Privacy Policy

1. Introduction

Jamjoom Medical ("Company", "we", "our", or "us") operates the Pulse Flow application (including the web application and the mobile companion app com.jamjoom.pulseflow). This Privacy Policy outlines how we collect, use, store, and protect user data when you use our mobile and web applications.

Pulse Flow is an enterprise Sales Force Excellence (SFE) and CRM application designed for authorized sales representatives, supervisors, managers, and executives within our organization.

2. Information We Collect

A. Account and Profile Information

When you log in to Pulse Flow, we process information associated with your corporate account:

• Full Name and Corporate Email Address
• Job Title, Department, and Reporting Hierarchy
• Business Unit (SBU), Region, and City Assignment
• User Profile Avatar and Authentication Tokens

B. Location Data (Precise and Approximate Geolocation)

• Foreground Location: Captured when a user explicitly initiates a "Check-In" or "Check-Out" action for a scheduled hospital, clinic, or customer visit.
• Purpose of Location Collection: To verify distance/geofencing compliance with customer account addresses, assist with field activity tracking, and calculate visit outcomes.
• Location data is never sold, shared with advertising networks, or used for tracking users outside of business visit verification workflows.

C. Biometric Data (Touch ID / Face ID)

• Pulse Flow offers optional Biometric Authentication (Fingerprint or Facial Recognition) for convenient sign-in.
• On-Device Protection: Biometric verification is processed entirely on your device using native operating system security hardware (Android KeyStore / iOS Secure Enclave). Biometric templates are never transmitted to our servers or stored in our databases.

D. Business & CRM Transaction Data

• Opportunity data, project statuses, client contact details, line items, and approval history.
• Field visit notes, check-in timestamps, weekly activity plans, and uploaded document attachments.

E. Device and Technical Telemetry

• Device model, operating system version, active session duration, IP address, and app version telemetry for server load balancing and session security monitoring.

3. How We Use Your Information

We use the collected information strictly for legitimate enterprise business purposes:

• To authenticate users and manage role-based authorization rules.
• To verify sales representative field visit check-ins against customer account coordinates.
• To route discount approval requests through managerial hierarchies.
• To generate pipeline analytics, quota metrics, and sales forecasting reports.
• To monitor session SLA availability, prevent unauthorized access, and enforce account security policies.

4. Data Sharing and Disclosure

We respect your privacy. We do not sell, rent, or trade any personal or location data to third parties or advertising networks.

Data access is strictly constrained within the company based on business unit (SBU) assignments and managerial hierarchies:

• Internal Management: Authorized supervisors, managers, and executives have access to team performance and visit activity records.
• Service Providers: Secure infrastructure providers (e.g. cloud hosting, database infrastructure, and transactional email gateways) strictly bound by enterprise confidentiality agreements.
• Legal Requirements: Disclosures made to comply with applicable laws, legal requests, or mandatory corporate governance.

5. Data Security

We employ enterprise-grade security controls to protect your information:

• Encryption in Transit: All data transmitted between the mobile application and backend services is encrypted using HTTPS/TLS protocols.
• Token Security: Authentication utilizes short-lived JWT access tokens and secure, HTTP-only refresh tokens with automated session revocation.
• Access Controls: Fine-grained role-based access control (RBAC) and data isolation policies enforce organizational boundary restrictions.

6. Data Retention and Account Deletion

We retain account and transaction records for as long as your corporate employment or authorized account remains active, or as required by regulatory business record-keeping policies.

Account Deletion & Data Rights:
Authorized users or former employees can request account deactivation, access removal, or data erasure by contacting the company IT Administrator or emailing privacy@jmico.tech. Upon request, your user credentials and active session tokens will be permanently revoked.

7. Children's Privacy

Pulse Flow is an enterprise business application intended exclusively for corporate employees and business partners. It is not intended for or directed to individuals under the age of 18. We do not knowingly collect personal data from children.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect functional updates, system enhancements, or regulatory requirements. Any modifications will be posted on this page with an updated "Last Updated" revision date.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Jamjoom Medical - Information Technology Department
Email: Email Privacy Team
Website: https://pulseflow.jmico.tech