What Timekeeping, Attendance & HRIS collects
- Full name, employee ID, position, department, and branch/location assignment
- Work schedule, shift assignments, and time-in/time-out records
- GPS location captured at the moment of mobile clock-in / clock-out
- Photo captured at clock-in/out, if photo verification is enabled by the employer
- Biometric templates (fingerprint/face), if the employer connects a biometric device — only the encrypted template is stored, never a raw biometric image
- Payroll data: salary, bonuses, deductions, loan ledgers, and government contribution numbers (SSS, PhilHealth, Pag-IBIG, TIN)
- Bank or e-wallet details used for payslip/payroll disbursement, if provided by the employer
Device permissions
If Timekeeping, Attendance & HRIS includes a mobile app, it requests the following permissions:
| Permission | Why it's needed |
|---|---|
| Location (GPS) | to verify an employee is at an approved site when they clock in or out |
| Camera | to capture an optional verification photo at clock-in/out |
| Storage | to cache QR codes and attendance data for offline use, synced once back online |
Why we collect it
- Recording attendance and computing hours worked
- Running payroll, payslips, and statutory deduction computations
- Scheduling and shift management across teams, branches, and locations
- Complying with Philippine labor law recordkeeping requirements
Retention
Attendance and payroll data is retained for the duration of employment plus the period required by Philippine labor, tax, and social-security recordkeeping rules, after which it is archived or deleted per the employer’s data retention policy.
Standard that applies to every app we build
Regardless of which product above you're using, we hold every app we build to the same baseline:
Security
Data in transit is encrypted (HTTPS/TLS). Access to production data is role-based and limited to what a user's job requires. Where a product is deployed per-client (such as our Timekeeping & HRIS system), each client gets its own isolated database rather than a shared, pooled one.
International transfer
Hosting infrastructure may be located outside your country (for example, in Singapore-based cloud regions). Where that happens, we require the same standard of protection described in this policy regardless of where the data is physically stored.
No sale of data
We do not sell personal data collected through any app we build, and we do not use it for advertising.
Children's privacy
Our software products are built for businesses and their employees, tenants, members, or customers — they are not directed at children, and we do not knowingly collect data from anyone under 18 through them.
Automated processing
Where a product includes automated flagging (for example, suspicious-activity alerts in our Employee Monitoring software), that flag is a signal for a human reviewer at the deploying business — it does not by itself trigger any automated decision with legal or similarly significant effect on an individual.
Changes to this policy
We may update this policy as our products or applicable law change. The “Last updated” date at the top of this page reflects the current version.
Your rights
If you are an end user of one of our software products (an employee, tenant, member, or customer of the business that deployed it), that business is generally the right first contact for accessing, correcting, or deleting your data, since they control the account. Subject to applicable law — including the Philippine Data Privacy Act of 2012 — you may also reach us directly and we will route your request to the relevant deploying business or respond ourselves where we are the controller.
Contact
- Email: chromaticsoftwares@gmail.com
- Phone: +63 9762352221
- Location: Metro Manila, Philippines
See also our company-wide website Privacy Policy.