Zentrix Work privacy policy
Last updated: October 13, 2026.
1. What Zentrix Work is and who it is for
Zentrix Work is the internal work tool for the store staff of the company that uses it (“the company” from here on). It is developed by GUUAO LLC and distributed through Google Play, for Android. Operators use it to pick orders, make deliveries and take in returns.
It is not a consumer app and it does not let anyone sign up. Accounts are created by a store manager for staff hired by the company. Without one, the app does nothing. If the company has an app for its customers, that is a different app with its own privacy policy.
This policy covers two groups of people:
- The operator: the employee or contractor who uses the app with their own account.
- The customer whose order is being handled. Some features process their data even though they do not have this app: the order chat, the proof-of-delivery photo and the age check.
This processing is part of the working relationship and of the service the company provides to its customers. That is why the app does not show a consent dialog: knowing which store you are on shift at and who handled each order is what the tool is for. Phone permissions (location, camera and notifications) are requested by Android, and the operator grants or denies them there.
2. What data we collect and why
From the operator
| Data | What it is used for |
|---|---|
| Name, email and profile photo | Identifying the operator in the app and on its lock screen. The email is the username of their company account. |
| Password | Signing in. The company’s server checks it; the app does not store it. What is stored is the session, encrypted on the phone. |
| Approximate location | Confirming that the operator is at the store when they clock in, when they clock out and while their shift is active. It is approximate: accurate to the block, not to the meter. |
| Precise location, only when delivering | Only for the operator who goes out on deliveries, and only while they have an open delivery stop. It is used to guide them to the customer and to let the customer see where their order is. While it is in use, the phone shows a persistent notification (“Route in progress”). The notification goes away when the last stop is closed. |
| Device identifier for notifications | Sending work alerts to the phone of the operator who is on shift. |
| Activity log | Which operator picked, delivered or took in each order, with date and time. This is the store’s traceability record. |
| Phone sound status | When the operator clocks in and during the shift, the app reports whether notifications are allowed and whether the phone is on silent or “Do Not Disturb.” That way the server knows whether an order alert will make a sound. Nothing else is read from the phone. |
| Usage and crash data | Operational metrics: shifts opened, orders taken, how long picking takes. Also technical reports when the app fails, including a notice when the system force-closed it. Details in section 6. |
| What you write in “Report a problem” | Only if you choose to use it, from Settings: the text you write to tell us about a fault, along with the app version and phone version. It never includes a screenshot. |
From the customer whose order is being handled
| Data | What it is used for |
|---|---|
| Name, phone number and delivery address | Delivering the order to the right person. The company loads this data from the order; the app only displays it. |
| Order chat messages and photos | Talking with the customer about that order, for example to let them know about a substitution. The chat stays linked to the order. |
| Proof-of-delivery photo | Recording that the order was delivered in full and to the right person. |
| Photo of the national ID card (cédula), only for orders with liquor | Backing up that the operator checked, at delivery, that the person receiving it is of legal age. It is not used for anything else, and only the manager of that store can see it. |
| ID card photo of the person bringing a return | Backing up who handed in the returned product at the counter. Same rule as above: only the manager of that store can see it. |
| Cash on delivery: amount, payment method, reference and photo of the card terminal receipt | When the order is paid on receipt, the delivery driver records that they collected payment. If it was by card, they photograph the card terminal receipt. The app does not process payments: it only records the collection. The amount is calculated by the company’s server, never by the phone. |
| Age check record | Who did it, when, for which order and where (at the counter or at the customer’s door). It meets the company’s responsible alcohol sales policy. |
Reading the ID card with the camera. The operator can point the camera at the ID card so the app reads the date of birth instead of typing it in. That image is not stored and never leaves the phone: it is processed on the device itself, and only the result of the check reaches the server. The operator can always check by eye and confirm by hand.
3. What the app does NOT do
- It does not access location outside the shift, and it does not request background location.
- It does not ring or send notifications when the operator is clocked out.
- It does not sell data, show ads or build marketing profiles.
- It does not use the phone’s advertising ID. The app does not even ask for permission to read it.
- It does not send the PIN anywhere. It is a local lock, stored encrypted on the phone.
- It does not send screenshots or screen content in crash reports: those screens show ID cards and addresses.
- It does not send customer data to measurement tools. Only internal identifiers and timings are sent, filtered against a closed list.
- It does not copy its data to the phone’s cloud backup or to a new phone. What the app stores is store work, and it stays on that phone.
- It does not read the operator’s contacts, messages, files or photo gallery. To attach a saved photo, it uses the Android picker, which only hands the app the image that was chosen.
4. Where the data is stored
The data is stored on the company’s servers, in its management system (Odoo), together with the rest of the information for each order. The app talks to them over HTTPS only.
