Privacy Policy

GS1 MUCA • Last updated: 27 August 2026

This Privacy Policy explains how GS1 India (“GS1 India”, “we”, “us” or “our”) collects, uses, discloses and safeguards information when you use the GS1 MUCA mobile application (the “App”). The App is an enforcement and product‑verification tool intended for authorised GS1 India officers and personnel. By using the App you agree to the practices described below.

1. Who we are

GS1 India is the data controller for information processed through the App. For any privacy questions or requests, contact us at support@smartconsumer.org.in.

2. Information we collect

We collect only the information needed to operate the App and carry out product verification and enforcement workflows.

Information you provide

Account & identity: your email address (used to sign in with a one‑time password), and your officer name / user ID.
Case & evidence data: scanned product identifiers (GTINs / barcodes), misuse markers, remarks you enter, the store or site name you confirm, and photographs you capture as evidence.

Information collected automatically

Precise location (GPS): used to tag the “active site” on scans and enforcement cases. Location is accessed only while you are using the App.
Camera: used to scan barcodes and to capture evidence photographs. Images are processed on your device and attached to the case you create.
Scan history & activity: the products you scan or search, with timestamp and location, so activity can be reviewed and cases replayed.
Diagnostics & device data: crash reports, performance data, app version, device model and operating‑system version, a push‑notification token, and device / other identifiers (including the advertising ID) used for analytics.

3. How we use your information

To authenticate you and provide access to the App.
To perform GS1 product / GTIN verification and record enforcement cases.
To attach location and evidence to the cases you file and synchronise them with GS1 India systems.
To send operational notifications (for example, required app updates).
To monitor stability and improve the App through analytics and crash reporting.
To maintain security, prevent misuse and comply with legal obligations.

4. Advertising ID

The App uses the Google Advertising ID solely for analytics (via Firebase Analytics) to understand aggregate app usage and stability. We do not use it for advertising, and we do not use it to track you across other companies’ apps or websites.

5. Third‑party services

The App relies on the following service providers, who process data on our behalf under their own terms:

Service	Purpose
Google Firebase (Analytics, Crashlytics, Cloud Messaging)	Usage analytics, crash reporting, and push notifications.
Google Maps Platform — Places API	Suggesting nearby stores when you confirm a site.
Scandit	On‑device barcode / data‑matrix scanning.
GS1 India DataKart / verification backend	Product verification and registration of enforcement cases.

These providers may process limited technical data as described in their respective privacy policies.

6. How we share information

We do not sell your personal information. We share information only:

with GS1 India’s internal systems and authorised personnel for verification and enforcement;
with the service providers listed above, to operate the App;
where required by law, regulation, legal process or a lawful government request; and
to protect the rights, safety and security of GS1 India, our users and the public.

7. Data retention

We retain information for as long as needed to fulfil the purposes described in this policy, to meet our legal, regulatory and enforcement obligations, and to resolve disputes. Evidence and case records are retained in accordance with GS1 India’s records‑management requirements. Cases held on your device are removed once they are successfully synchronised or deleted by you.

8. Security

We use technical and organisational measures — including encrypted transport (HTTPS) and access controls — to protect information against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Permissions

Location — to record the site associated with scans and cases (used only while the App is in use).
Camera — to scan barcodes and capture evidence photographs.

You can manage or revoke these permissions at any time in your device settings; some features may not work without them.

10. Children’s privacy

The App is a professional tool for authorised GS1 India officers and is not directed to children. We do not knowingly collect personal information from children.

11. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information. To make a request, contact support@smartconsumer.org.in. Because the App is provided to authorised personnel, certain records may be retained where required for enforcement, audit or legal purposes.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, through in‑app notice.

13. Contact us

GS1 India
Email: support@smartconsumer.org.in
Website: www.gs1india.org

Before publishing: confirm the contact email, the legal entity name and the postal address with your legal / compliance team, and adjust any wording (retention periods, entity details) to match GS1 India policy.