Privacy Policy
Kamplix — platform and mobile app
Version 1.0 · Effective 2 September 2026
This policy explains what personal data Kamplix —the web platform and the mobile app— processes, for what purpose, who it is shared with, where it is hosted and how you can exercise your rights. It is written in accordance with Colombian Law 1581 of 2012, Decree 1377 of 2013 and Article 15 of the Constitution of Colombia. The Spanish version prevails in case of discrepancy.
1 Who is accountable for your data
| Legal name | BEAVER SOLUCIONES DIGITALES S.A.S. |
|---|---|
| Tax ID (NIT) | 901.519.381-9 |
| Registered address | Calle 70 # 58-133, Office 725, Itagüí, Antioquia, Colombia |
| Privacy contact | apps@beaver.com.co |
| Phone | +57 318 344 1803 |
| Data protection officer | Cristian David Chacón Mariano |
Referred to below as “Beaver” or “we”. Kamplix is a Beaver product and is independent from any other product of the company: this policy applies to Kamplix only.
2 Two different roles, worth telling apart
Kamplix is sold to companies so their teams can capture information in the field. That means there are two kinds of data, and Beaver does not play the same role for both:
| Data | Who decides about it | Beaver’s role |
|---|---|---|
| Your account: name, email and credentials | Beaver, together with the company that issued your account | Controller |
| The content of the forms and the photos you fill in the field | The contracting company that configured those forms | Processor: we handle it under their instructions |
| What you send us through this website | Beaver | Controller |
In practice: if you are a technician or supervisor and want to correct or delete what a form contains, that request is resolved by the company you work for, which decides about that information. If you write to us directly, we forward it to that company and let you know.
3 What data we process
This is the complete list, read from the app’s source code and from the declared infrastructure. There are no hidden categories.
| Data | Where it comes from | What for |
|---|---|---|
| Name and email address | Account creation by your company | Identifying you, signing in and assigning you work |
| Password | You set it | Authentication. Managed by Firebase Authentication in encrypted form: Beaver cannot see it or recover it |
| Content of the forms you fill in | What you type in the field | It is the app’s very function |
| Evidence photographs | Device camera or photo library, when you attach them | Backing up what the form reports |
| Handwritten signature, when the form requires it | Drawn on screen | Record of agreement within the form |
| Technical device and session identifiers | Generated by the app and by Firebase | Keeping the session, syncing the outbox and diagnosing failures |
| Contact details you send us through this site | You, when you write to us | Answering your sales or support request |
What we do NOT process
- Geographic location. The app does not request the location permission on either platform and does not collect coordinates.
- Contacts, microphone, calendar or SMS. Those permissions are not requested.
- Advertising and tracking. The app shows no advertising, embeds no ad networks and does not track your activity across other apps or sites.
- Sensitive data. We do not ask for health, biometric, ethnic origin, political, religious or sexual orientation data. Should a form configured by your company request them, that company is responsible for that decision and for obtaining consent.
- Minors. Kamplix is a work tool intended for people over 18. We do not offer it to minors nor knowingly collect their data.
4 Device permissions and why they are requested
| Permission | Platform | What for |
|---|---|---|
| Camera | Android and iOS | Taking the evidence photo the form requires |
| Photo library | Android and iOS | Attaching a photo that was already taken |
| Flashlight | Android | Lighting the scene when photographing in dark spaces |
| Internet and network state | Android | Syncing, and knowing when there is a connection to flush the outbox |
All of them are requested at the moment they are used and you may deny them. If you deny camera or photo library access, you can still fill in forms that do not require photographic evidence.
5 Purposes of processing
- Authenticating you and keeping your session.
- Delivering the activities and forms your company assigned to you.
- Storing, syncing and retaining completed forms and their evidence.
- Producing the reports or documents derived from those forms.
- Making that information available to your company and, when the company enables it, to the end client it reports to.
- Providing technical support and diagnosing failures.
- Meeting legal, accounting and contractual obligations.
- Answering requests you send through our contact channels.
We do not use your data for advertising, we do not sell it, and we do not transfer it to third parties for commercial purposes.
6 Consent and legal bases
Processing relies on:
- The consent you give when creating the account and accepting this policy.
- Performance of the contract between Beaver and the company that issued your account.
- Compliance with legal obligations applicable to Beaver.
You may withdraw your consent and request deletion of your data at any time, except where a legal or contractual duty to retain it applies (section 9).
7 Where the data is hosted and who processes it
Kamplix runs on Google Cloud Platform, in projects belonging to the Beaver Soluciones Digitales S.A.S. organization. These are all the processors involved:
| Service | What for | Location |
|---|---|---|
| Firebase Authentication (Google) | Identity and passwords | United States |
| Cloud Firestore (Google) | Database of forms and submissions | us-east1, United States |
| Cloud Storage (Google) | Evidence photos and generated files | us-east1, United States |
| Cloud Run (Google) | Application server | us-east1, United States |
| Firebase Hosting (Google) | This website and the admin web | Google global network |
International transfer
As shown above, your data is hosted in the United States. Google LLC acts as processor under its data processing terms, which incorporate standard contractual clauses. By accepting this policy you authorize that international transfer and storage, under Article 26 of Law 1581 of 2012.
Besides those processors, the information is shared with the contracting company you fill in the forms for and, if that company enables the client portal, with the end client it reports to, limited to what concerns them.
8 Security measures
- Encryption in transit (HTTPS/TLS) for every communication between the app, the website and the server, and encryption at rest in Google Cloud storage.
- Isolation per company: each company only accesses its own information, and within it a technician only sees their own assignments.
- No static credentials. The Google Cloud organization Kamplix lives in forbids by policy the creation of exportable service account keys: components authenticate with managed identities, not with credential files that could leak.
- File access through signed, time-limited links, not permanent public URLs.
- Role-based access control and logging of relevant activity.
No system is infallible. Should a security incident affecting your personal data occur, we will notify the contracting company and, where applicable, the Colombian Superintendence of Industry and Commerce, as required by law.
9 How long we keep the data
| Data | Retention |
|---|---|
| User account | While the account is active. Once deleted, it is erased or anonymized within a maximum of 30 calendar days |
| Completed forms and evidence | For the term of the contract with the contracting company and for as long as that company determines, plus any legal periods applicable to it |
| Technical and diagnostic logs | Up to 12 months |
| Contractual and accounting records | The period required by Colombian commercial and tax law |
Deleting your account does not by itself delete the forms you filled in: that information belongs to the contracting company and is part of its operation. What is deleted is your user identity and its link to those records. Details on the Delete my account page.
10 Your rights and how to exercise them
As the data subject you have the right to:
- Know, update and rectify your personal data.
- Request proof of the consent you gave.
- Be informed about the use made of your data.
- Withdraw consent and request deletion, where no legal or contractual duty to retain applies.
- Access your data free of charge.
- File complaints with the Superintendence of Industry and Commerce.
Channel and deadlines
Write to apps@beaver.com.co stating your name, the email you use with Kamplix, the company you work for and what you are requesting. The statutory deadlines we meet are:
- Enquiries: answered within a maximum of ten (10) business days, extendable by five (5) more with notice of the reason.
- Claims: answered within a maximum of fifteen (15) business days, extendable by eight (8) more with notice of the reason.
To delete your account there is a direct route that requires no installation: Delete my account.
12 Changes to this policy
We may update this policy when product functionality or applicable law changes. The version in force is always the one published at kamplix.com/en/privacy, with its version number and date in the header. If a change materially affects the processing of your data, we will notify you by email or within the app before it takes effect.