Data Safety & Security

Data Encrypted in Transit

All communication between the SB Gold app and our servers is encrypted using HTTPS/TLS. Your data is never sent over unencrypted connections.

No Data Sold

We never sell, rent, or share your personal data with advertisers or data brokers. Your information is used only to provide our service to you.

Password Protected

Passwords are managed by Firebase Authentication. They are stored as secure hashes — even our administrators cannot see your password.

Right to Delete

You can delete your account and all associated personal data at any time from within the app, or by contacting us.

📊 Data We Collect — Google Play Data Safety Summary

The following table mirrors our responses to the Google Play Store Data Safety form:

Data Type	Collected?	Shared?	Purpose	Optional?
Name	✓ Yes	✗ No	Account management, order processing	No (required)
Email Address	✓ Yes	✗ No	Login, account recovery	No (required)
Phone Number	✓ Yes	✗ No	Order follow-up, customer support	No (required)
Delivery Address	✓ Yes	✗ No	Delivery coordination for orders	Yes (optional at checkout)
User ID	✓ Yes	✗ No	Firebase Auth — account identification	No (generated automatically)
Purchase History	✓ Yes	✗ No	Inquiry/order tracking and history	Yes (only if inquiry submitted)
Crash Logs	✓ Yes	Firebase only	App stability and debugging	No (automatic)
Device Info	✓ Yes	Firebase only	App performance and analytics	No (automatic)
Location (GPS)	✗ No	✗ No	Not collected	N/A
Camera/Photos	✗ No	✗ No	Not accessed	N/A
Contacts/Calls	✗ No	✗ No	Not accessed	N/A
Financial Info / Payments	✗ No	✗ No	No in-app payments processed	N/A

🔒 How We Protect Your Data

HTTPS / TLS Encryption

Firebase Auth (Hashed Passwords)

Firestore Security Rules

Role-Based Access Control

Google Cloud Infrastructure

Encryption in transit: All data between the app and Firebase is transmitted over HTTPS/TLS (Transport Layer Security)
Firestore security rules: Database rules ensure each user can only read/write their own data. Admins have separate, audited access
Authentication: Firebase Authentication uses industry-standard security. Passwords are never stored as plaintext
Access control: Admin access to the dashboard requires a separate admin role stored in Firestore — regular users cannot access admin functions
No local storage of credentials: We do not store sensitive credentials locally on the device

⏱️ Data Retention & Deletion

We retain your data only as long as necessary:

Profile data (name, email, phone): Retained until you delete your account
Cart & favourites: Cleared immediately upon account deletion
Inquiry/order records: Retained for up to 3 years for business/legal record-keeping. Contact identifiers are anonymised upon account deletion where legally permissible
Firebase Analytics: Anonymised usage data retained for up to 14 months (Firebase default)
Authentication logs: Retained for up to 90 days (Firebase default)

To delete your account and request data removal, see our Account Deletion page or email support@sbgold.in.

🌐 Third-Party Services

SB Gold uses the following third-party services. We are not responsible for the privacy practices of these providers, but we only use reputable, industry-standard services:

Google Firebase — Authentication, database (Firestore), and crash analytics. Privacy Policy
ImgBB — Product image hosting (admin panel only, not end-user). Privacy Policy
Google Fonts / Font Awesome — Typography and icons (no personal data collected)

We do not use advertising SDKs, cross-app tracking, or analytics beyond the above.

🛡️ Data Protection Questions?

If you have any questions about our data practices or want to exercise your data rights:

📧 support@sbgold.in

📞 +91 9864123405

📍 1st Floor, Kalindi Plaza, Dr. J C Das Road, Pan Bazar, Guwahati – 781001, Assam, India