Bootstrap FMS App Privacy Policy

Effective date: 15 October 2026 · App: bootstrapFMS (Android, package com.bootstrappdm.bootstrapfms)

 

In short

• Bootstrap FMS is a work app used by hotel staff, and on in-room guest tablets, to handle guest requests, complaints, in-room dining and maintenance.

• All data is stored on the hotel's own server inside the hotel. It is not sent to Bootstrap PDM or to any cloud service.

• The app contains no advertising, no analytics and no tracking. We do not sell or share personal data.

• For staff, the app uses the identity of the hotel Wi-Fi access point the phone is connected to, so supervisors can see which area of the hotel staff are working in. It does not record GPS coordinates.

​

1. Who we are

Bootstrap FMS ("the app") is developed by [Bootstrap PDM Private Limited – confirm legal name], [registered address], India ("Bootstrap PDM", "we", "us").

The app is supplied to hotels ("the hotel") together with the Bootstrap FMS server software, which the hotel installs and runs on its own premises. The hotel decides who uses the app and what is done with the information in it, so for personal data handled through the app the hotel is responsible for that data (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023). Bootstrap PDM provides the software and, when the hotel asks, technical support.

​

2. Who uses the app

• Hotel staff sign in with an account created by the hotel's administrator. There is no public sign-up.

• Hotel guests may use the app on a tablet the hotel places in their room ("guest mode"). Guests do not sign in or create an account.

​

3. Information the app handles

 

3.1 Staff

​

Username, role, department, profile photo (set by the hotel administrator)- To sign in and show the right work to the right person.

​

Password - To sign in. It is stored on the hotel server only in encrypted (hashed) form and is never stored on the phone.

​

Work activity: tickets raised, assigned, picked up and completed, with times - To run the hotel's service workflow and its service-time reports.

Photos the staff member chooses to attach to a complaint (camera or gallery) - To show the problem to the team that fixes it.

Identifier (MAC address / BSSID) of the hotel Wi-Fi access point the phone is connected to - To show supervisors which area of the hotel each staff member is in (Live Resource Map), so work can be assigned to the nearest person. See section 4.

​

3.2 Guests (in-room tablets)

• Requests, complaints, in-room dining orders and event requests that a guest raises, with any photo the guest chooses to attach.

• When the guest taps to view them, the guest name and stay details for that room are read from the hotel's own records. They are shown on screen only and are cleared automatically after 5 minutes without use.

​

3.3 Stored on the device itself

• The hotel server address and the device settings (staff or guest mode, room number, and a settings password chosen by the hotel).

• If the staff member ticks "Retain username", their username. Passwords are never saved on the device.

​

4. Location (Wi-Fi access point)

Android treats the identity of a Wi-Fi access point as location information, so the app asks for location permission. The app uses this permission only to read which hotel access point the phone is connected to, and only while a staff member is signed in. This continues while the screen is locked, so the map stays correct during a shift; a notification is shown the whole time the app is active in the background. The app does not read or store GPS coordinates. It stops when the staff member logs out. Guest devices do not use this feature.

Staff can refuse or withdraw the permission in Android settings. The rest of the app keeps working, but that person will not appear on the Live Resource Map.

​

5. Other permissions

• Camera and photos: only when the user chooses to attach a photo.

• Notifications: to alert staff to new or assigned tickets.

• Run in the background / battery optimisation exemption: so staff keep receiving live ticket alerts during their shift while the phone is locked.

​

6. Where the data goes

The app communicates only with the hotel's own Bootstrap FMS server on the hotel network. The app has no advertising, analytics, crash-reporting or other third-party services, and Bootstrap PDM does not receive the hotel's data unless the hotel shares it with us for support.

Data is visible inside the hotel according to each user's role, for example a department head sees their department's tickets and an administrator sees reports.

We do not sell, rent or share personal data for advertising or any other purpose.

​

7. Security

Passwords are stored hashed, sign-in is protected against repeated wrong attempts, and sessions end at logout. The server runs inside the hotel, and the hotel controls access to it.

Within the hotel network, the current version of the app talks to the hotel server over plain HTTP, which is not encrypted in transit. Hotels should run the app only on a secured, password-protected staff Wi-Fi network, with guest tablets kept on a separate network. We plan to support encrypted (HTTPS) connections in a future version.

​

8. How long data is kept

Data stays on the hotel's server for as long as the hotel keeps it, according to the hotel's own policies and legal obligations. Backups are made on hotel-controlled storage. Information on the device is removed when the user logs out (session data), clears the app's data, or uninstalls the app.

​

9. Your choices and rights

You may ask for access to, correction of, or deletion of your personal data, and you may withdraw consent where processing is based on consent, as provided under the Digital Personal Data Protection Act, 2023 and other applicable law.

• Staff: accounts are created and deleted by the hotel's administrator. To have your account and associated data deleted, contact your hotel's administrator or HR department. You can also write to us (section 11) and we will pass your request to the hotel.

• Guests: contact the hotel's front desk about information relating to your stay.

Some records, such as completed service tickets, may be kept by the hotel where it needs them for its operations or the law requires it.

​

10. Children

The app is intended for hotel staff and adult hotel guests. It is not directed at children, and we do not knowingly collect children's personal data.

​

11. Contact and grievance officer

For any question or complaint about this policy or about personal data in the app:

Bootstrap Product Development and Manufacturing Private Limited, Chennai, Tamil Nadu, India
Email: arunkumar@bootstrappdm.com

​

We will acknowledge your request and respond within the time required by law. If your request concerns data held by a hotel, we will forward it to that hotel.

 

12. Changes to this policy

We may update this policy when the app changes. The new version will be posted on this page with a new effective date. If a change is significant, we will inform hotels before it takes effect.