Managed Donation Device Terms

1. Purpose and Scope

These Terms apply when a Workspace owner enrolls or operates a Qannects-managed Android device for QuickPay or Kiosk Donations.

A managed Donation device is a dedicated payment surface. It is not a general-purpose tablet or computer while enrolled, and it remains subject to Qannects device identity, assignment, entitlement, security, update, recovery, and retirement controls.

These Terms work with the Donations and Payments Terms, Workspace and Admin Terms, Terms of Service, Privacy Policy, and the payment provider's applicable rules.

2. Owner Authority and One-Time Workspace Acceptance

Only the Workspace owner may accept these Terms and approve the first managed Donation device for the Workspace under the current policy version.

Acceptance is recorded for the owner, Workspace, Donation product, policy bundle, version, time, and approval context. After current acceptance exists, later device approvals are operational actions and do not require the same checkbox again unless the agreement materially changes.

Accepting these Terms does not increase the Workspace's device allowance. Each device still requires an available entitlement unit, a unique activation, an approved mode, and a fresh Device and Reader setup.

3. Device Owner and Dedicated Kiosk Controls

The device may be provisioned with the Qannects Donation application as Android Device Owner. Device Owner authority remains active while the device is enrolled so Qannects can enforce dedicated-device restrictions, prevent unauthorized exit, restore the Donation app after reboot, control permitted system surfaces, and maintain the managed security posture.

Qannects may use lock-task or kiosk controls, set the Donation app or managed boot component as the normal home experience, restrict system navigation and settings, prevent unauthorized applications or actions, and return the device to the assigned Donation mode.

Network setup and approved recovery screens may remain available when needed to make the station operational. Device Owner should not be removed except through an authorized retirement, reprovisioning, or support process.

4. Updates, Restart, and Recovery

Qannects may assign, download, verify, and silently install signed Donation application updates; restart the application or device; restore managed authority after reboot; and reconnect the assigned Reader as part of normal operation and recovery.

Updates may be staged, paused, retried, rolled back, or blocked when a package, signature, device, release, network, storage state, or policy check is invalid. A failed update must not authorize installation of an untrusted package.

The device may automatically relaunch the Donation application and attempt network, Reader, configuration, and payment-readiness recovery without a person present.

5. Diagnostics and Operational Telemetry

Qannects may collect device identity, model, operating-system and app versions, Device Owner state, assignment, configuration revision, update state, boot and restart events, network state, local IP information, Reader state, payment-readiness state, recovery attempts, errors, performance measurements, incident timing, and related technical evidence.

Diagnostics are used to operate, secure, improve, support, and measure reliability of the Donation fleet. They should be scoped to the managed Donation station and should not be used to collect unrelated personal content from the device.

Temporary high-detail reliability observation may be enabled for a defined support or engineering period and later disabled and cleaned according to the diagnostic workflow and retention controls.

6. Remote Support and Screenshots

An authorized Qannects platform operator may start a time-limited remote support session. During that session the device may temporarily leave lock-task mode, show system navigation, permit approved Android settings or launcher access, and then automatically return to the Donation application when the session ends, expires, or the device reboots.

A local timer may restore kiosk restrictions even if network access is interrupted during support. Device Owner, device identity, signed-update authority, and management controls remain active during a support session.

Qannects may request a current device screenshot to understand the visible failure state. A screenshot is transferred through the diagnostic system, is not retained as a normal fleet record, expires after the support workflow, and may be downloaded or deliberately saved by an authorized platform operator when needed for support evidence.

These Terms do not authorize continuous remote screen viewing, unrestricted remote control, microphone or camera surveillance, or access to unrelated personal information.

7. Payment Readers

Each active Donation station may use an exact Reader assigned through the approved Qannects Reader setup and binding process. The Reader remains subject to payment-provider rules, device and Workspace assignment, location, supported hardware, firmware, battery, Bluetooth or local connectivity, and card-present payment requirements.

The application may discover, connect, validate, monitor, disconnect, and reconnect the assigned Reader. A prior Android Bluetooth bond, cached session, or last-known status is not proof that the Reader is currently ready for payment.

Workspace operators must not substitute, move, share, sell, tamper with, or replace a Reader outside the authorized setup or platform-admin replacement flow.

8. Workspace Responsibilities

The Workspace owner and authorized operators are responsible for:

• Using the device only for the assigned Workspace and approved Donation purpose.
• Keeping the device and Reader powered, physically secure, connected to an appropriate network, and placed where donors can use them safely.
• Protecting activation codes, support sessions, and physical access from unauthorized people.
• Following Qannects instructions for setup, Reader replacement, movement, return, retirement, loss, theft, damage, and reprovisioning.
• Promptly reporting loss, theft, tampering, unauthorized access, suspected payment misuse, or a device that cannot recover.
• Not removing Device Owner, bypassing kiosk restrictions, installing unapproved software, changing the package, defeating update controls, or using the device for another Workspace.

9. Allowance, Suspension, and Retirement

Device availability is controlled by the Workspace's current entitlement, included units, approved overrides, subscriptions where offered, device status, supported hardware, and Qannects fleet policy.

Qannects may pause or revoke new payments, suspend an assignment, retire credentials, require Reader replacement, or require device reprovisioning when the station is unauthorized, unsupported, compromised, lost, stolen, tampered with, obsolete, unsafe, repeatedly unhealthy, or affected by payment-provider, policy, legal, or security concerns.

Retirement may revoke device credentials, Reader binding, assignment, update authority, and payment access. Removing or resetting the physical device without completing authorized retirement does not by itself release its entitlement or erase fleet records.

10. Availability and Limits

Qannects designs managed devices for automated recovery and low downtime, but does not guarantee uninterrupted availability of the device, Reader, network, power, Android system, payment provider, card network, update service, or Donation service.

Automatic recovery may be unable to fix physical damage, a powered-off or unsupported Reader, no network, invalid provider account state, revoked credentials, hardware failure, unsupported operating-system behavior, or a condition requiring replacement or authorized support.

When the station cannot safely accept a payment, it may block Donation initiation and show a recovery route rather than risk an uncertain or unauthorized charge.

11. Records, Privacy, and Retention

Qannects may retain device, installation, assignment, entitlement, placement, configuration, Reader, update, command, acceptance, incident, support, security, and audit records needed to operate and protect the fleet.

High-volume diagnostics and transient screenshots should use shorter, purpose-limited retention than long-lived device identity, acceptance, security, financial, and audit records. Security or support evidence may be retained longer when needed to investigate an incident or meet an obligation.

Donor payment-method data remains governed by the Donations and Payments Terms, Privacy Policy, and payment-provider rules.

12. Material Updates

Qannects may require the Workspace owner to accept a new version before approving another device or performing another sensitive enrollment action when these Terms materially change.

A policy update should not by itself take an otherwise healthy active Donation station offline during the stated acceptance period. Qannects may still act immediately when security, fraud, provider, legal, safety, or authorization risk requires suspension.

Managed-device acceptance is scoped to the Workspace and Donation product and does not replace the account-wide Terms of Service, Privacy Policy, Workspace authority agreement, or Donation Services Agreement.

13. Contact

Managed Donation device, Reader, update, enrollment, retirement, or support questions can be sent to support@qannects.com through available Qannects support channels.