Privacy Policy

("we," "us," or "our") operates the mobile application. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our App.

1. Information We Collect

We collect information to provide and improve our services. The types of information we collect include:

1.1 Information You Provide Directly

Account Registration Information:

• Full name
• Email address
• Phone number
• Employee ID
• Job title and department
• Date of birth
• Emergency contact information

Profile Information:

• Profile photo
• Employment history
• Educational qualifications
• Skills and certifications
• Bank account details (for payroll)

Usage Information:

• Attendance records and clock-in/out times
• Leave requests and approvals
• Performance reviews
• Internal communications and messages
• Documents and files uploaded to the App

1.2 Information Collected Automatically

Device Information:

• Device type and model
• Operating system and version
• Unique device identifiers (UDID, IMEI, Android ID)
• IP address
• Mobile network information

App Usage Data:

• Features used and frequency of use
• Session duration and timestamps
• Navigation paths within the App
• Crash reports and error logs

Location Information:

• Approximate location (based on IP address)
• Precise location (if you grant location permissions, for attendance tracking features)

1.3 Information from Third Parties

• Information from your employer or HR administrator who manages your account
• Integration data from third-party services (if applicable)

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery

• Account Management: Create, maintain, and secure your user account
• Authentication: Verify your identity and authorize access
• HR Operations: Process attendance, leave requests, payroll, and performance management
• Communications: Send notifications, updates, and important announcements
• Document Management: Store and retrieve employment-related documents

2.2 Service Improvement

• Analytics: Analyze usage patterns to improve features and user experience
• Performance Optimization: Monitor and enhance App performance and reliability
• Feature Development: Develop new features based on user needs
• Quality Assurance: Test and debug the App

2.3 Legal and Security

• Compliance: Comply with legal obligations and regulations
• Security: Detect, prevent, and respond to fraud, security breaches, or illegal activities
• Dispute Resolution: Resolve disputes and enforce our Terms & Conditions
• Audit: Maintain records for auditing and accountability

2.4 Business Operations

• Reporting: Generate organizational reports and analytics for management
• Payroll Processing: Calculate and process employee compensation
• Resource Planning: Support workforce planning and allocation

3. Data Storage and Security

3.1 Data Storage Infrastructure

Your information is stored securely on our backend servers using:

• Backend Technology: Java Spring Boot RESTful API architecture
• Database: PostgreSQL relational database management system

3.2 Security Measures

We implement industry-standard security measures to protect your data:

Technical Safeguards:

Administrative Safeguards:

• Role-Based Access Control (RBAC): Granular permissions assigned based on user roles, ensuring users can only access features and data relevant to their job functions
• Security Training: Employee training on data protection and privacy best practices
• Confidentiality: Confidentiality agreements with all staff and contractors
• Policy Reviews: Regular security policy reviews and updates

Physical Safeguards:

• Secure data center facilities (if on-premises)
• Restricted physical access to servers and equipment
• Environmental controls and monitoring

3.3 Data Security Limitations

4. Data Sharing and Third-Party Services

4.1 Internal Sharing

Your information may be accessed by:

• HR Personnel: For HR operations and employee management
• Managers: For team management, attendance, and performance tracking
• IT Administrators: For technical support and system maintenance
• Authorized Employees: Based on role-based permissions

4.2 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating the App:

• Cloud Hosting Providers: For server infrastructure
• Analytics Services: For usage analytics and app performance monitoring
• Payment Processors: For payroll and financial transactions
• Communication Services: For email and push notifications
• Security Services: For fraud detection and security monitoring

4.3 Legal Disclosures

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms & Conditions
• Protect our rights, property, or safety
• Prevent fraud, security breaches, or illegal activities
• Respond to emergency situations

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control.

4.5 With Your Consent

We may share your information with third parties when you provide explicit consent.

5. Cookies and Tracking Technologies

5.1 What We Use

Our App may use cookies, local storage, and similar tracking technologies to:

• Maintain your login session
• Remember your preferences and settings
• Collect analytics and usage data
• Improve app performance and functionality

5.2 Types of Tracking Technologies

• Session Tokens: For authentication and session management
• Local Storage: To cache data and improve performance
• Analytics SDKs: To collect usage statistics (e.g., Firebase Analytics, Google Analytics)
• Crash Reporting Tools: To identify and fix bugs

5.3 Your Choices

You can manage tracking preferences through your device settings. However, disabling certain technologies may limit your ability to use some App features.

6. Data Retention

6.1 Retention Periods

We retain your information for as long as necessary to:

• Provide the services and fulfill the purposes described in this Privacy Policy
• Comply with legal, accounting, or regulatory requirements
• Resolve disputes and enforce our agreements

Typical Retention Periods:

• Active Account Data: Retained while your account is active
• Employment Records: Retained as required by applicable employment and labor laws
• Financial Records: Retained as required by tax and accounting regulations
• Communications: Retained as long as necessary for business purposes
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

6.2 Deletion

After the retention period expires, we will:

• Securely delete or anonymize your personal information
• Retain only aggregated, non-personally identifiable data for statistical purposes

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

7.1 Access and Portability

• Right to Access: Request a copy of the personal information we hold about you
• Data Portability: Receive your data in a structured, machine-readable format

7.2 Correction and Deletion

• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)

7.3 Restriction and Objection

• Right to Restriction: Request that we limit the processing of your information
• Right to Object: Object to processing based on legitimate interests or direct marketing

7.4 Withdraw Consent

• Right to Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

7.5 Lodge a Complaint

• Right to Complain: Lodge a complaint with a supervisory authority if you believe your privacy rights have been violated

7.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at . We will respond to your request within the timeframes required by applicable law.

8. Children's Privacy

is intended for use by adults (18 years and older) in an employment context. We do not knowingly collect personal information from children under 13 (or the applicable age of consent in your jurisdiction).

If we become aware that we have inadvertently collected information from a child, we will take steps to delete that information promptly.

If you believe a child has provided us with personal information, please contact us at .

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by relevant authorities
• Adequacy decisions by regulatory bodies
• Consent for specific transfers
• Binding corporate rules

By using , you consent to the transfer of your information as necessary to provide our services and fulfill the purposes described in this Privacy Policy.

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal or regulatory requirements, or App features and functionality.

When we make material changes:

• We will notify you through the App, email, or other appropriate means
• The "Effective Date" at the top will be updated
• We may request your consent if required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

GDPR Compliance (for EU users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

CCPA Compliance (for California residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):