Ambry Hill Technologies ("we," "our," or "us") operates the Vista Kiosk mobile application (the "App"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our App and the choices you have associated with that data.

By using the Vista Kiosk App, you agree to the collection and use of information in accordance with this policy.

The Vista Kiosk App collects the following types of personal information:

1. Authentication Information
   • Username and password (stored locally on your device if "Remember Me" is enabled)
   • Authentication tokens (access tokens and ID tokens) for session management
2. User Profile Information
   • Name (first name and last name)
   • Email address
   • Phone number
   • Job title and role
   • Employee ID
   • PIN number
   • Digital signature
   • Profile images
   • Address information (street address, city, state, country, postal code)
   • Time zone
   • System roles and permissions
   • Certifications and licenses
3. QR Code Scan Data
   • QR code content scanned through the camera
   • Timestamp of scans
   • Scan history and records
4. Work-Related Data
   • Bill of Materials (BOM) information
   • Labor recording data
   • Work order information
   • Transactional data
5. Device Information
   • Device identifiers
   • Operating system information
   • App version information

• Session data and authentication tokens
• App usage data for functionality purposes
• Error logs and diagnostic information

We use the collected information for the following purposes:

1. Authentication and Access Control
   • To authenticate users and manage access to the App
   • To maintain secure sessions
   • To remember login credentials (if "Remember Me" is enabled)
2. Core App Functionality
   • To scan and process QR codes for user identification
   • To fetch and display user information
   • To record and manage labor data
   • To process Bill of Materials (BOM) information
   • To manage work orders and transactions
3. Service Improvement
   • To improve app performance and functionality
   • To troubleshoot technical issues
   • To ensure app security

The Vista Kiosk App requires the following permissions:

1. Camera Permission
   • Purpose: To scan QR codes and barcodes for user identification and data entry
   • Usage: The camera is used exclusively for scanning QR codes and barcodes within the App. We do not record, store, or transmit any images or video from your camera.
2. Internet Permission
   • Purpose: To connect to backend services and APIs for authentication, data synchronization, and app functionality
   • Usage: Required for the App to function properly and communicate with our servers.
3. Storage Permission (Write External Storage)
   • Purpose: To store app data, cached information, and user preferences locally on your device
   • Usage: Used for local data storage and app functionality.
4. Audio Permission (Record Audio)
   • Purpose: This permission may be declared by third-party libraries used in the App
   • Usage: The Vista Kiosk App does not actively record audio. This permission is not used by our application code. If this permission is present, it may be a requirement of a third-party library dependency, but we do not collect, store, or transmit any audio data.

• Authentication credentials (username/password) are stored locally on your device only if you enable the "Remember Me" feature
• App state and user preferences are stored locally using secure storage mechanisms
• All locally stored data is encrypted and protected

• User data and work-related information are stored on secure servers hosted by AWS (Amazon Web Services)
• All data transmission is encrypted using industry-standard SSL/TLS protocols
• Authentication is handled through AWS Cognito, which provides secure identity management

The Vista Kiosk App uses the following third-party services:

1. AWS Amplify and AWS Cognito
   • Purpose: User authentication and identity management
   • Data Shared: Authentication credentials and tokens
   • Privacy Policy: https://aws.amazon.com/privacy/
2. AWS API Gateway
   • Purpose: Backend API services
   • Data Shared: User data, work orders, labor records, and other app-related data
   • Privacy Policy: https://aws.amazon.com/privacy/
3. Backend API Services
   • Purpose: Various backend services for user management, labor recording, BOM management, and other app features
   • Data Shared: Relevant data for each service functionality
   • Privacy Policy: https://www.ambryhill.com/privacypolicy

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

1. Service Providers: We may share data with third-party service providers (such as AWS) who assist us in operating the App and providing services, subject to confidentiality agreements.
2. Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
3. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

You have the following rights regarding your personal information:

1. Access: You can access your personal information through the App or by contacting us.
2. Correction: You can update or correct your personal information through the App or by contacting us.
3. Deletion: You can request deletion of your personal information by contacting us, subject to legal and operational requirements.
4. Opt-Out: You can disable the "Remember Me" feature at any time to prevent local storage of credentials.
5. Permission Control: You can revoke app permissions through your device settings, though this may affect app functionality.

• Authentication tokens are retained for the duration of your active session
• Locally stored credentials are retained until you disable "Remember Me" or uninstall the App
• User data and work records are retained as necessary for business operations and legal compliance
• We retain data only as long as necessary to fulfill the purposes outlined in this Privacy Policy

The Vista Kiosk App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the App, you consent to the transfer of your information to these countries.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Ambry Hill Technologies

• Email: legal@ambryhill.com
• Address: 134 Adams Street South, Cambridge, MN 55008
• Phone: +1 612-367-8742

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Google Play Store requirements
• Other applicable data protection laws