Kornox App Privacy Policy

1. Scope and responsibility

This policy explains how ZERNO CORP. (“Kornox”, “we”, “us”) handles personal information in the Kornox iOS and Android apps and the connected CRM service. The marketing website is covered by our separate website Privacy Policy.

Kornox is a business workspace. Your organization determines which employees can access its workspace, which integrations are enabled, and how customer and employee information is used for its business. We process workspace information to provide the service to that organization. For questions about your employer’s use of your information, contact your organization as well as Kornox.

2. Information processed by the service

Account information

Names, email addresses, phone numbers, organization memberships, roles, account identifiers, sign-in and session information.

Business records

Customer and service addresses; leads, jobs, appointments, schedules, work availability and time-off records; estimates, invoices, payment amounts, methods, references and statuses; notes and activity records. These records can contain information about customers, employees and other people entered by authorized users.

Communications and files

Team and technician chat messages, recipients and timestamps, read status, SMS and email information, photographs, videos, documents and voice messages that users send or upload. Calling features process telephone numbers, call metadata and audio. Recordings, transcripts and summaries are processed when the relevant features are used or enabled by the organization.

Device and technical information

App and operating-system versions, installation and device identifiers, push-notification tokens, network and IP information, authentication and security events, crash information and call-quality or other technical diagnostics.

Location

When the organization enables Employee Location Tracking and the technician grants the necessary device permissions, Kornox collects the technician’s device location, including precise location when permitted, accuracy, capture time and location-availability status during configured working periods. Location can be collected while the app is in the background. The service applies work schedules and approved time off.

Separate visit actions may include an available location in the job’s activity record. Those actions can also be completed without GPS.

3. How information is used

We use this information to authenticate users, enforce organization and role access, synchronize business records, coordinate work, provide communications and notifications, show authorized staff a technician’s latest working location, deliver configured integrations, respond to support requests, troubleshoot errors, protect the service and meet applicable legal obligations.

The mobile app does not display third-party advertising or use a mobile advertising identifier for cross-app advertising. Customer organizations may separately enable marketing-attribution integrations for their businesses. Those integrations can process campaign identifiers and conversion events associated with customer enquiries and jobs; they are distinct from tracking an employee’s mobile app use for advertising.

4. Who can receive information

Authorized people in your organization can access information according to their roles and work assignments. Messages and documents can also be delivered to recipients selected through the service.

We use infrastructure and communications providers to operate Kornox. Depending on the feature, these include Cloudflare for file storage and infrastructure; Expo for app updates, technical diagnostics and push delivery; Apple and Google for device notification delivery; and Twilio for calling and messaging. These providers receive information needed to perform the relevant service.

When the corresponding integrations are used, selected information is sent to the configured providers. Examples include Google services for connected email, files, spreadsheets or advertising conversions; Stripe for payment processing; and OpenAI for AI requests, transcription or call summaries. Information sent to an AI service can include the request, relevant business context and audio or text selected for processing. Features and access depend on the organization’s configuration.

When we share personal information with service providers to process on our behalf, we require them to protect it to a standard at least equivalent to this policy and applicable requirements, use it only for the authorized service, and maintain appropriate confidentiality and security safeguards.

We may disclose information when required by law, to protect the service and its users, or as part of a business transfer. This policy does not authorize your organization or another user to disclose information they have no right to share.

5. Location and permission controls

You can change notification, camera, microphone, photo and location permissions in your device settings. Disabling a permission limits the feature that needs it. Notification previews can appear on a lock screen according to your device settings.

Background employee location tracking requires the organization setting and applicable location permissions. Authorized staff see the most recent working position and its age or accuracy. This feature keeps a latest-location record rather than a continuous route history. A previously received position may remain visible as an older position after collection stops. Coordinates attached to an individual visit action are retained with that business activity record.

Location collection is stopped for the signed-out account and re-evaluated when the organization or work period changes. Device restrictions can delay or prevent background updates; an old position is not proof that a technician is still at that place. You may revoke location access in system settings. Revoking access does not itself delete records already sent to the service.

6. Retention and deletion

Workspace records are retained to provide the organization’s service and maintain its business records, subject to its instructions and applicable legal, accounting and security requirements. Retention varies by record type and purpose. Replacing the latest working position does not create a route-history record; separate job activity, communications and other business records have their own lifecycle.

Signing out, uninstalling the app or disabling notifications does not automatically delete the organization’s server-side records.

To request account or personal-data deletion, email support@kornox.com and identify the relevant organization. You may also contact your organization’s administrator. We verify requests and coordinate with the organization where it controls the data.

Some information may need to be retained to comply with legal obligations, resolve disputes, protect security or preserve records the organization is entitled to keep. We will explain applicable limitations when responding.

7. Security and processing locations

Kornox uses encrypted network connections, authenticated sessions, organization-based access controls and access-controlled file storage. No service can guarantee absolute security. Information may be processed where Kornox and its service providers operate, including outside your country.

8. Your choices and requests

Depending on applicable law, you may have rights to request access, correction, deletion or a copy of your personal information, and to object to or restrict certain processing. You may withdraw device permissions in system settings.

Contact support@kornox.com to make a privacy request or raise a concern. For organization-managed data, we may need to refer or coordinate the request with that organization. You may also contact the relevant data-protection authority where applicable.

Kornox is intended for professional business use and is not directed to children.

9. Updates and contact

We will update this policy when our practices change and show the revision date on the published page.

For questions about this policy or personal information handled by Kornox, contact ZERNO CORP. at support@kornox.com.