Privacy Policy — Workotime Face

Applies to the Android application Workotime Face (com.workotime.face)
Last updated: 13 September 2026

Workotime Face is a workplace attendance kiosk. It is installed by an employer on a shared device at a workplace, and employees use it to mark attendance and breaks by looking at the camera. It is not a consumer app and is not available for general use.

Who is responsible for your data

Workotime Technologies, Bareilly, Uttar Pradesh, India, provides this application and operates the servers behind it.

Your employer decides which employees are enrolled and for what purpose. Workotime Technologies processes that data on the employer's behalf. If you are an employee, please raise requests about your own data with your employer first; you may also contact us directly using the details at the end of this policy.

What the app collects

Data	Why	Where it goes
Face template A mathematical representation (a list of numbers) derived from your face.	To recognise you when you mark attendance.	Stored on the kiosk device and on our server. Shared with no one else.
Attendance records Punch in/out times, break times, and the recognition and liveness scores for each attempt.	To produce the attendance and payroll records your employer relies on.	Stored on the kiosk device and on our server.
Employee details Name, employee number, department, work location and profile photo, as provided by your employer.	To show who has been recognised and to organise attendance.	Supplied by your employer's existing records.
Device information The kiosk device's model and manufacturer.	To identify which kiosk recorded a punch, and to support the devices.	Stored with the attendance record.
Location of the kiosk device The device's GPS position at the moment a punch is made, and the accuracy of that reading. Only where your employer has enabled location verification.	To confirm the punch was made at the workplace, and to prevent attendance being marked from somewhere else if a kiosk device is removed from the premises.	Stored with the attendance record. Not used for any other purpose.

About location. Where location verification is enabled, the position of the kiosk device is recorded at the moment of a punch — it is a shared workplace device, not a personal phone, and the app is not able to track anyone's movements. No location is recorded at any other time, the app does not run in the background, and nothing is collected while no one is marking attendance.

The version of the application currently published on Google Play does not collect location at all: it requests no location permission. This section applies to later versions in which the feature is enabled; Android will ask for your permission before any location can be read.

Photographs of your face are not stored or transmitted. The camera image is processed on the device and converted into a face template. The template cannot be turned back into a photograph of you. The image itself is discarded immediately and never leaves the device.

What the app does not collect

The currently published application requests only two Android permissions: Camera, to scan faces, and Internet, to synchronise with our server. A later version will additionally request Location, used only as described above and only where an employer enables it.

The application does not request or collect, in any version:

Contacts, calendar, SMS, call logs or microphone audio
Files, photos or media stored on the device
Advertising identifiers, and it contains no advertising or analytics tracking
Anything at all while running in the background — it collects only at the moment someone uses the kiosk

Consent

Before any face is enrolled, the app shows a notice explaining what is recorded, where it is stored, how long it is kept, and how to withdraw. Enrolment does not proceed unless that notice is accepted. If you decline, no face data is captured.

You can withdraw consent at any time by asking your employer's administrator to delete your face enrolment. Withdrawing consent does not delete your past attendance records, which your employer keeps as normal employment records.

How long it is kept

Data	Retention
Face template	Deleted when you leave employment. It is also deleted immediately whenever an administrator removes your enrolment, or you withdraw consent.
Attendance and break records	Kept by your employer as employment records, for as long as their own legal and payroll obligations require.
Location recorded with a punch	Kept for the same period as the attendance record it belongs to, as part of that record.

When a face template is deleted it is removed from our server and from every kiosk device on that device's next synchronisation. A kiosk that is offline removes its copy when it next reconnects.

Where it is stored, and security

Data is stored on a server located in Mumbai, India. It is not transferred outside India.

All communication between the app and our server uses HTTPS (TLS). The app refuses unencrypted connections entirely.
Access to face templates is restricted to the employer that enrolled them; a kiosk cannot retrieve another organisation's data.
Data held on the kiosk device is private to the application and is excluded from Android's cloud backup and device-to-device transfer.
Credentials stored on a kiosk are encrypted using a key held in the device's hardware keystore.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Who your data is shared with

Face templates and attendance records are not sold, rented or shared with any third party for their own purposes.

We use Google Firebase (Google LLC) to deliver break-reminder notifications. This handles notification delivery only; face templates are never sent to Firebase or to any other third-party service.

We may disclose information if required to do so by law, or by a valid order of a court or government authority in India.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you may ask to:

know what personal data about you we hold and how it is processed;
have inaccurate data corrected, or incomplete data completed;
have your face template erased;
withdraw consent to face enrolment; and
raise a grievance about how your data has been handled.

Contact your employer's administrator, or us directly, using the details below. We respond to requests within 30 days.

Children

This application is for workplace attendance and is not directed at, or intended for use by, children. We do not knowingly enrol anyone under 18.

Changes to this policy

If this policy changes we will update the date at the top of this page. Material changes affecting how face data is handled will be communicated to employers using the service.

Contact us

Workotime Technologies
Bareilly, Uttar Pradesh, India
Email: contact@workotime.com

For grievances regarding personal data, please write to the address above marked for the attention of the Grievance Officer.