GPM Mobile App — Privacy Policy

Effective date: October 15, 2026

This Privacy Policy describes how Utilities One Inc (“Utilities One”, “we”, “us”) collects, uses, and shares information when you use the GPM mobile application for Android and iOS (package name com.utilitiesone.gpmmobile, the “App”).

GPM is an internal field-work tool. It is made available only to Utilities One employees and authorized contractors who have been given a GPM account by the company. It is not offered to the general public, and you cannot create an account from within the App.

1. Information we collect

1.1 Account and sign-in information

To use the App you sign in with the email address and password of your company-issued GPM account. When you sign in, the App sends to our servers:

• Your email address and password (the password is used only to verify your identity and is never stored on the device).

• A randomly generated device identifier and the device platform (Android or iOS), so that the company can see which devices are signed in and revoke a device’s access if it is lost or stolen.

After sign-in, the App stores your name, email address, user ID, and session tokens in the operating system’s secure storage on your device so you can keep working offline without signing in again.

1.2 Work data

The App synchronizes the jobs, work items, and related records assigned to you from the GPM server and keeps a copy in a local database on your device. Changes you make in the App (for example, updating a job) are queued on the device and sent to the server when a connection is available. This work data belongs to Utilities One and is the same information visible to authorized staff in the GPM web application.

1.3 Photos and camera

With your permission, the App uses the camera and the photo library so you can attach photos to jobs. Photos you capture or select are compressed, stored in the App’s private storage on your device, and uploaded to the company’s media library on our servers when a connection is available. The App removes embedded camera metadata (EXIF) from captured photos before storing them.

If you deny camera or photo permission, you can still use the rest of the App but cannot attach photos.

1.4 Location

With your permission, the App uses your device’s approximate or precise location while the App is in use for two purposes:

• To show your position on the field map.

• To tag job photos with the coordinates where they were taken. The App also converts those coordinates to a street address, city, and country, and uploads this information together with the photo so the company can verify where field work was performed.

The App does not collect location in the background and does not track your movements. If you deny location permission, photos are uploaded without location data and the map simply does not show your position.

1.5 Technical and diagnostic information

• Connectivity status. The App checks whether the device is online in order to decide when to synchronize. This status stays on the device.

• App version and updates. The App periodically checks for and downloads over-the-air updates to its own code (see Section 3). The App version and update identifier are shown on the Settings screen.

The App does not contain advertising, analytics, or third-party crash-reporting SDKs, does not access your contacts, calendar, microphone, or messages, and does not collect any payment information.

2. How we use the information

We use the information described above to:

• Verify your identity and keep you signed in, including while offline.

• Deliver your assigned jobs and work records to the device and synchronize your changes back to the company’s systems.

• Attach photos and their capture location to job records as documentation of field work.

• Show your position and work locations on the field map.

• Secure accounts and devices, detect misuse, and let administrators revoke a device’s access.

• Maintain and improve the App, including delivering updates.

We do not use your information for advertising, profiling, or any purpose unrelated to Utilities One’s business operations.

3. How we share the information

We do not sell your personal information and do not share it with third parties for their own marketing. Information is shared only as follows:

Within Utilities One. Work data, photos, and photo locations you upload are visible to authorized Utilities One staff (for example, supervisors, project managers, and administrators) in the GPM web application, and may be included in project documentation provided to the customer for whom the work was performed.

Service providers. We use the following categories of service providers, who process data on our behalf and under our instructions:

Device platform services. When a photo is tagged with a location, the App uses the location and geocoding services built into the device operating system (Google on Android, Apple on iOS) to obtain coordinates and convert them to an address. Those services are governed by Google’s and Apple’s own privacy policies.

Legal and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Utilities One, its personnel, or others.

Business transfers. If Utilities One is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

4. Data retention

• On your device. Work data, queued changes, and locally stored photos remain on the device until they are synchronized and the App’s local cache is cleared, until you sign out, or until you uninstall the App. Session tokens are deleted when you sign out.

• On our servers. Job records, photos, and related data are business records of Utilities One and are retained for as long as needed for the project and to meet legal, contractual, and audit obligations. Sign-in sessions and refresh tokens expire automatically and can be revoked by an administrator at any time.

5. Security

We protect your information with measures including:

• All communication between the App and our servers is encrypted in transit using TLS (HTTPS).

• Session tokens are stored in the operating system’s secure storage (Android Keystore / iOS Keychain), never in plain files.

• Access tokens are short-lived and refreshed automatically; refresh tokens are rotated on every use and stored on the server only in hashed form. Reuse of a stolen token revokes the session.

• Passwords are stored on the server only as salted hashes.

• Administrators can revoke any device’s access immediately.

No system is completely secure. If you believe your account or device has been compromised, contact us immediately using the details in Section 9.

6. Your choices and rights

• Permissions. You can grant or revoke the camera, photo, and location permissions at any time in your device settings. The App continues to work with reduced functionality.

• Sign out. Signing out removes your session and locally cached data from the device.

• Access, correction, and deletion. As an employee or contractor, your GPM account and the work data associated with it are managed by Utilities One. To request access to, correction of, or deletion of your personal information, or to close your account, contact us using the details in Section 9. We will respond in accordance with applicable law. Note that some work records must be retained as business records even after an account is closed.

Depending on where you live, you may have additional rights under applicable privacy laws, such as the right to know what personal information we hold about you and the right to not be discriminated against for exercising your rights. We honor these rights as required by law.

7. Children

The App is a workplace tool intended for adults employed or contracted by Utilities One. It is not directed to children under 18, and we do not knowingly collect personal information from children.

8. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of the page shows when it was last revised. Material changes will be communicated to App users through the App or by email.

9. Contact us

If you have questions about this Privacy Policy or how your information is handled, contact: