Zentrix Check privacy policy
Last updated: October 16, 2026.
1. What Zentrix Check is and who it is for
Zentrix Check is the internal work tool of the security staff of the company that uses it (the “company”), at the gate of each site. It is developed and distributed by GUUAO LLC through Google Play, for Android only. Guards use it to record what comes in and goes out: loaded trucks leaving, goods arriving, keys, company equipment and incidents. The app does not move inventory or touch the accounting: it only records what the guard checked.
It is not a consumer app and it does not allow sign-up. Each guard’s account is created by the company’s security administrator, and each phone is set up with a QR code that seals it to one site. Without that, the app does nothing.
This policy applies to these people:
- The guard: the company employee who uses the app with their account.
- The security administrator: who reviews the day, the records and the photos of their site from the app. They can only look; they cannot change what the guard signed.
- People whose data goes through the gate even if they don’t use the app: drivers and carriers, those named on the invoices and papers that travel with a load, employees who take a key or a piece of equipment, and the site contacts the guard may call.
The processing is part of the employment relationship and of access control to the company’s premises. The app does not show a consent dialog: recording who checked what, and when, is the very purpose of the tool. The only permission the phone asks for is the camera, and it is Android that asks.
2. What data is collected and why
About the guard and the administrator
| Data | What it is used for |
|---|---|
| Name and username | Identifying the guard on the gate phone and on every record they sign. The username is that of their account in the company’s system. |
| Password | Signing in the first time on each phone. It is validated by the company’s server; the app does not store it. What is stored is the session, encrypted on the phone. |
| PIN | Signing in afterwards with name and PIN, and signing every record. It is a local lock: it is stored hashed on the phone and never leaves it. |
| Administrator’s two-factor code | The security administrator also signs in with a one-time code, validated by the company’s server. |
| Going on and off duty | When the guard went on and off duty at the gate, the time of their last action, the site and the post. It shows who was in charge. It is not a working-time record. |
| Log of what they do | Every step of every record, with its time and the guard who did it: departures, receipts, counts, differences, signatures, keys, incidents and decisions. It is the gate’s audit trail. |
| Phone and session data | Phone model, Android and app version, and an installation identifier generated by the app. The company’s server also logs the IP address and dates of each session. They show which phone did what, allow cutting off a lost phone and enforcing a minimum app version. |
| Phone and app integrity | When the phone is set up and at sign-in, the app asks Google Play to confirm that the app is genuine and runs on an unaltered phone. See clause 6. |
| Usage and crash data | Which screens are used, without any record data, and technical reports when the app fails. Details in clause 6. |
About people whose data goes through the gate
| Data | What it is used for |
|---|---|
| Vehicle plate and photo of the plate | Confirming that the vehicle leaving or arriving is the one the system expects. The plate comes from the company’s dispatch; the guard only types it if it doesn’t match or is missing. |
| Driver’s name and the last 4 digits of their ID | Confirming that the driver is the assigned one. They come from the company’s system; the app never shows the full ID number and keeps it on the phone for 12 hours at most. |
| Photos of the load, cab, container and seals | Recording the condition of the load and the vehicle on departure or arrival. They are photos of things: the app asks that no people appear. |
| Photos of invoices and carrier papers | Recording the documents that travel with the load. They may show the name, tax ID or ID number, address and amounts of customers, suppliers and drivers. They are stored with the same restricted access as the records. |
| Who takes a key or a piece of equipment | The employee, picked from the company’s list, and the time out and back. Never their ID number. If the person is not on the list, their name is not written down. |
| Text and photos of an incident | Two or three words about what happened and, if needed, up to three photos of things. The app asks not to write names or ID numbers and masks any run of six digits. |
| Site contacts and logged calls | The role, schedule and work phone of the people the guard may call (supervisor, manager, dispatch). When the guard calls from the app, who and when is noted; the call is not recorded and its duration is not stored. |
3. What the app does NOT do
- It does not use location. The app doesn’t even ask for that permission.
- It does not read the phone’s gallery, contacts, messages or files. Photos are taken with the camera from within the app.
- It does not record audio. The app may read prompts aloud with the voices already installed on the phone, without downloading anything. If the guard dictates with the keyboard’s microphone, that dictation is handled by the phone’s keyboard, not by Zentrix Check.
- It does not use facial recognition or biometric data, and it does not ask for photos of people or identity documents.
- It does not send push notifications.
- It does not sell data, show ads or build marketing profiles.
- It does not use the phone’s advertising ID.
- It does not send the PIN anywhere.
- It does not send screenshots, record contents or photos in crash reports or usage metrics.
- It does not copy its data to the phone’s cloud backup or to a new phone.
- It does not allow changing a signed record. A correction is added as a note and the original is kept.
