Privacy Policy - Sync HR (ALM HRM)

This Privacy Policy explains how Sync HR / ALM HRM Employee Application (the "Application", "App", "we", "us") collects, uses, stores, and protects data when used by employees and authorized personnel ("Users", "you") of the employer organization ("Employer", "Company").

1. Introduction & Scope

The Application is an enterprise business productivity and attendance management tool. Your Employer acts as the Data Controller, and the Application processes data as a Data Processor under their direct authorization.

2. Information We Collect and How We Use It

A. Camera & Facial Data (Face Recognition & Liveness Verification)

Data Collected: Real-time camera frames during check-in/enrollment, on-device facial feature embeddings (generated using local MobileFaceNet model), liveness markers (blinks, smiles, head turns), and a verified check-in photograph.
Planned Use: Exclusively for employee identity verification, anti-spoofing fraud prevention (avoiding buddy punching), and recording verified attendance timestamps. Face data is never used for advertising, commercial profiling, or marketing.
Third-Party Sharing: Face data is never shared, sold, rented, or disclosed to any third parties, advertisers, or data brokers.
Storage & Security: In-memory liveness frames are processed locally and discarded immediately. Verified photos and numerical templates are transmitted securely over HTTPS (SSL/TLS) to the Employer's private enterprise HR server with role-based access controls.
Retention & Deletion: Retained only for the duration of active employment. Face templates and records are permanently deleted upon employee offboarding or upon a deletion request submitted to HR.

B. Location Data (Geofencing)

Precise GPS coordinates are accessed only in the foreground at the moment you tap Check In or Check Out to confirm you are within your company's authorized branch perimeter. We do not track your location continuously in the background.

C. Device Biometrics (Face ID / Fingerprint)

If biometric sign-in is enabled, the Application relies on the operating system's native biometric API (Apple Face ID / Android Biometrics). We never access, receive, or store your raw biometric data.

D. Account & Device Information

We process your Employee ID, work email, department, device model, and OS version to authenticate your session and troubleshoot technical issues.

3. Data Sharing & Third Parties

Your data is transferred exclusively to your Employer's secure enterprise HR database. We do not sell or share personal data with external advertisers or commercial third parties.

4. Data Storage, Security & Retention

All network communications are secured using SSL/TLS (HTTPS). On-device tokens are encrypted using hardware-backed secure storage (Keychain / Keystore). Attendance logs are retained in accordance with your corporate HR retention policy.

5. Account & Data Deletion Requests

Employees may request the deletion of their profile, attendance history, or facial biometrics at any time by contacting their corporate HR Department or IT Administrator.

Privacy Policy for Sync HR