Privacy Policy

How Kragos People collects, uses, and protects your information.

01 Overview

Kragos People ("the App") is a workforce-management application used to mark attendance — check-in and check-out — and handle related activities such as leave requests and performance summaries. This policy explains what the App collects when you use it, why, and how it is protected. The App is issued to employees and contractors for work purposes only — it is not directed at, or intended for use by, the general public or children.

02 Information We Collect

Category	What we collect	Collected when
Account & login	Employee username/ID and password	Login
Device identifiers	Android Secure ID (`ANDROID_ID`), manufacturer, model, device name	Login, check-in/check-out
Precise location (GPS)	Latitude/longitude	Check-in and check-out only
Camera / face photo	A photo taken to verify identity	Check-in and check-out only
Attendance records	Timestamps, location, photo	Every check-in/check-out
Leave requests	Category, dates, reason, approval status	Submitting/viewing a leave request
Performance data	Summaries, growth metrics, badges	Viewed in-app; sourced from HR systems
Profile information	Name, role, HR profile details	Displayed in-app

On the face photo specifically: before upload, the app runs face detection and a blink-liveness check entirely on your device to confirm a live person is present — that on-device check never leaves the phone. The photo itself is then uploaded and stored as part of your attendance record. No separate biometric "faceprint" or template is generated or stored — only the photo.

03 Permissions We Request

Permission	Why the app asks for it
Camera	To capture the face-verification photo required for check-in/check-out
Location (precise & approximate)	To confirm you're checking in from an authorized branch, and to show local weather on the home screen
Notifications, exact alarm, boot-completed	To schedule on-device check-in reminders — no data leaves the device for this feature

04 How We Use Your Information

To authenticate you and keep your account secure
To verify your identity and location at check-in/check-out
To maintain accurate attendance records for payroll and HR purposes
To process and track leave requests
To display performance summaries
To detect anomalous or unauthorized device use on your account

We do not use your data for advertising, and we do not build an advertising profile from it.

05 How Information Is Shared

Your employer's HR/IT systems and authorized personnel — for attendance, payroll, and performance administration.
Open-Meteo (open-meteo.com), a third-party weather provider — only approximate coordinates are sent, with no account or identity information attached, solely to display current weather.
We do not sell employee data, and we do not share attendance photos or location history with anyone outside this purpose except where required by law.

06 Data Storage & Security

Data is transmitted to Kragos People's backend over encrypted (HTTPS) connections.
Authentication tokens are stored using the device's secure/encrypted storage, not in plain files or shared preferences.
Access to attendance photos and location records is restricted to authorized HR/IT personnel.

07 Data Retention

Attendance, leave, and performance records — including check-in photos — are retained for the duration of your employment and for 3 years afterward, for record-keeping purposes, unless a longer period is required by law.

08 Your Rights

As a user of Kragos People, you may:

Request access to the attendance, leave, or profile data held about you
Request correction of inaccurate data
Ask what happens to your data if you leave the company
Raise concerns about how your data is used

To exercise these rights, contact us by filling this form.

09 Children's Privacy

The App is intended solely for use by employees and contractors marking attendance and related work activities, and is not directed at children. We do not knowingly collect information from anyone under 18 through this App.

10 Changes To This Policy

We may update this policy from time to time. Material changes will be communicated in-app or via your employer's internal channels. The "Last updated" date above reflects the most recent revision.

Appendix

Play Console Data Safety Mapping

A starting point for Play Console's Data Safety form — verify each row yourself, since its categories are strict and change over time.

Data type	Collected?	Shared?	Purpose
Photos (face-verification image)	Yes	No	App functionality (identity verification)
Precise location	Yes	Yes — Open-Meteo (approx. only, no identifiers)	Attendance verification, weather display
Device/other IDs	Yes	No	Fraud/anomaly prevention
Personal info (name, employee ID)	Yes	No	Account management
User IDs / credentials	Yes	No	Account management

Because location is sent to a third party (Open-Meteo), Play Console requires declaring it as "shared," even though no identifying information accompanies it.