Privacy Policy — Bhandari HRMS

Overview

Bhandari HRMS is an internal human resource management application built for employees of Bhandari Automobiles Group and its associated outlets. It is used to record attendance, apply for leave, view salary information, and manage day-to-day HR tasks. This app is provided to employees by their employer and is not available for public download or use outside the organisation.

The app was developed by Emdee Digitronics Pvt Ltd on behalf of Bhandari Automobiles Group. Bhandari Automobiles Group owns and operates the app and all employee data collected through it, and is responsible for how that data is handled. Emdee Digitronics Pvt Ltd acted only as the technical developer and does not independently control or use employee data.

This policy explains what information the app collects, why, and how it is protected. By using this app, you agree to the collection and use of information as described here.

Summary of Data Collected

The table below summarises every category of data the app sends from your device to our servers. Each is explained in full in the sections that follow.

Data type	Why it is collected	Shared with third parties
Name, employee ID, phone number	Account identification and sign-in	No
Device identifier and device model	Account security — binding your login to one approved device	No
Precise location (GPS)	Verifying you are at your outlet at the moment of check-in or check-out	No
Profile photo	Displaying your photo in the app — optional	No
Push notification token	Delivering attendance and approval notifications	Relayed by Expo / Firebase Cloud Messaging

The app contains no advertising SDK, no analytics SDK, and no crash-reporting or tracking SDK. No data is sold, and no data is used for advertising or for building an advertising profile.

Information We Collect

Employee & Account Information

• Full name, employee ID, phone number, email or username
• Designation, department, reporting manager, and assigned outlet/branch
• Profile photo (only if you choose to upload one, from your camera or photo library)

Device Identifiers

• When you sign in, the app sends your device identifier (the Android ID on Android devices, or the equivalent vendor identifier on iOS) and your device brand and model to our servers.
• Why: your account is locked to a single approved device, so that a set of login credentials cannot be used from another handset to record attendance on your behalf. If you sign in from a different device, the app refuses the login until HR clears the earlier device.
• This identifier is used only for that security check and for support purposes. It is not used for advertising, analytics, tracking, or profiling, and it is not shared with any third party.

Location Data

• Precise GPS location is captured only at the moment of check-in and check-out, and only for employees whose outlet uses geofenced attendance. This confirms the employee is physically present at their assigned outlet.
• Location is not tracked continuously, in the background, or outside of an active check-in/check-out action.

Attendance & Work Records

• Check-in/check-out timestamps, working hours, and shift assignment
• Leave applications — type, dates, reason, and remaining balance
• Attendance regularisation requests, including any explanation and claimed working hours submitted by the employee

Salary Information

• Salary slips, including earnings, deductions, and net pay — visible only to the employee it belongs to. This information is generated on our servers and displayed in the app; it is not collected from your device.

Manager / Team Data

• Employees with reporting staff (managers) can view their own team members' attendance and leave records, and approve or reject leave and regularisation requests, as required for their role.

Notification & Session Data

• A device push-notification token, used only to deliver app notifications (e.g. leave approval updates) to that device
• Standard login session data required to keep you signed in securely

How We Use This Information

• To record and verify attendance at the correct location
• To confirm that a login is coming from the employee's own approved device
• To process leave applications and attendance regularisation requests
• To display salary information to the relevant employee
• To allow managers to review and act on their team's requests
• To send app notifications about actions relevant to the employee (e.g. a leave request being approved)

We do not use employee data for advertising, and we do not sell personal data to any third party.

Third-Party Services

Service	Purpose
Our HR management platform (self-hosted)	Stores all HR, attendance, leave, and salary data. Owned and operated by Bhandari Automobiles Group.
Expo Push Notification Service / Firebase Cloud Messaging	Delivers push notifications to your device. These services only relay the notification token — they do not receive attendance, leave, salary, location, or device-identifier data.
Emdee Digitronics Pvt Ltd	App development and technical maintenance provider. May have technical access for app updates and support, under Bhandari Automobiles Group's direction. Does not independently use or control employee data.

Data Storage & Security

• All data is stored on Bhandari Automobiles Group's own backend server, secured with authenticated, session-based access.
• All data sent between the app and our servers is encrypted in transit using HTTPS (TLS).
• Session tokens on the device are stored using the operating system's secure, encrypted storage.
• Access to salary and personal data is restricted to the employee it belongs to, and their authorised managers/HR staff.

Account & Data Deletion

You can request deletion of your app account and its associated app data in either of two ways:

• From within the app — open Profile, then choose Delete Account and confirm the request.
• From the web — visit our account deletion page at https://hrms-staging.bhandaricalculator.tech/delete-account and submit your registered mobile number.

For your protection, HR will call you on your registered mobile number to confirm the request before it is actioned. Once confirmed, your app login, device binding, push notification token, and profile photo are removed, and you will no longer be able to sign in to the app.

Requests are actioned within 30 days of confirmation. Please note that attendance, leave, and payroll records that Bhandari Automobiles Group is required to keep under Indian labour, payroll, and tax law are retained as employment records for the statutory retention period, even after your app account is deleted. Deleting your app account does not end your employment or alter your employment records.

Data Retention

Employee data is retained for as long as the individual remains an employee of Bhandari Automobiles Group, and thereafter as required for statutory, payroll, and record-keeping obligations under applicable Indian labour law.

Your Rights

• You can request access to, or correction of, your personal data held in the app by contacting HR.
• You can request deletion of your app account and app data at any time — see Account & Data Deletion above.
• Location permission can be reviewed or revoked at any time via your device's app settings — note that geofenced check-in will not function without it.
• Notification permission can similarly be turned off in device settings at any time.
• Camera and photo library access is requested only when you choose to set a profile photo, and can be declined without affecting any other feature.

Children's Privacy

This app is an internal workplace tool issued only to employees of Bhandari Automobiles Group. It is not directed at children and is not intended for use by anyone under the legal minimum working age. We do not knowingly collect data from children.

Changes to This Policy

If this policy changes, the updated version will be published on this page with a revised "Last updated" date. Material changes will also be communicated to employees through HR.