4. Where it is stored
The data is stored on the company’s servers, in its management system (Odoo), together with the rest of the information about each load. The app talks to them over HTTPS only.
The gate phone keeps the phone key, the session and each guard’s PIN in Android’s secure storage (Keystore); whatever has not been sent yet, encrypted; and photos and drafts of unfinished work in the app’s private storage, until they are sent or expire. If the phone is revoked, the app wipes all of that as soon as it reconnects. Uninstalling the app also makes Android delete it.
5. How long it is kept
We keep access records, evidence photos and the event log for as long as they are needed for the security of the premises and to meet legal obligations; after that they are deleted or anonymized.
- Driver data on the phone: the gate phone keeps it for 12 hours at most.
- Crash reports: according to the period set at the provider, which does not exceed 90 days.
- Usage metrics: according to the period set in Google Analytics, which does not exceed 14 months.
- PIN and session: live only on the phone and are deleted when leaving the phone, revoking it or uninstalling the app.
When a photo or a piece of data is deleted, the log row may remain, with its fingerprint and the deletion date, so the chain of records stays verifiable. Whatever an authority asks to keep for an open case is kept until the case ends.
6. Who it is shared with
Within the company, access is limited to those who need it for their role and to their site: the guard sees their gate; the security administrator, the head of security and the site manager see the records, differences and photos of their site; and whoever sees the load in the system sees the copy of its invoices. When something needs attention, the system creates a task for the manager, which may reach them by email depending on their preferences.
To work, the app uses these providers. They process data on behalf of the company and not for their own purposes:
- Google LLC — Google Analytics for Firebase: measures which screens are used, identified by a generic name and without numbers or record data. It receives an app installation identifier and technical data about the phone. It does not receive names, plates, seals, scanned codes or photos.
- Google LLC — Play Integrity API: when the phone is set up and at sign-in, it checks that the app is genuine and the phone is unaltered. It receives technical information about the phone and the app.
- Functional Software, Inc. (Sentry), United States: receives technical reports when the app fails: the error, the app and Android version, the phone model and the server it was connected to. They never include the guard’s name or username, screenshots, record contents, photos or scanned codes.
Some of these providers process data outside Venezuela, mainly in the United States.
Beyond that, data is only handed to third parties when a competent authority requires it under the law.
The website. This policy is about the app. The zentrix.company website, where you are probably reading it, shows no ads and only measures visits with Google Analytics if the person accepts it in the cookie notice; without that permission it sets no cookies and loads nothing from Google. What is measured and how to withdraw permission is in Cookies and analytics. Like any website, it is served by a hosting provider (GitHub, with Cloudflare in front), which sees the connection’s IP address in order to deliver the page.
7. Access, correction and deletion
Anyone whose data goes through Zentrix Check, guard or not, can ask to see, correct or delete their data. To do so, write to soporte@zentrix.company with the subject Data request — Zentrix Check and the details needed to identify you. Guards can also ask the security administrator.
Deleting the account. The app does not allow creating accounts, so they are not deleted from it either: the company creates and closes them. When a guard asks to close their account, or leaves the company, their access is removed and their personal data that does not need to be kept is deleted. The records they signed are kept, because they are the log of what came in and went out of the company; a mistake in them is corrected with a note, not by rewriting them.
We reply within 30 business days at most. If something cannot be deleted because of a legal, accounting or tax obligation, or an ongoing claim or investigation, we tell you why and for how long.
Leaving the phone, forgetting the PIN or uninstalling the app does not delete anything from the server. It only removes the session from the phone. To delete data, use the channel above.
8. Minors
Zentrix Check is a work tool for adults (18 or older) who work in the company’s security. It is not aimed at minors and does not knowingly collect data from minors. The app instructs guards never to photograph minors.
9. Security
- All communication with the company’s servers is encrypted (HTTPS/TLS).
- Each phone is sealed to one site with its own key; the server stores only its fingerprint, not the key.
- The session, the phone key and the PIN are stored in Android’s secure storage (Keystore). The PIN is stored hashed and never leaves the phone.
- Whatever is waiting to be sent is stored encrypted (AES-256) on the phone.
- Each event carries the fingerprint of the previous one and each photo its SHA-256 fingerprint: if someone alters a record or a photo, it shows.
- Screenshots are blocked on the PIN, password and photo viewer screens.
- On every operation, the server checks who the guard is, from which phone and at which site. What the phone says is not enough.
- Access for a guard or a phone can be withdrawn at any time. When a phone is revoked, the app wipes what it stored.
No security measure is absolute, and we keep working to improve them.
10. Changes to this policy
If the data the app handles changes, this page will be updated and the date at the top will change. Important changes will also be announced to security staff through the company’s internal channels.
11. Contact
GUUAO LLC
soporte@zentrix.company