Privacy policy
This policy covers the nfinity i Buzz mobile app (Android package com.nfinity.erp) and the web application it connects to. It is written for the people who use the app: employees of a business that runs its operations on nfinity.
Effective 15 September 2026.
Who is responsible
Your employer is the organisation that decides what is collected about you and how it is used; nfinity operates the software on their behalf. Questions about how your employer uses the data go to your employer. Questions about the software, or a request to exercise a right below, can also be sent to privacy@n-finity.in.
What the app collects
| Data | When | Why |
|---|---|---|
| Name, work email, employee record | At sign-in | To identify you to your employer's system. Accounts are created by your employer, not in the app. |
| Precise location (GPS), with accuracy, speed and heading | Only between clock-in and clock-out, and only after you have agreed on the consent screen. This continues while the app is closed or the screen is off. | To verify field attendance and record the route of a shift. |
| Battery level and charging state | With each location point | To slow down tracking on a low battery and to explain gaps in a route. |
| A random device identifier | Generated on first launch | To de-duplicate points from the same phone. It is not a hardware or advertising ID. |
| Device model and operating-system version | At sign-in | Support and compatibility. |
| Notification token | If you allow notifications | Shift reminders and attendance notices. |
The app does not collect contacts, photos, files, microphone or camera data, and does not use advertising or analytics SDKs. Location is never collected outside an active shift.
Who sees it
Your employer's authorised staff — typically HR and your manager — see your attendance and shift routes in the web application. nfinity staff access data only to operate and support the service. Data is not sold and is not shared with third parties for their own purposes. Infrastructure providers (hosting, email delivery, map tiles) process data on our instructions only.
How long it is kept
- Individual location points: 12 months, then deleted by a scheduled job.
- Attendance records (clock-in/out, breaks, totals): for as long as your employer keeps its attendance history.
- Location points from an uninstalled or signed-out device that were never uploaded: never leave the phone.
Your choices
- Consent. Location tracking starts only after you tap I agree on the consent screen. You can decline and still use the app for everything except tracked shifts.
- Withdraw. Profile → Privacy → Withdraw stops tracking and records the withdrawal. Your employer is told that tracking is off.
- Permissions. Location, background location and notifications can be revoked at any time in Android settings. The app tells you what stops working.
- Access, correction, deletion. Ask your employer, or write to privacy@n-finity.in. Because your account belongs to your employer, deletion of the account itself is carried out by them.
Security
All traffic between the app and the server is encrypted (HTTPS only — the app refuses to start otherwise). Sign-in tokens are held in the phone's secure keystore. Location points waiting to upload are stored on the device and removed once acknowledged by the server.
Changes
If this policy changes in a way that affects what is collected, the app will ask for your consent again before tracking resumes. The effective date at the top is updated on every change.