Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Account & profile information — name, employer-issued email address, phone number, employee ID, department, designation, and profile photo (as configured by your employer).
• Authentication credentials — one-time passwords (OTPs) sent to your email or phone during login.
• Leave and correction requests — dates, reasons, supporting notes, and any attachments you upload.
• Support communications — any messages you send to us or through the App.

1.2 Biometric information

• Facial images and biometric templates — during face enrollment and each attendance check-in, the App captures still images of your face from multiple angles and derives a mathematical face template. The template is used to verify your identity when you punch in or out.
• Liveness signals — during enrollment and verification, the App may ask you to blink, turn your head, nod, or smile so the system can confirm a live human is present and reject spoofing attempts using photos or videos.
• On-device biometric authentication — if you enable Face ID or fingerprint login on your device, the App uses the operating system's biometric API to unlock the App locally. Fingerprints and Face ID templates never leave your device and are never transmitted to our servers.

1.3 Location information

• Precise device location — when you punch in or out, the App reads your current GPS latitude and longitude to verify you are inside a work location (geofence) defined by your employer.
• Location is only captured during an active attendance action or when you are viewing a live map screen. The App does not track your location in the background.

1.4 Attendance, leave, and work records

• Punch-in and punch-out timestamps, check-in method (face / GPS / manual), the geofence associated with each punch, shift information, working hours, breaks, overtime, holidays observed, leave applications, and correction requests.

1.5 Information collected automatically

• Device information — device model, operating-system version, application version, unique installation identifier, and language settings.
• Diagnostic and performance data — crash reports, error logs, and basic usage events used to fix bugs and improve the App.
• Network information — IP address and general connection metadata used by our backend to route requests securely.

2. Permissions We Request

3. How We Use Your Information

• Authenticate you and provide access to the App.
• Verify identity at each attendance check-in through face recognition and geofence validation.
• Record and display attendance, leave, and related HR information for you and your employer.
• Enable employer-side HR workflows such as approvals, corrections, and payroll inputs.
• Diagnose crashes, monitor App performance, and improve reliability.
• Detect and prevent fraud, spoofing, and unauthorized access.
• Comply with legal, regulatory, and contractual obligations (including labor and workplace-safety laws).

4. Sharing of Information

We share your information only in the following limited circumstances:

• With your employer — attendance, leave, and profile information is made available to authorized personnel at your employer's organization, in line with the employment relationship and applicable laws.
• With our service providers — cloud infrastructure and face-verification providers acting on our behalf under confidentiality obligations. Current providers include:
  • Railway — application and database hosting.
  • Expo Application Services (EAS) — over-the-air App update delivery.
  • Google LLC — App distribution via Google Play.
• To comply with law — if required by court order, subpoena, or other legal process, or to protect the rights, property, or safety of OUR UNIQUE, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to the acquiring party honoring this Privacy Policy.

We do not sell your personal information. We do not use your information for advertising or share it with advertising networks.

5. Data Retention

• Face templates and enrollment images — retained while you are an active employee of an enrolled Customer. Deleted, or securely disassociated from your identity, within a reasonable period after your enrollment is revoked or your employer terminates the service.
• Attendance and leave records — retained by your employer for the period they are legally required to keep employment records (typically several years). We host these records on their behalf until instructed to delete them.
• Diagnostic logs — automatically rotated after a short window (typically 30–90 days).

6. Security

• All communication between the App and our servers is encrypted in transit using TLS.
• Authentication tokens are stored inside the operating system's secure storage (iOS Keychain / Android Keystore) and are never written to insecure locations.
• Access to biometric templates and personal data on our servers is restricted to authorized personnel on a need-to-know basis.
• We conduct routine security reviews and patch known vulnerabilities in a timely manner.

No security control is perfect. If we become aware of a data breach that materially affects you, we will notify you and, where required, the appropriate regulator, in accordance with applicable law.

7. Your Rights and Choices

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023, and, where applicable, the EU GDPR), you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or outdated information.
• Request deletion of your information (subject to legal and contractual retention obligations).
• Object to or restrict certain processing.
• Withdraw consent for biometric processing, in which case you will need to use an alternative attendance method offered by your employer.
• Lodge a complaint with the applicable data-protection authority.

Because your employer typically controls your data, most of these requests should be directed to your employer first. If your employer is unable to help, or you have questions about how OUR UNIQUE processes data on their behalf, contact us using the details in Section 11.

8. Children's Privacy

The App is intended for use by employees who are of working age under applicable law and is not directed to children under 13 (or the higher minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. International Data Transfers

Our infrastructure providers may process and store your information in data-center regions outside your country of residence. Where we transfer information across borders, we take steps to ensure it receives an adequate level of protection through contractual safeguards and provider certifications.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or via the email address associated with your account and update the "Last updated" date at the top of this page. Your continued use of the App after an update indicates your acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:

OUR UNIQUE
1, C-100, VSPM Phase 2, Gurudwara Road,
Vanasthalipuram, Rangareddy,
Hyderabad — 500070, India
Email: unifiedtree@gmail.com