ManufactINS for Android — privacy
What the app sends, what it keeps on your phone, and what it never collects — as it actually works. It is a workplace app: your organisation gives you your account, and the app talks to its ManufactINS server.
What the app sends
Your account
Your name, work email and role, to sign you in. Your organisation creates the account and decides which plants and screens it opens; there is no way to create one in the app.
Your work
Clock-in and clock-out times, job progress and piece counts, machine downtime reports, the codes of labels you scan, the decisions you take with their reasons and evidence references, the questions you ask in Ask, and any AI answer you report.
Photos
Only when your plant asks for a photo of a job or a photo check. The phone’s own camera app takes it; the app makes it smaller, sends it, and deletes its copy. You can skip a photo asked for before an action.
Location — only while you share it
When you turn on Share my location, your position is sent every 30 seconds, or when you move 15 metres, and checked against your work zone; your supervisor is told when you leave it. A notification with Stop shows the whole time, and sharing stops when you clock out or sign out. The app never reads your location otherwise and never asks for location “all the time”.
Notifications
When your organisation has set up push, a notification token for this phone, so alerts, photo checks and decisions waiting for you arrive while the app is closed. Google Firebase Cloud Messaging delivers them and they carry the alert’s text. The token is removed when you sign out. Without push, the app asks the server for anything new every 15 minutes.
On your phone
Fingerprint, face and screen lock
Your fingerprint and face never leave your phone; neither the app nor ManufactINS ever sees them. When you turn on fingerprint sign-in, your phone makes a key in its secure hardware that only its own fingerprint, face or screen-lock check can unlock, and ManufactINS keeps only the public half of it. Anyone who can unlock your phone could then open your account in the app, so turn it on only on a phone that is yours. It ends when your password is reset or your account changes, after 180 days unused, or when you turn it off in More.
Kept on the phone
Your sign-in, encrypted with a key that never leaves the phone and lasting at most 12 hours, your language and appearance choices, and — only while there is no signal — the job steps and stage entries you made, until they are sent. None of it is backed up or copied to a new phone. Signing out ends the session on the server too; uninstalling the app removes everything it kept.
Never collected
No advertising or analytics, no tracking across apps or websites, no contacts, no files from your phone, no microphone and no crash reports. Nothing is sold.
Where it goes, and for how long
Where it goes
To your organisation’s ManufactINS server, over HTTPS only, where it is kept with the plant’s records. Google Play services reads label codes on the phone and, when push is set up, Firebase Cloud Messaging delivers notifications. Questions in Ask go to the AI models your ManufactINS uses — see Data, security and AI.
Keeping and deleting
Work records are kept by your organisation’s ManufactINS under its own rules. To have your account or your records removed, ask your ManufactINS administrator, or write to us.
Who it is for
People at work, given an account by their organisation. It is not meant for anyone under 18.
Contact
For any question about privacy in the app, write to Epsilon AI Global at manufactins@epsilonaiglobal.com. Last updated 10 November 2026.