1. Introduction
SST Attendance ("we", "our", or "the App") is an enterprise workforce management and geofenced attendance verification application designed for organizations using the SmartStep ERP platform.
This Privacy Policy explains how our mobile application collects, uses, protects, and discloses personal information and device data from authorized employees and workforce members ("Users", "you").
This application is intended exclusively for authorized corporate workforce members registered by their employer. It is not intended for the general public or minors under 18 years of age.
2. Prominent Disclosure: Background Location Collection
IMPORTANT PROMINENT LOCATION DISCLOSURE:
SST Attendance collects location data to enable:
• Verification that check-in and check-out occur within your employer-assigned geofenced workplace.
• Continuous route tracking and working-hours safety/duty monitoring even when the app is closed or not in use during your active rostered shift hours.
Continuous background tracking activates only when you check in to an active shift and automatically deactivates upon check-out. A persistent foreground notification is prominently displayed on your device at all times while active tracking is underway.
3. Personal & Sensitive Data We Collect
We collect and process only the minimum data required to verify attendance and ensure workplace safety:
| Data Category | Specific Data Points | Purpose | Requirement |
|---|---|---|---|
| Location Data | Precise GPS coordinates, network location, speed, accuracy, timestamps | Geofence compliance verification during check-in/out and duty route logging during shift hours. | Mandatory |
| Camera & Photos | Real-time selfie photo captured during check-in and check-out | Visual attendance verification to prevent proxy/buddy clock-ins. Gallery uploads are disabled. | Mandatory |
| Device Identifiers | Device UUID, hardware model, manufacturer, Android OS version | One-device account binding to ensure attendance is recorded only on the employee's assigned handset. | Mandatory |
| Physical Activity | Step detection / movement status (walking, still, in-vehicle) | To pause GPS fixes when stationary, reducing battery drain and filtering stationary GPS drift. | Optional |
| Employee Profile | Employee Code, full name, assigned branch/shift, employer organization | Authentication, shift assignment, and payroll ledger synchronization. | Mandatory |
4. How We Use Your Data
Data collected by the App is used strictly for legitimate internal enterprise purposes:
- Attendance Records: Calculating daily attendance, working hours, arrival punctuality, and overtime for payroll processing.
- Geofence Verification: Confirming whether an employee is on-site at their designated project location or client facility.
- Field Route Verification: Reviewing travel routes of mobile field personnel during assigned working hours.
- System Integrity & Fraud Prevention: Preventing spoofed GPS coordinates, simulated mock locations, and multi-device account misuse.
5. Data Sharing & Third Parties
Zero Third-Party Commercial Sharing:
We do not sell, rent, monetize, or share your personal information, location history, or photos with advertisers, data brokers, or marketing networks. All data is transferred exclusively to your employer's private ERP server instance.
Your data is accessible solely by:
- Authorized Human Resources (HR) and operations personnel of your employer with role-based access permissions.
- System administrators maintaining the secure SmartStep ERP server infrastructure.
6. Data Security & Storage
We apply robust technical, administrative, and physical security measures:
- Encryption in Transit: All communication between the mobile app and server is encrypted using Transport Layer Security (HTTPS/TLS). Plaintext HTTP communication is prohibited.
- On-Device Protection: Authentication tokens and cryptographic credentials are stored using Android's
EncryptedSharedPreferencesand hardware-backed KeyStore. - Audit Logging: All administrative reviews, device release actions, and attendance record modifications are permanently recorded in an immutable audit ledger.
7. Data Retention & Storage Duration
Attendance records, verification selfies, and working-hours route history are retained in accordance with your employer's statutory labor compliance, accounting, and payroll audit regulations (typically for the duration of employment plus mandatory statutory audit periods).
8. User Rights & Account / Data Deletion
In accordance with Google Play Developer Policies and data protection regulations, users have rights regarding their personal data:
- Right to Review: You can review your attendance records, working hours, and departure logs directly in the app's History screen.
- Account & Data Deletion Requests: Because accounts are enterprise-provisioned by your employer, you or your employer may request the deletion of your account, device bindings, and personal records.
To submit a request for account or personal data deletion:
How to request data/account deletion:
1. Contact your employer's HR or IT Administrator directly, who can release your device and remove/anonymize records via the SmartStep ERP dashboard.
2. Or submit a formal data deletion request via our dedicated deletion portal: Data Deletion Request Page.
3. Or email our Data Protection team at: privacy@sstqa.com with your Employee Code and Employer name.
9. Children's Privacy
This application does not address anyone under the age of 18. We do not knowingly collect personal identifiable information from children.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect app updates, policy changes, or regulatory requirements. Any modifications will be published on this page with an updated revision date.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:
- Organization: SmartStep ERP · SST Attendance
- Data Protection Officer Email: privacy@sstqa.com
- Website: https://sstqa.com