In short
- FabSphere is a work app. You can only use it with an account your company's administrator has created and enabled for mobile.
- We collect only what the app needs to work: your sign-in, and the business data you view or enter.
- No advertising, no analytics, no tracking, and we never sell data.
- Photos leave your phone only when you choose to send one: to search for a matching fabric (used for the search, then discarded), or to attach it to an item or an expense bill (stored in your company's FabWorld ERP).
Who we are
FabSphere is published by Gyanendra Singh, Navi Mumbai, Maharashtra, India ("we", "us"). It is the mobile companion to FabWorld ERP, a business system for the textile trade.
Your company, the FabWorld ERP customer that gave you your account, decides what business data goes into the system and who can see it. For that business data, your company is the data owner (the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023), and we process it on their behalf under our agreement with them.
What the app collects, and why
| Information | Why | Where it is kept |
|---|---|---|
| Username and password | To sign you in. The password is sent over an encrypted (HTTPS) connection and checked by the server. The app never stores it. | Checked on our servers only. Passwords are stored there in hashed form, never as plain text. |
| Sign-in tokens | So you stay signed in without retyping your password. | In your phone's secure, encrypted storage (iOS Keychain / Android Keystore). Removed when you sign out. |
| App PIN and unlock setting (if you turn them on) | To unlock the app quickly. | Only on your phone, in encrypted storage. Never sent to us. |
| Business data: stock, rolls, godowns, purchase orders, suppliers, customers | This is what the app shows you, and what you record (receiving and sending stock, reviewing or approving purchase orders, with any rejection reason you type). | On your company's FabWorld ERP servers. The app keeps it in memory while you use it and does not save copies on the phone. |
| Your name, user ID, roles and company | To show who is signed in, and to record who approved or changed a document (an audit trail your company relies on). | On your company's FabWorld ERP servers. |
| Technical request details (time, address the request came from, the screen or action requested) | To keep the service secure and working, and to investigate faults. | In our server logs. |
Camera, photos and Face ID / fingerprint
The app asks for each permission only when you first use the feature that needs it. You can refuse or withdraw any of them in your phone's Settings. The rest of the app keeps working.
Camera: scanning roll labels
Labels and barcodes are read on your phone. The camera picture is not sent anywhere, only the code that was read. On Android the reader uses Google's on-device ML Kit, which may send Google anonymous diagnostic information about how the scanner performs. It never sends the camera image.
Camera and photo library: searching by fabric photo
When you search with a photo, the app sends the photo (reduced in size) and a short numeric "fingerprint" of it to your company's FabWorld ERP server, which compares it with the item photos in your catalogue. The search photo is used only for that search and is not stored.
Camera and photo library: item photos and expense bills
If your role allows it, you can take or choose a photo to attach to an item (SKU) or to an expense bill. That photo is uploaded to your company's FabWorld ERP and stored there with the item or the expense, where other users of your company with access to it can see it. For expense bills the photo is also read automatically to pre-fill the amount, date and supplier, which you check before saving. Your company decides how long these records are kept.
Face ID, Touch ID and fingerprint
Your phone's operating system checks your face or fingerprint. The app is only told "success" or "failed". We never receive or store any biometric data.
What we do not do
- No advertising, and no advertising or tracking identifiers.
- No analytics or behaviour tracking, and no third-party SDKs that collect data.
- No location tracking and no access to your contacts, messages or files.
- We do not sell, rent or trade personal data.
Who we share it with
- Your company: business data you enter is visible to authorised users in your company, according to the roles your administrator sets.
- Hosting and email providers we use to run the service (for example, to send password-reset emails), only as needed and under confidentiality obligations.
- Authorities, where the law requires it.
Where it is stored and how it is protected
Data is stored on servers in India. All traffic between the app and our servers is encrypted with HTTPS. Access to each company's data is limited to that company's users, and each action is checked against the user's role on the server.
How long we keep it
Business records are kept for as long as your company's FabWorld ERP account is active, and afterwards as required by law (for example, Indian tax and accounting rules). Sign-in tokens on your phone are deleted when you sign out. Server logs are kept for 90 days.
Your rights and choices
- Access, correct or delete: ask your company's FabWorld ERP administrator, who manages your account and your company's records. You can also write to us at the address below and we will work with your company to respond.
- Deleting your account: accounts are created and removed by your company's administrator. To have your account and personal details removed, ask your administrator or email us. Business records such as approved documents may be kept where the law requires it.
- Withdrawing permissions: camera, photos and Face ID / fingerprint can be switched off at any time in your phone's Settings.
- Signing out removes your sign-in tokens from the phone.
Children
FabSphere is a business app for employees of FabWorld ERP customers. It is not intended for anyone under 18, and we do not knowingly collect children's data.
Changes to this policy
If we change this policy, we will update the date at the top of this page. For significant changes, we will also tell your company's administrator.
Contact and grievance officer
For privacy questions, requests or complaints, contact our Grievance Officer:
Gyanendra Singh
Navi Mumbai, Maharashtra, India
Email: support@gstpm.in
We aim to acknowledge requests within 7 days and resolve them within 30 days.