Privacy Policy — AGS Staff

1. Who this policy covers

This policy applies to people who install and use the AGS Staff App. It also describes how related staff tools on teenytinyadventure.ca work when opened through the App.

It does not replace any separate privacy practices for the public-facing teenytinyadventure.ca website or customer loyalty programs, except where those pages are opened through the App.

2. What the App is

AGS Staff is a WebView shell. That means:

• Business features (sales reports, notes, schedules, customer signup, and other staff tools) live on our WordPress website.
• The App mainly displays those pages, keeps you signed in when you choose “Remember me”, and provides basic mobile behaviours (pull-to-refresh, offline message, file downloads).
• The App does not include advertising SDKs, analytics SDKs, or social login SDKs.

3. Information we process

Account and login information

To use the App you must sign in with a store-issued WordPress account (username/email and password). There is no public sign-up.

When you sign in:

• Your credentials are sent to our WordPress server at teenytinyadventure.ca over HTTPS.
• WordPress may set session cookies so you stay logged in (especially if you select “Remember me”).
• The App does not store your password in its own database. Login state is handled by the website/session cookies in the App’s WebView.

Account administration (creating, changing, or removing staff accounts) is done by store management through WordPress.

Information you enter in staff tools

Depending on your role, you may enter or view operational information through the portal, for example:

• sales and store reporting data
• staff notes
• customer signup details entered for store operations
• schedules and related staffing information

That information is processed on our WordPress site / related store systems for business operations—not for advertising.

Technical / device information

Like most apps that open web content, standard technical information may be processed as part of normal HTTPS requests and server logs, such as:

• IP address
• date/time of access
• browser / WebView user-agent (the App identifies itself with a suffix such as AGSStaffApp)
• pages requested within the staff portal

We do not use this to build advertising profiles.

Information we do not collect through the App binary

The App itself does not collect:

• advertising identifiers for ads
• location for marketing
• contacts, photos, or microphone/camera data for App features
• crash/analytics telemetry via third-party SDKs embedded in the App

(If a specific staff web page later asks for device permissions through the browser/WebView, that will be for that tool’s stated purpose only.)

4. How we use information

We use information only to:

• authenticate staff and control access by role
• operate and improve internal store tools
• maintain security, prevent abuse, and troubleshoot issues
• meet legal or accounting obligations where required

We do not sell personal information. We do not use the App to serve third-party ads.

5. Sharing of information

We may share information only with:

• Service providers who host or support our website/infrastructure (for example hosting providers), under agreements and only as needed to run the service
• Professional advisors or authorities when required by law
• Internal store management for operational purposes

We do not share staff App usage data with advertising networks.

6. Data storage and security

• Staff portal traffic uses HTTPS encryption in transit.
• Accounts and operational data are stored on our WordPress hosting environment and related store systems.
• Access is limited to authorized staff accounts and administrators.

No method of transmission or storage is 100% secure; we take reasonable steps appropriate for an internal business tool.

7. Retention

• WordPress account and session data are retained while the account is active and as needed for store operations.
• Operational records (notes, reports, schedules, etc.) are retained according to store business needs and applicable law.
• When a staff member leaves, store management should deactivate or remove their WordPress account.

8. Your choices and rights

Because this is a workplace tool:

• You can stop using the App by uninstalling it.
• You can sign out of the website session where the portal provides that option.
• Requests to correct account details, or to delete an account / associated staff data, should be made to store management / the contact below. We will handle requests as appropriate for employment/contractor context and applicable Canadian privacy law.

If you believe your account was created in error, contact us using the details below.

9. Children’s privacy

The App is a workplace tool for adults. It is not directed to children and is not intended for anyone under 18.

10. Third-party services and links

The App is limited to our domain family (teenytinyadventure.ca). If a staff page links elsewhere, that destination’s privacy policy applies once you leave our site.

Google Play’s own terms and privacy practices apply to how you download the App from the Play Store.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update means you acknowledge the revised policy.

12. Contact

Questions about this Privacy Policy or AGS Staff data practices:

Teenytiny Adventure / Armstrong General Store
Armstrong, British Columbia, Canada
Website: https://teenytinyadventure.ca

For privacy requests related to the App or staff portal, contact store management through your usual store channels, or email the store’s support address used for staff IT / Play Console contact.