Welcome to GeoPunch. We built this attendance tool with one principle: your data belongs to you and your organisation — not to advertisers or trackers. This Privacy Policy explains how we handle information when you use our mobile application.

1. Information we collect

To provide attendance services, GeoPunch requests the following permissions and data:

• Account information: When you create an account, we collect your name, email address, and an encrypted password. This is mandatory to identify you within your organisation.
• Camera (photo capture): The app requires camera access only when you punch in/out. A photo is taken as proof of attendance. The photo is stored securely and is visible exclusively to the admin(s) of your associated staff group and to you only!. We do not analyse faces or use facial recognition.
• Location data: With your explicit permission, we collect your device’s geographic location at the moment of attendance check‑in/out. This geotag is attached to the attendance record. We do not track your location in the background or when the app is closed.
• Device & usage (minimal): We may collect basic technical data (e.g., app version, OS version) solely for debugging crashes — no persistent identifiers.

Important: GeoPunch does not access your contacts, messages, microphone, or any other sensitive permission beyond what’s listed above.

2. How we use your information

Every piece of data is used strictly for attendance management:

• Account creation & authentication: To verify your identity and link you to the correct organisation/admin.
• Attendance verification: The photo and geolocation serve as a digital timestamp confirming you were at the designated location.
• Admin visibility: Your attendance records (including photo and location) are accessible only to the administrator(s) assigned to your team/staff group. The admin uses this data for payroll, compliance, or roster management.
• Support & maintenance: To respond to your requests or fix technical issues.

We do not use your information for marketing, profiling, or any purpose unrelated to attendance.

3. Data sharing and disclosure

We are committed to minimal data exposure:

• With your organisation’s admin: Attendance data (photos, timestamps, location) is shared with the admin account(s) that manage your staff group. This is the core functionality of the app.
• Service providers (essential only): We use trusted cloud infrastructure (e.g., secure database hosting) to store data. These providers are bound by strict confidentiality and do not access your data for their own purposes.
• Legal obligations: We may disclose information if required by law, court order, or governmental regulation.
• NO sale, NO advertising: We never sell, rent, or trade your personal information. GeoPunch does not integrate any ad networks, third‑party analytics (Google Analytics, Firebase Analytics, etc.), or tracking SDKs.

4. Data retention and account deletion

We retain your attendance records as long as your account is active, or as required for legitimate business purposes (e.g., legal/audit requirements).

5. Security measures

We implement industry‑standard safeguards to protect your information:

• Encryption of data in transit (TLS) and at rest.
• Strict access controls: only the designated admin can view attendance records.
• Regular security reviews and no unnecessary third‑party libraries.

However, no method of electronic transmission is 100% secure. We encourage you to use strong passwords and keep your device updated.

6. Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct, or delete your data. You can exercise these rights directly through the app (account deletion, as above) or by contacting us. Because data visibility is limited to your admin, you may also coordinate with your organisation’s administrator regarding attendance records.

7. Children’s privacy

GeoPunch is a workforce attendance tool intended for use by individuals of legal working age. We do not knowingly collect personal information from children under 13 (or equivalent minimum age in your country). If you believe a child has provided us with data, please contact us immediately.

8. Policy updates

We may update this Privacy Policy occasionally to reflect changes in our practices or legal requirements. The “Effective date” at the top will be revised. We encourage you to review this page periodically. For material changes, we may notify you via the app or email.