Effective date: 11 November 2026 · Applies to the Heritage Order OS Android app and web app.

Heritage Order OS is the internal operations app of HERITAGE JEWELLERS (PRIVATE) LIMITED, Karachi, Pakistan. It is used only by Heritage Jewellers employees and authorised workshop vendors. Accounts are created by the company; the app does not offer public sign-up. This policy explains what information the app handles and why.

1. Information we collect

  • Staff account details: name, mobile number, role, branch and, where an administrator adds them, an email address and the linked POS login.
  • Customer order information entered by staff: customer name, mobile number, notes and order details, product specifications and workshop instructions.
  • Media you choose to add: photos (from the camera or gallery), videos and voice notes attached to orders and repairs, and optional photos attached to schedule or lateness review requests.
  • Messages between staff about orders and repairs.
  • Attendance and payroll information: attendance punches recorded by the shops' biometric machines, schedules, lateness reviews and, where company policy allows, the employee's own salary and deduction information. This information comes from company systems; the app displays it to the employee and authorised managers.
  • Activity records: a log of actions taken in the app (for example creating an order or approving a request) for security and accountability.
  • Device information: a sign-in session identifier, a push-notification token (Firebase), and diagnostic and usage metrics sent automatically by Google's ML Kit barcode scanner, which is used to scan repair labels.

The app does not collect location, contacts, calendar, SMS or call logs, browsing history or health data, and it contains no advertising.

2. How we use it

  • To run Heritage Jewellers' orders, workshop, repairs, attendance and payroll processes.
  • To sign staff in with a one-time code sent by WhatsApp to their registered mobile number.
  • To send work notifications (order status, reminders, approvals).
  • To keep the system secure and to investigate errors or misuse.

We do not sell personal information, and we do not use it for advertising. When you choose to share a document (for example an order summary PDF) using your phone's share menu, it goes only to the app or person you pick.

3. Service providers

We use these providers to operate the app. They process data only on our behalf:

  • Google Firebase Cloud Messaging: push notifications.
  • Google ML Kit: on-device barcode scanning (diagnostic metrics only).
  • Meta WhatsApp Business Platform: sign-in codes and business messages.
  • Cloudflare R2: storage of photos, videos and voice notes.
  • Our hosting and database providers: the company's servers and database.

The app also exchanges staff, repair and attendance information with Heritage Jewellers' own point-of-sale (POS) system.

4. Security

All connections use HTTPS. Access to information depends on each user's role and branch. Sign-in requires a one-time code that expires after a few minutes, and the sign-in session is kept in the phone's secure storage. When an account is deactivated, its role changes or its mobile number is changed, the user is signed out of all devices.

5. How to delete your account, and what we keep

To request deletion of your Heritage Order OS account, email info@heritagejewels.com.pk with the subject “Delete my Heritage Order OS account”. Include your name and registered mobile number. You do not need to open the app to make this request.

We will verify your request and complete the account-deletion process within 30 days.

Information deleted: Your account and sign-in details, including your name, mobile number, email address, role, branch access, active sessions, device information and notification tokens, except where retention is legally required.

Information retained: Business records, including orders, repairs, attendance, payroll, accounting records and necessary security audit logs, may be retained for the periods required by company policy and applicable Pakistani law. Personal information in retained records will be removed or anonymised where reasonably possible.

You may also request a copy of, or correction to, your personal information by contacting the same email address.

6. Children

The app is intended only for adult employees and is not directed to children.

7. Changes

We will update this page when our practices change and revise the effective date above.

8. Contact

HERITAGE JEWELLERS (PRIVATE) LIMITED, Karachi, Pakistan· Email: info@heritagejewels.com.pk