This Privacy Policy applies to the Ulaanbaatar Buyan LLC staff mobile application (the “App”). The App is intended solely for the company’s internal employees — complex managers — and is not available to the public. This policy explains what data we collect, and how we use and protect it.
Data we collect
The App processes the following data, as needed to carry out work duties:
- Login information — the employee’s phone number and password. The password is not stored on the device; it is used only to sign in, after which the server issues short-lived access tokens.
- Employee profile — your name, phone, email and role, read from the server to display your profile and determine your access.
- Work data — ceremonies, contracts, memorial (eregelt) orders, deceased records, and customer name, phone and payment balance, viewed and updated as part of your duties.
- Photos — images taken with the camera or chosen from the gallery, uploaded to the server as proof that a service was completed.
- Notification token — a device notification token (push token) may be registered to enable work-related notifications.
Device permissions
The App uses the following device capabilities only for the stated purposes:
- Camera — to capture proof-of-service photos.
- Photo library (gallery) — to select photos to upload.
- Notifications — to receive work-related alerts.
- Internet connection — to transmit data to the server.
The App does not access location (GPS), contacts, or the microphone.
How we use data
We use data only to:
- Authenticate the employee and grant access to the App;
- Display and manage assigned ceremonies, contracts and memorial orders;
- Record and confirm completed services;
- Send work-related notifications.
We never use your data for advertising, marketing, or profiling.
Storage and security
- On the device, only the access tokens are stored, encrypted in the operating system’s secure store (iOS Keychain / Android Keystore). No other personal data is stored on the device.
- All work data (ceremonies, contracts, deceased records) is fetched live from the server when needed and is not saved on the device.
- All communication with the server is over an encrypted (HTTPS) channel, and every request is authenticated with a short-lived token.
- Access to data is restricted by the employee’s role and assigned complex.
- On logout, the access tokens are deleted from the device.
Sharing with third parties
The App contains no third-party analytics, advertising, or tracking components. Your data is transmitted only to Ulaanbaatar Buyan LLC’s own server (ulaanbaatarbuyan.mn).
SMS messages sent to customers are sent by the server, not by the App. When push notifications are enabled, the device notification token may be passed to a notification-delivery service solely to deliver work notifications.
Retention
Access tokens are kept until logout and deleted thereafter. Work data and proof-of-service photos on the server are retained for as long as required by the company’s record-keeping rules.
Your rights
This App is an employer-provided internal tool, so user accounts are managed by the company administrator. To view, correct, or delete your data, please contact the company administrator or HR. You can clear your sign-in data from the device using the logout button.
Children’s data
The App is intended only for adult employees, is not directed at children, and does not knowingly collect children’s data.
Changes to this policy
We may update this policy when necessary and will publish the updated version on this page. Effective date: 15 June 2026.
Contact
For privacy-related questions, contact us:
- Ulaanbaatar Buyan LLC
- Address: Central office, Enkhtaivan Avenue, Sükhbaatar District, Ulaanbaatar.
- Phone: 7700-1234
- Email: info@ulaanbaatarbuyan.mn