Legal
Privacy Policy
This policy explains what personal data TechPebble collects through Pebflo, why we collect it, who we share it with, how long we keep it, and the choices you have. It covers:
- Rounds (listed as “Rounds by Pebflo”), the app for field teams, on Android and iOS
- Rounds HQ, the app for managers, on Android and iOS
- the Pebflo service these apps connect to
- the website at pebflo.com
The short version
- Rounds records your location only while your shift is running — including when the app is closed or the screen is off — and stops when you clock out.
- Your organisation decides whether location tracking is on for your account and how often a location point is recorded. Your managers can see your routes, visits and working hours.
- Rounds uses the camera only when you take a photo or video for work. It does not read your contacts, messages, browsing history or photo gallery.
- We do not sell personal data, and we do not use it for advertising.
- Your organisation controls the work data about you. To see, correct or delete it, contact your organisation — or contact us, and we will help.
1Who we are
Pebflo is a product of TechPebble — [TechPebble’s registered company name], with its registered office at [registered office address], India. In this policy, “TechPebble”, “we” and “us” mean that company.
For questions about this policy, email support@techpebble.com. Our Grievance Officer’s details are in section 14.
2Who controls your data
Pebflo is software for businesses. An organisation — usually your employer — subscribes to Pebflo and creates accounts for its people. That decides who is responsible for your data:
- Your organisation controls your work data. Your profile, shifts, location history, visits, photos, videos, survey answers, orders and tasks are held for your organisation. Under India’s Digital Personal Data Protection Act, 2023, your organisation is the data fiduciary for this data: it decides what is collected, why, and for how long. TechPebble processes it on your organisation’s behalf, under our agreement with it. Your organisation’s own policies also apply to you.
- TechPebble controls a small amount of data itself: enquiries sent through pebflo.com, crash reports and technical data we use to keep the apps working, and messages you send to our support team.
3What Rounds collects
Field teams use Rounds to clock in and out, visit outlets, take orders, fill in surveys and manage tasks.
3.1 Your account
- Your name, work email address and mobile number, set up by your organisation.
- Your password, stored only in hashed form, so it cannot be read.
- Your role, your field executive ID, and the markets and outlets assigned to you.
You sign in with your email address and password, or with your mobile number and a one-time code sent by SMS.
3.2 Your location
Rounds asks for access to your location, including access “all the time” (Android) or “always” (iOS). Before it asks, it shows you what it will collect and why.
| When | What is recorded | Why |
|---|---|---|
| While your shift is running, including when the app is closed or not in use | A location point at the interval your organisation sets: latitude and longitude, time, GPS accuracy, speed, battery level, and whether the location appears to come from an app that fakes GPS | To confirm attendance, measure the distance you travel, show your route to your managers, and detect faked locations |
| When you clock in and out | Your location at that moment | To confirm where your shift started and ended |
| When you start or end a break | Your location at that moment. Continuous tracking pauses for the break. | To record where your break started and ended |
| When you check in to or out of an outlet visit | Your location, compared with the outlet’s saved location | To verify that the visit took place at the outlet |
| When you look for nearby outlets | Your current location, sent to Pebflo to search for outlets near you | To show the outlets you can check in to |
| When you add or update an outlet’s location | The outlet’s position, and any address you search for | To save where the outlet is |
Tracking never runs outside a shift. It starts when you clock in and stops when you clock out or your shift is ended. On Android, a notification stays visible while tracking is running.
Your organisation decides whether tracking is on for your account and how often a location point is recorded. You can see both in Rounds under Profile → Location & privacy. You can change location permissions in your device settings at any time, but attendance and visit check-ins may not work without them.
3.3 Photos, videos and signatures
- Photos and videos you take during visits, photos of outlets and receipts, and photos you add to surveys. Rounds opens the camera for these; it does not browse your photo gallery.
- Signatures captured on survey forms, such as a customer’s signature.
Before a photo is uploaded, Rounds compresses it and removes its embedded details, such as GPS tags. People who appear in photos or videos, or who sign forms, are covered by section 3.5.
3.4 Your work records
- Shift start and end times, breaks, working time and distance travelled.
- Outlet visits: check-in and check-out times, purpose, remarks and follow-up dates.
- Survey answers, sales orders, tasks, checklists and comments.
3.5 Information about outlets and the people there
When you add or update an outlet, you may record its name, the owner’s name and mobile number, its address, GST and licence numbers, and its location. Photos, videos and signatures may show or come from people at the outlet. Your organisation is responsible for having a lawful reason to collect this information.
3.6 Your device
- An identifier that Rounds creates for your installation, used for signing in and for notifications.
- A push notification token, your platform (Android or iOS) and the app version.
- Sync records. Rounds keeps an offline copy of your work until it uploads. If an upload fails, we keep a diagnostic record, which can include the data that failed to upload.
- Crash reports, described in section 7. Crash reports from Rounds do not include your name or user ID.
Personal to-do items you create in Rounds stay on your device and are not sent to us.
3.7 Help requests
If you email support from Rounds, the message is pre-filled with your name, email address, field executive ID and app version, so we can find your account. You can edit it before you send it.
