Privacy Policy

This policy applies to:

• •Our website apptimatic.com, including contact, demo-booking and AI chat features
• •Apptimatic Games (BD 29 Card, BD Carrom, BD Ludo King) on the web and on Google Play. See also our dedicated Games & Mobile Apps Privacy Policy at /privacy/games/
• •Our Android and installable web apps, including the Apptimatic app and MyBuilding
• •Business software we build and operate (SECTORiX, eRestu, eHRDesk, Medinix, Apptimmerce) and custom projects
• •Free tools and WordPress plugins we publish

Two roles, two sets of rules:

• •Controller: for visitors, enquiries, game players and app users, we decide why and how data is used.
• •Processor: for the business data our customers store in our products (their staff, patients, residents or end customers), the customer decides why the data is used and we process it on their instructions under our agreement with them. If you are an end customer of a business using our software, please contact that business first.

2.1 Information you provide

• •Contact and demo forms: name, email, phone (if given), company, service of interest and your message
• •AI chat lead capture: name, email, phone and a transcript of the chat, only if you choose to leave your details for the team
• •Customer accounts and billing for our products: username, encrypted credentials and billing details; card and mobile-wallet details are handled by the payment gateway, not stored by us
• •Support requests: issue descriptions and communication history

2.2 Information collected automatically

• •Server logs: IP address, browser/device type, pages requested and timestamps, used for security, abuse prevention and troubleshooting
• •Contact, demo and chat requests are protected by Google reCAPTCHA, which processes device and interaction signals under Google's own privacy policy
• •Error and diagnostic information needed to fix faults in our products
• •We do not run advertising trackers, advertising pixels or cross-site tracking on apptimatic.com, and we do not use Google Analytics on the public website at the time of this update

2.3 Information stored on your device

• •Theme preference (light, dark or automatic) in your browser's local storage
• •AI chat conversation history in your browser's local storage so the chat survives a page reload. You can clear it from the chat window or by clearing site data
• •A session flag that stops the chat teaser from repeating
• •This data stays on your device; we do not use it for advertising

2.4 Business data processed in our products

• •SECTORiX: inventory, sales, customer and financial records
• •eRestu: orders, menu items, payment records and customer preferences
• •eHRDesk: employee, payroll, attendance and PF/Gratuity data
• •Medinix: patient, appointment, laboratory, pharmacy and billing records. This is sensitive health data and is processed only for the healthcare provider that owns it
• •MyBuilding: resident, flat, billing, payment and notice-board records for a building or society
• •Apptimmerce: store, product, order and customer data for an online shop

• •Deliver, operate and support our services and process transactions
• •Reply to enquiries, demo requests and support tickets
• •Answer questions through the AI assistant (see section 5)
• •Keep our websites, games and products secure, and detect fraud, abuse and unauthorized access
• •Fix bugs, measure reliability and improve our products
• •Send service notices and security alerts. We send marketing email only where you have asked for it or where the law allows, and every marketing email can be unsubscribed from
• •Comply with legal obligations and respond to lawful requests

What we do not do:

• •We do not sell personal information
• •We do not use customer business data (such as patient, payroll or sales records) for advertising or to train AI models
• •We do not use game or app data for advertising profiles

How the website AI assistant works

• •Common questions are answered directly in your browser from our public product information, with no message leaving your device
• •For other questions, your most recent messages, the page you are on and a few relevant public facts are sent through our server to Google's Gemini API to generate an answer. Our API key stays on our server
• •Please do not type passwords, payment card numbers, health information or other sensitive details into the chat
• •AI replies can be wrong; verify important details with our team
• •Requests are rate-limited per IP address to prevent abuse

Other service providers we rely on

• •Google reCAPTCHA (spam protection on forms and chat lead capture)
• •Google Gemini API (AI assistant answers)
• •Email delivery (SMTP) to route your enquiry to our team, and our own customer portal at my.apptimatic.com, where enquiries and chat leads are recorded
• •Hosting and infrastructure providers, and the payment gateways a customer chooses for their own checkout (for example mobile wallets or card processors)
• •Each provider receives only what it needs for its function and is bound by its own terms and confidentiality or data-protection obligations

• •We do NOT sell your personal information
• •Service providers: as listed in section 4, only to run the service you asked for
• •Customers: end-user data entered into a customer's deployment is accessible to that customer (the data controller)
• •Legal: when required by Bangladesh law or valid legal process, or to protect rights, safety and security
• •Business transfers: in a merger, acquisition or asset sale, with notice to affected users
• •Your consent: when you explicitly ask or authorize us to share

