Last Updated: 25-03-2026

This Privacy Policy explains how our HRMS (Human Resource Management System) application (“we”, “our”, “app”) collects, uses, stores, and protects user data. This policy applies to all employees and authorized users of the application.

1. What personal data do we collect?

We collect and process the following categories of personal and work-related data:

• Name
• Email address
• Phone number
• Employee ID
• Location data (GPS coordinates)
• Device information (device model, OS version, Android ID)
• Attendance logs (timestamps, check-in/check-out data)
• Work-related forms, requests, and uploaded images

This data is provided by the organization, as this is a company-managed application with no public registration.

2. Why do we collect this data?

We collect data strictly for legitimate business and operational purposes, including:

• Employee authentication and secure login
• Attendance tracking and verification
• Field staff monitoring and task management
• Preventing fraudulent or proxy attendance
• Managing HR processes (forms, requests, communication)
• Reporting, compliance, and audits

We do not use this data for personal, marketing, or unrelated purposes.

3. Why does the app collect user location?

Location data is essential for:

• Verifying employee presence at assigned work locations
• Enabling accurate attendance marking
• Supporting geofencing
• Monitoring field employees in real time

This ensures accountability, operational efficiency, and accurate workforce tracking.

4. When is location data collected?

Location data is collected:

• When the app is in use (foreground)
• When the app is running in the background

Background access ensures continuous tracking, even if the app is not actively open.

5. How frequently is location tracked?

Location tracking occurs:

• At regular intervals (approximately every 60 minutes)
• During key actions (e.g., attendance marking)
• Based on operational requirements

The frequency is optimized to balance accuracy, battery usage, and performance.

6. Does the app track location continuously?

Yes, when enabled and permitted, the app performs continuous location tracking to ensure:

• Real-time field monitoring
• Accurate attendance records
• Compliance with work location requirements

7. Why does the app run in the background?

Background execution is required to:

• Track employee movement continuously
• Maintain attendance accuracy
• Support geofencing and shift-based tracking

Without background tracking, core HRMS features would not function properly.

8. What happens in the background service?

The background service:

• Runs automatically when permissions are granted
• Shows a persistent notification (“Location Tracking Active”)
• Collects location and timestamp every ~60 minutes
• Sends data securely to the server
• Updates tracking status

This process continues until:

• User logs out
• Location services are disabled
• System restrictions stop the service

9. Can users disable location tracking?

Yes, users can stop tracking by:

• Logging out of the application
• Disabling device location services

However, the following features will stop working:

• Attendance marking
• Geofencing
• Field staff tracking

10. Do you notify users before enabling location tracking?

Yes. The app provides a clear in-app explanation before requesting location permissions, including:

• Why location is needed
• How it will be used
• When it will be active (including background use)

11. Where is location data stored?

Location data is:

• Securely transmitted to our backend servers
• Stored in protected environments
• Not permanently stored on user devices

12. How long do you retain location data?

We retain location data only as long as necessary for:

• Attendance records
• Reporting and audits
• Dispute resolution
• Compliance with legal requirements

After this period, data is:

• Deleted, or
• Anonymized

13. What device information do you collect?

We collect:

• Device model
• Operating system version
• Android ID (unique device identifier)

14. Why do you collect Android ID?

Android ID is used for:

• Device binding
• Preventing multiple device logins
• Enhancing security
• Preventing fraudulent attendance

15. What data is processed in background mode?

In background mode, we process:

• Location data
• Device identifiers

This data is used strictly for HRMS operations.

16. What APIs does the app use?

The app connects to:

• Internal secure HRMS backend APIs
• OpenStreetMap (OSM) for map visualization only

No sensitive data is shared with OSM.

17. Is data shared with third parties?

No. We:

• Do NOT sell user data
• Do NOT share data with third-party servers
• Only share data with internal company systems

18. Do you use Firebase services?

Yes, we use Firebase for:

• Push notifications (FCM)
• Analytics (usage insights only)

We do not share personal or sensitive data with Firebase.

19. What notifications do you send?

We send notifications such as:

• Attendance reminders
• Shift alerts
• Company announcements
• Task updates

These do not contain sensitive personal data.

20. How are notifications delivered?

Notifications are:

• Generated by our server
• Delivered via Firebase Cloud Messaging (FCM)

21. What data is stored locally on the device?

We store limited data locally:

SharedPreferences:

• User ID
• User name

Secure Storage:

• Authentication token (encrypted)

SQLite:

• Temporary offline form data

All local data is:

• Secure
• Temporary
• Cleared on logout

22. Are images collected and stored?

Yes, users may upload:

• Selfies or on-site images for work verification

These images:

• Do NOT contain sensitive documents
• Are compressed before upload
• Are securely stored on backend servers

23. How do you protect user data?

We implement strong security measures:

• HTTPS encryption for all API communication
• Encrypted storage for sensitive data
• Secure authentication mechanisms
• Access-controlled APIs

24. Is data encrypted?

Yes. Sensitive data such as authentication tokens is encrypted using secure storage mechanisms.

25. Do you implement access control?

Yes. Only authenticated users can access APIs using secure tokens.

26. Do you use cookies or tracking technologies?

The app does not use traditional cookies but may use:

• Firebase analytics for usage insights
• Temporary local storage for performance

27. What are user rights under GDPR/CCPA?

Users have the right to:

• Access their data
• Request correction via the organization
• Request deletion (via HR/admin)
• Be informed about data usage

Note: Since this is a company-managed system, requests are handled by the employer.

28. Can users update or delete their data?

• Users cannot directly edit or delete data
• All changes are managed by the organization

29. How can users request data deletion?

Users must contact their:

• HR department
• Organization administrator

30. What happens after account deletion?

• User access is revoked
• Data is handled per company retention policies
• Data may be deleted or retained for compliance

31. Children’s Privacy

This application is strictly intended for authorized employees only. It is not designed for individuals under the age of 18.

32. Do you monitor network activity?

No. The app only checks internet availability and does not log network activity.

33. Do you explain permissions clearly?

Yes. Before requesting permissions, we explain:

• What is being requested
• Why it is needed
• How it will be used

34. Do you provide a Privacy Policy inside the app?

Yes. Users can access this Privacy Policy at any time within the application.

35. Legal Basis for Processing (GDPR Compliance)

We process data based on:

• Legitimate business interests
• Employment contract requirements
• Legal obligations

36. Data Retention Principles

We follow:

• Data minimization
• Purpose limitation
• Storage limitation

37. Data Security Commitment

We are committed to:

• Protecting user privacy
• Preventing unauthorized access
• Maintaining data integrity

38. Changes to this Privacy Policy

We may update this policy periodically. Users will be notified of significant changes through the app or other communication channels.

39. Contact Information

For privacy-related concerns or requests, please contact:

FishTech Solutions Pvt Ltd / HR Department
FishTech Solutions Pvt Ltd
Email: hr@fishtechsolutions.com
Mobile No.: 7841890376

Conclusion

Your privacy is important to us. This application is designed strictly for secure, transparent, and efficient employee management, ensuring that all data is handled responsibly and in compliance with applicable data protection laws.