App Privacy Policy

1. Introduction

Mahakaleshwar Infratech Pvt. Ltd. We respect the privacy of users of the MFUEL Fuel Operator Application.

This Privacy Policy explains how information is collected, used, stored, and protected when authorized Fuel Operators use the Application.

The Application is an Android-only internal business application intended exclusively for authorized Fuel Operators who are created and managed by the organization's administrator. The Application enables Fuel Operators to log in, record fuel-filling transactions for vehicles, and view the history of fuel transactions submitted by them.

By accessing or using the Application, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to information collected through the MFuel Fuel Operator Mobile Application.

The Application is intended only for authorized internal users of the organization. User accounts are created, managed, activated, or deactivated by an authorized administrator.

3. Information We Collect

To provide the Application's functionality, we may collect and process the following information:

3.1. User Account and Profile Information
The Application may collect or process information associated with the Fuel Operator's account, including:

Name
Employee ID
Mobile number, email address, or username, where applicable
User role and access permissions
Login and authentication information
Account status

User accounts are created and managed by the organization's authorized administrator.

3.2 Vehicle and Fuel Transaction Information
When a Fuel Operator submits a fuel form, the Application may collect information including:

Vehicle Registration Number
Vehicle details
Fuel quantity
Fuel amount or cost, where applicable
Odometer or meter reading, where applicable
Date and time of fuel filling
Fuel station details, where applicable
Notes, remarks, or other information entered in the fuel form
User IDs of the Fuel Operator submitting the transaction

This information is collected for operational record keeping, fuel management, reporting, auditing, and related organizational purposes.

3.3 Location Information
The Application may access and collect the Fuel Operator's device location when the user is filling out or submitting a fuel form.

Location information may include:

GPS-based location
Approximate or precise location, depending on device settings and permissions
Latitude and longitude
Date and time associated with the location record

Purpose of Location Collection

Location information is used to:

Record the location where a fuel transaction is performed or submitted
Validate fuel-filling activities
Maintain accurate operational records
Support internal monitoring, verification, reporting, and auditing
Help prevent inaccurate or unauthorized fuel transaction entries

The Application requests location permission through the Android permission system. Users can manage location permissions through their device settings. However, location access may be required to complete or submit certain fuel transaction forms.

The Application does not use location information for advertising purposes. The Application does not sell location information to third parties.

Unless explicitly stated otherwise and technically implemented by the Application, location information is collected only when required for the fuel-filling workflow and is not used for continuous background tracking.

3.4 Device and Technical Information
For security, troubleshooting, and application performance purposes, we may collect limited technical information such as:

Device type and model
Android operating system version
Application version
Device identifiers or application-specific identifiers, where required
IP address
Login activity
Error logs and diagnostic information

4. How We Use Information

Information collected through the Application may be used for the following purposes:

To authenticate authorized Fuel Operators
To provide secure access to the Application
To enable users to submit vehicle fuel-filling forms
To maintain fuel transaction records
To allow Fuel Operators to view their submitted fuel transaction history
To associate fuel transactions with the relevant Fuel Operator and vehicle
To record and verify the location of fuel-filling activities
To support internal operational monitoring and reporting
To perform audits and investigate discrepancies
To maintain the security and integrity of the Application
To troubleshoot technical issues and improve application performance
To comply with applicable legal, regulatory, contractual, or organizational requirements

We process information only for legitimate business and operational purposes related to the organization's fuel and fleet management activities.

5. Location Permission

The Application may request the following Android permission:

Location Permission
This permissio n is used to access the user's location while completing or submitting a fuel transaction form. The Application will request location access through the standard Android permission process. The user may allow or deny the permission based on the options provided by the Android operating system. If location permission is denied, certain Application features, including the submission of fuel forms requiring location verification, may not function properly. We recommend that the Application request only the minimum level of location
access required for its functionality.

6. How Information Is Shared

We do not sell, rent, or trade users' personal information.
Information collected through the Application may be shared only in the following circumstances:

6.1 Within the Organization
Information may be accessible to authorized personnel, including:

Administrators
Fleet managers
Operations teams
Finance or accounting personnel, where applicable
Auditors
Other authorized organizational personnel with a legitimate business need

Access is subject to the organization's roles, permissions, and internal policies.

6.2 Service Providers
We may use authorized third-party service providers for services such as:

Cloud hosting
Database storage
Application infrastructure
Authentication
Analytics
Error monitoring
Technical support

Such service providers may process information only as necessary to provide their services and are expected to protect the information in accordance with applicable contractual and legal requirements.

