1. Introduction
THR ("the App") is an internal HR management system developed and operated by TTech. This Privacy Policy explains what information we collect when you use the App, how we use it, and your rights regarding your data.
By using the App, you agree to the collection and use of information as described in this policy.
2. Information We Collect
- Account information — your name, work email address, job title, department, and role, provided during account setup by your HR administrator.
- Attendance data — date, time, and GPS coordinates recorded at the moment you punch in or out. Location is not tracked at any other time.
- Profile photo — only if you voluntarily choose to upload or take a profile picture.
- HR records — leave requests, payslips, overtime submissions, and timesheet entries that you or your manager create within the App.
- Device information — basic technical information (operating system, app version) used for support and troubleshooting.
3. How We Use Your Information
- To operate core HR features: attendance tracking, payroll, leave management, and reporting.
- To verify identity and manage access within your organisation.
- To provide managers and HR administrators with workforce data needed to run the organisation.
- To troubleshoot technical issues and improve the App.
4. Camera & Photo Library Access
The App requests access to your device camera and photo library only when you choose to update your profile photo. We do not access your camera or photos at any other time, and we do not scan or analyse the contents of your photo library.
5. Location Access
Location permission is used only at the moment of attendance punch-in or punch-out to verify that you are at an authorised working site. The App does not track your location continuously, does not run location services in the background, and does not share your location with any third party.
6. Data Storage & Security
All data is stored on servers operated by your employer and protected with the following measures:
- All data in transit is encrypted using HTTPS / TLS.
- Authentication tokens are stored in your device's secure storage (iOS Keychain / Android Keystore).
- Access to HR records is controlled by role-based permissions.
- Optional two-factor authentication (TOTP) is available for all accounts.
7. Data Sharing
We do not sell or share your personal data with third parties except in the following limited circumstances:
- When required by applicable law or a valid legal process.
- With your employer's authorised HR personnel and managers, as part of normal HR operations.
- With infrastructure providers (hosting, email delivery) who process data solely on our behalf under strict data processing agreements.
8. Data Retention
Your data is retained for as long as your employment relationship is active and for as long as required by applicable labour law thereafter. Upon termination, access is revoked and data is retained only as required by law or your employer's records policy.
9. Your Rights
Depending on applicable law, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention requirements).
- Object to or restrict certain processing.
To exercise any of these rights, contact your HR department or the system administrator at your organisation.
10. Children's Privacy
THR is an internal enterprise application intended for use by employees only. It is not directed at children under the age of 13, and we do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at:
- Email: [email protected]
- Organisation: TTech