Privacy Policy
SOS360 – Field Attendance & Project Management
1. Introduction
Welcome to SOS360 ("we", "our", or "us"). SOS360 is a field attendance and project management application designed for construction and real estate field staff. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application ("App").
By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.
2. Information We Collect
2.1 Information You Provide Directly
- Account credentials — Mobile number and OTP used for login
- Attendance records — Punch-in and punch-out times, selfie photographs captured at the time of punching
- Leave requests — Leave type, dates, reason for leave
- Notes and advance requests — Text content you enter into the App
2.2 Information Collected Automatically
Location Data
We collect your precise GPS location in the following circumstances:
- During punch-in / punch-out — to verify you are within the assigned project geofence
- While punched in (background) — your location is sent to our servers every 5 minutes to enable attendance tracking and geofence monitoring
- Geofence monitoring — if you leave the project site while punched in, we monitor your location to automatically punch you out after 5 minutes outside the geofence area
Device Information
- Device model, operating system version, and unique device identifier
- Camera access (for selfie capture at punch-in)
- Network connectivity status
Usage Data
- App usage logs and error reports
- API interaction timestamps
2.3 Photographs
When you punch in at a project site, the App captures a selfie photograph using your device's front camera. This photograph is:
- Uploaded to our secure servers
- Used to verify your physical presence at the project site
- Stored as part of your attendance record
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Verify attendance at project sites | Location, selfie, punch time |
| Geofence monitoring & auto punch-out | Background GPS location |
| Leave request management | Personal details, dates, reason |
| Salary and advance payment processing | Attendance records, staff profile |
| Announcement delivery | Push notifications, device token |
| Holiday and schedule management | Staff profile, project assignment |
| Security and fraud prevention | Location, device info, selfie |
| App performance improvement | Usage logs, error reports |
4. Location Data — Detailed Explanation
We understand that background location access is sensitive. Here is exactly what we do:
When location tracking starts:
Only when you are punched in at a project site
What we track:
GPS coordinates (latitude, longitude, accuracy), updated every 5 minutes via our foreground service
What we do with location data:
- Send it to
api.sos360.inservers - Use it to verify you are within the project geofence
- Trigger automatic punch-out if you leave the geofence for more than 5 minutes
When location tracking stops:
- Immediately when you punch out
- When auto punch-out is triggered
- When you log out of the App
We do NOT:
- Sell your location data to third parties
- Track your location outside of working hours (after punch-out)
- Share location with anyone other than your employer/project manager
5. Data Sharing and Disclosure
We may share your information with:
5.1 Your Employer / Organization
Your attendance records, location data, selfie photographs, leave requests, and work-related information are shared with your employer or the organization that deployed this App. This is the core purpose of the App.
5.2 Service Providers
We use third-party services to operate our infrastructure:
- Cloud hosting and API services — to store and process your data
- Push notification services — to deliver announcements and alerts
5.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation.
5.4 We Do NOT Share With:
- Advertisers
- Data brokers
- Any third party for marketing purposes
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Attendance records (punch in/out, selfies) | As defined by your employer's policy |
| Location history | 90 days |
| Leave requests | Duration of employment + 1 year |
| Profile information | Duration of employment |
| App logs | 30 days |
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- HTTPS/TLS encryption for all data in transit
- Secure token-based authentication (JWT access tokens with automatic refresh)
- Server-side access controls — only authorized personnel can access your data
- Selfie photographs are stored in secured cloud storage with time-limited signed URLs
Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
8. Permissions Required
| Permission | Platform | Why Required |
|---|---|---|
| Camera | iOS & Android | Selfie capture at punch-in |
| Location (Always / All the time) | iOS & Android | Background geofence monitoring while on duty |
| Notifications | iOS & Android | Geofence warnings, auto punch-out alerts, announcements |
| Photo Library | iOS | Attaching photos to notes or leave requests |
| Storage | Android | Saving temporary files |
| Background App Refresh | iOS | Foreground service for location tracking |
9. Your Rights and Choices
Depending on your location and applicable law, you may have the right to:
- Access — Request a copy of the personal information we hold about you
- Correction — Request correction of inaccurate information
- Deletion — Request deletion of your personal data (subject to legal and employment obligations)
- Opt-out of location tracking — You may revoke location permission, but this will prevent punch-in/punch-out functionality
- Data portability — Request your attendance records in a portable format
To exercise these rights, contact your employer's HR department or contact us at the details below.
10. Children's Privacy
The App is intended for adult employees and field workers only. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately.
11. Third-Party Services
The App integrates with the following third-party services:
- OneSignal — Push notifications (if enabled by your organization)
- Google Maps / Apple Maps — Project site display
- Device OS location services — GPS location
Each third-party service has its own privacy policy. We encourage you to review them.
12. International Data Transfers
Your information may be transferred to and processed on servers located outside your country. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
13. Cookies and Tracking Technologies
The App does not use cookies. We use secure tokens stored in your device's local storage for authentication purposes only.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by:
- Displaying a notice in the App
- Sending a push notification (if enabled)
The "Last Updated" date at the top of this policy reflects when it was last revised. Continued use of the App after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
SOS360
Email: info@sos360.inWebsite: https://app.sos360.in
For employment-related data requests, please also contact your HR department directly.
16. Governing Law
This Privacy Policy is governed by the laws of India. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the courts of India.