Privacy Policy

1. Introduction & General Scope

This Privacy Policy applies to BloomRoom (Package: in.astys.bloomroom) as well as all applications, services, and digital solutions developed and published by Astys Audio Video Private Limited ("we", "us", or "our").

We are dedicated to respecting and protecting the privacy of our users ("User", "you", or "Employee"). This Privacy Policy explains transparently how we collect, use, process, store, and safeguard your personal and sensitive information when you access our mobile applications and related cloud services.

2. Information We Collect

We only collect information that is strictly required to fulfill business operations, workplace attendance verification, and enterprise utility services:

A. Sensitive Permissions & Device Data

• Camera Access: Used exclusively to allow users to take real-time verification photos / selfies during duty punch-in and punch-out events. The camera is never accessed covertly or in the background.
• Geographic Location Data (Precise & Coarse): Captures GPS latitude, longitude, and accuracy at the specific moment of attendance duty punching to verify presence at authorized office or project work sites. Reverse geocoding may be performed to display the human-readable site address. Location data is not gathered continuously in the background when the app is inactive.
• Device Identifiers & Hardware Info: Unique device identifiers (Device ID), operating system details, network connectivity status, and app version to prevent identity spoofing, proxy attendance, and session hijacking.

B. Account & Profile Information

• Identity Details: Full name, employee code/unique ID, official email address, mobile number, and designation.
• Enterprise Employment Records: Work shift logs, attendance histories, overtime metrics, leave/holiday applications, and reporting manager assignments.
• Payroll & Tax Identifiers (Admin/HR configured): Bank account details, IFSC code, and statutory tax numbers (such as PAN or Aadhaar where entered for official corporate payroll records).

C. Authentication & Secure Storage

• Encrypted Credentials: Authentication tokens and access sessions stored securely on device storage using encrypted hardware-backed storage (Expo SecureStore / Android Keystore).

3. Device Permissions & Specific Purposes

Below is a comprehensive list of device permissions requested by our mobile applications:

4. How We Use Your Information

We process collected data exclusively for authentic business, verification, and service enhancement purposes:

• Authenticating your user identity and preventing unauthorized account access.
• Verifying duty attendance, field work visits, overtime tracking, and site management.
• Processing leave applications, holiday schedules, and payroll calculation.
• Detecting mock locations, proxy punch attempts, and safeguarding system security.
• Troubleshooting technical errors, application crashes, and optimizing user experience.

5. Third-Party Services & Data Sharing

Your information is never disclosed to outside parties except in the following limited and necessary circumstances:

• Enterprise Organization: Your attendance logs, duty photos, site location records, and leave requests are visible to your employer's designated HR and Administrative personnel.
• Cloud Infrastructure Providers: Data is hosted on enterprise-grade, secure cloud servers (e.g., Render Cloud, PostgreSQL database providers) protected by strict firewalls and security protocols.
• Mapping & Geocoding Services: Reverse geocoding APIs used strictly to translate coordinates into human-readable project site addresses.
• Legal Obligations: When required by applicable law, court order, or governmental authorities to comply with statutory legal requirements.

6. Data Security & Storage

We implement industry-standard physical, electronic, and managerial safeguards to protect your information:

• Encryption in Transit: All communications between the mobile app and our servers are encrypted using modern Transport Layer Security (HTTPS / TLS 1.3).
• On-Device Encryption: Sensitive credentials (such as JWT session tokens) are stored in encrypted device keychains using hardware-level security mechanisms.
• Access Restrictions: Administrative database access is restricted using multi-factor authentication and role-based access control (RBAC).

7. Data Retention & Account Deletion Policy

In accordance with Google Play Developer policies, we provide transparent data retention terms and an accessible data deletion mechanism:

8. Children's Privacy (COPPA Compliance)

Our applications are enterprise workplace utilities designed for adult professionals and employees. We do not knowingly collect or solicit personal information from children under the age of 13 (or under 16 in the European Union). If we become aware that we have inadvertently collected personal data from a child, we will take prompt steps to delete such data from our servers.

9. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access & Portability: Request a summary of personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal records.
• Revoke Permissions: You can revoke Camera or Location permissions at any time via your device's Settings > Apps > BloomRoom > Permissions (note that revoking permissions may prevent duty punching).

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, technology, or app features. When changes are made, the "Last Updated" date at the top of this document will be revised. We encourage you to review this page periodically.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our team: