Privacy statement
Last updated September 8, 2026
Sun Siyam Availability is a business application for Sun Siyam Resorts Pvt Ltd, for the travel agencies contracted to sell its resorts, and for its own staff. This statement explains what the app handles on your phone and what it sends to the company's own servers.
What the app collects
• Account details — the username or work email and password you sign in with, or your Microsoft work account if you use "Sign in with Microsoft". These are sent only to the Sun Siyam availability service.
• Device details — the app generates a random identifier for this installation and reports it together with the platform, device model, operating system version and app version. This binds the app on this phone to your account, so you can reopen it with a PIN, and so an administrator can cut a lost phone off.
• Sign-in and activity records — the service records sign-ins and administrative actions with a timestamp and the originating network address, for security auditing.
• Business content — room availability, promotions and fact sheets you view are cached on the phone so the app stays usable on a poor connection.
What stays on the phone
• Your app PIN is stored only as a cryptographic hash, in the phone's Keychain (iOS) or Keystore-backed encrypted storage (Android). It is never sent to the server; the server is told only whether a PIN exists.
• Face ID and fingerprint data belong to the operating system. The app never sees or stores it — it only asks the phone to confirm a match.
• Sign-in tokens are held in the same protected storage, are excluded from cloud backups and device transfers, and are erased when you log out or when an administrator unbinds the device.
What the app does not do
• No advertising, no advertising identifiers, and no tracking across other apps or websites.
• No analytics or crash-reporting services from third parties.
• No access to your location, contacts, photos, microphone or camera.
• No sale or sharing of any data with third parties.
Where data is held
Account, device and audit records are held in the company's own database. Promotion and fact-sheet documents are served from the company's managed file storage. Access is limited to the permissions granted to your role.
How long it is kept
Device records are removed when the device is deleted by an administrator, or when you log out and the record is cleared. Audit records are retained for as long as the company’s security policy requires.
Your choices
You may decline these terms, in which case the app closes your session and does not run. You may turn off the PIN and biometric unlock at any time in Settings. You may ask an administrator to unbind or delete your device record. For any privacy question, contact [email protected].