Privacy Policy — Tixmondo Admin Mobile App

Privacy Policy for Tixmondo Admin Mobile App

Last updated: April 21, 2026

This Privacy Policy describes how SC Tixmondo SRL ("we", "us", "our") collects, uses, and protects your information when you use the Tixmondo Admin mobile application ("the App"), available on Android. The App is designed for event organizers and business administrators to manage their businesses, events, and ticket validation on the Tixmondo platform.

1. Information We Collect

1.1 Account Information

When you log in, we collect:

• Email address and password (for email-based authentication)
• Google account information — name, email, and profile photo (if you sign in with Google OAuth)

1.2 Device Information

We automatically collect device-related data to ensure app security and functionality:

• Device brand, model, and manufacturer
• Operating system and version
• App version
• A device fingerprint (derived from brand, model, OS name, OS version, and device year class — no hardware identifiers like IMEI or serial numbers)

1.3 Network Information

When you log in or perform authenticated actions, we collect:

• IP address
• Approximate location derived from IP (city, country, region)
• Internet service provider (ISP)

This information is obtained from a third-party IP geolocation service and is used for security auditing and fraud prevention.

1.4 Camera Data

The App uses your device camera exclusively to scan QR codes and barcodes on tickets and member cards for event check-in. We do not capture, store, or transmit photos or video. Camera access is requested at runtime and can be revoked at any time in your device settings.

1.5 Push Notification Token

We collect your Firebase Cloud Messaging (FCM) device token to send you push notifications related to your business activities (e.g., new orders, event updates). You can disable notifications at any time in your device settings.

1.6 Local Storage

We use secure on-device storage (Expo SecureStore) to persist:

• Your authentication token (for keeping you logged in)
• Your preferred language setting (Romanian / English)
• Your selected environment (UAT / Production)

This data is stored locally on your device and is not transmitted to third parties.

2. App Permissions

3. How We Use Your Information

We use the collected information to:

• Authenticate you and maintain your session
• Authorize your access to businesses you administer
• Enable QR/barcode scanning for ticket and member card validation
• Send push notifications about business activities
• Detect and prevent unauthorized access and fraud
• Improve the App performance and stability

4. Data Sharing

We do not sell, trade, or rent your personal information. We may share data with:

• Google (Firebase Cloud Messaging) — push notification delivery
• Google (OAuth) — only if you choose Google Sign-In; we receive your public profile information
• IP geolocation service (ip-api.com) — your IP address is sent to determine approximate location for security purposes

All third-party services are used solely for the purposes described above.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• All communication between the App and our servers uses HTTPS encryption
• Authentication tokens are stored in secure device storage (not plain text)
• Passwords are never stored on the device

6. Data Retention

Your account data is retained as long as your account is active on the Tixmondo platform. Authentication tokens are invalidated upon logout. You can request deletion of your account and associated data by contacting us.

7. Children Privacy

The App is not intended for use by children under 16. We do not knowingly collect personal information from children.

8. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing
• Data portability

To exercise these rights, contact us at the address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

SC Tixmondo SRL
Email: support [at] tixmondo.com
Website: https://tixmondo.ro