1. Introduction

WorkHub HR ("the App") is a human resources management mobile application developed by Whisper Solutions ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the App.

The App is an enterprise solution provided to employees through their employers. By using the App, you agree to the practices described in this policy.

2. Data We Collect

We collect the following types of data to provide the App's functionality:

3. Biometric Data

The App uses your device's biometric capabilities (fingerprint sensor or Face ID) for identity verification. We want to be transparent about how this works:

• Biometric data never leaves your device. We use the operating system's built-in biometric APIs (Android BiometricPrompt / iOS LocalAuthentication).
• We only receive a success/fail result — we never access, store, or transmit your actual fingerprint or face data.
• Biometric login is optional and can be enabled or disabled in the App settings at any time.

4. Location Data

The App collects precise GPS location data in the following situations:

• Attendance check-in/check-out: To verify you are at or near your designated work location (Geofencing).
• Client visits: To record the location of field visits for reporting purposes.
• New client registration: Optionally, to record the client's address coordinates.

5. How We Use Your Data

Your data is used exclusively for:

• Providing HR management services to your employer
• Recording and verifying attendance
• Managing leave requests and balances
• Tracking field sales visits and client interactions
• Managing project tasks and progress
• Sending work-related notifications
• Generating reports for your employer
• Securing your account against unauthorized access

6. Data Sharing

Your personal data is shared only with:

• Your Employer: HR administrators and authorized managers within your company can access your work-related data (attendance, leave, performance) through the WorkHub desktop application.

7. Data Storage & Security

Server Storage

• Data is stored on secure PostgreSQL database servers
• All data transmission uses HTTPS encryption
• Database access is restricted and password-protected
• Each company's data is isolated by company code

Local Storage (on your device)

• Session data and PIN are stored in encrypted secure storage (Android EncryptedSharedPreferences / iOS Keychain)
• Today's attendance times are cached locally for offline display
• No sensitive data is stored in plain text on the device

8. Data Retention

• Active employees: Data is retained for the duration of employment.
• After employment ends: Your employer's HR department manages data retention according to their company policy and local labor law requirements.
• Financial records: Payroll and tax-related records may be retained as required by applicable laws and regulations.
• Device data: All local data is deleted when the App is uninstalled or the device is deactivated.

9. Your Rights

You have the right to:

• Access: View your personal data through the App
• Correction: Request corrections to inaccurate data through your HR department
• Deletion: Request deletion of your account and data (see below)
• Opt-out: Disable biometric login at any time through App settings
• Portability: Request a copy of your data from your HR department

10. Account & Data Deletion

To request deletion of your account and all associated data:

• Contact your HR department and request account deactivation
• Or email us directly at support@whispersolution.com

Deletion requests are processed within 30 days. For more details, visit our Account Deletion Page.

11. Children's Privacy

The App is intended for use by employees aged 18 and above. We do not knowingly collect data from children under 18. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.