How KaryaLog handles your data

This policy applies to anyone who uses the KaryaLog app: field employees checking in for work, and the managers and administrators who set up their organization's workspace.

We collect only what the app's features need to work:

• To verify attendance and record work hours accurately.
• To assign, track, and let you complete tasks, visits, and service tickets.
• To let managers see field activity and generate reports for their organization.
• To process expense claims you submit for reimbursement.
• To send you task, attendance, and approval notifications.
• To keep the app working reliably — diagnosing crashes and performance issues.

We do not use your data for advertising, and we do not sell it.

KaryaLog requests precise location access so field work can be verified the same way a physical attendance register or visit log would be — by confirming you were actually at the right place.

• Location is captured at the moment of check-in, check-out, and visit logging — not continuously in the background, unless your organization has explicitly enabled live route tracking for field roles that require it.
• If your organization has configured a geofence (an approved radius around a site), your check-in is compared against it and flagged if you're outside it.
• Location data is visible to your organization's managers/admins as part of your attendance and visit records.

We share data only as needed to run the service:

We disclose data beyond this only if required by law, or to protect the rights, safety, or property of KaryaLog, our users, or the public.

We keep your data for as long as your account stays active within your organization's workspace, plus a reasonable period afterward for record-keeping and legal compliance (for example, attendance and expense records your employer may need to retain).

When your organization's admin removes your account, or the organization closes its workspace, your data is deleted or anonymized within a reasonable period, except where retention is required by law.

• All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
• Passwords are stored as salted hashes — never in plain text.
• Access to your organization's data is scoped by role and permission, so employees see only what their role allows.
• Authenticated sessions use short-lived tokens with refresh, so a stolen token has a limited window of use.

No system is perfectly secure, but we design KaryaLog to limit what any single failure could expose.

Because your KaryaLog account belongs to your employer's workspace, requests to access, correct, or delete your personal data are usually handled fastest through your organization's administrator — the same person who can update your role or employment details.

You can also write to us directly (see Contact below) and we'll route your request appropriately, or help where we're able to act without your employer's involvement — for example, questions about how our infrastructure handles data.

You can also, at any time:

• Revoke location permission in your device's app settings — this will limit attendance/visit check-in features that depend on it.
• Turn off notifications in your device's app settings.
• Ask your admin to correct inaccurate profile information.

KaryaLog is a workplace tool for employed adults and is not directed at, or intended for use by, children. We don't knowingly collect data from anyone under the minimum working age in their jurisdiction.

If we make material changes to this policy, we'll update the effective date above and, where appropriate, notify organization admins. Continued use of KaryaLog after changes take effect means you accept the updated policy.

Questions about this policy or how your data is handled — reach us directly: