Privacy Policy for CCMS Port App

Last Updated: August 31, 2026 · Effective Date: August 31, 2026

1. Introduction and Overview

This Privacy Policy explains how Dynamic Solution Innovators Ltd. (DSi) ("DSi", "we", "our", or "us", available at https://www.dsinnovators.com/) handles data in connection with the CCMS Port App (the "Application" / "App", package net.innovatorslab.odms.portapp).

The CCMS Port App is a closed-loop, business-to-business (B2B) enterprise application developed for container terminals, Inland Container Depots (ICD), port logistics operators, and authorized client personnel.

Important Notice: The Application is not a general public or consumer application. It is provided exclusively for authorized corporate and enterprise clients who have deployed the ODMS (Operational Depot Management System) backend infrastructure.

2. Business Architecture & Data Ownership (Zero-Client-Data Model)

2.1 Direct-to-Client Server Communication

Each client organization operates its own dedicated server environment (on-premises or private cloud backend, such as ODMS Unified). When authorized personnel use the Application:

  • All operational and business transactions (including gate logs, yard movements, EIR processing, stuffing records, seal verifications, challan records, and operational inspection photos) are transmitted directly between the mobile application and the respective client organization’s designated private backend server.
  • DSi does not store, harvest, inspect, sell, or process any operational business data generated by or processed through your organization's server.

2.2 Role of DSi Sentinel Service

DSi maintains a lightweight licensing and application maintenance service known as the Sentinel Server. The Sentinel service is used strictly for:

  • License Expiry & Handshake Validation: Verifying active software licensing status and client organization activation.
  • Application Lifecycle & Update Checks: Alerting users of critical updates, maintenance windows, or minimum supported version requirements.
  • Technical Performance Telemetry: Collecting non-personal, aggregated network performance diagnostics (such as request latency in milliseconds, HTTP status codes, timestamp, endpoint path, and client organization ID) to ensure service availability and diagnose network bottlenecks.

The Sentinel service never receives or stores personal identifying information (PII), container payloads, financial data, or operational inspection photos.

3. Information Collected, Processed, and Stored

3.1 Data Stored on the Local Device

  • Authentication Tokens: When an authorized user logs into their organization’s server, an authentication session token (e.g., JWT) is stored locally on the device within encrypted hardware-backed storage (Android Keystore / iOS Keychain).
  • Device Identifier (UUID): A randomly generated Universally Unique Identifier (UUID v4) is created on first launch and stored in secure device storage. This identifier is used exclusively for hardware binding and license authorization with your organization's backend and Sentinel.
  • User Preferences: Local settings such as preferred language (e.g., English or Bengali) and display theme are stored locally via standard device preferences.

3.2 Device Hardware Permissions & Usage

The Application requests specific platform permissions solely to perform its operational port logistics functions:

  • Camera (android.permission.CAMERA / NSCameraUsageDescription):
    • Barcode & QR Scanning: Scanning Challans, gate passes, and equipment labels.
    • On-Device Optical Character Recognition (OCR): Recognizing container numbers in real time directly on the device using Google ML Kit. OCR processing occurs locally on the device; images are not sent to external third parties for text extraction.
    • Operational Evidence Photos: Capturing container seals, stuffing progress, and gate damage verification photos. These photos are transmitted directly and exclusively to your organization’s designated server.
  • Internet Access (android.permission.INTERNET):
    • Required to communicate with your enterprise backend server and the DSi Sentinel handshake endpoint over encrypted HTTPS/TLS and secure WebSockets.

4. No Third-Party Advertising, Tracking, or Data Selling

  • No Third-Party Ad Networks: We do not integrate advertising SDKs, ad networks, or user profiling trackers (e.g., Google AdMob, Meta Audience Network).
  • No Data Monetization or Sale: DSi does not sell, rent, lease, trade, or monetize any client data, device information, or user logs to third parties.
  • No Consumer Behavioral Profiling: We do not track user activities across external apps or websites.

5. Data Security

We implement industry-standard enterprise security practices to protect data handled by the Application:

  • Encrypted Transmission: All network traffic between the Application, your client server, and Sentinel is encrypted using Transport Layer Security (TLS 1.2+ / HTTPS / WSS).
  • Hardware-Backed Keystore: Sensitive session credentials and binding identifiers are stored using hardware-backed cryptographic storage (Android EncryptedSharedPreferences with Keystore / iOS Keychain with first_unlock_this_device accessibility).
  • On-Device Machine Learning: Visual OCR processing runs on-device without offloading image frames to public cloud recognition APIs.

6. Data Retention and Account Management

  • Enterprise Business Data: Retention, archiving, and deletion of business data (such as gate logs, container records, and inspection photos) are governed entirely by your employing or contracting organization’s internal policies and their dedicated ODMS backend server.
  • Local Application Data: Users may delete all locally cached tokens, preferences, and temporary files at any time by clearing the Application's storage in the device settings or by uninstalling the Application.
  • Account Deletion: User accounts and operational access privileges are provisioned and managed directly by the enterprise client organization's system administrator. To request account deactivation or removal, contact your organization's IT / ODMS administrator.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in application features, software updates, or regulatory requirements. The latest version will always be published with an updated "Last Updated" date.

8. Contact Us

If you have questions, feedback, or inquiries regarding this Privacy Policy or DSi’s data protection practices, please contact us:

Dynamic Solution Innovators Ltd. (DSi)