Privacy Policy

Effective date: July 12, 2026

GDOne - Attendance ("the App", "we", "us") is an employee attendance management application developed by MasTechnologies for use by organizations and their employees. This Privacy Policy explains what information the App collects, how it is used, and how it is protected.

1. Information We Collect

• Account information: Full name, email address, and a password (stored securely via Firebase Authentication) for both Admin (HR Manager) and Employee accounts.
• Profile details (optional): Phone number, home address, date of birth, and gender, if entered by the user.
• Location data: When an Employee marks attendance by scanning an office QR code, the App reads the device's GPS location at that moment to confirm the employee is physically within an Admin-configured radius of that office. Location is only accessed during the attendance check-in/check-out action, not continuously or in the background.
• WiFi network name (SSID): The App checks which WiFi network the device is connected to at the moment of check-in/check-out, to confirm the employee is connected to an approved office network. The App does not access WiFi passwords or browse network traffic.
• Biometric authentication flag: If a user enables fingerprint/Face ID login, the App stores only a true/false setting on the device indicating this feature is turned on. Biometric data itself (fingerprint or face scans) is processed entirely by the device's operating system and is never accessed, transmitted, or stored by the App or its developers.
• Attendance records: Check-in and check-out timestamps, the office location associated with each record, and any remarks or status set by an Admin (e.g. Present, Absent, Sick Leave, Annual Leave).

2. How We Use This Information

• To create and manage Employee and Admin accounts.
• To verify that an Employee is at an approved office location and connected to an approved network before recording attendance.
• To generate attendance records and reports (PDF, Word, or image exports) for Admin use.
• To enable optional biometric login as a convenience feature.
• To send account-related notifications (e.g. password reset emails).

3. Data Storage and Security

Data is stored using Google Firebase (Firebase Authentication and Cloud Firestore). Saved login credentials used for "Remember Me" and biometric login are stored securely on the device using the platform's Keychain (iOS) or Keystore (Android) via encrypted secure storage, and are never transmitted to our servers in plain text alongside biometric data.

4. Data Sharing

We do not sell, rent, or share personal data with third parties for advertising or marketing purposes. Attendance and profile data is visible only to the Employee themselves and to Admin users within their own organization's account.

5. Data Retention and Deletion

Employee and admin records are retained as long as the account is active or as required by the organization's internal HR record-keeping needs. An Admin with Super Admin privileges can permanently delete an employee's account and associated records, or a specific attendance entry, directly within the App.

6. Children's Privacy

This App is intended for use by employees of organizations and is not directed at children. We do not knowingly collect information from children under 13.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

8. Contact Us