Privacy Policy
In short
- We collect what attendance needs: who you are, when you clocked in and out, and where you were at that moment — never in the background.
- Your organization decides what is kept about its staff and for how long. We look after it for them.
- Your own records are seen by you and your organization's owner and administrators. We never sell data or show ads.
- For complete deletion, the organization's owner writes to us: we reply within 7 days and wipe everything within 14 days.
1. Who is responsible for your data
AttendTrack, Faridabad, Haryana, India, runs the app. Each organization that uses AttendTrack decides what it records about its staff and why, and is responsible for that data: its owner is responsible for the organization, and its administrators manage its staff's records for it. AttendTrack keeps and processes the data on the organization's behalf, under the Terms and Conditions.
We follow the principles of India's Digital Personal Data Protection Act, 2023: we collect only what the app needs, use it only for what it is collected for, keep it safe, and delete it when asked.
2. What we collect
| What | For example |
|---|---|
| Your account | Name, email address, role, department, office hours, whether overtime is allowed for you, which locations you may clock in at. |
| Signing in | Your password, held by our sign-in provider in scrambled (hashed) form — nobody at AttendTrack or your organization can read it. |
| Attendance | The time of each clock-in and clock-out; the location reading at that moment, how accurate it was, the nearest approved site and your distance from it; whether it was sent later from your phone; the day worked out from them — late, early, half day, overtime, missed clock-out, deductions. |
| Leave | Requests, dates, reasons, decisions, and allowances. |
| Corrections and changes | Who changed a record or a setting, when, what it was and what it became, and the reason given. |
| Notices | The reminders and notices sent to you, and — if you allow notifications — the address your browser gives us to deliver them to your phone. |
| The organization | Its name, contact email, phone and address, time zone, currency, work locations, holidays and rules; who accepted the Terms and Privacy Policy, which version, and when. |
| Keeping the app safe | When someone signs up an organization or asks to join one: the internet (IP) address, the email used and the result, to stop abuse. |
We do not collect anything else about you, and we do not use advertising or tracking tools.
3. Your location
- Your phone's location is read when you open the clock-in screen — on your phone, to show how far you are from the site — and sent to us only when you press clock in or clock out.
- We never track your location in the background, between punches, or after you close the app.
- You choose whether to allow location. Without it, you cannot clock in or out, because the app cannot check that you are at an approved place.
4. Why we use it
- To record attendance and work out each day under your organization's rules.
- To show you your history, and your organization its reports.
- To send reminders and notices — in the app, by notification, and by email.
- To let administrators correct records, with a reason and a record of who did it.
- To keep the app working and secure, and to prevent misuse.
We never sell data, share it for advertising, or use it for anything outside running AttendTrack for your organization.
5. Who can see it
- You see your own attendance, history, leave and notices.
- Your organization's owner and administrators see their own staff's records, including the location and distance of each clock-in and clock-out.
- AttendTrack may see an organization's data only to run, support or fix the app, or when the law requires it.
- Nobody in another organization can see your organization's data.
We share data with someone else only when the law requires us to.
6. Services we rely on
AttendTrack runs on services that keep and move data for us, under their own security and privacy commitments. They may store data outside India.
- Supabase — the database, and signing in.
- Cloudflare — hosting the app and its servers, and protecting them.
- Brevo — sending emails.
- Your browser's notification service (for example Google, Apple or Mozilla) — delivering phone notifications, if you allow them.
7. How it is protected
- Everything between your phone and AttendTrack travels encrypted (HTTPS).
- Each organization's data is kept apart; only our own servers can read the database.
- Passwords are stored hashed. A password set by an administrator must be changed at your next sign-in.
- Changes to records and settings are logged with who made them.
No system is perfectly secure. If we learn of a breach that affects your organization's data, we will tell its owner without delay.
8. How long it is kept
An organization's data is kept for as long as its owner wants it to be kept — usually for as long as the organization uses AttendTrack, so that past attendance and pay can be checked. When a person is deactivated, their records stay with the organization, as payroll often requires. Data is deleted when the organization's owner asks (section 10).
9. Your choices and rights
- See your data: your attendance, leave and notices are in the app. Ask your administrator for anything else.
- Correct it: ask your administrator; they can correct a clock-out and update your details. Every correction is logged.
- Notifications and location: turn them on or off in your phone or browser settings at any time.
- Deletion: staff ask their organization's administrator or owner; the organization's owner can ask us (section 10).
- Questions or complaints: staff go to their organization first; owners and administrators write to us (section 13).
10. Deleting an organization's data
For the complete deletion of an organization's data, the organization's owner writes to us at arambhwelfaretrust@gmail.com from the owner's email address.
- We reply within 7 days to confirm the request.
- We delete all of the organization's data — its staff, attendance, leave, notices, settings and sign-ins — within 14 days.
Deletion is permanent and cannot be undone. Download anything you need — reports for payroll, for example — before asking.
11. On your device
The app keeps your sign-in, a few preferences, and any clock-ins made without a connection in your browser's storage on your device, so it works quickly and offline. Signing out removes your sign-in. We do not use advertising cookies.
12. Changes to this policy
We may update this policy as the app changes or as the law requires. The date at the top shows the version. When a new version needs agreeing to, the organization's owner is asked to accept it at their next sign-in to the console.
13. Contact
- Organization owners and administrators: AttendTrack at arambhwelfaretrust@gmail.com.
- Staff: your organization's administrator. They can reach us if needed.
AttendTrack, Faridabad, Haryana, India.