w-staff Privacy Policy
How the w-staff app (Woyce Staff on Google Play) collects, uses and protects employee data.
1. About w-staff
w-staff ("Woyce Staff" on Google Play) is the internal workforce app of WOYCE AI LLP. Employees use it to record attendance, request leave, work on tasks and read company policies. Accounts are created by the company for its own staff; there is no public sign-up. WOYCE AI LLP is responsible for the data described here.
2. Data the app collects
Account and work details
Name, work email, employee code, job title, team, manager, office, working hours, employment type, joining date and profile photo, entered by the company's administrators or HR.
Personal details you choose to add
Phone number, date of birth, home address and an emergency contact. These are optional, and visible only to you, HR and administrators.
Attendance photo
When you check in or check out, the app takes one photo with your phone's camera as proof that it was you. The camera is used only on the check-in and check-out screens, and never in the background.
Precise location
When you check in or check out, the app reads your phone's location once, to confirm you are at your assigned office. Location is not tracked at any other time, and never in the background.
Work records
Check-in and check-out times, attendance corrections you request, leave requests and balances, tasks, comments, monthly self-reviews and feedback, and which company documents you have acknowledged.
Device information
A notification token from your phone, so the app can send reminders and approvals, and the phone's platform (Android or iOS).
3. How the data is used
- To record attendance and confirm that each check-in was made by the right person at the right office
- To manage leave, tasks, attendance corrections and approvals
- To prepare attendance and work reports for team leads, HR and management
- To send work notifications: reminders, approvals and policy updates
- For payroll and to meet legal and labour-law obligations
The app shows no advertising, contains no advertising or tracking SDKs, and we never sell employee data or use it for profiling outside employment.
4. Who can see your data
- You can see your own records in the app
- Your team lead sees your attendance, leave and tasks, and can view your attendance photos
- HR and administrators see records for the whole company
- Your colleagues see only your name, photo and whether you are off today, never the reason or type of leave
- Every view of an attendance photo by someone other than you is recorded in an audit log
5. Where data is stored and who processes it
Service providers
Records are stored in Google Firebase (Cloud Firestore and Authentication) in Mumbai, India. Attendance photos are stored in a private Amazon Web Services S3 bucket in Mumbai, India. The app's server runs on Vercel in Mumbai, India. Notifications are delivered by Firebase Cloud Messaging. These providers process data only on our instructions.
Security
All data is encrypted in transit (TLS) and at rest. Photos can be opened only through short-lived links issued after a permission check. Every significant change, such as approvals, corrections and role changes, is recorded in an audit log.
6. How long data is kept
- Attendance photos are deleted automatically after 180 days
- Other employee records are kept for the duration of your employment, and afterwards for as long as tax and labour law require
- Notification tokens are removed when you sign out or when the phone stops accepting notifications
7. Your choices and rights
- You can review your own attendance, leave and tasks in the app at any time
- You can update your phone, address and emergency contact in the app (Me → Edit my details)
- If a recorded time is wrong, you can request a correction; the original record is always kept alongside it
- You can withdraw camera, location and notification permission in your phone's settings, though you won't be able to check in without camera and location
- You can ask HR to see the data held about you, to correct it, or to delete it where the law allows
Your rights under India's Digital Personal Data Protection Act, 2023 apply. To exercise them, contact HR or email info@woyce.ai.
8. Account deletion
Your account is created by the company and is deactivated when you leave. To request that your account and personal data be deleted, email info@woyce.ai from your work email or ask HR. We will delete your data within 30 days, except records the law requires us to keep, which are deleted once that period ends.
9. Children
w-staff is for employees aged 18 and over. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We will post changes on this page with a new effective date, and tell employees about material changes in the app.
11. Contact
WOYCE AI LLP, 310–311, RK World Tower, 150 Feet Ring Rd, Sheetal Park, Shastri Nagar, Rajkot, Gujarat 360006, India. Privacy questions: info@woyce.ai. Our company-wide privacy policy is at woyce.ai/privacy-policy.