1. Who this policy covers
This policy explains how the HRPSI Employee mobile app handles your personal data. HRPSI is an HR platform operated by Unipay Technology ("we", "us") and licensed to employers.
Your employer is the data controller. You receive your HRPSI account from your employer, and your employer decides what data is held about you and for how long. We process that data on their instructions as a service provider.
2. What the app collects
| Data | Why |
|---|---|
| Name, employee ID, work email, phone number, job title, department | To identify you, sign you in, and show your own records. |
| Attendance records — clock-in and clock-out times | To record your working hours for your employer. |
| Location — the device's GPS coordinates at the moment you tap clock in or clock out | To confirm the punch was made at an approved work site. It is captured only at that moment — never in the background, and never while the app is closed. If you deny location permission, the punch is still sent without coordinates and your employer's policy decides whether it is accepted. |
| Payroll data — payslips, salary components, deductions | To let you view and download your own payslips. |
| Requests — leave, permissions and their status history | To submit requests and track approvals. |
| Device and diagnostic data — app version, OS version, error logs | Kept locally on your device to help diagnose problems. It is not uploaded automatically. |
3. Biometric unlock stays on your device
If you enable fingerprint or face unlock, the check is performed by your phone's own secure hardware. We never receive, see or store your fingerprint or face data. The app only learns whether the device accepted you, and keeps a sign-in token in the operating system's encrypted store (Android Keystore / iOS Keychain).
4. What we do not do
- We do not sell your personal data.
- We do not show advertising or share your data with advertising networks.
- We do not track your location in the background or when the app is closed.
- We do not use your data to build profiles for anyone other than your employer's HR processes.
5. Who your data is shared with
- Your employer — the authorised HR, payroll and management staff at the organisation that issued your account.
- Our hosting and infrastructure providers — who store and transmit the data on our behalf under contract, and may not use it for their own purposes.
- Authorities — only where we are legally required to disclose.
6. Security
All traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Access to production data is restricted to the personnel who need it to operate the service. Session tokens are held in the device's encrypted secure storage.
7. Retention
Employment records are retained for as long as your employer requires them, including any period required by labour, tax and payroll law. When your employer deletes your account or ends their contract with us, their data is deleted or returned according to that contract.
8. Your rights and account deletion
You can ask for access to, correction of, or deletion of your personal data. Because your employer controls this data, the fastest route is your HR department. You can also write to us at [email protected] and we will forward the request to your employer and support them in answering it.
Accounts are created by employers, not inside the app. There is no self-service sign-up, so an individual account cannot be deleted from the app — deletion is requested through your employer or the address above.
9. Children
HRPSI is a workplace tool intended for employed adults. It is not directed at children and we do not knowingly collect data from anyone under 16.
10. Changes to this policy
If we make a material change we will update the date at the top of this page and, where appropriate, notify employers so they can inform their staff.
11. Contact
Questions about this policy: [email protected]