Privacy Policy
This policy explains what personal data GeoAttend collects, why we collect it, how we protect it, and the choices you have. It covers the GeoAttend mobile apps for iOS and Android and the website at geoattend.chhit.com.
1. Who we are
GeoAttend is an attendance and workforce management service operated by TITB Co., Ltd. ("TITB", "we", "us"), registered in Cambodia. For the purposes of this policy, TITB is the data controller for account, billing, website, and support data.
GeoAttend is primarily provided to employers. When your employer uses GeoAttend to manage attendance, your employer is the data controller of your employment and attendance data, and TITB acts as a data processor on their instructions. Your employer's own privacy notice governs how they use that data. This policy tells you what the GeoAttend service itself does with it.
2. Data we collect
Account and identity data
- Name, work email address, phone number, employee ID, job title, department, and office or work site
- Profile photo, if you or your administrator upload one
- Login credentials. Passwords are stored only in hashed form on our servers; we never store your raw password. Session tokens are kept in the device's secure storage (iOS Keychain / Android Keystore)
Location data
When you check in or check out, the app reads your device's precise location (GPS) and compares it with the geofence configured for your work site. We record the coordinates, accuracy, distance from the site, and the resulting inside/outside-zone result with the punch.
Attendance and work data
- Check-in and check-out times, dates, and geofence results
- Shifts, rosters, overtime, leave requests, and correction or adjustment requests
- Approval actions taken by managers and HR administrators
- Offline punches queued on your device and synchronized when you reconnect
Device and technical data
- Device model, operating system and version, app version, language, and time zone
- Push notification token (via Apple Push Notification service or Firebase Cloud Messaging)
- IP address, request timestamps, and server logs used for security and troubleshooting
- Crash and diagnostic information, where enabled by the platform
Files you choose to upload
If a feature asks for a supporting document (for example, an attachment to a leave or correction request), the app accesses only the file you explicitly select.
We do not collect your contacts, SMS, call logs, calendars, microphone audio, or photo library. The app does not contain advertising SDKs or cross-app tracking.
3. How we use data, and our legal bases
| Purpose | Data used | Legal basis |
|---|---|---|
| Verify attendance against your work site | Identity, location, punch time | Performance of your employment contract, at your employer's direction |
| Authenticate you and keep your session secure | Credentials, device and session data | Performance of contract; legitimate interest in security |
| Provide rosters, leave, overtime, and approvals | Attendance and work data | Performance of contract |
| Send shift, approval, and account notifications | Push token, device data | Performance of contract; consent where required by your device settings |
| Operate, secure, and troubleshoot the service | Technical data and logs | Legitimate interest in a safe and reliable service |
| Meet legal, tax, and audit obligations | Records required by law | Legal obligation |
Where we rely on consent (for example, device-level permission for location or notifications), you can withdraw it at any time in your device settings. Withdrawing location permission means attendance check-in will not work, because geofence verification is the core function of the service.
We do not use your data for advertising, profiling, or automated decisions that produce legal effects.
5. International transfers
Our servers are hosted in the region selected for your organization. Some service providers (such as Apple and Google, for push notifications) may process data in other countries. Where data leaves Cambodia, we use appropriate safeguards, including contractual data protection clauses and providers' standard data processing terms.
6. How long we keep data
Attendance and work records are retained for the period set in your employer's agreement with us, and for as long as required by applicable labour, tax, and audit law. Account data is kept while your account is active. Device push tokens are removed when you sign out or the token is invalidated. Server logs are kept for a limited period for security and troubleshooting, then deleted or anonymized.
When retention ends, we delete or irreversibly anonymize the data. Backup copies are overwritten on their normal rotation cycle.
7. How we protect data
- All traffic between the app and our servers uses HTTPS with TLS 1.2 or later
- Session tokens and credentials are stored in iOS Keychain or Android Keystore, protected by the operating system
- Passwords are hashed; administrative access is role-based and subject to audit logging
- Access to production systems is limited to authorized personnel
- Offline attendance records remain on the device only until they synchronize
No system is perfectly secure. If a breach affects your personal data, we will notify your employer and the relevant authorities as required by law.
8. Your rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Withdraw consent for location or notifications
- Receive a copy of data you provided, in a portable format
- Complain to a data protection authority
Because your employer controls most employment and attendance data, please contact your HR administrator first — they can usually resolve access, correction, and deletion requests directly. You may also contact us using the details below, and we will assist your employer or respond directly where we are the controller.
Account deletion. To delete your GeoAttend account and associated personal data, email us at the address below from the address associated with your account, or ask your HR administrator. We respond within 30 days. Records we must keep for legal or audit purposes may be retained in accordance with section 6.
9. Children
GeoAttend is a workplace service and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided data to us, contact us and we will delete it.
10. Changes to this policy
We may update this policy to reflect changes in the service or the law. We will post the new version here and update the effective date above. Material changes will be communicated to account administrators, and where required, we will ask for consent.