Privacy Policy

1. Introduction

Welcome to AMS BNI (Attendance Management System), developed and operated by Kshitij Software ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application and related API services (collectively, the "Services").

By accessing or using the AMS Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information to provide, maintain, and improve our Attendance Management System for chapter members, coordinators, treasurers, and presidents:

• Personal Identification Data: Full Name, Email Address, Phone/Mobile Number, Business Name, and Business Category.
• Chapter Role & Credentials: Assigned role (e.g., Admin, President, Vice President, Treasurer, Attendance Coordinator, Member), chapter affiliation, and encrypted password hash.
• Attendance & Meeting Activity: Meeting attendance status (present, absent, substitute), substitute assignments, visitor host details, and check-in dates.
• Financial Accounting Records: Member weekly fee payment records, visitor fee records, venue expense payments, and general chapter expense entries.
• Device & Technical Diagnostics: IP addresses, login rate-limiting timestamps, mobile application version, and API authentication token tokens.

3. How We Use Your Information

We strictly utilize collected data for core administrative and operational functions of the AMS system:

• To authenticate user identity and grant appropriate role-based permissions.
• To record, calculate, and display meeting attendance statistics and percentage reports.
• To compute chapter financial statistics including total fees collected, venue payments, and closing balances.
• To generate printable PDF summary reports for chapter leadership transparency.
• To protect against rate-limiting abuses, brute-force attacks, and unauthorized system access.

4. Data Sharing & Third Parties

We do NOT sell, trade, rent, or monetize user data to any third-party advertisers or marketing networks.

Your information is shared only under the following limited circumstances:

• Within Your Assigned Chapter: Chapter leaders (Presidents, Vice Presidents, Treasurers, Coordinators) can view member attendance records and fee collection status to manage chapter operations.
• Legal & Regulatory Obligations: We may disclose information if required by applicable law, subpoena, or government regulation.

5. Data Security

We implement robust physical, technical, and administrative security measures to protect your personal information:

• All API communications are encrypted using HTTPS (TLS 1.3).
• Passwords are hashed using industry-standard BCRYPT algorithms with salted hashes.
• Authentication tokens are securely stored using encrypted storage mechanisms on mobile devices (`FlutterSecureStorage`).
• Rate-limiting mechanisms prevent brute-force login attempts and unauthorized credential scanning.

6. Data Retention & Account Deletion Rights

We retain user personal data for as long as your chapter account remains active or as needed to maintain accurate historical attendance records for your chapter.

Account Deletion & Data Rights:

You have the right to request access to, correction of, or permanent deletion of your personal account data at any time. To submit a data removal request, contact our Privacy Officer at kshitij.software@gmail.com. Upon verification, we will process your deletion request within 30 business days.

7. Children's Privacy

Our Services are intended exclusively for adult business professionals (ages 18 and older). We do not knowingly collect or solicit personal information from children under 18 years of age.

8. Changes to This Privacy Policy

We may update our Privacy Policy periodically. Any changes will be posted on this page with an updated "Effective Date". We encourage you to review this policy periodically.

9. Contact Us

If you have any questions, concerns, or inquiries regarding this Privacy Policy or our data security practices, please contact us at: