Who We Are and Who This Policy Applies To
WorkUp is an employee management system designed for attendance tracking, task management, and team collaboration. It enables companies to manage their workforce through an administrative dashboard, an employee portal, and a dedicated mobile application.
This Privacy Policy applies to all employees who use the system through the mobile application, employee portal, or administrative dashboard provided by the company.
Note
Your employer is the Data Controller, not the developer of WorkUp. The company decides what data is collected, how it is used, and when it is deleted. The WorkUp development team only provides the technical platform that powers the system.
Information We Collect
The table below lists the types of data that the system collects, their source, and the purpose of collecting them.
| Data Type | Examples | Purpose |
|---|---|---|
| Account and Identity Information | Full name, email address, mobile number, employee ID, encrypted password | Authentication and identifying you within the system |
| Attendance and Location Data | Attendance/check-out date and time, GPS coordinates when checking in or out | Calculating working hours and verifying attendance from authorized work locations (Geofencing) |
| Photos and Attachments | Profile photo, images attached to tasks or reports | User identification and documenting completed work |
| Biometric Authentication Data | Fingerprint or Face ID (used through the app's biometric login feature) | Secure and convenient login. Biometric data is processed entirely on your device by your operating system and is never transmitted to our servers. Our servers only receive confirmation that authentication was successful. |
| Notification Data | FCM or OneSignal device token, notification delivery logs | Sending push notifications (new tasks, approvals, updates, etc.) |
| Tasks and Requests | Assigned tasks, task status, replies, leave requests, permission requests, and approval status | Managing daily workflows between employees and their teams |
| Usage and Technical Logs | IP address, device type, browser type, login time, login attempt history | Account security and detecting unauthorized access attempts |
How We Use Your Information
- Record your attendance and accurately calculate working hours.
- Verify attendance from approved work locations (when geofencing is enabled by your employer).
- Assign tasks, monitor progress, and facilitate communication regarding your work.
- Process and respond to your requests (leave, permissions, attendance adjustments, etc.).
- Send work-related push notifications (new tasks, request responses, approvals, etc.).
- Protect your account from unauthorized access by detecting repeated failed login attempts and temporarily locking suspicious accounts.
- Generate internal administrative reports related to attendance, productivity, and performance.
Your information is never used for advertising or marketing purposes unrelated to your employment, nor is it sold or rented to any third party.
Who We Share Your Data With
We only share your data with third-party service providers to the extent necessary for delivering the following technical services:
| Service Provider | Purpose | Shared Information |
|---|---|---|
| Firebase Cloud Messaging (Google) | Delivering push notifications to the mobile application | Notification device token only (no additional personal content) |
| OneSignal (if enabled) | Alternative or additional push notification delivery | Notification device token only |
| Email Service Provider | Sending OTP verification codes and email notifications | Your email address only when required |
| [Add any additional services your company uses, such as WhatsApp API or SMS Gateway] | [Purpose] | [Shared Data] |
All service providers process your data solely on our behalf and only for the technical purposes described above. They are not permitted to use your information for any other purpose.
We may disclose limited information when required by law or governmental authorities, or when necessary to protect the rights of the company, its employees, or to investigate suspected fraud or policy violations.
Data Retention
We retain your personal information throughout your employment with the company and for an additional period of one to three years after your employment ends, as required for accounting, legal compliance, and resolving potential disputes related to attendance or work records.
How We Protect Your Data
- Passwords are securely stored using one-way cryptographic hashing and are never stored in plain text.
- Communication between the mobile application, dashboards, and servers is encrypted using HTTPS in production environments.
- Access permissions are strictly role-based. Employees can only access information relevant to their own teams, while authorized administrators have broader access.
- The system monitors and blocks repeated failed login attempts to help prevent brute-force attacks.
- Database backups are protected, inaccessible from the public internet, and require administrator authorization to create or restore.
Alert
Although we implement industry-standard security measures, no system can guarantee absolute security. If you suspect unauthorized access to your account, please contact your company's IT administrator immediately.
Your Privacy Rights
- Access: You may request a copy of your personal information.
- Correction: You may request correction of inaccurate information, such as your phone number or email address.
- Account Deletion: You may request deletion of your account and personal data, subject to applicable legal retention requirements.
- Withdraw Notification Consent: You may disable push notifications at any time through your device or application settings.
To exercise any of these rights, please contact us using the details provided in the Contact Us section below.
Mobile Application Permissions
| Permission | Why We Request It |
|---|---|
| Location (GPS) | To verify attendance from authorized work locations. |
| Camera | To attach images to tasks and reports or update your profile picture. |
| Biometric Authentication (Fingerprint/Face ID) | To provide secure and convenient login without entering your password every time. |
| Notifications | To instantly notify you about new tasks, requests, and updates. |
You may deny any permission through your device settings. However, disabling certain permissions (such as location access) may prevent some features, including attendance check-in, from functioning properly.
Children's Privacy
WorkUp is intended exclusively for adult employees and is not designed for children or individuals below the legal working age in the applicable jurisdiction. We do not knowingly collect personal information from minors.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services or applicable laws and regulations. If significant changes are made, you will be notified through the application or via email. We encourage you to review this page periodically.
Contact Us
If you have any questions or requests regarding your personal data or this Privacy Policy, please contact us:
Email: info@workup-app.com
