Privacy Policy

BMS — Business Management System  |  App package: com.newbacklink.bmsapp  |  Last updated: 22 August 2026

BMS (Business Management System) is a private business/ERP portal used by registered organizations and their authorized staff. This policy explains what the app and website (bmsprime.com) collect, how it is used, and your choices. The mobile app is a secure wrapper around the same website.

Who can use BMS

BMS is not a public consumer app. Access requires an account created by an organization's administrator. There is no self sign-up to real business data.

Information we collect

• Account & profile: name, email/username, role, and organization — provided by your administrator so you can sign in and use the portal.
• Business records you enter: the operational data your organization records in the portal (e.g. finance, HR, inventory entries). This is your organization's data, held on its behalf.
• Device/technical: standard sign-in session data and app diagnostics needed to keep the service working and secure.
• Camera (optional): only if you choose to attach a photo (e.g. a receipt or document). Photos are used solely for that upload; the app does not access your camera in the background.
• Notifications (optional): if you enable push notifications, a device token is stored to deliver alerts about your work (e.g. approvals). You can turn this off in your device settings.
• Biometric unlock (optional): if you enable it, your device's fingerprint/face check is used locally to unlock the app. BMS never receives or stores your biometric data — it stays on your device.

How we use information

• To authenticate you and provide the portal's features.
• To keep the service secure (fraud/abuse prevention, access control, audit logging).
• To send you operational notifications you opted into.
• We do not sell your personal data, and we do not use it for advertising. The app contains no ads.

Data sharing

Your data is visible to your own organization (per its access controls) and to the service operator strictly to run and support BMS. We use reputable infrastructure and delivery providers (e.g. hosting, and Google/Firebase for push notification delivery). We may disclose data if required by law.

Data security & retention

Data is transmitted over encrypted connections (HTTPS) and protected by role-based access control and server-side authorization. We retain data for as long as your organization's account is active or as required for legal/operational reasons, then delete or anonymize it.

Your choices & deletion

• You can disable camera, notification, and biometric permissions in your device settings at any time.
• To access, correct, or delete your data, contact your organization's administrator, or email us at the address below. Account data is removed on request, subject to legal retention requirements.

Children

BMS is a workplace tool intended for adults (18+) and is not directed to children.

Changes

We may update this policy; material changes will be posted on this page with a new "Last updated" date.

Contact

Questions about this policy or your data: info@bmsprime.com.