Summary (full details in our Games & Mobile Apps Privacy Policy at /privacy/games/)

• •No account or registration is required to play BD 29 Card, BD Carrom or BD Ludo King
• •Single-player, bot and pass-and-play modes run on your device without sending gameplay data to us
• •Online room play uses a 4-digit room code and real-time connection, and sends only what is needed to run the match, such as moves and quick-chat emotes
• •We do not collect your contacts, precise location, photos, files, microphone or camera data in our games
• •We do not sell game data or use it to build advertising profiles
• •If we ever add ads, analytics SDKs or in-app purchases, we will update this policy and our Google Play Data safety disclosures before the release goes live

Apps that need accounts (for example MyBuilding)

• •Accounts are created by the property's management committee or by you, and hold the details needed to provide the service, such as name, flat, phone/email and billing records
• •You can request deletion of your account and associated data at any time (see section 9)

We use safeguards appropriate to the data we handle, such as:

• •HTTPS/TLS encryption for data in transit
• •Passwords stored only as salted hashes, never in plain text
• •Role-based access controls so people see only what their role needs
• •Backups and security patching as part of how we operate our hosted products
• •Spam, rate-limit and abuse controls on public forms and the chat

Limitations:

• •No method of transmission over the internet or electronic storage is 100% secure
• •You are responsible for keeping your account credentials confidential
• •Tell us immediately at privacy@apptimatic.com if you suspect unauthorized access. If a breach affects your personal data we will notify affected parties and authorities as the law requires

• •Enquiries, demo requests and chat leads: kept while we are handling your request and for a reasonable period afterwards for follow-up and record keeping, then deleted or anonymized
• •Customer accounts: kept while the account is active; after termination, data is deleted within 90 days unless the law requires us to keep it
• •Financial and tax records: kept for the period required by Bangladesh accounting and tax law
• •Server logs: kept only as long as needed for security and troubleshooting
• •Browser-side data (theme, chat history): stays on your device until you clear it
• •Game data: no player accounts are held for our games. Technical data needed for online rooms is not kept longer than needed to run and secure the service

You can ask us to:

• •Access: give you a copy of the personal data we hold about you
• •Correction: fix inaccurate or incomplete data
• •Deletion: delete your personal data or account, subject to legal retention duties
• •Portability: provide your data in a common machine-readable format (JSON/CSV) where feasible
• •Objection / opt-out: stop marketing messages, or object to certain processing
• •Withdraw consent: where we rely on your consent, you can withdraw it at any time

How to make a request (including app and account deletion):

• •Email privacy@apptimatic.com from the address linked to your account, naming the product or app (for example the app's Google Play name or package ID) and what you want done
• •We may ask you to verify your identity before acting, to protect your data from someone else's request
• •We respond within 30 days of a verified request
• •If your data sits inside a business's deployment of our software (for example your employer, clinic or building committee), we may refer you to that business, which controls that data
• •Players of our games hold no Apptimatic account, so there is no account to delete. Local game data is removed by clearing site data in your browser or uninstalling the app

On apptimatic.com:

• •We use browser local storage (not advertising cookies) for your theme choice and chat history
• •Google reCAPTCHA may set its own cookies or read device signals when a form is shown, for spam protection
• •We do not use advertising, retargeting or social-media tracking cookies
• •Our customer portals and products use essential session cookies to keep you signed in

Your choices:

• •You can block or delete cookies and site data in your browser settings
• •Blocking reCAPTCHA may stop the contact and demo forms from working

If we add analytics or advertising in the future:

• •We will list the provider here and, where the law or the provider requires it, ask for your consent first

• •Our business products and website services are intended for adults and businesses, not for children under 18
• •Our games are family-friendly general-audience games and are not directed at children under 13. They do not ask for personal information, accounts or contact details
• •We do not knowingly collect personal information from children under 13 (or the higher minimum age in your country). If you believe a child has given us personal data, contact privacy@apptimatic.com and we will delete it promptly
• •Parents and guardians who want to supervise online room play can simply keep the device in offline modes (bot or pass-and-play), which do not connect to our servers

• •We are based in Bangladesh. Our service providers (for example Google for reCAPTCHA and Gemini, and our hosting and email providers) may process data in other countries
• •Where data crosses borders we rely on appropriate contractual and technical safeguards and share only what is necessary
• •If you use our services from outside Bangladesh, you understand your data may be processed in Bangladesh and in the locations of our providers

• •We update this policy when our practices, products or the law change, for example when we publish a new app or game
• •The "Last Updated" date at the top shows the latest revision
• •For material changes we will give notice on this website or by email before they take effect where practical
• •Older versions are available on request