Privacy Policy

1. Scope

AttenSync is an employee attendance, location, and workforce-management application intended for authorised use by organisations, their administrators, and their employees. This policy applies to information processed through the AttenSync Android application and related backend services.

2. Information we collect

Account and employee information

• Employee ID, full name, email address, department, primary workplace, work schedule, and account status.
• Administrator role and account information where applicable.
• Profile photo if enabled by the organisation.

Attendance and work records

• Check-In time, automatic Check-Out time, attendance sessions, working time, lateness, and attendance status.
• Workplace/fence information associated with attendance events.
• Leave requests, leave decisions, holidays, schedule overrides, and attendance corrections.

Location and device information

• Precise GPS location, GPS accuracy, location timestamps, route/location history, and geofence-entry/exit information.
• Device and app information reasonably required for attendance, security, diagnostics, and push-notification delivery.
• Push-notification registration tokens.

Photos and uploaded files

• A live camera photo captured as part of Check In.
• Optional expense receipts or expense-related photos.
• Optional profile photos where enabled.

Salary, payroll, leave, and expense information

• Salary profile, overtime rate, allowances, deductions, payroll and payslip information.
• Expense claims, amounts, descriptions, approval status, and optional supporting receipts.

3. Precise and background location

Location is a core AttenSync feature. The app may collect precise location during scheduled or company working hours to provide attendance verification, company-fence detection, automatic Check-Out, live work-location status, route history, and related workforce features.

Where background location permission is enabled, AttenSync may continue receiving location while the app is not visibly open so these work-related features can function during the relevant work period. Location is not collected for advertising.

Company fences are shared work locations configured by administrators. An employee may Check In when physically inside an active company fence, subject to that fence's configured radius and the organisation's attendance rules.

Authorised administrators may view an employee's live or recent work location and work-related location history. Employees can view their own location and route information.

4. Camera and Check-In photos

AttenSync uses the device camera for attendance verification. A live camera photo may be required when an employee performs Check In. Gallery selection is not used as a substitute for the required live attendance photo.

The attendance photo is associated with the Check-In record and may be available to authorised administrators for attendance verification, review, dispute handling, security, and audit purposes.

5. How we use information

• Authenticate users and maintain employee/admin accounts.
• Determine whether an employee is inside an active company fence for Check In.
• Record attendance using authoritative server time and related attendance evidence.
• Support automatic Check-Out and exit-grace logic.
• Calculate attendance sessions and working time.
• Provide live work-location status and route/location history.
• Process leave, expense, salary, payroll, and payslip workflows.
• Send operational notifications about attendance, approvals, payroll, GPS, and company matters.
• Protect the app, investigate misuse, maintain audit records, and troubleshoot technical problems.
• Comply with applicable legal, employment, accounting, and organisational obligations.

6. How information is shared

AttenSync does not sell personal information.

• Your employer or organisation: authorised administrators may access workforce information relevant to their role.
• Supabase: used for backend, database, authentication, storage, realtime functionality, and related infrastructure.
• Firebase Cloud Messaging: used to deliver push notifications.
• Map service providers: AttenSync uses MapLibre with OpenStreetMap-based map data/styles. The configured tile/style provider may receive normal network request information such as IP address and technical request metadata when map content is loaded.
• Legal or safety recipients: where disclosure is required by law or reasonably necessary to protect rights, security, or safety.

7. Data security

We use reasonable technical and organisational safeguards designed to protect AttenSync data. These may include authenticated access, role-based permissions, database access controls, row-level security, private file storage, secure transport, and server-side controls for sensitive attendance operations.

No internet or storage system can be guaranteed to be completely secure.

8. Data retention and deletion

Information is retained for as long as reasonably necessary to provide AttenSync, support employment and attendance processes, satisfy payroll/accounting requirements, resolve disputes, maintain security/audit records, and comply with applicable law.

Retention periods may vary by data type and by the organisation using AttenSync. When information is no longer required, it may be deleted, anonymised, or securely archived where legally permitted or required.

Employees who want to request access, correction, or deletion of personal information should contact their organisation's administrator or use the privacy contact below. Some records may need to be retained for legitimate employment, payroll, accounting, security, dispute, or legal obligations.

9. Permissions and choices

Android allows users to review or change permissions such as location, camera, and notifications in device settings. Certain permissions are necessary for core AttenSync functions. For example, disabling location may prevent fence-based attendance, live work-location tracking, and automatic Check-Out from functioning correctly.

Where required, AttenSync should present an in-app disclosure before requesting background or otherwise sensitive location access, explaining why the permission is needed for the app's core workforce features.

10. Children

AttenSync is a workplace application and is not designed for children. It is intended for authorised workforce users and administrators.

11. International processing

Service providers used by AttenSync may process data in locations other than the user's country. Where applicable, we take reasonable steps to use providers and safeguards appropriate to the service and legal requirements.

12. Changes to this Privacy Policy

We may update this Privacy Policy when AttenSync features, service providers, legal requirements, or data practices change. The updated version will be published at this page with a revised effective date.

13. Contact us

For privacy questions, requests, or complaints relating to AttenSync, contact:

Aadion — AttenSync Privacy Contact
Email: manaschotu2009@gmail.com

If AttenSync is provided through your employer or organisation, you may also contact your organisation's administrator regarding access, correction, or deletion requests.