This Privacy Policy explains how CYBEX PTE LIMITED ("Cybex", "we", "us", "our") handles information in the SRIF App (the "App"). The App is a field-data tool for agricultural field officers, such as staff of the Sugar Research Institute of Fiji (SRIF), who record sugarcane inspections and assessments. It is not a consumer app: you use it because your organisation has given you an account. Your organisation decides what is recorded and how long it is kept; Cybex develops the App and operates the server it sends data to on your organisation's behalf.
When you sign in, the App sends your email address and password to the server over an encrypted connection. The server returns an access token and your user ID. The App then keeps on your device: your email address, your user ID, the access token, the time you signed in, and a one-way SHA-256 hash of your password. The hash lets you sign in again without a network connection for up to 7 days after your last online sign-in. Your actual password is never stored on the device.
When you open a form, or tap Capture GPS, the App reads your device's current location (latitude, longitude and its accuracy) and attaches it to that form, so the record shows where the inspection was carried out. Location is read only while a form is open on screen. The App does not track your location in the background, over time, or when you are not using a form.
The App's purpose is to record field inspections. What you enter on a form is saved and sent to the server. Depending on the form, this includes:
Each record is also stamped with your user ID and the time it was submitted, so your organisation knows who recorded it.
To work without a signal, the App downloads your organisation's reference lists (sugarcane varieties, inspection types, diseases and pests) and keeps a copy on the device. When sending a Seed Cane Certification, it also looks up the farm number you entered in your organisation's farm records. These lists are your organisation's data, not information about you.
The App does not use the camera or microphone and does not access your photos, files, contacts, calendar, messages, phone number, device identifiers or advertising ID. It contains no analytics, advertising, crash-reporting or tracking components, and it does not build a profile of you or track you across other apps or websites.
| Data | Why |
|---|---|
| Email address, password, access token, password hash | To sign you in, keep you signed in, and let you sign in when there is no signal. |
| User ID | To record who completed each form, as your organisation's inspection procedures require. |
| Location | To record where each inspection took place, as evidence the field was visited. |
| Form contents, including grower and staff names | To create the inspection, assessment and certification records your organisation uses to monitor sugarcane pests and diseases and to certify seed cane. |
| Reference lists and farm look-up | To offer the correct codes on the forms and link each inspection to the right farm. |
We do not use any of this data for advertising or marketing, and we do not sell it.
| Permission | Why the App requests it |
|---|---|
| INTERNET ACCESS_NETWORK_STATE |
To reach the server, and to notice when a connection returns so forms saved offline can be sent. |
| ACCESS_FINE_LOCATION ACCESS_COARSE_LOCATION |
To record where a form was filled in. Asked for the first time you open a form or tap Capture GPS. Used only while a form is open. |
The App sends data to one place: the server operated by CYBEX PTE LIMITED at
https://pos.cybexpte.com, where it is stored in your organisation's account. People in
your organisation with the right permissions can see and review the records you submit.
To read your location, the App uses Google Play services' location service on your device, which is covered by Google's own privacy policy. Apart from that, we do not share your data with third parties, and it is never sold, rented, or shared with advertisers or data brokers, except where the law requires us to disclose it.
No method of transmission or storage is completely secure, but we work to keep these protections in place and up to date.
A form you submit is saved on the device first, then sent to the server as soon as there is a connection. If there is no signal, it waits on the device and is sent automatically later. The App keeps a copy of the forms it has sent so you can see your recent submissions. Signing out ends your session, but your email address, user ID, access token and password hash stay on the device so you can sign in offline. To remove everything the App has stored on your device, clear the App's storage in Android Settings or uninstall the App. Forms not yet sent are lost if you do this.
Records on the server are kept for as long as your organisation needs them for its inspection, certification and research work, and for as long as any law requires. When they are no longer needed, they are deleted or de-identified.
The App is a workplace tool for field officers. It is not directed at children, and we do not knowingly collect information from anyone under 13.
If the App changes what it collects, we will update this policy before that version is released and change the "Last updated" date above.
For questions about this Privacy Policy or about how the SRIF App handles data, contact:
CYBEX PTE LIMITED
Email: info@cybexpte.com
Suva, Fiji
For questions about your organisation's own records, including access, correction or deletion, you can also contact your organisation's administrator.