Effective date: 28 August 2026
About this policy
This policy applies to the ScreenOS mobile application for iOS and Android, published by Elitaco Capital Sdn Bhd (Registration No. 202501037017 (1638427-K)), a company incorporated in Malaysia (“Elitaco Capital”, “we”, “us”). It does not cover the Elitaco Capital website, which is described in our website privacy notice.
What ScreenOS is
ScreenOS is a digital-signage player. It runs unattended on tablets mounted as customer-facing displays and menu boards on a retail shop floor. It is business equipment software, not a consumer application. There are no user accounts, no sign-in, no personal profiles and no social features.
On first launch an operator enters the address of the shop’s own server and the app displays a six-character pairing code. A staff member uses that code to pair the device with a display record on that server. The app then downloads the shop’s own media files (videos and images) to local storage and plays them on a schedule, renders menu-board widgets, and—on point-of-sale lanes—can mirror the current transaction to the customer-facing screen and capture a customer signature on a signing screen.
The app communicates only with the server address the operator configured. That server runs the Elitaco Enterprise System (“EES”), the self-hosted retail platform operated by Elitaco Capital for the shop. ScreenOS does not send data to any other destination.
Information the app collects
ScreenOS sends the following to the operator’s own server, and nowhere else:
- Device pairing token — the credential issued when the display is paired, used to identify the screen to its server.
- Device and software information — hardware and model string, operating-system version (reported as a user-agent) and the app or player version.
- Free disk space — so the server knows whether the device can still download scheduled media.
- Playback telemetry — which media item played and when, dropped frames and playback errors.
- Heartbeat timestamps — periodic signals confirming the screen is still online.
This is operational diagnostic information about a shop’s display hardware. It is not tied to a personal account, and ScreenOS does not ask any person to identify themselves.
Transaction mirroring and signature capture
On a point-of-sale lane, ScreenOS can display the line items of the transaction currently being rung up so the customer can read them during checkout. This display is transient. The app does not store those line items and does not transmit them onward; the transaction record itself belongs to the shop’s point-of-sale system.
Where a signing step is used, ScreenOS captures the signature a customer draws on the screen and submits that signature image to the operator’s own server as part of the signing session the customer is taking part in. The signature is used only for that document or transaction record.
What ScreenOS does not collect
ScreenOS contains no advertising SDKs and no third-party analytics SDKs. It does not:
- track users across other apps or websites;
- read or use the advertising identifier (IDFA) or any equivalent identifier;
- collect location, contacts, photos, calendar entries, microphone or camera input;
- build advertising or marketing profiles;
- sell personal information or share it with data brokers; or
- send data to any server other than the one the operator configured.
How the information is used
The information above is used only to:
- pair a display and keep it associated with the correct shop and screen;
- deliver the correct media, schedule and menu-board content to that screen;
- confirm that a screen is online, has storage available and is playing what it was told to play;
- diagnose playback faults, crashes and network problems on shop hardware; and
- complete a checkout display or signing step that a customer is party to.
Who the information is shared with
Nobody outside the operator’s own infrastructure. The data goes to the shop’s own server, operated by Elitaco Capital. We do not sell personal information, do not share it with advertising networks, analytics vendors or data brokers, and do not use it for any purpose unrelated to running the shop’s screens. Information may be disclosed where we are required to do so by law or to establish, exercise or defend legal rights.
Data retention
Operational records—pairing details, device and version information, playback telemetry and heartbeats—are retained on the operator’s server only as long as needed to run and support the display estate, and are deleted or aggregated once they no longer serve that purpose. A signature captured during a signing session is retained with the document or transaction record it belongs to, for as long as that record must be kept. Unpairing or decommissioning a display ends further collection from that device.
Storage on the device
ScreenOS keeps the downloaded media files, a snapshot of the content manifest and the configured server address in the app’s private sandbox on the device. That storage is not readable by other apps and is deleted when ScreenOS is uninstalled. On iOS the downloaded copies are marked to be excluded from iCloud backup.
Security
Where the operator configures an https:// server address, communication between the app and that server is encrypted in transit. ScreenOS also supports screens installed on a closed local network that reach the server over plain HTTP; in that configuration the traffic is not encrypted and its confidentiality depends on the security of that private network. A paired device holds a token scoped to its own display record, so it can fetch only the content and submit only the telemetry belonging to that screen. Reasonable technical and organisational safeguards are applied to the server side, but no internet transmission or storage system is completely secure.
Children’s privacy
ScreenOS is not directed at children and is not distributed for personal use. It is installed on shop equipment by an operator, has no accounts, and collects no information from children.
Your rights
In Malaysia, the Personal Data Protection Act 2010 (PDPA) gives you rights in respect of personal data we hold about you, including the right to request access to and correction of that data, to limit its processing, and to withdraw consent where processing relies on it.
Where the General Data Protection Regulation, a US state privacy law such as the California Consumer Privacy Act, or another comparable regime applies to you, you may also have the right to request access to, correction of, deletion of or a copy of your personal information, to object to or restrict its processing, and to be free from discrimination for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of.
To make a request, contact us using the details below. We may need to confirm which shop, screen or transaction your request relates to before we can locate the relevant records. Where the data is held on a shop’s own server, we will act on the request or pass it to the responsible operator.
Contact us
Elitaco Capital Sdn Bhd (Registration No. 202501037017 (1638427-K)), Malaysia.
Privacy enquiries and requests: [email protected]
Changes to this policy
We may update this policy when the app’s behaviour or our legal obligations change. The current version is always published at this address, and the effective date at the top of the page is revised when it changes. Material changes will be reflected here before the updated app behaviour is released, and, where required, notified to operators directly.