Flowbitz Privacy Policy
How the Flowbitz mobile app handles personal data.
Last updated: 02-10-2026
This policy explains how the Flowbitz mobile app handles personal data. Flowbitz is made by Dxbitz Technology in Dubai, United Arab Emirates. If you have a question about this policy, email info@dxbitz.com.
How Flowbitz works
Flowbitz is a work app. Your employer gives you an account on its own ERPNext server, and the app connects to that server. Your employer runs the server. It decides what is kept there and who in the company can see it. In this policy, "your company" means your employer.
Some companies ask Dxbitz Technology to host or support their server. When we do, we act only on your company's instructions.
What the app collects and why
Your account details
Your name, work email, phone number and employee details, plus your username and password when you sign in. Used to run your account and show your records.
Your PIN
Used to lock and unlock the app. Your company's server keeps it only in hashed form.
Device details
Your phone's model, platform, app version and a device ID, sent when you sign in. Used to link your account to your phone, so your company's admins can see and manage linked phones.
Your location
When you check in or out, start or end a site visit, or claim mileage, your location is saved with that record. While the home screen is open, the app also uses it to suggest nearby customer sites to check in at. That lookup is not saved. Flowbitz does not track your location in the background.
Work records you submit
Things like leave requests, expense claims and other HR requests, tickets, customer notes, leads, quotations and inspections. Some contain financial details. Documents you upload may contain health information, such as a medical certificate.
Photos, videos, files and voice messages
Only the ones you choose to attach or record, to add them to a record or a chat.
Chat messages and reports
Messages you send to colleagues, and any reports you make about chat content.
Face map
Only if your company turns on face check-in and you enrol. A face map is a set of numbers that describes your face. It is used to confirm it is you when you check in. It is stored encrypted on your company's server and never on your phone. The photo itself is never uploaded or kept.
Searches and actions
Search terms are sent to the server to find results and are not saved. Actions such as approving a request are saved as part of that record.
Basic diagnostics
Barcode scanning and face detection run on your phone using Google ML Kit. ML Kit sends Google basic diagnostic and usage information about those features, such as your phone's model and OS version, the app version and an installation ID. Google says it does not pass this on to anyone else.
What stays on your phone
- The address of your company's server and your sign-in details for it.
- Your PIN, only if you turn on fingerprint or face unlock. It is kept encrypted in the phone's secure storage.
- Drafts you have not sent yet, such as an unfinished site visit or inspection, with their photos.
- Your cart, display settings and recently used emoji.
- PDFs you open, such as payslips, saved in the app's cache so they can be shown.
App data is left out of phone backups. Uninstalling the app removes all of it.
Who receives your data
- Your company. Everything the app sends goes to your company's server. People in your company see it according to the permissions your company sets.
- Dxbitz Technology, only if it hosts or supports your company's server, and only on your company's instructions.
- Google. The app loads its fonts from Google Fonts, so Google can see your phone's IP address. Google ML Kit sends basic diagnostic and usage information, as above.
- Websites linked in chat. When a message contains a link, the preview image is loaded from that website, which can see your phone's IP address.
- Gravatar. When a lead with an email address is saved, ERPNext on your company's server checks Gravatar for a profile picture. It sends a scrambled (hashed) form of that email address.
We do not sell personal data. The app has no ads, no advertising ID and no analytics of its own, and it does not send your data to AI services.
Permissions the app asks for
- Camera: to take photos for records and chat, scan barcodes, and for face check-in.
- Location: for check-in and check-out, site visits, mileage and nearby site suggestions, as above.
- Microphone: to record voice messages in chat.
- Notifications: to alert you about approvals, messages and reminders.
- Fingerprint or face unlock: optional. The check happens on your phone. The app never receives your fingerprint or your face from it.
You can turn any of these off in your phone's settings. The related feature then stops working.
Chat rules and reports
Chat is for work. You agree to the chat rules before your first message. You can report a message or a person, and block someone so they cannot message you directly. Reports go to your company's admin, who decides what to do. The person you report cannot see your report.
How we protect your data
- Everything the app sends to your company's server is encrypted in transit (HTTPS).
- Your face map is stored encrypted. Your PIN is kept hashed on the server and encrypted on your phone.
- When an admin unlinks a phone, its access keys stop working straight away.
- App data is left out of phone backups.
How long data is kept
Your company decides how long the records on its server are kept. In addition:
- When you remove your face data, the face map is deleted from the server straight away.
- Notifications you dismiss are deleted 30 days later.
- Uninstalling the app removes everything it kept on your phone.
Your choices and rights
- You can remove your face data yourself in the app: open Profile, then Face recognition.
- To see, correct or delete other data, or to unlink a phone, contact your company's admin.
- You can also email info@dxbitz.com. If your data is held on your company's server, we will pass your request to your company.
Children
Flowbitz is a work app for employees. It is not meant for children.
Changes to this policy
If we change this policy, we will update it on this page and change the date at the top.
Contact
Dxbitz Technology, Dubai, United Arab Emirates
Email: info@dxbitz.com