Privacy Policy
GAH Flexi
Last updated: 5 September 2026
1. About this application
GAH Flexi is a specialist Android application for authorised service users. It displays live information from compatible FLEXI/SHC controllers connected through a USB serial adapter and provides the service commands enabled by an administrator.
This policy explains the information processed by the application and its supporting access service. The organisation authorising your access manages your profile, device permissions and service configuration. Privacy questions and requests can be sent to the contact address below.
2. Information processed
- Your email address, used to find and verify your authorised access profile.
- Profile settings, device limits, permitted readings and service commands supplied by an administrator.
- A hashed device identifier and a device description based on its manufacturer and model, together with registration and last-access timestamps.
- USB connection information, controller readings, operating states, raw controller responses and commands selected during a service session.
- Local diagnostic records, including timestamps, connection events, errors and profile-verification messages. These records can contain your email address and the profile reference.
The device identifier is calculated on the device before registration; the registration request sends the hash rather than the raw Android identifier. A hash linked to your email address remains identifiable information, not anonymous data.
3. Why information is used
Information is used to verify access, apply administrator-defined permissions and device limits, obtain the correct configuration, communicate with the connected controller, display live readings and diagnose operational problems. Service commands are sent to the connected equipment when you select and confirm them.
4. Permissions and device storage
Internet and network-state access support profile retrieval and device verification. Android asks for permission to use a connected USB device when required. The application does not request camera, microphone, contacts, location or broad shared-storage permissions.
Your remembered email address, profile settings, device-verification details and diagnostic logs are stored in the application's private data directory. Live controller information is processed on the device for display. The application does not provide an automatic upload of live controller readings to an analytics service.
Android application backup is enabled in this version. Whether eligible application data is backed up or restored depends on the device, Android version and backup settings; the selected backup provider processes any such copy under its own terms.
5. Network communication and sharing
The application contacts the configured profile and device-access service to retrieve settings and submit your email address, hashed device identifier and device description. The supplied profile-service configuration uses HTTPS. Hosting infrastructure may record normal request information, such as IP addresses, request times and paths; a profile request path can contain an email address.
Authorised administrators and providers operating the access or hosting service may process this information to provide and protect the service. Information may also be disclosed where required by applicable law. Personal information is not sold, and the application contains no advertising or dedicated third-party analytics SDK.
6. Retention and deletion
Local settings and diagnostic logs remain until removed, application data is cleared or the application is uninstalled. This version does not apply an automatic age-based deletion period to its diagnostic logs. Backed-up copies, if any, must be managed through the relevant backup service.
Profiles and device-registration records are managed by the administrator for as long as access is authorised or the records remain necessary for service administration, security or applicable obligations. Contact the address below to request removal or to ask about the retention period applying to your records. Uninstalling the application does not itself remove server-side records.
7. Security
Safeguards include private application storage, administrator-controlled permissions, device-access checks and hashing of the identifier used for registration. The supplied profile-service address uses HTTPS, but this version permits clear-text network connections in its Android configuration; protection also depends on the endpoints configured for the deployment. Do not assume that every possible connection is encrypted.
Keep the device and authorised account secure and limit access to service information. No storage or transmission method can be guaranteed completely secure.
8. Children's privacy
This application is intended for authorised workplace service activities and is not directed at children.
9. Your choices and privacy rights
Profiles are assigned by an administrator; there is no public account-creation function in the application. You can stop using the application, revoke USB access and clear its local data through Android settings. For access to, correction of or deletion of profile and device information, use the contact address below.
Depending on applicable law, you may also have rights to restrict or object to processing, obtain a portable copy of information or complain to the relevant data-protection authority. Requests may require identity verification and are subject to applicable legal, security and record-retention obligations.
10. Changes to this policy
This policy may be updated when the application, its supporting service or applicable requirements change. The latest version will display its revision date.
11. Contact
For privacy questions, requests or developer contact, email: info@new.app.grodek.online