# Privacy Policy

**Last Updated:** July 30, 2026

## 1. Introduction

Elysium Employee ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this policy carefully.

By using the App, you consent to the data practices described in this policy.

## 2. Information We Collect

### 2.1 Information You Provide Directly

| Information | Purpose |
|-------------|---------|
| **Employee ID / Email & Password** | Account authentication and secure access |
| **Profile Information** (name, employee ID, department, designation, contact details) | Employee identification and communication |
| **HR Ticket & Grievance Content** | Issue resolution and HR support |
| **Leave & Permission Requests** (type, dates, reason) | Time-off management and approval workflows |
| **Bank Account Details** | Salary and incentive disbursement |
| **Referral Information** (names and contact details of referred candidates) | Employee referral program |
| **Onboarding Documents** (certificates, government IDs) | Employment verification and compliance |

### 2.2 Information Collected Automatically

| Information | Purpose |
|-------------|---------|
| **Device Information** (model, OS version, unique device identifiers) | App functionality, security, and troubleshooting |
| **App Usage Data** (feature usage, navigation patterns) | Service improvement and performance optimization |
| **IP Address** | Network communication and security monitoring |
| **Notification Tokens** | Push notification delivery |

### 2.3 Camera and Photo Access

We request camera access for:
- **Face Recognition Attendance** — Capturing your face for secure check-in and check-out verification
- **Photo Upload** — Uploading profile pictures and supporting documents for HR tickets

**Important:** Face recognition processing happens **entirely on your device** using on-device machine learning (Google ML Kit and TensorFlow Lite). No face templates, facial images, or biometric data are uploaded to our servers or any third party.

### 2.4 Location Information

We request location access for:
- **Attendance Verification** — Confirming your physical presence at the workplace during check-in

Your location is checked **only at the moment of attendance**. We do not track your location in the background or continuously.

### 2.5 Biometric Information

We support biometric authentication (fingerprint and Face ID) for:
- **App Unlock** — Securing access to the application
- **Attendance Verification** — Confirming identity during check-in and check-out

Biometric authentication is handled entirely by your device's operating system. We do not store or transmit any biometric data.

## 3. How We Use Your Information

We use the collected information for:

- **Service Delivery** — Processing attendance, payroll, leave requests, HR tickets, and tasks
- **Authentication** — Verifying your identity and securing your account
- **Notifications** — Sending important updates about approvals, tasks, and announcements
- **Performance Management** — Tracking performance metrics and providing feedback
- **Legal Compliance** — Maintaining employment records as required by law
- **App Improvement** — Analyzing usage patterns to improve functionality and user experience
- **Customer Support** — Responding to your queries and resolving issues

## 4. Data Sharing and Disclosure

### 4.1 Your Employer

Your employer (the organization that provided you access to this App) has access to:
- Attendance records
- Leave and permission history
- Performance metrics and ratings
- Task completion status
- HR ticket submissions and status
- Payroll and incentive information

### 4.2 Third-Party Services

| Service | Purpose | Data Shared |
|---------|---------|-------------|
| **Backend Infrastructure** | App hosting, data storage, and API services | Account data, attendance records, payroll data, HR ticket content |
| **Google ML Kit** | On-device face detection | None — processing occurs entirely on your device |
| **TensorFlow Lite** | On-device face recognition | None — processing occurs entirely on your device |

### 4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests from public authorities.

## 5. Data Retention

We retain your personal data for as long as your employment relationship with your organization continues, plus any additional period required by applicable law or company policy. Specific retention periods are determined by your employer's data retention policies and applicable labor laws.

When your employment ends, your access to the App will be revoked, and your data will be retained or deleted in accordance with your employer's policies and legal obligations.

## 6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data:

- **Encryption in Transit** — All API communication uses HTTPS/TLS encryption
- **On-Device Processing** — Face recognition data never leaves your device
- **Access Controls** — Role-based access to employee data
- **Secure Storage** — Authentication tokens stored in device secure storage

## 7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

- **Access** — Request a copy of the personal data we hold about you
- **Correction** — Request correction of inaccurate or incomplete data
- **Deletion** — Request deletion of your personal data (subject to legal obligations)
- **Portability** — Request transfer of your data to another service
- **Objection** — Object to processing of your personal data
- **Withdraw Consent** — Withdraw consent where processing is based on consent

To exercise these rights, please contact your organization's HR department. You may also reach out to us at the contact details provided below.

## 8. Children's Privacy

This App is intended for use by employees of organizations and is not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

## 9. Data Storage and Transfer

Your data is stored on servers operated by or on behalf of your employer. If you are accessing the App from a different country, your data may be transferred to and processed in the country where the servers are located. We ensure appropriate safeguards are in place for any cross-border data transfers.

## 10. Local Storage and Tracking

The App does not use cookies. However, we use local device storage (SharedPreferences) to:
- Store authentication tokens for session management
- Cache app preferences and settings
- Remember login state

This data remains on your device and is not used for tracking or advertising purposes.

## 11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the App or through other appropriate communication channels. Your continued use of the App after changes constitutes acceptance of the updated policy.

## 12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

| Detail | Information |
|--------|-------------|
| **Support Email** | support@elysium.community |
| **Organization** | Elysium |

For privacy-related inquiries, you may also contact your organization's Human Resources department.

---

© 2026 Elysium. All rights reserved.