Privacy Policy
Last updated: 23 October 2026
MKONE is a private application available only to authorized users.
Information we process
We process the information needed to provide MKONE to authorized AllianceTel users, including name, work email address, approved phone number, role and organizational assignments, authentication and trusted device records, push-notification tokens, sign-in and security events, and app settings. We also process the business reporting data displayed in the app, such as store identifiers, targets, goals, KPI results, rankings, inventory, promotions, retention and cancellation metrics. MKONE is a read-only reporting experience for employees; app access does not give a user permission to edit the underlying business records.
We do not sell personal information, use it for advertising, or track users across other apps or websites.
Google user data and Gmail access
MKONE uses the Gmail API only for authorized business report-import mailboxes. With the mailbox owner’s authorization, MKONE reads Gmail message metadata, including message identifiers, sender, subject, dates, and attachments. Attachments may include business workbooks and PDF report files containing store-level reporting information. MKONE uses this access to identify and import AllianceTel and related business reports into the private reporting pipeline, including targets, goals, actuals, rankings, performance-bonus data, inventory, and promotion reports.
MKONE does not send Gmail messages or modify, label, delete, or share the mailbox’s messages. Gmail access is server-side and is not exposed to ordinary app users. MKONE's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Sharing and service providers
Information is shared only as necessary to operate MKONE and with authorized AllianceTel users according to their role and organizational scope. We use Google Firebase and Google Cloud services for authentication, server-side processing, encrypted storage, notifications, Gmail report ingestion, and website hosting. These providers process data on our behalf under their applicable terms and security controls. We may also disclose information when required by law, legal process, or to protect the service and its users. We do not sell Google user data or use it for advertising.
Security
Data is transmitted over encrypted connections. Authentication sessions, device credentials, and server secrets are protected using Firebase Authentication, iOS Keychain or the equivalent platform secure storage, server-side access controls, and Google Cloud Secret Manager. Access is limited by employee status, role, and assigned markets, districts, or stores. Gmail OAuth tokens are kept server-side and are not stored in the app or source repository.
Retention & deletion
Information is kept only as long as needed to provide the service, maintain reporting history, prevent abuse, and meet legal obligations. Imported reporting records are retained according to the applicable business reporting schedule; temporary import files and security records are deleted or expired according to operational retention rules. Mailbox access can be revoked by the mailbox owner at any time. You may request deletion of your account and associated personal data: Account & Data Deletion.
Children
The app is intended only for authorized adult users.
Changes
We may update this policy and will revise the date above.