White Sapphire Software

Production ERP

Production ERP – Privacy Policy

Package name com.thalibtech.productionerp

Effective date: 10 November 2026

This privacy policy explains how the Production ERP app for Android (the "App", package name com.thalibtech.productionerp) handles information. The App is published by Thalib Tech, Sri Lanka, which operates the software brand White Sapphire Software ("we", "us" or "our"). You can contact us at support@whitesapphiresoftware.com or through https://whitesapphiresoftware.com.

Summary

  • The App works fully offline. It has no user accounts, no server and no cloud service.
  • Everything you enter into the App is stored only on your device, in the App's private storage.
  • We do not collect, receive, store, sell or share any information you enter into the App. We cannot see it.
  • The App contains no advertising, no analytics, no crash reporting, no tracking and no third-party software development kits (SDKs) that collect data.
  • You are in control of your data: you can edit or delete records, use "Delete all data" in Settings, or uninstall the App.

Information kept on your device

When you use the App, you may enter or import business records such as:

  • production batch records that you import from a file (JSON or CSV) exported by your own mill's or plant's batching or production-control system;
  • items, item code mappings, material unit costs, overhead rates, stock and lot information;
  • sales orders, shipments, invoices, customer receipts, cheque details, credit and debit notes, ledger entries and settings such as your company name, currency and VAT rate;
  • customer and supplier details that you choose to enter, such as business names, contact names and phone numbers;
  • optional local user profiles (names) and the PINs used to protect approval steps.

This information is saved only in the App's private storage on your device. It is not sent to us or to anyone else. The App does not request the Internet permission and makes no network requests. The fonts used by the App are included in the App itself, so no fonts or other resources are downloaded. Dates in the App follow your device's local date; the App does not contact any time server.

Before some actions that replace or clear data (such as restoring a backup, reloading the demo data or clearing transactions), the App keeps a safety copy of your current data in its private storage on the device, so that a mistake can be undone. Safety copies stay on the device and are never sent anywhere.

Local user profiles and PINs are a convenience feature to control who can approve steps on a shared device. They are not an online account or a network login, and they are not a substitute for your device's own screen lock or encryption.

The App ships with clearly fictional demo data so you can try it. You can clear the demo data at any time.

Information we do not collect

We do not collect any personal data or usage data through the App. In particular, the App does not collect or transmit:

  • names, email addresses, phone numbers or other contact details;
  • your business records or your customers' details;
  • location, contacts, photos, files, messages or calendar data;
  • device identifiers, advertising identifiers or IP addresses;
  • usage statistics, diagnostics or crash reports.

Permissions

The App does not request any permissions that give access to the network or to personal data (such as Internet, location, camera, microphone, contacts or storage access). When you import a file or export a backup, you choose the file or destination yourself through Android's standard file picker or share sheet. The App can only read the specific file you pick.

Device backups and transfers

Automatic Google cloud backup of the App's data is disabled. Android's device-to-device transfer (for example, when you move to a new phone and copy data directly from your old phone) may copy the App's data to your new device. That transfer happens between your own devices under Google's and your device maker's terms; we do not receive the data.

Backup files you export

The App lets you export a backup file and restore from a backup file. When you export, the App creates a file and hands it to the destination you choose through the Android share sheet or Files (for example, your device storage, an email app or a cloud storage app). Please note:

  • Backup files are unencrypted JSON text files. Anyone who obtains a backup file can read its contents, including any customer names and phone numbers in it.
  • Once you send a backup file to another app or service, that app or service handles it under its own terms and privacy policy. We do not receive it.
  • You are responsible for where you store or share backup files, and for deleting them when no longer needed.

Your role: you control the data you enter

Because the App keeps everything on your device and we never receive it, you (or the business you use the App for) decide what information is entered, why, and how long it is kept. In data protection terms:

  • Under the EU and UK General Data Protection Regulation (GDPR), you or your business are the "controller" of any personal data you enter about other people, such as your customers' names and phone numbers. We are not a controller or a processor of that data, because we do not process it.
  • Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (PDPA), you or your business are the "controller" of that personal data. We do not process it on your behalf and are not a "processor" of it.

As the controller, you are responsible for having a lawful basis to record your customers' and other people's details, telling them how you use their information where the law requires it, keeping the data accurate, keeping your device secure, keeping data only as long as needed, and responding to their requests (for example, to see, correct or delete their information). The App helps by letting you view, edit and delete records and delete all data.

Purchases and support (outside the App)

  • Purchases: you buy the App through Google Play. Payment is handled by Google under its own terms and privacy policy. We do not receive your payment card details. Google may give us limited transaction information, such as an order number, the date, the price paid and the country of purchase, which we use only for our accounting, tax and refund obligations.
  • Support: if you email us at support@whitesapphiresoftware.com, we receive your email address and whatever you include in your message. We use it only to reply to you and to keep a record of the support request, and we keep it for no longer than is needed for that purpose (normally no more than 24 months after the request is closed). Please do not send us your backup files or your customers' personal data unless we specifically ask for a sample to fix a problem and you have the right to share it.

Security

Your data is protected by your device's own security features, such as the screen lock and device encryption, and by Android keeping the App's private storage separate from other apps. We recommend that you use a strong device screen lock, keep your device's software up to date, and store exported backup files in a safe place. The App's optional PIN controls approval steps inside the App; it does not encrypt your data.

Data retention and deletion

Data stays on your device until you delete it. You can:

  • edit or delete individual records in the App;
  • clear the demo data;
  • use "Delete all data" in Settings, which permanently erases everything the App keeps on the device: all records, settings, user profiles and PINs, and all safety copies;
  • uninstall the App, which deletes all App data from the device, including safety copies.

Deleting data in the App does not delete backup files you exported earlier, or copies you made with other tools. You can delete those yourself in the place where you stored them.

Your rights

Data protection laws, including the GDPR and the Sri Lanka PDPA, give individuals rights such as access, correction, erasure, objection, restriction, data portability and withdrawal of consent. Because we do not hold any data entered into the App, we cannot access, correct or delete it for you; you can do this directly in the App. If you are a customer of a business that uses the App and want to exercise your rights over your details, please contact that business.

If you have contacted us by email and want to exercise your rights over that correspondence, contact us at support@whitesapphiresoftware.com. You also have the right to complain to a data protection authority, such as the supervisory authority in your EU or UK country of residence, or the Data Protection Authority of Sri Lanka.

International transfers

We do not transfer any data entered into the App, because we never receive it.

Children

The App is a business tool for adults. It is not directed at children, and it is not intended for anyone under 16 (or under 13 where that is the relevant age in your country). We do not knowingly collect personal data from children. Because the App collects no data, no data about children is collected through it.

Google Play requirements

We provide this policy to meet the Google Play User Data policy. In line with that policy, the App does not collect or share user data, does not use data for advertising or tracking, and does not require an account. The answers we give in the Google Play Data safety section match this policy.

Changes to this policy

We may update this policy, for example if the App gains new features. We will post the updated policy at https://whitesapphiresoftware.com/apps/production-erp/privacy/ and change the effective date above. If a change would mean that the App starts collecting or sharing data, we will update this policy and the Google Play Data safety section before that version of the App is released, and we will tell you in the App or in the release notes.

Contact