Privacy Policy

Effective date: October 2025 • Website: https://attendio.com • Contact: suport@attendioapp.com

AttendioAPP (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information when you use our mobile app and related services (the “App”). By using the App, you agree to this Policy.

1. Information We Collect

a) Information you provide

• Name, email address, company name when registering or creating an account.
• Optional profile details (e.g., role/department) and profile photo.
• Documents/files you upload to manage employees or projects.
• Contact details of invitees that you explicitly select to invite.

b) Automatically collected data

• Device info (model, OS version, language, IP address).
• Location data (when enabled) for geofencing and clock-in/out.
• Usage and diagnostics to improve performance and reliability.

c) Third-party services

We integrate trusted SDKs limited to their purpose, including: Google/Apple Sign-In (authentication), OneSignal (push notifications), Google AdMob (advertising, if enabled), and Mapbox (maps/geolocation). Data shared with these services complies with their privacy policies and is minimized.

2. How We Use Information

• Provide and operate the App (attendance, geofences, time tracking, reports).
• Authentication, notifications, support, and customer communications.
• Improve user experience, security, and develop new features.
• Comply with legal obligations (e.g., invoicing, audit).

We do not sell your personal data and we do not share it for third-party marketing purposes.

3. Contacts & Invitations

We do not upload the device’s full address book. Only contacts you explicitly select for invitations (e.g., name + email/phone) are used to create invite records for your workspace. If an invite is not accepted, it is automatically purged within 30 days or sooner if you delete it.

4. Data Storage & Security

Data is stored on secure servers within the European Union. We use TLS encryption in transit and AES-256 at rest. Access is restricted to authorized personnel under need-to-know principles and logged for audit.

5. Retention

• Account & usage data: retained while your account is active.
• Invite data: deleted upon expiry or manual removal.
• Location/time logs: up to 12 months (or as configured by the account owner) unless deleted earlier.

6. Sharing

We may share data with vetted service providers (hosting, notifications, analytics) under data processing agreements, and with authorities when required by law. We do not share data with ad networks for profiling without consent.

7. Children’s Privacy

The App is intended for business use and is not directed to children under 16. If you believe we have collected such data, contact us to delete it.

8. Your Rights (GDPR)

Users in the EEA/UK can request access, correction, deletion, restriction, objection, and data portability, and may withdraw consent at any time. To exercise rights, email suport@attendioapp.com.

9. International Transfers

Where transfers outside the EEA occur, we rely on EU Standard Contractual Clauses or equivalent safeguards.

10. Changes

We may update this Policy periodically. The latest version will always be available at https://api.attendioapp.com/AttendioAPP/PolicyPrivacy.html. Continued use of the App after changes means you accept the updated Policy.

11. Contact