Privacy Policy

Identity & contact:name, email, phone number, employee code, designation, department, office, and date of joining — entered by your company's admin to set up your account.

Payroll identity: UAN, PF number, ESI number, and bank name/account number — used only to generate your payslip.

Biometric data:when your company enables face or palm check-in, the kiosk captures a mathematical representation of your face or palm (a "embedding" — a list of numbers, not a photo) and stores that instead of any image. An embedding cannot be reversed back into a picture of you; it exists only so the kiosk can recognize you at check-in time.

Attendance records:check-in/check-out timestamps, the method used (kiosk face, kiosk palm, or manual), and a match-confidence score.

Location: captured only when you manually check in from the Emplo mobile app (e.g. a work-from-home day) — never for a kiosk check-in, since the kiosk is a fixed device at your office.

Leave & salary: leave requests, balances, and salary slip figures (earnings, deductions, attendance-based proration) generated as part of running payroll for your company.

Solely to provide the attendance, leave, and payroll service your employer has engaged us to run. We don't use your data for advertising, and we don't sell it to anyone.

Your own records are visible to you (via the Emplo app) and to your company's admins (via the admin portal) — never to any other company. This isn't just a policy promise: every company's data lives in an isolated database partition enforced at the database level, so one company's admin cannot query another company's employee data even if they tried.

We retain your data for as long as your employer's account with us is active, plus a reasonable period afterward for statutory payroll record-keeping. If your employer removes your account, your biometric embeddings are deleted; attendance and payroll history may be retained as required by applicable labour and tax law.

Face and palm check-in are opt-in at the company level — your employer decides whether to enable them, and can disable them at any time, at which point kiosk check-in stops working for everyone at that company and stored embeddings are no longer used. Location capture only ever happens when you actively tap check-in from the mobile app; it's never collected in the background.

Questions about this policy or your data: ratawaapps@gmail.com.