Privacy Policy

Welcome to SBBS AttendEase, an Employee Attendance & Leave Management System developed by SBBS. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our mobile application (the "App").

By using the App, you agree to the collection and use of information in accordance with this policy.

We collect several types of information to provide and improve the App for you.

a. Personally Identifiable Information (PII)

b. Non-Personally Identifiable Information

• FCM (Firebase Cloud Messaging) token for push notification delivery
• Device operating system version for compatibility tracking

c. Device Permissions

• Location Access: Used for attendance check-in and check-out verification only. Not used in the background.
• Camera / Gallery: Optional — used only when uploading a profile photo.

We use the collected data for the following purposes:

• Authenticate employees and manage role-based access control (Admin, Manager, Employee)
• Record and report attendance, check-in/check-out times, and shift data
• Process leave requests, work-from-home requests, and approvals
• Send push notifications for approvals, rejections, and reminders
• Generate attendance reports and analytics for HR and management
• Maintain audit trails for compliance and dispute resolution
• Improve app performance, fix bugs, and enhance user experience
• Comply with legal obligations

We do not sell your personal information. We may share your information with the following third-party service providers, solely to facilitate the App:

• Firebase (Google): Authentication, Firestore database, and Firebase Cloud Messaging. Data is stored on Google's servers subject to Google's Privacy Policy.
• Within your organization: HR managers and administrators can view attendance and leave records for employees under their supervision only. Data is never shared across organizations.

Legal Disclosure: We may disclose your personal data if required by law or in response to valid requests by public authorities (e.g., a court or government agency), to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the service
• Protect the personal safety of users of the App or the public
• Protect against legal liability

AttendEase requests access to your device's location only at the moment of attendance check-in or check-out.

• Location is captured once per check-in and once per check-out event
• GPS coordinates are used solely to verify that attendance is recorded from an authorized location
• Location data is stored securely in Firebase Firestore, linked to your attendance record
• We do not track your location continuously or in the background
• You can revoke location permission at any time in your device settings, though this may prevent check-in

Retention Period: We retain user data for as long as necessary to provide our services, fulfill the purposes outlined in this policy, and comply with legal obligations.

• Attendance & leave records: Retained for a minimum of 2 years for compliance and payroll purposes
• Account data: Retained until account deletion is requested by the user or the organization administrator
• Location data: Retained as part of the attendance record per the above timeline
• Push notification tokens: Refreshed automatically; stale tokens are removed periodically

Deletion Policy: User data will be deleted when it is no longer necessary for the purpose for which it was collected. Upon request, we will delete your personal data from our active systems.

User Deletion Requests: You can request deletion of your personal data by:

• Using the account deletion form on our website at: attendease-sbbs-2026.web.app/delete-account.html
• Emailing us at: support@attendease.app
• Contacting your organization's HR administrator

We value your trust in providing us your personal information and implement industry-standard security measures:

In Transit: All data transmitted between the app and our backend services is encrypted using HTTPS (TLS 1.2+), ensuring it is secure during transmission.

At Rest: Data stored with Firebase (Firestore, Storage, Authentication) is securely encrypted at rest using AES-256 encryption, protected under Google Cloud's security infrastructure.

• Firebase Firestore security rules enforce strict role-based read/write access
• Authentication is managed by Firebase Authentication with secure token handling
• Only authorized administrators can access employee records within their own organization
• No cross-organization data access is possible by design

You have certain rights regarding your personal information. Subject to local law, these may include the right to:

To exercise any of these rights, please contact your organization's HR administrator or contact us at support@attendease.app.

AttendEase is a workplace application intended exclusively for adults (18 years of age and older). We do not knowingly collect personally identifiable information from anyone under the age of 18.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at support@attendease.app. If we become aware that we have collected personal information from a child under 18, we will take steps to remove that information from our servers.

We may update our Privacy Policy from time to time. We will notify you of any significant changes by sending a notification through the app and by updating the "Last Revised" date at the top of this page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Continued use of the Service after any changes constitutes your acceptance of the revised policy.