Field Bundle Privacy Policy.

How Field Bundle handles evidence, device, and account data in the direct-cloud model.

Last updated: [date]

This document is a plain-English draft prepared for review by legal counsel. It is provided for transparency and is not legal advice.

1. Who provides Field Bundle

Field Bundle is provided by Nodus Lux d.o.o. (“we”, “us”). Contact: info@noduslux.hr.

2. What Field Bundle does

Field Bundle helps field teams capture work evidence, create evidence packages, and upload them to a cloud destination selected by the user or company.

3. Data the app may process

Work Order ID and work description / notes
Photos captured through the app
Timestamp, date, and time of capture
GPS coordinates and location details, when enabled or required by company policy
Cloud provider connection status and upload status
Device activation and status records for Company Seats
Device name or device identifier used for licensing
Account email address for login and the Company Portal
Language, settings, and preferences
Recovery package metadata
Upload notification metadata if enabled, such as Work Order reference, upload time, destination cloud, package status, and the notification recipient email address
Support and contact messages you send us

4. Where evidence files go

Evidence packages are uploaded directly to the selected cloud destination, such as Google Drive, Dropbox, or Microsoft OneDrive. Field Bundle does not inspect, scan, or analyze other documents in the connected cloud account. In the current direct-cloud model, Field Bundle does not host the customer’s evidence files.

5. Local storage behavior

Evidence files are kept inside the Field Bundle workflow and are not intended to fill the user’s personal photo gallery. After a verified cloud upload, Field Bundle can remove raw local evidence files from the device. If an upload fails or is interrupted, a private recovery package may remain temporarily on the device so the evidence can be retried, saved, or shared through Android’s native share menu.

6. Persistent sessions

The app may store active Work Order session data locally so users can continue a session after closing the app or restarting the phone.

7. Location data

Location is used only when evidence is created and when GPS or location stamping is enabled or required by company policy. Field Bundle does not run background GPS monitoring.

8. Upload notifications

If enabled for a company deployment, Field Bundle may process the metadata needed to send upload notifications, such as Work Order reference, upload time, selected cloud destination, package status, and the notification recipient address. Notifications provide workflow status; they are not a channel for delivering evidence file contents.

9. Company customers

For company deployments, the company using Field Bundle generally determines why and how evidence is collected. Nodus Lux d.o.o. provides the application, licensing, the Company Portal, and related services.

10. Third-party services

Google Drive and Google APIs (cloud upload destination)
Dropbox (cloud upload destination)
Microsoft OneDrive (cloud upload destination)
Google Play and Google billing, when used for app distribution or purchases
An email or notification provider, if upload notifications or email contact are used
Our website hosting provider

11. Retention

Local raw evidence files: until verified upload or user/company-configured cleanup
Recovery packages: temporary, depending on app settings
Upload notification metadata: kept only as operational records needed for the notification or audit workflow, if enabled
Licensing and device records: while account or company access is active and for a necessary operational and security period afterwards
Support emails: as needed to respond and maintain records

12. Your rights

Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection, and data portability. To exercise them, contact Nodus Lux d.o.o. at info@noduslux.hr. Users in the EU, including Croatia, also have the right to contact their data protection supervisory authority.

13. Security

Encrypted transport where supported by the connected services
Limited access to operational records
Company and device activation controls
No backend evidence hosting in the current direct-cloud model
Private recovery files kept in app-private storage
Reasonable technical and organizational safeguards

14. Contact

Nodus Lux d.o.o. — info@noduslux.hr