1. Scope
This Privacy Policy applies to the AttendGate Android application and the website at attendgate.in. AttendGate is designed for workplace attendance. Admin access uses Google sign-in through Firebase Authentication so authorized administrators can create, recover and access a workspace across Android and Web Admin. Android Kiosks use a separate device identity and do not require a Google account. A separate private owner console is used only by the AttendGate operator to administer plans, purchases and promotional codes.
2. Information AttendGate may handle
Depending on the features used, the app may process information entered, captured or generated by a workplace administrator or employee, including:
- Google-account information used for Admin authentication and workspace access, such as Firebase user identifier, email address, display name, profile image URL and workspace role;
- workplace name, configuration and device-role information;
- employee names, identifiers, salary/profile information and settings entered by the administrator;
- facial images captured during enrollment and/or mathematical face templates derived from facial images for recognition;
- temporary camera/face-state information used by supported liveness checks, such as determining whether a blink occurred;
- attendance events, manual corrections and status information such as clock-in/clock-out dates and times;
- salary, shift, overtime, payable or other attendance/payroll-related values entered or calculated in the app;
- PDF and editable Excel reports created at the administrator's request;
- device and technical information needed for pairing, synchronization, notifications, security, diagnostics or app operation;
- backup files created at the user's request;
- plan and purchase-verification information such as workspace identifier, Google Play product/offer identifiers, purchase token, order/reference information, billing region, purchase state and verification timestamps;
- private promotional-code status, discount level, workspace assignment, redemption and audit information; and
- advertising identifiers, device/network information and consent signals where advertising services are active.
3. Facial data
AttendGate uses facial data for the workplace attendance features selected by the administrator, principally employee enrollment and recognition at the Kiosk. Supported versions may also use temporary face-state information to determine whether a configured blink liveness check has been completed. AttendGate does not sell employee facial data or use it to build an advertising profile.
Administrators must not enroll a person's face without appropriate notice and any consent or authorization required by applicable law or workplace policy. Face-recognition and liveness results can be affected by camera quality, lighting, pose, device performance and configuration and should not be treated as infallible.
4. How information is used
Information may be used to provide employee management, on-device face recognition, optional liveness checks, attendance logging and corrections, payroll calculations, editable Excel/PDF reports, backup/restore, Google-authenticated Admin access and account recovery, Admin invitations and workspace permissions, Web Admin, Admin–Kiosk pairing and synchronization, notifications, plan enforcement, Google Play purchase verification, private-offer abuse prevention, fraud/security controls, diagnostics and advertising where enabled.
5. Local storage, backend services and device synchronization
Local storage
Operational app data may be stored on the Android device. Device security, screen locks, operating-system backups and physical access to the device affect the security of that local copy.
Manual backup
When an administrator creates or shares a backup, that file may contain sensitive workplace information. The administrator chooses where it is stored or shared. Third-party services used to send or store a backup apply their own privacy terms.
Account, connected-device sync and plan verification
When Google Admin sign-in, Web Admin, connected-device synchronization or plan verification is used, account/workspace membership and operational data needed to keep authorized Admin clients and Kiosk devices consistent and to verify a workspace entitlement may be transmitted and stored using Google Firebase/Google Cloud infrastructure configured for AttendGate. Workspace face-template encryption keys may be stored only in wrapped/encrypted recovery form so an authorized Admin can recover a workspace on a replacement Android device. Face recognition itself is performed on the Android device.
6. Google Play billing and private offers
AttendGate Plus purchases are processed by Google Play. AttendGate does not receive or store your full payment-card details. The app and backend receive limited purchase-verification information from Google Play so we can validate the product, purchase state, applicable offer and workspace entitlement, restore a valid purchase and help prevent duplicate or fraudulent redemption. Private offer codes are generated and controlled by AttendGate and may be stored in protected or encrypted form together with assignment/redemption records.
7. Advertising and Advertising ID
Supported Free versions of AttendGate may show Google AdMob advertising, intended for Kiosk standby/non-attendance interactions. Closed-test releases may use a Google TEST banner on the Kiosk standby screen. Plus workspaces do not show AttendGate Kiosk ads. The Google Mobile Ads SDK may process Advertising ID and related device, network, analytics, fraud-prevention and consent information in accordance with Android settings, applicable law and Google's policies. Advertising is not intended to identify employees by face.
8. Retention and deletion
Workplace administrators control the operational employee and attendance records they create. Data should be deleted when no longer needed for the workplace purpose or legal retention requirements. Copies previously exported, manually backed up or shared to third-party services remain under the administrator's control. Purchase, promotional-code and security audit records may be retained as reasonably necessary to provide subscription and entitlement records, prevent duplicate redemption, address refunds/fraud, support users and meet legal or accounting obligations.
For assistance with deletion of data that may remain in AttendGate-managed online services, follow the instructions on our Data Deletion page or contact us.
9. Third-party services
AttendGate may use Google/Firebase services for Admin Google authentication, Web Admin, workspace membership/recovery, synchronization, cloud infrastructure, authentication of the private owner console, notifications and plan verification; Google Play for digital-product billing and purchase verification; and Google AdMob for advertising. Those providers may process information required to provide their services under their own terms and privacy policies. The public website itself does not currently use third-party behavioral advertising.
10. Data sharing and sale
AttendGate does not sell workplace or employee personal data. Data may be processed by service providers used to operate requested app functions, or disclosed where required by law, security obligations or to protect users and the service.
11. Security
We use reasonable technical and organizational measures intended to protect data handled by AttendGate. Supported controls include Google-authenticated Admin accounts, OWNER/ADMIN workspace roles, expiring Admin invitations and Kiosk pairing codes, separate device/client registration and account-access revocation, an Admin password for protected Kiosk controls, password-protected AttendGate backup files, encrypted workspace-key recovery, server-side purchase verification and restricted owner administration. Private promotional codes are designed to be single-use and workspace-bound when validated. No device, network or cloud service can be guaranteed completely secure.
12. Children
AttendGate is a workplace/business product and is not directed to children. The app's intended Google Play target audience is adults. Businesses are responsible for ensuring any use involving minors is lawful and appropriately authorized.
13. Your choices and rights
Depending on applicable law, individuals may have rights relating to access, correction or deletion of personal information. In the employment context, requests should normally be directed first to the employer/workplace administrator that controls the employee record. Privacy questions about AttendGate itself can be sent to the contact below.
14. Changes
We may update this policy when app features, data flows, providers or legal requirements change. The latest version will be posted here with a revised effective date.
15. Contact
Privacy and support enquiries: support@attendgate.in
Website: https://attendgate.in/