Privacy Policy

1. Summary

The App collects employee-provided information (name, employee ID), an image captured at the time of attendance marking, and precise location at the time of attendance. The App uses Google ML Kit Face Detection to detect the presence of a live face in the image only. The App does not perform face recognition or create biometric templates for identification.

2. Information We Collect

2.1 Employee & Account Data

• Name — Provided by your employer to create an account.
• Employee ID — Identifier used to link attendance to payroll.
• Department / Work details — Optional metadata used for reporting.

2.2 Camera Images (Photos) & Face Matching

• The App captures a photo when you tap Mark Attendance. The image is used to verify that a face is present and to compare against a stored reference image to confirm the identity of the person marking attendance.
• Face detection (presence of a face, bounding boxes, and optional landmarks) is performed using Google ML Kit Face Detection. This step detects face presence and image quality for matching.
• Face matching is performed to verify identity. Matching may be implemented on-device or on the employer’s server according to the employer's configuration. To perform matching efficiently and securely, the App or server may generate biometric descriptors (sometimes called face embeddings or templates) derived from the image. These descriptors are used only for comparison purposes and are protected as described under Security.
• We do not use matching for marketing or advertising. Matching is used only to prevent fraudulent attendance and to ensure that the recorded attendance corresponds to the authorized employee.

2.3 Location Data

• When you mark attendance, the App collects your device’s precise GPS location to confirm presence at the workplace.
• Location data is collected only at the moment of attendance marking and is not tracked continuously in the background.

2.4 Payroll & Attendance Records

• Attendance timestamps, captured image (if stored by your employer), location at check-in, working hours, and payroll-related details (salary, pay periods) used to compute payroll.

3. How We Use Information

• To mark and verify attendance and prevent fraudulent check-ins.
• To calculate hours worked and generate payroll data for your employer.
• To provide attendance and payroll reports to authorized company administrators.
• To comply with legal or regulatory obligations when required.

4. Face Detection & Matching — Details & Apple Compliance

The App performs two related steps when marking attendance:

1. Face Detection: Using Google ML Kit Face Detection to detect whether a face is present and to extract non-identifying landmarks or bounding boxes to ensure image quality.
2. Face Matching: The captured image is compared to a stored reference image associated with the employee to confirm identity. Matching may use descriptors (embeddings) derived from images. Matching can be done on-device or on a secure employer server depending on customer configuration.

Important disclosures for App Store reviewers and users:

• Purpose-limited: Matching is used solely for attendance verification and fraud prevention, not for any form of advertising, profiling, or law enforcement.
• Biometric data: The App may derive biometric descriptors for matching. These descriptors are treated as sensitive data and are stored and transmitted only when necessary and under encryption. Where applicable law treats face descriptors as biometric data, we follow those legal requirements and obtain necessary consents or provide opt-outs as required by law.
• Transparency & Consent: The App clearly informs users when images are captured and when matching will occur. Employers deploying the App are expected to obtain any required employee consents and to provide notice consistent with applicable laws.
• Apple compliance: We explicitly disclose the use of image capture and face matching in this Privacy Policy and in the App Store Connect privacy fields. We do not claim to perform facial recognition for identification beyond employee verification for attendance.

5. Data Sharing & Third Parties

• We do not sell or rent personal data to third parties.
• We may share data with:
  • Authorized HR and payroll staff within your employer organization.
  • Service providers who process data on our behalf (hosting, backups, analytics if used). These providers are contractually restricted to use data only for providing services to us and our customers.
  • When required by law, regulation, or court order.

6. Data Retention

Retention periods can be configured by the employer. Typical retention rules:

• Attendance records (timestamps, location): retained for the employer’s payroll and auditing needs (e.g., 1 year or more depending on local law).
• Captured images: retained only as configured by the employer. If your employer does not require images, they may be deleted immediately after verification.
• If you request deletion of your account and data, employers will be instructed to remove your records in accordance with their policies and applicable law.

7. Security

We implement administrative, technical and physical safeguards designed to protect personal information. These include encryption of data in transit (HTTPS/TLS) and at rest, access controls, and logging/audit mechanisms. However, no system is completely secure — if you suspect a security issue, contact us immediately (see Contact section).

8. Your Choices and Rights

• Camera & Location permissions: You may choose to deny camera or location permissions. If you do, the App’s attendance marking feature may not function properly.
• Access / Correction / Deletion: You may request access to, correction of, or deletion of your personal data by contacting your employer’s HR administrator or contacting us directly (contact details below). We will respond in accordance with applicable law.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed prior to withdrawal.

9. Children

The App is intended for use by employees and not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children under the applicable age. If you believe we have collected such information, please contact us and we will delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where applicable, we take steps to ensure such transfers comply with data protection laws and that appropriate safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top will indicate when changes were made. If we make material changes, we will notify users through the App or by other means before changes take effect.

12. Contact Us

If you have questions or requests regarding this privacy policy or your personal data, please contact us:

• Company: Hari Om Technologies
• Email: [hariom.techpune@gmail.com]
• Address: Dhanori, Pune- 411015