Privacy Policy for Staff Attendance

Effective Date: April 9, 2026

Developer: Muhammad Ilyas Contact: muhammadilyas15@gmail.com

This Privacy Policy describes how Staff Attendance ("we", "our", or "the App") collects, uses, and protects your information. By using the App, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Worker Information: Name, role/position, phone number, photo, assigned shift, pay type (hourly rate or monthly salary), joining date, and active/inactive status.
• Attendance Records: Clock-in and clock-out times, attendance status (present, absent, late, half day, on leave), overtime minutes, and optional notes.
• Leave Requests: Worker name, leave type (sick, casual, annual, unpaid), start and end dates, reason, and approval status.
• Salary Records: Worker name, month/year, working days, overtime hours, deductions, and net salary.
• Shift Definitions: Shift name, start and end times, break duration, grace period, and working days.
• Business Settings: Business name, currency symbol, overtime multiplier.
• Owner PIN: A 4-6 digit PIN used to protect access to management features. The PIN is stored locally as a hash and is never transmitted.
• Contact Form Data: If you contact us through the app, we receive your email subject, message, and basic device information (device model, OS version, app version) to help diagnose issues.

1.2 Information Collected Automatically

• Crash Reports: We use Firebase Crashlytics to collect crash logs, stack traces, and device information (device model, OS version, app version) to identify and fix bugs. This data is anonymous and does not include personal information.
• Analytics Data: Firebase Analytics collects anonymous usage data such as screen views, session duration, and feature usage to help us improve the App. This data is aggregated and not linked to individual users.
• Advertising Data: Google AdMob may collect device identifiers and usage data to serve ads. See Section 5 for more details.

1.3 Information We Do NOT Collect

• We do not collect location data.
• We do not collect contacts, call logs, or SMS data.
• We do not collect biometric data.
• We do not access the microphone or camera (photos are selected from your gallery only).

2. How We Use Your Information

We use the information collected to:

• Provide Core Functionality: Store and manage worker profiles, attendance records, leave requests, salary calculations, shift schedules, and generate reports and statistics.
• Send Notifications: Send local absent-worker alert notifications based on your configured reminder settings. Notifications are processed entirely on your device using WorkManager.
• Improve the App: Analyze crash reports and anonymous usage data to fix bugs and improve features.
• Display Advertisements: Show banner and rewarded ads to free-tier users through Google AdMob.
• Process Purchases: Handle premium subscription (monthly/yearly) and lifetime purchase transactions through Google Play Billing.

3. Data Storage and Security

3.1 Local Storage

All your data (worker profiles, attendance records, leave requests, salary records, shift definitions, photos, and settings) is stored locally on your device using an encrypted Room database. Worker photos are stored in the app's private internal storage and are not accessible to other apps.

3.2 Cloud Backup (Coming Soon)

A cloud backup feature using Firebase Authentication (Google Sign-In) and Firebase Firestore is planned for a future update. When implemented, this feature will:

• Require explicit opt-in and Google Sign-In authentication.
• Sync your data securely to Google Cloud (Firestore) so you can restore it on a new device.
• Use your Google account UID to isolate your data from other users.

Until this feature is released, all data remains exclusively on your device.

3.3 Security Measures

• Owner PIN protection (stored as a hash) restricts access to management features.
• Kiosk mode limits shared-device access to clock-in/clock-out functionality only.
• Worker photos are stored in the app's private internal storage, inaccessible to other apps.
• All network communications use HTTPS encryption.
• We apply standard Android security practices including ProGuard code obfuscation.

4. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

5. Advertising

The free version of Staff Attendance displays ads through Google AdMob. AdMob may collect:

• Device advertising identifiers
• General device information (model, OS version)
• Ad interaction data

You can manage your ad preferences through your device settings or by purchasing a premium subscription to remove all ads. We use Google's User Messaging Platform (UMP) to obtain your consent for personalized advertising where required by law (GDPR, CCPA).

6. In-App Purchases

Staff Attendance offers premium features through Google Play Billing:

• Monthly Subscription — auto-renews monthly
• Yearly Subscription — auto-renews yearly
• Lifetime Purchase — one-time payment

All payment processing is handled by Google Play. We do not collect or store any payment or financial information. Subscriptions can be managed in your Google Play Store settings.

7. Children's Privacy

Staff Attendance is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Data Retention and Deletion

We keep your information only for as long as it is needed for the purposes described in this policy.

• All of your entries stay on your device. We operate no server for this data and never receive a copy of it, so there is nothing for us to retain. Your data is kept until you delete the individual entry, clear the app's storage, or uninstall the App. Uninstalling removes all of it from the device.
• Crash reports (Firebase Crashlytics) — automatically deleted after 90 days.
• Support emails — if you contact us, your message is retained for up to 24 months after your enquiry is resolved, then deleted.
• Purchase records — retained by Google Play for the period required by applicable tax and accounting law. We do not hold separate copies.

How to delete your data

You can delete your data at any time. Delete individual entries Open any entry in the App and tap Delete. It is removed immediately from the device. Uninstall Uninstalling the App removes all locally stored data from your device. Request deletion by email If you cannot access the App, or you want written confirmation that your data has been erased, email us at muhammadilyas15@gmail.com with the subject line "Staff Attendance – Data Deletion Request". We will verify the request, delete all associated data, and confirm by email within 30 days. There is no charge for this.

9. Your Rights

You have the right to:

• Access your data at any time within the app.
• Delete any or all of your data through the app's interface.
• Export your data via the report export feature (PDF).
• Opt out of personalized ads through your device's ad settings or by purchasing premium.
• Opt out of analytics by disabling usage data sharing in your device settings.
• Uninstall the app at any time, which removes all locally stored data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Effective Date" at the top of this policy. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Muhammad Ilyas Email: muhammadilyas15@gmail.com Developer Page: Mobilia Apps on Google Play Privacy Policy URL: https://itworldpro.com/staff-attendance-tracker/privacy-policy