隐私政策

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information for those who decide to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at Aurago unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including facial recognition data for attendance purposes. The information that we request will be retained securely and handled in accordance with this Privacy Policy.

Types of Information We Collect:

• Facial Recognition Data: For attendance verification purposes (see detailed section below)
• Account Information: Name, email address, staff or customer ID, and other profile information
• Device Information: Device type, operating system, and app usage data

We do not share your personal information with any third-party services for data collection, analytics, or advertising purposes. All data is processed and stored directly on our own secure infrastructure.

Facial Recognition and Attendance

Face Data Collection and Use

Our app collects and processes facial recognition data for the specific purpose of taking staff attendance in the workplace. This section explains how we collect, use, store, and protect this sensitive biometric information.

What Face Data We Collect

When you use the attendance feature, the app captures and processes the following face data:

• Facial geometry and features: Mathematical representations of facial landmarks and patterns used to identify individuals for attendance purposes
• Face images: Temporary captures of your face during the attendance check-in process
• Facial recognition templates: Encoded biometric data derived from your facial features, converted into a unique identifier

How We Use Face Data

Face data is collected and used exclusively for the following purposes:

• Attendance Verification: To accurately identify and record staff attendance in real-time
• Security and Authentication: To ensure only authorized individuals are marked as present
• Attendance Records: To maintain accurate attendance logs for payroll and administrative purposes
• System Improvement: To improve the accuracy and reliability of the facial recognition attendance system

Face data is never used for:

• Marketing or advertising purposes
• Sharing with third parties for commercial gain
• Tracking user behavior outside of attendance functions
• Any purpose other than attendance verification and system improvement

User Consent and Control

• Explicit Consent: The app will request your explicit consent before collecting or processing any face data
• Visual Indication: The app provides clear visual indicators when the camera is active and face data is being captured
• Opt-Out Option: Users can choose not to use the facial recognition feature and may use alternative attendance methods
• Data Access: You can request access to your facial recognition data at any time
• Data Deletion: You have the right to request deletion of your face data at any time by contacting us

Data Sharing and Third Parties

Your face data is treated with the highest level of security and privacy:

• No Third-Party Sharing: We do not sell, share, or disclose your face data to any third parties for any purpose
• No Advertising Use: Face data is never shared with advertising networks or used for targeted advertising
• Organisational Use Only: Face data remains within your organisation's workspace and is only accessible to its authorised administrators

Data Storage and Security

• Secure Storage: All face data is encrypted and stored securely on our servers with industry-standard encryption protocols
• Access Controls: Only authorised personnel with a legitimate administrative purpose can access face data
• Storage Location: Face data is stored securely on AWS S3 servers in the Asia Pacific region (Singapore - ap-southeast-1), with appropriate security measures including encryption at rest and in transit
• Isolated Storage: Face data is stored separately from other personal information and protected by multiple layers of security

Data Retention Period

• Active Users: Face data is retained for the duration of the user's active employment or membership at the organisation
• Inactive Users: Face data is automatically deleted within 30 days after a user's account becomes inactive or upon graduation/termination of employment
• User-Requested Deletion: Upon request, face data will be permanently deleted within 7 business days
• Attendance Records: While face data is deleted, attendance records (without biometric data) are retained according to institutional record-keeping requirements

How to Delete Your Face Data

You can request deletion of your face data at any time by:

1. Contacting us at raysonlim77@gmail.com
2. Submitting a written request to your organisation's administrator

Upon receiving a deletion request, we will permanently delete all associated face data within 7 business days and provide confirmation of deletion.

Compliance with Privacy Laws

Our facial recognition practices comply with applicable privacy laws and regulations, including but not limited to GDPR, COPPA, and other relevant data protection legislation. We are committed to protecting your biometric privacy rights.

Changes to Face Data Practices

If we make any changes to how we collect, use, or store face data, we will update this section of our Privacy Policy and notify users via email or in-app notification at least 30 days before the changes take effect.

Log Data

We want to inform you that whenever you use our Service, in the case of an error in the app, we collect data and information (through third-party products) on your device called Log Data. This Log Data may include information such as your device's Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

This Service does not use these “cookies” explicitly. However, the app may use third-party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and to know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Service Providers

We may employ third-party companies and individuals for the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

We want to inform users of this Service that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information, including sensitive biometric data such as facial recognition information, and we strive to use commercially acceptable means of protecting it. We implement industry-standard security measures including:

• Encryption: All facial recognition data is encrypted both in transit and at rest
• Access Controls: Strict access controls limit who can view or process facial data
• Regular Security Audits: We conduct regular security assessments to protect your data
• Secure Infrastructure: Data is stored on secure servers with multiple layers of protection

However, remember that no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security. We continuously work to improve our security measures to protect your sensitive information.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. In the event that we discover a child under 13 has provided us with personal information, we will immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take the necessary actions.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. For significant changes, especially those related to facial recognition data, we will provide advance notice via email or in-app notification.

This policy is effective as of 2021-05-11 and last updated on 2025-01-02.

Contact Us

If you have any questions or suggestions about our Privacy Policy, including concerns about facial recognition data collection and use, or if you wish to request deletion of your face data, do not hesitate to contact us at raysonlim77@gmail.com.

For face data deletion requests, please include:

• Your full name and staff or customer ID
• The email address associated with your account
• A clear statement requesting deletion of facial recognition data