BigMembres ("we", "us") operates the BM Attendance Android app and its attendance administration website. This policy explains how these services process employee and administrator information. The app is intended for people whose accounts are created by an authorized BigMembres administrator.
Information we process
- Account information: name, email address, employee ID, account role and status, and authentication information. Passwords are stored as hashes rather than readable passwords.
- Attendance information: check-in and check-out dates and times, attendance status, the location coordinates submitted for each attendance action, and the calculated distance from the configured office location.
- Check-in photo: a live camera photo submitted when an employee checks in. The photo is stored at the captured image resolution, subject to the app's upload size limit.
- Requests: leave and permission dates or times, reasons entered by employees, approval or rejection status, and any administrator response. Please avoid including unnecessary sensitive information in a reason.
- Technical and security information: session information, request and error logs, and records of important administrator actions. Server logs may include network and device information such as an IP address and browser or app details.
How and when we use this information
We use account information to sign users in and manage access. We use attendance data to verify that a check-in or check-out occurs within the configured office area, record work attendance, and show attendance history. We use check-in photos as part of the attendance record. We use request information to submit, review, approve, or reject leave and permission requests. Technical information helps us operate, secure, and troubleshoot the service.
The Android app requests camera access when taking a check-in photo. It requests location access when an employee verifies their location for attendance. The app does not request background location access or continuously track location. A successful check-in or check-out sends the employee's current coordinates to the attendance server, where they are saved with that attendance record.
Who can access information
Authorized BigMembres administrators can access employee and attendance information needed to manage the service, including submitted check-in photos and requests. We use service providers to run the service, including server and database hosting, private cloud photo storage, and Google Play services for device location. These providers may process information as needed to provide those functions. We do not use attendance information for advertising or sell it.
Storage and security
App and website connections use HTTPS. The server stores passwords as hashes and stores check-in photos in private cloud storage. Photo access through the website uses temporary access links. The Android app stores sign-in tokens encrypted with a key held by the device's Android Keystore. No internet-connected system can be guaranteed completely secure.
Retention and deletion
The current service does not automatically delete employee accounts, attendance records, photos, location records, requests, or audit logs after a fixed period. BigMembres retains these records while they are needed for attendance administration, employment records, security, or applicable legal obligations. An administrator can deactivate an account, which prevents further access but does not erase historical records. To ask about access, correction, or deletion, contact us using the email below. We will review each request against the records we need to keep and any applicable obligations. Copies in backups or audit records may remain for a period after an approved deletion request.
Your choices
You can choose whether to grant camera and location permissions through Android settings. Those permissions are needed for the related attendance actions. You can ask BigMembres to review or correct your account and attendance information, or ask what information we hold about you. Employees cannot create or permanently delete their own accounts in the app; an administrator manages accounts.
Children
BM Attendance is a workplace tool and is not intended for children.
Changes to this policy
We may update this policy when the service or our data practices change. The effective date above will show when this version took effect.
Contact
For privacy questions or requests, contact info@bigmembres.in.