3.8 What Rounds does not collect
Rounds does not read your contacts, messages, call history, browsing history or photo gallery, and it does not record your location outside your shifts.
4What Rounds HQ collects
Managers use Rounds HQ to follow their field teams and manage tasks.
- Your account: your name, work email address, mobile number, password (stored only in hashed form) and role. You sign in the same ways as in Rounds.
- Team information you can see: attendance, working time, distance travelled, visits, outlet coverage, location points and routes, last known locations, and flags for locations that appear to be faked — for the teams and markets your organisation gives you access to.
- What you create: tasks, assignments, checklists, labels and comments.
- Your device: an identifier for your installation, a push notification token, your platform and the app version. Crash reports from Rounds HQ include your internal Pebflo user ID, so we can trace a problem to the account it affected.
Rounds HQ does not use your device’s location, camera, microphone or photos.
5What the website collects
- If you ask to hear when the full website launches: your work email address.
- If you request a demo: your name, work email address, company and, if you add one, a note about how your team works today.
We use these details only to reply to you and, for launch sign-ups, to send one email when the full website goes live. Form submissions are handled by [form service, once chosen].
The website does not use cookies, analytics or advertising trackers, and it does not load fonts or scripts from other companies.
6How we use personal data
We use personal data to:
- provide Pebflo as your organisation has set it up — attendance, location tracking, visits, orders, surveys, tasks and reports;
- sign you in and keep accounts secure, including sending one-time codes, limiting repeated failed sign-in attempts, and logging important changes (these logs record the IP address and device or browser details);
- sync work between the apps and Pebflo, and diagnose sync problems;
- send notifications about tasks, visits and syncing;
- find and fix crashes and errors;
- answer support requests and website enquiries;
- meet our legal obligations and respond to lawful requests.
We do not sell personal data, use it for advertising, or build advertising profiles.
Your organisation uses work data for purposes related to your employment, as the law allows, or with your consent where the law requires it. Rounds and Rounds HQ ask for your permission before they use location, background location, the camera or notifications, and you can withdraw those permissions in your device settings.
8How long we keep it
- Work data stays in Pebflo while your organisation keeps it there and its subscription is active. Pebflo does not delete location history, visits or photos automatically: your organisation decides how long to keep them and can delete records.
- When an organisation’s subscription ends, we delete its data within [number] days, unless the law requires us to keep it longer.
- Crash reports are kept by Firebase Crashlytics for up to 90 days.
- Website enquiries are kept for [period] after our last contact with you.
- On your phone, Rounds keeps an offline copy of your work until it uploads. Signing out removes your sign-in details and the offline copy of your work, photos and videos from the device. Rounds does not let you sign out while work is still uploading.
9How we protect it
- Connections between the apps, the website and Pebflo are encrypted.
- Passwords are stored only in hashed form.
- On your phone, sign-in tokens are kept in the device’s secure storage.
- Photos, videos and files are stored privately and opened through links that expire.
- Access depends on your role, so people see only what their position allows, and important changes are logged.
- Certain sensitive identifiers, such as tax and government ID numbers, are encrypted in the database.
No system is completely secure. If we become aware of a breach affecting personal data, we will inform the organisations concerned and, where the law requires, the Data Protection Board of India and the people affected. If you notice a security problem, email support@techpebble.com.
10Where it is stored
Pebflo’s data is stored and processed in [country or cloud region], and our service providers may process it in other countries. When personal data is transferred outside India, we do so only as Indian law permits and with contractual safeguards.
11Your choices and rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of your personal data and who it has been shared with;
- ask for inaccurate or incomplete data to be corrected, completed or updated;
- ask for data to be erased when it is no longer needed, unless the law requires it to be kept;
- withdraw consent you have given, where we rely on it;
- nominate someone to exercise these rights if you die or become unable to;
- raise a grievance with us, and complain to the Data Protection Board of India if it is not resolved.
For work data, start with your organisation — usually your HR team or Pebflo administrator. It controls that data and can correct or delete it. If you contact us instead, we will pass your request to your organisation and help it respond.
For data we control — website enquiries, crash reports and support messages — email support@techpebble.com with the subject “Privacy request”. We will confirm who you are before acting, and aim to respond within 30 days.
Device permissions can be changed in your device settings at any time. Turning off location may stop attendance and visit check-ins from working, and your organisation may need them for your role.
If you leave your organisation, it can deactivate your account. Ask your organisation about deleting your data.
If you live outside India, you may have similar rights under local law. Contact us and we will help.
12Children
Pebflo is for work and is not intended for anyone under 18. We do not knowingly collect personal data from children.
13Changes to this policy
We will update this policy when our practices change, and the date at the top will show the latest version. Before significant changes take effect, we will tell you in the apps or through your organisation.
14Contact and grievances
- Company
- TechPebble — [registered company name]
- Address
- [registered office address], India
- Privacy requests
- support@techpebble.com
- Grievance Officer
- [name], support@techpebble.com
We acknowledge grievances promptly and aim to resolve them within one month.
See also our Terms of Service.