Privacy policy

1. Who handles your data

Workforce is provided by SkyTower Technologies. When your employer or organization gives you a Workforce account, that organization determines how Workforce is used for its attendance and workforce operations, who may access your records, and the retention requirements for those records. SkyTower Technologies operates the service on the organization's behalf. Contact your organization's administrator about workplace monitoring and employment records, or contact us using the details below for app privacy questions.

2. Information collected

The information processed depends on the features your organization enables and the information you submit:

• Account and employee information: your name, employee or agent identifier, organization, login credentials, account status and last login. Your organization may create or update these records.
• Attendance records: check-in and check-out times, work session identifiers, assigned workplace or store, attendance source and validation results.
• Location information: precise latitude and longitude, accuracy, capture time and periodic location updates. Updates may include altitude, speed and heading.
• Photos: images you submit for attendance verification, together with their associated employee, work session and upload time.
• Technical information: battery level submitted with location updates and server request information, such as IP addresses, timestamps and errors, used to operate and troubleshoot the service.
• Support communications: information you provide when you contact us or request help, correction or deletion.

If your organization connects attendance readers, your attendance history may also include events, device identifiers and attendance photos received from those readers. Reader enrollment and any biometric processing performed by those devices are managed separately by your organization; ask it for details of its reader practices.

3. Location, camera and device permissions

Workforce uses location to associate attendance with a workplace, check distance from an assigned location and show authorized managers where work is being performed. When your organization's attendance workflow enables periodic tracking and you grant the required permissions, the app may submit location updates during a checked-in work session, including while the app is in the background. Background location supports workforce tracking when the app is not on screen.

Camera access supports attendance photos. If the app offers photo selection, it accesses the photos you choose through your device's photo picker or the permission you grant.

You can review or revoke location, background location, camera and photo permissions in your device settings. Refusing or revoking permission may prevent location validation, attendance photo submission or other features that require it. Permission changes do not delete records already submitted. Your organization can explain any alternative attendance process available to you.

4. How information is used and shared

Information is used to authenticate users, record and validate attendance, display team locations, review attendance evidence, produce workforce reports, support users and maintain the service.

• Your organization: authorized administrators, supervisors and other users with appropriate access can view records and generate or export reports for workforce operations.
• Service providers: providers supporting hosting, storage, communications and technical support may process information needed to deliver those services on our behalf, subject to confidentiality and data protection obligations.
• Legal and safety needs: information may be disclosed where required by law or necessary to investigate misuse, protect the service or protect people's rights and safety.

The purposes described in this policy are attendance and workforce operations. Your organization's handling of exported reports and its employment-related uses are also governed by its own policies and obligations.

5. Retention, security and processing locations

Account information is retained for the provision and administration of the service. Attendance records, photos and location history are retained according to your organization's instructions and applicable employment, payroll, legal and dispute-resolution requirements. Retention therefore varies by organization and record type; ask your administrator or contact us for the schedule applicable to your records.

When information is no longer needed for these purposes, it should be deleted or anonymized. Some records may need to be retained to meet legal obligations or resolve disputes. Backup copies may remain until replaced or removed through the backup lifecycle. Deactivating an account or uninstalling the app does not automatically delete its historical records.

Access to employee records is managed through organizational accounts and permissions. No electronic storage or transmission method is completely secure. Keep your credentials private and report suspected unauthorized access to your administrator or to us.

Information may be processed where SkyTower Technologies and its service providers operate, including outside your country. Contact us for information about the hosting and processing arrangements applicable to your organization.

6. Your choices, account and data deletion

You can request access to your information, correction of inaccurate records, deletion of your account and associated personal data, or information about limiting processing. Requests are subject to applicable law and your organization's responsibilities for employment records.

To request account or data deletion: email sales@skytowertech.co.ug with the subject “Workforce account and data deletion request.” Include your organization name, employee or agent identifier, a contact address for our response, and whether you want your entire account or specific data deleted. You may also contact your organization's administrator. Do not send your password.

We may need to verify your identity and coordinate with your organization before acting on a request. Account deletion requests cover the account and associated personal data, including photos and location records, except information that must be retained for legal obligations or other legitimate recordkeeping requirements. If records must be retained, we will explain the reason and applicable retention period when responding. Disabling mobile access alone is not account deletion.

You can use this request process without installing or signing in to the app. You may also raise a privacy concern with the relevant data protection authority where applicable.

7. Children

Workforce is intended for organizational workforce use and is not directed at children under 13. If you believe a child has provided personal information through the service, contact us so we can investigate and arrange appropriate action.

8. Changes to this policy

We may update this policy as the service or our data practices change. The current version will be published at this URL with a revised last-updated date. Material changes will be communicated through the app or your organization as appropriate.