The operator’s phone keeps the session and the PIN, encrypted in Android’s secure storage (Keystore). It also keeps scans that have not been sent yet and a cache of product images. When the app is uninstalled, Android deletes all of that.
5. For how long it is kept
- Shift location: deleted automatically after 30 days. After that, only a count remains: how many times it was measured and how many of those were inside the store, not where the operator was.
- Delivery route: same rule, 30 days, and it deletes itself.
- ID card photo (liquor deliveries and returns): the image is deleted after 90 days. The record that the check was done, who did it and when remains, but the document does not.
- Messages, chat photos and proof-of-delivery photo: kept with the order for as long as the law requires the fiscal and operational records of that order to be kept.
- Payment record and card terminal receipt photo: these are accounting records and are kept for the period Venezuelan law requires for them.
- Age check record: for as long as there is a legal obligation to keep it.
- Activity log: with the order, for the same reason.
- Crash reports: according to the period configured with the provider, which does not exceed 90 days.
- Usage metrics: according to the period configured in Google Analytics, which does not exceed 14 months.
- PIN and session: live only on the phone and are deleted when you sign out or uninstall the app.
6. Who it is shared with
Within the company, access is limited to those who need it for their role: the operator handling the order, the manager of that store and the support team if there is a complaint or a return. ID card photos are more restricted: only the store manager can see them, and every time someone opens one, it is logged.
To work, the app uses these providers. They process the data on the company’s behalf and not for their own purposes:
- Google LLC — Firebase Cloud Messaging: delivers work notifications. It receives the phone’s notification identifier and the alert.
- Google LLC — Google Analytics for Firebase: measures operations (shifts, orders, timings), identified by store and without people’s names. It receives an app installation identifier and technical data about the phone.
- Google LLC — Google Maps Navigation SDK: only for the operator who delivers, with an open stop. It guides the route and receives their precise location while navigating.
- Functional Software, Inc. (Sentry), United States: receives technical reports when the app fails. They include the error, the app and Android versions, the store of the shift and the operator’s internal identifier. They never include their name, their email, screenshots or customer data.
- OpenStreetMap Foundation: serves the delivery map tiles when the Google map is not used. Like any web server, it receives the phone’s IP address and the map area being viewed.
Some of these providers process data outside Venezuela, mainly in the United States.
Beyond that, data is only handed to third parties when a competent authority requires it under the law.
The website. This policy is about the app. The zentrix.company website, where you are probably reading it, shows no advertising and only measures visits with Google Analytics if the visitor accepts it in the cookie notice; without that permission it sets no cookies and loads nothing from Google. What is measured and how to withdraw permission is in Cookies and analytics. Like any website, it is served by a hosting provider (GitHub, with Cloudflare in front), which sees the connection’s IP address in order to deliver the page.
7. Access, correction and deletion
Anyone whose data passes through Zentrix Work, whether operator or customer, can ask to see, correct or delete their data. To do so, write to soporte@zentrix.company with the subject Data request — Zentrix Work and the details needed to identify you. Operators can also ask their store manager.
Deleting the account. The app does not let you create accounts, so they are not deleted from it either: the company creates and closes them. When an operator asks to close their account, or leaves the company, their access is revoked and their personal data is deleted. Only what the law requires us to keep is retained, such as the record of who dispatched an order that has already been invoiced.
We respond within 30 business days at most. If something cannot be deleted because of a legal, accounting or tax obligation, or because of an open complaint, we tell you why and for how long.
Signing out, forgetting the PIN or uninstalling the app does not delete anything from the server. It only removes the session from the phone. To delete data, use the channel above.
8. Minors
Zentrix Work is a work tool for adults (18 or older) hired by the company. It is not directed at minors and does not knowingly collect data from minors as users.
9. Security
- All communication with the company’s servers is encrypted (HTTPS/TLS).
- The session is stored encrypted in Android’s secure storage (Keystore).
- The PIN is stored as a hash, never in plain text, and it never leaves the phone.
- On every operation, the server checks who the operator is, which store they are on shift at and which tasks they are allowed to do. What the phone says is not enough.
- An operator’s access can be revoked at any time, for example if they leave the company or lose their phone. The app signs out the next time it is used.
No security measure is absolute, and we keep working to improve ours.
10. Changes to this policy
If the data the app handles changes, this page will be updated and the date at the top will change. Important changes will also be announced to operators through the company’s internal channels.
Change note (October 13, 2026). The app was renamed Zentrix Work, the company the operator works for is now referred to generically (“the company”), and this policy moved from work.guuao.com/privacidad.html to zentrix.company/work/privacidad. Nothing changed about what data is handled, why, or who it is shared with. The paragraph about the website was corrected, because the new site does not use analytics.
11. Contact
GUUAO LLC
soporte@zentrix.company