6.3 Legal Requirements
We may disclose information where required to:

Comply with applicable laws or regulations
Respond to lawful requests from government or regulatory authorities
Protect the rights, property, or safety of the organization or its users
Investigate fraud, misuse, security incidents, or unauthorized activities

7. Data Storage and Security

We take reasonable administrative, technical, and organizational measures to protect information against:

Unauthorized access
Unauthorized disclosure
Loss
Misuse
Alteration
Destruction

Security measures may include:

Secure authentication
Role-based access control
Encrypted communication using secure network protocols
Restricted access to backend systems
Secure server and database infrastructure
Monitoring and logging of system activity

However, no electronic storage or transmission method can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

8. Data Retention

We retain information only for as long as necessary to:

Provide and operate the Application
Maintain fuel and vehicle transaction records
Meet operational and auditing requirements
Resolve disputes or investigate discrepancies
Comply with applicable legal, regulatory, accounting, or contractual obligations

The exact retention period may depend on the organization's internal data retention policies and applicable legal requirements.
When information is no longer required, it may be securely deleted, anonymized, or archived in accordance with applicable policies and requirements.

9. User Access and Account Management

The Application is intended for authorized internal users.
Fuel Operator accounts are created and managed by the organization's administrator. Depending on the organization's policies and applicable laws, users may contact the administrator or the contact details provided below to request:
Access to their personal information

Correction of inaccurate information
Information about how their data is processed
Account deactivation
Deletion of eligible personal information

Certain information, including fuel transaction records, audit records, and business records, may need to be retained even after an account is deactivated or deleted.

10. Account Deletion

Because the Application is intended for internal organizational use and user accounts are created and managed by an administrator, users may request account deactivation or deletion by contacting:
Email: hr@mahakaleshwarinfratech.com
The organization will review the request and process it in accordance with applicable laws, contractual obligations, operational requirements, and data retention policies. Deletion of a user account may not result in the deletion of all historical fuel transaction records where such records must be retained for business, accounting, auditing, security, or legal purposes.

11. Children's Privacy

The Application is intended exclusively for authorized organizational personnel and is not designed or intended for use by children. We do not knowingly collect personal information from children through the Application.

12. Third-Party Services

The Application uses third-party technology and service providers for hosting, authentication, analytics, crash reporting, notifications, and other technical purposes. Where third-party services are used, information may be processed in accordance with the applicable service provider's privacy practices and contractual arrangements with the organization.
The third-party services used by the Application include:

Firebase Cloud Messaging (FCM) – used to deliver push notifications to your device.
Device Camera – used to allow you to capture or upload images (e.g., for profile photos, documents, or other in-app content). Images are only accessed when you actively choose to take a photo or upload one; the Application does not access your camera in the background.
Device Geolocation Services – used to determine your current latitude and longitude in order to provide location-based features within the Application. Location data is only collected when the relevant feature is in use and with your permission, as required by your device's operating system.
Google Firebase (Google LLC) – may also provide additional backend infrastructure (such as hosting, authentication, or analytics) supporting the Application. Firebase's data processing is governed by Google's Privacy Policy (https://policies.google.com/privacy) and Firebase's terms.

We recommend reviewing the privacy policies of these third-party providers for more information on how they collect, use, and protect your data:

Firebase / Google: https://policies.google.com/privacy
Firebase Cloud Messaging: https://firebase.google.com/support/privacy

13. International Data Transfers

Depending on the location of the organization's infrastructure and service providers, information may be processed or stored in countries other than the user's location. Where applicable, the organization will take reasonable measures to ensure that such transfers are handled in accordance with applicable data protection requirements.

14. Your Choices and Rights

Depending on applicable law, users may have rights regarding their personal information, including the right to:

Request access to personal information
Request correction of inaccurate information
Request deletion of eligible personal information
Request information regarding the processing of personal information
Withdraw certain permissions through Android device settings

Some rights may be subject to legal, contractual, operational, security, or record-retention requirements.
For privacy-related requests, users may contact us using the details provided in the "Contact Us" section below.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to the Application
Changes to our data processing practices
New features or permissions
Legal or regulatory requirements

When this Privacy Policy is updated, the "Last Updated" date at the top of this page will be revised.
Users are encouraged to review this Privacy Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your information, please contact:
Company Name: Mahakaleshwar Infratech Pvt. Ltd.
Application Name: MFuel
Email: info@mahakaleshwarinfratech.com
Website: https://www.mahakaleshwarinfratech.com
Address: Sector M31 A Ashiyana Colony, Kanpur Road, Lucknow, U.P.

17. Consent and Acknowledgment

By using the Application, you acknowledge that you have read and understood this Privacy Policy and understand how information is collected, used, stored, and protected as described above.
Where consent is required by applicable law or the Android operating system, the Application will request the appropriate permission or consent before accessing the relevant information.