Privacy Policy

1. Who we are

FlowSense is a water-plant monitoring and maintenance platform used by plant operators, technicians, managers and their clients. In this policy, “FlowSense”, “we”, “us” and “our” refer to Axiom Group Africa.

Privacy questions and requests: support@flowsense.africa.

2. Information we collect

Account information

• Your first name, last name and email address.
• Your job role, user access level, company and the plants you are allowed to see.
• Your password, stored only as a one-way hash on our server. We never store your plain password.

Sign-in and security information

• A 6-digit verification code is emailed to you after your password. The code is stored as a hash and expires after 10 minutes.
• The mobile app stores a secure access token in your phone’s keychain so you do not have to sign in on every launch.
• If you enable biometric unlock, Face ID or Touch ID is checked by your phone. FlowSense never receives or stores your biometric data.
• We may record sign-in attempts, IP address, browser or device type, and security events to protect accounts.

Plant and maintenance information

• Live sensor readings, tank levels, flowmeter totals, pump states and alarm history for the plants you can access.
• Alarm acknowledgements, comments, timestamps and the user who acknowledged an alarm.
• Job cards, findings, work results, technician notes, status changes, evidence photos and signatures.
• Site contact details configured by your organisation for alert delivery.

Device and notification information

• A push notification token for your phone, the platform (iOS or Android) and the device model name.
• Notification permission status and delivery results (for example, whether a push was accepted or the token expired).

Camera and photos

The app asks for camera or photo-library permission only when you choose to attach an evidence photo to a job card. You can use the rest of the app without granting these permissions.

3. Why we use information

• To provide the service — show live plant data, alarms and job cards to the right people.
• To authenticate you — verify your password and email code, and keep your session secure.
• To send alerts — deliver alarm notifications to your phone, and email, SMS or WhatsApp alerts to configured recipients.
• To maintain records — keep an audit trail of alarms, acknowledgements and maintenance work.
• To support you — investigate problems, respond to requests and improve reliability.
• To protect the service — detect abuse, secure accounts and comply with legal obligations.

4. Legal basis under POPIA

We process personal information because it is necessary to perform our contract with your organisation, because we have a legitimate interest in operating and securing the service, because you have asked us to act (for example, attaching a photo), or because the law requires it. These grounds correspond to section 11 of POPIA. Where consent is required, you can withdraw it at any time.

5. Who we share information with

We do not sell personal information. We share it only with service providers that help us run FlowSense, under appropriate safeguards:

• Hosting, database, cache and telemetry infrastructure providers.
• Email delivery providers for verification codes and alerts.
• SMS and WhatsApp messaging providers for alert delivery, when your organisation enables them.
• Expo and Apple/Google push notification services for mobile alerts.
• Apple and Google app-store services, as required for app distribution.
• Your organisation’s administrators, who manage users and plant access.
• Authorities or advisers where required by law or to protect rights and safety.

Some providers may process information outside South Africa. Where that happens, we rely on appropriate contractual or legal safeguards.

6. How long we keep information

• Account information is kept while your account is active and for a reasonable period afterwards for security and legal records.
• Alarm, acknowledgement and job-card records are kept as part of the plant’s operational and audit history.
• Push tokens are kept until you disable notifications on that phone, sign out, or the token expires.
• Verification codes expire after 10 minutes; used and expired codes are removed.
• Technical logs are kept for a limited period appropriate to security and troubleshooting.

7. Security

We use HTTPS for data in transit, role-based access controls, hashed passwords, expiring verification codes, and server-side checks that limit each user to the plants they are allowed to see. No system is completely secure, but we work to protect your information and to limit access to those who need it.

Cookies and browser storage. The web dashboard uses a strictly necessary session cookie to keep you securely signed in. The mobile app stores its access token in the device keychain and keeps an offline cache on the device. We do not use advertising cookies or sell cookie data. See our POPIA Notice for more detail.

8. Your choices and rights

Subject to applicable law, you may ask to access, correct or delete your personal information, object to certain processing, or ask for a copy of your information. Contact support@flowsense.africa. You may also complain to the Information Regulator of South Africa.

9. Deleting your account

You can delete your account inside the mobile app: open More → Delete account, confirm your password and type DELETE. This deactivates your login, removes your name and email from the user record, and disables push notifications for the account.

Some business records you created — such as alarm acknowledgements, job cards and maintenance history — may be retained for the plant’s audit and safety records, as described in section 6. If you cannot use the in-app option, email support@flowsense.africa from the address associated with your account. More detail is on the account deletion page.

10. Children

FlowSense is a workplace application and is not intended for children under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy to reflect changes in the app or the law. The latest version is always published at this address, with the date shown at the top.

12. Contact

Axiom Group Africa · FlowSense
Email: support@flowsense.africa
Web: app.flowsense.africa