Privacy Policy

EFM ("the app", "we", "us") is the facility management app of Embassy International Riding School ("EIRS", "the School"), Bangalore, India. It is part of the EIRS Suite at eirs.app. The School is responsible for the personal data processed in the app.

Contact for privacy questions:

• Email: info@eirs.app
• Phone: +91 73537 79533, +91 93906 31008

This policy covers the EFM app. Our website at eirs.app has its own Privacy Policy.

EFM is for the School's staff, instructors, management and other approved users. Staff also enter details about the School's clients, such as members and room guests. This policy covers both.

Information you give us

• Account details: full name, email address, password, phone number (optional), and your role or designation.
• Profile photo, if you add one.
• Work records you enter: tasks and completion notes, attendance, treatment and medicine logs for horses, feed and inventory records, accident reports, gate entries, bookings, expenses, fines, and notes or remarks.
• Photos and videos you upload as task proof, horse images or reports.
• Client and guest details entered by staff: name, phone number, email, optional address, ID proof type, membership, package, invoice and billing details.
• Financial records inside the app: amounts for memberships, bills, expenses, fines and instructor incentives. The app does not collect card numbers, bank accounts or UPI details, and it does not process payments.

Information collected automatically

• Approximate location, only if you allow it and only while the app is open. We use it to show local weather on the Home screen. Your location is rounded to about 11 km before it leaves your phone. We do not store it on our servers.
• Device and push notification token, so we can send you task, approval and stock alerts.
• Crash and performance reports, only if error reporting is switched on in your version of the app. These contain technical details such as device model, OS version, app version and your account ID. They do not contain your name or email.
• Your preferences, such as language, theme and text size, stored on your device.

What we do not collect

We do not collect your contacts, your list of installed apps, your advertising ID, your precise location, or your health data. Treatment and medicine records in the app are about the School's horses and not about people.

• To create and manage your account and sign you in.
• To run the app's features: tasks, approvals, attendance, bookings, inventory, reports and notifications.
• To keep the School's records accurate and to send alerts you are entitled to receive.
• To show the weather for your area.
• To find and fix errors and keep the app secure.
• To meet legal and accounting obligations.

We do not sell your data, show ads, or use your data to build advertising profiles.

• Within the School: access depends on your role. Administrators and managers can see more than other staff. Administrators approve new accounts.
• Service providers that help us run the app and only act on our instructions:
  • cloud hosting and database providers, for storing data;
  • file storage (Amazon Web Services S3), for photos and uploads;
  • Resend, for emails such as verification and password reset;
  • Expo and the Google or Apple push services, for notifications;
  • Open-Meteo, which receives your rounded location to return the weather;
  • Sentry, for crash reports, if switched on.
• If you use Google sign-in, Google confirms your identity to us. We receive your name and email.
• Authorities or advisers, where the law requires it or to protect our rights.

We do not sell personal data to anyone.

We protect data with encrypted connections (HTTPS), hashed passwords, role-based access and optional Face ID or fingerprint lock on your device. Biometric data stays on your phone and is never sent to us. No system is perfectly secure, so please use a strong password and keep your login private.

We keep account and work records while your account is active and for as long as the School needs them for operations, accounting and legal reasons. When an account is deleted, we remove or anonymise its personal details within 30 days, except records we must keep by law, such as financial entries.

You can:

• update your name, phone number and photo in the app;
• turn off location in your phone settings. The app keeps working without it;
• turn off notifications in your phone settings;
• ask us to access, correct or delete your personal data, or withdraw your consent.

To delete your account or make any request, email info@eirs.app from your registered address or call +91 73537 79533 or +91 93906 31008. We will reply within 30 days. Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you have the right to access, correct and erase your data and to raise a grievance with us. If you are not satisfied with our response, you may contact the Data Protection Board of India.

EFM is a workplace app for adults. It is not meant for anyone under 18, and we do not knowingly collect data from children.

Our service providers may store data on servers outside India. Where that happens, we require appropriate protection for your data.

We may update this policy. When we make an important change, we will update the date above and notify users in the app.