Privacy Policy
WFM is a multi-vendor workforce management platform. Each company (vendor) that registers to use the app manages its own employees, offices, and attendance settings. Access is limited to authorized personnel of registered companies. By installing, accessing, or using the app, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the app.
1. Who This Policy Applies To
This policy applies to users of the WFM mobile app (Android and iOS) and associated web-based administration tools where employee data may be viewed by authorized administrators of their registered company.
The app is intended for authorized employees and administrators of companies registered on WFM. It is not directed at children and is not intended for use by anyone under 18 years of age.
2. Information We Collect
We collect information necessary to manage attendance, verify identity, support field operations, and administer employment-related workflows for your registered company. Depending on your role and features enabled for your account, this may include:
2.1 Account and Profile Information
- Full name, employee ID, email address, phone number, and job designation
- Company (vendor), office, division, and reporting structure information
- Profile photo (if uploaded)
- Account credentials (passwords are stored in hashed form on our servers)
- Role, permissions, and employment-related settings assigned by your company
2.2 Attendance and Work Activity Data
- Check-in and check-out records, including date, time, attendance type, and status
- Office attendance photos captured during check-in or check-out
- Field attendance session details, including check-in/check-out locations and session status
- Leave requests, leave balances, and related approval records
- Attendance correction requests and supporting documents or photos
- Proxy attendance records where permitted by company policy
- Gamification data such as points, badges, or achievements, if enabled
2.3 Location Information
- Office attendance: GPS coordinates at the time of check-in or check-out to validate that you are within your assigned office geofence
- Field attendance: GPS location points collected during active field sessions, including latitude, longitude, accuracy, timestamp, movement status, and device battery level
- Manual location sharing: coordinates and optional notes when you voluntarily share your current location with authorized personnel
- Background location may be collected only while a field attendance session is active and only if you grant the required permissions
2.4 Face Verification Data
If face verification is enabled for your account, we may collect:
- Enrollment photographs (such as front, left, and right profile images)
- Selfie images captured during attendance verification
- Mathematical face embeddings derived from enrollment images for identity matching
- Verification results, confidence scores, number of faces detected, and related audit metadata
Face images and embeddings are used solely for attendance verification and fraud prevention as configured by your registered company.
2.5 Device and Technical Information
- A hashed device identifier used to bind your account to an authorized mobile device
- Device name, device type (Android/iOS), and registration timestamp
- Push notification token (Expo push token) used to deliver work-related alerts
- App version, operating system information, and technical logs needed for security, troubleshooting, and service reliability
- Locally stored app lock preferences, such as whether a PIN or biometric unlock is enabled (your PIN is stored only on your device in hashed form and is not transmitted to our servers)
2.6 Photos and Media
With your permission, the app may access your device camera or photo library to:
- Capture attendance selfies
- Upload profile photos
- Submit face verification enrollment images
- Attach supporting images to correction requests or field attendance workflows
3. How We Use Your Information
We use collected information for legitimate employment and operational purposes, including to:
- Authenticate users and maintain secure access to the app
- Record, validate, and report employee attendance for your registered company
- Verify identity using face matching where required
- Track field attendance routes and work locations during active sessions
- Process leave requests, corrections, approvals, and notifications
- Generate attendance, division, office, and employee reports for authorized managers and administrators
- Send push notifications about attendance reminders, approvals, rejections, and other work-related events
- Prevent fraud, unauthorized device use, and misuse of attendance features
- Maintain audit logs, troubleshoot issues, and improve app reliability and security
4. App Permissions
The app may request the following device permissions. Features requiring a permission will not function unless you grant it:
- Location (while in use and in background): office geofence validation and field attendance tracking during active sessions
- Camera: attendance selfies, face verification, and photo attachments
- Photo library: selecting images for profile, verification, or supporting documents
- Notifications: work-related alerts and reminders
- Foreground service (Android): continuous location tracking indicator during active field sessions
You can change or revoke permissions at any time in your device settings. Revoking permissions may limit or disable related app features.
5. How We Store and Protect Data
- Attendance, profile, location trail, face verification, and related data are stored on WFM platform servers accessed through https://wfm.sktv.world
- Data for each registered company is administered within that company’s workspace
- Authentication tokens and basic profile details may be stored locally on your device to keep you signed in
- Some location points may be temporarily queued on your device when offline and synced when connectivity is restored
- We use administrative, technical, and organizational safeguards such as access controls, authenticated APIs, encrypted transport (HTTPS), and role-based permissions
- Only authorized personnel with a legitimate business need may access employee attendance and location records
6. Data Sharing and Disclosure
We do not sell your personal information.
We may share information only as necessary for employment administration and service operation, including with:
- Authorized administrators, HR personnel, and managers within your registered company and reporting chain
- Service providers that help us operate the app, such as cloud hosting, push notification delivery, and map display providers
- Law enforcement, regulators, courts, or other parties when required by applicable law or valid legal process
Third-party services used by the app may include:
- Google Maps Platform — to display maps and location-related views
- Expo / Firebase Cloud Messaging — to deliver push notifications
These providers process data according to their own privacy policies and our contractual arrangements with them.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including employment record-keeping, audit requirements, dispute resolution, and legal compliance. Retention periods may vary by data type and by policies set by your registered company or applicable legal obligations.
When data is no longer required, we take reasonable steps to delete or anonymize it, unless retention is required by law.
8. Your Rights and Choices
Depending on applicable law, including India’s Digital Personal Data Protection Act, 2023, you may have rights to:
- Access personal information we hold about you
- Request correction of inaccurate or incomplete information
- Withdraw consent for optional processing where consent is the legal basis
- Request deletion or restriction of processing, subject to employment, legal, and audit requirements
- Lodge a complaint with the relevant data protection authority
Because WFM is an employer-provided workforce system for registered companies, some requests may need to be routed through your company’s HR or IT administrators. Certain data must be retained for payroll, attendance compliance, and legal obligations even if you stop using the app.
To exercise your rights, contact us using the details in Section 12.
9. Background Location and Field Tracking
Background location collection occurs only when you start an active field attendance session and have granted the required permissions. Tracking stops when the session ends or is closed by system rules. Location trails are visible to authorized supervisors and administrators in your registered company for operational oversight, route verification, and attendance validation.
10. International Data Transfers
Your information is primarily processed and stored in infrastructure used to operate the WFM multi-vendor service. If data is processed outside India through third-party service providers, we take reasonable steps to ensure appropriate safeguards are in place.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may also be communicated through the app or other appropriate channels. Continued use of the app after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
WFM Support
For account or workplace data questions, start with your company’s administrator.
Platform support page: https://wfm.sktv.world/support
Website: https://wfm.sktv.world