebase Authentication with an account identifier. The Android app also sends your display name.
• Fingerprint or face sign-in: the app does not collect biometric data. Verification happens on the device; the server only stores a public key used to check signatures.

Location, including in the background

When route tracking is enabled for your account, NATrack collects precise location, including when the app is closed or not in use. While recording, a persistent "tracking" notification is always shown.

• When it records follows the work schedule set by the organisation. The schedule currently in effect is shown to you in the app, on the explanation screen before tracking is turned on.
• Outside the schedule, the app records only while you have a clocked-in overtime shift, and stops after a maximum time set by the organisation.
• If the organisation turns the schedule off, or the app has not yet loaded it, location may be recorded continuously while tracking is on.
• Each location point includes coordinates, accuracy, time, speed, altitude, heading, whether you are moving, battery level and device clock information. The clock information is used to detect time tampering.
• Detecting whether you are still or moving (Android): if you grant the "Physical activity" permission, the app uses Google Play services to tell whether you are still or moving. While you are still, the app records less often and switches to a battery-saving location mode. Without this permission, the app estimates it from your location. The app only stores and sends, with each location point, whether you were moving or still; it reads no other health data.
• Entering and leaving work areas: the app records when you enter or leave nearby work areas (plots), with the coordinates at that moment.
• Attendance records your location when you clock in or out, including approximate location if you only granted approximate access. The app also records whether the device is using mock locations.
• Other features that use location:
  • Weather: the app sends your location to the organisation's server, which rounds the coordinates to about 1 km before requesting the forecast, so the forecast provider does not receive your IP address or device details. Only the Android app version 0.1.0 (26102303) and earlier requests Open-Meteo directly, with coordinates rounded to about 110 m.
  • "Nearby" suggestions use coordinates rounded to about 110 m.
  • Farming logs and field notes store the location where they were made.
  • When you choose to share your location in a message, the coordinates are sent with it.
• Tracking events: the app records events such as turning tracking on or off, losing location signal, pausing outside working hours, and acknowledging the tracking notice.

Photos, videos and files

The app only collects photos, videos (up to 60 seconds) and files (up to 25 MB) that you choose to take or pick. They are used for field notes, plot records, tasks, messages and household records. Photos and videos may contain metadata recorded by your device, such as when they were taken.

Voice recordings (microphone) — web version only

Apart from the sound in videos you record (see above), only the web version of NATrack uses the microphone to record audio, and only when you tap the record button to attach a spoken note to a yield report (up to 5 minutes per recording); you can also pick an existing audio file from your device. The Android app does not request microphone access. A recording stays on your device until it can be sent to our servers, and is then stored with the yield report. Only people in your organization who are allowed to view that report can listen to it, and recordings are not used for any other purpose. You can refuse microphone access; everything else keeps working.

Data about farming households and partners that you enter

At work you may enter information about other people, including:

• name, gender, phone number;
• commune or ward, province, address, year of birth;
• citizen ID number, issue date and place, photos of both sides of the ID card;
• notes and household documents.

When you scan the QR code on an ID card with Google's scanner, the app only receives the decoded text; the form keeps only the year of birth. We process this data as the organisation managing the growing areas. Enter it only with the person's consent or another lawful basis.

Messages

• What you send in the app's inbox, attachments, private notes and @-mentions.
• For conversations with households or partners linked to Zalo: your replies are sent through the Zalo platform (VNG Corporation). Messages and files they send via Zalo are stored in our system.
• Private notes are internal only and are never sent to external channels.

Device and technical logs

• The app creates its own device identifier. We store it together with the manufacturer, model, device name, operating system, app version, language and time zone. The organisation's administrators can see the list of devices signed in to your account, to limit the number of devices and revoke a lost one.
• The app does not read IMEI, Android ID, MAC address or advertising ID.
• Push notification token (Firebase Cloud Messaging), or the browser push subscription for the iPhone version.
• Diagnostic information sent with each request: build number, release channel, device time. Security logs record IP address and app/browser details for certain actions (biometric sign-in, device revocation, tracking policy changes).

What we do not do

• No advertising.
• No selling of data.
• No advertising profiles.
• Usage analytics and crash reporting to third parties are currently turned off. If we turn them on, we will update this policy first.

Why we use your data

• Authentication, access control and account protection.
• Recording work routes, attendance, work-area alerts, and detecting location or time fraud.
• Managing growing areas, plots, households and farming logs.
• Communication between technicians, cooperatives, households and partners.
• Managing signed-in devices (device limits, revoking lost devices) and sending work notifications.
• Helping you when you report a problem.

Legal basis for each purpose: we process data on the basis of (1) the employment or service contract between you and the organisation — your account, attendance, work routes and work communication; (2) your consent, requested in the app before you grant background location, notification and camera permissions; (3) the consent of households and partners when they join a cooperative partnership, for their data entered by our staff; (4) legal obligations, for example keeping attendance and accounting records.

Who can see your data

• You: your own route, attendance and the data you entered, in the app.
• Authorised managers in the organisation:
  • notifications when you enter or leave a work area, with the area name and device model;
  • notifications about tracking being turned on or off, or losing signal;
  • your attendance records and list of signed-in devices in the internal management system.
• People viewing a conversation: messages are visible to its participants and to staff assigned to follow it.

Sharing with third parties

We only share data with service providers needed for the app to work:

Apart from this, we only provide data to state authorities when required by law.

The organisation's servers are located in Vietnam. The providers listed above (Google, Esri, Amazon Web Services, OpenFreeMap, MET Norway, NASA, Open-Meteo, Zalo) may process the data they receive on their own infrastructure, including outside Vietnam.

Storage and security

• Where data is stored: on the organisation's servers at cloud infrastructure of FPT Smart Cloud Company Limited in Vietnam. Photos and files are kept in the organisation's self-hosted storage.
• In transit: all connections between the app and the servers are encrypted with HTTPS.
• On your device:
  • The app keeps some data so it can work offline.
  • Signing out deletes the location queue, caches and your session. Some offline data (for example messages or actions not yet sent) stays on the device until it is sent or you uninstall the app.
  • The app does not allow its data to be backed up to your device's cloud account.
• Server backups: some systems are backed up daily, keeping at most the 14 most recent copies.
• Retention: No fixed retention period has been set yet for each data category. When one is set, we will publish it in an update to this policy. The system does not yet delete data automatically after a set period; data is kept until it is deleted at your request or under the organisation's procedures.

Your rights

Under Vietnamese personal data protection law, you have the right to:

• be informed about how your data is processed;
• give or withdraw consent;
• access, correct and request deletion of your data;
• restrict or object to processing;
• lodge a complaint as provided by law.

You can turn off location permission at any time in your device settings. Route tracking and location-based attendance will then stop working, and the system records that tracking was turned off.

To request deletion of your account or data, see Data deletion request.

Changes to this policy

When this policy changes, we update this page, show the new effective date, and notify you in the app if the change affects your rights.

Contact

• Personal data: datmt@nafoods.com
• General support: datmt@nafoods.com
• Address: Buôn Jok, Xã Cư M’gar, Tỉnh Đắk Lắk, Việt Nam