Privacy Policy for Xyquest Mining Corp Field Tracker

Xyquest Mining Corp ("we," "our," or "us") operates the Xyquest Mining Corp Field Tracker mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

---

1. Information We Collect

We collect several types of information from and about users of our App:

1.1 Personal Information

When you register for an account, we collect:

• Name: Your full name for identification purposes
• Email Address: Used for account authentication and communication
• Password: Encrypted and securely stored for account access

1.2 Work Entry Data

When you submit daily work entries, we collect:

• Date: The date of the work performed
• Location: The work site location (company name and site identifier)
• Equipment Used: The equipment operated during the work day
• Hours Worked: Number of hours worked
• Notes: Any additional notes or comments about the work performed

1.3 Expense Data

When you submit expense reports, we collect:

• Date: The date of the expense
• Category: The type of expense (Fuel, Meals, Accommodation, Office, Supplies, Transport)
• Amount: The expense amount in Canadian dollars
• GST Amount: Goods and Services Tax amount
• Receipt Photos: Images of receipts uploaded by you
• Notes: Any additional notes about the expense

1.4 Sample Data

When you submit rock or soil samples, we collect:

• Sample Type: Rock or Soil designation
• Location: The location where the sample was collected
• Date: The date of sample collection
• Notes: Any observations or details about the sample

1.5 Automatically Collected Information

We may automatically collect certain technical information when you use the App:

• Device Information: Device type, operating system version
• Usage Data: App features accessed, time spent in the app
• Log Data: Error logs and diagnostic information for troubleshooting

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Core App Functionality

• Account Management: To create and manage your user account
• Work Tracking: To record and store your daily work entries
• Expense Management: To track and report your business expenses
• Sample Tracking: To log rock and soil sample collection data

2.2 Reporting and Analytics

• Weekly Reports: To generate and send automated weekly reports to designated managers containing work entries, expenses, and sample data
• Dashboard Summaries: To provide statistical summaries of your work activities
• Performance Tracking: To help managers monitor field operations and employee activities

2.3 Communication

• Account Notifications: To send you important updates about your account
• Report Delivery: To email weekly reports to designated company managers
• Password Reset: To process and verify password reset requests

2.4 App Improvement

• Bug Fixes: To identify and resolve technical issues
• Feature Development: To improve and develop new features based on usage patterns
• Performance Optimization: To enhance app performance and user experience

3. How We Share Your Information

3.1 Within Your Organization

• Manager Reports: Your work entries, expenses, and sample data are included in weekly reports sent to designated company managers
• Company Dashboard: Your data may be visible to authorized company personnel through the app's dashboard features

3.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf:

• Cloud Storage: Amazon Web Services (AWS) for secure data storage and receipt photo hosting
• Database Hosting: Secure PostgreSQL database hosting for storing app data
• Email Services: Email delivery services for sending weekly reports

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Protection of our rights, property, or safety
• Protection of the rights, property, or safety of our users or the public
• Investigation of fraud or security issues

3.4 Business Transfers

If Xyquest Mining Corp is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. Data Storage and Security

4.1 Data Storage

• Location: Your data is stored on secure servers located in the United States (AWS us-west-2 region)
• Retention: We retain your data for as long as your account is active or as needed to provide services. Work entries, expenses, and samples are retained indefinitely for business record-keeping purposes unless you request deletion.
• Backups: Regular backups are performed to prevent data loss

4.2 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between the app and our servers is encrypted using SSL/TLS
• Password Protection: Passwords are hashed using bcrypt encryption and are never stored in plain text
• Access Controls: Access to your data is restricted to authorized personnel only
• Secure Authentication: JWT (JSON Web Token) based authentication for secure API access
• Receipt Photo Security: Uploaded receipt photos are stored in secure cloud storage with access controls

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

5.1 Access and Correction

You have the right to:

• Access: View all your work entries, expenses, and sample data within the app
• Correction: Edit or update your work entries, expenses, and sample data
• Deletion: Delete individual work entries, expenses, or samples through the app interface

5.2 Account Deletion

You may request deletion of your account by contacting us. Upon account deletion:

• Your personal information will be removed from active systems
• Historical work entries, expenses, and samples may be retained for legal and business record-keeping requirements
• Receipt photos will be permanently deleted from cloud storage

5.3 Marketing Communications

We do not currently send marketing communications. If we do in the future, you will have the option to opt out of such communications.

5.4 Data Portability

You have the right to request a copy of your data in a structured, machine-readable format. Contact us to request a data export.

6. Children's Privacy

Our App is intended for use by employees aged 18 and older. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will delete that information immediately.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using the App, you consent to the transfer of your information to the United States and other countries where our service providers operate.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Posting a notice in the App
• Sending an email notification to your registered email address (for significant changes)

Your continued use of the App after such modifications constitutes your acknowledgment of the modified Privacy Policy.

9. Third-Party Links and Services

The App may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites or services you visit.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of your personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us using the information below.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request restriction of how we process your data
• Right to Data Portability: Request a copy of your data in a portable format
• Right to Object: Object to our processing of your data
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

To exercise these rights, please contact us using the information below.

12. Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Withdraw consent for certain uses of your information
• File a complaint with the Privacy Commissioner of Canada

14. Complaints and Dispute Resolution

If you have a complaint about our privacy practices, please contact us first using the contact information above. We will investigate and attempt to resolve your complaint.

If you are not satisfied with our response, you may file a complaint with the appropriate data protection authority in your jurisdiction:

• Canada: Office of the Privacy Commissioner of Canada (www.priv.gc.ca)
• European Union: Your local Data Protection Authority
• United States: Federal Trade Commission (www.ftc.gov)

15. Consent

By using the Xyquest Mining Corp Field Tracker app, you consent to this Privacy Policy and agree to its terms.