InyoCheck Privacy Policy

Last updated: October 7, 2026

InyoCheck is a workforce time-and-attendance application operated by InyoVision ("we", "us"). InyoCheck accounts are created and managed by your employer — the app has no public sign-up. Your employer decides what data is recorded and remains the controller of your employment records; we process that data on their behalf to provide the service.

Information we process

• Account information — your name, work email address, and role/permissions, entered by your employer when they add you.
• Personal details your employer chooses to record — the app can hold your phone number, home address, date of birth, government identification number, emergency contact, and private notes written about you by your employer's administrators. Your employer decides which of these to fill in; InyoCheck never requires them.
• Pay and statutory information — where your employer uses the payroll features: your salary or pay rate, employment class, SSS / GSIS / PhilHealth / Pag-IBIG numbers and contribution settings, deductions, allowances, and the payslips generated from them.
• Attendance records — time-in/out and break events with timestamps, schedules, lateness, leave and overtime requests, duty swaps, and related approval history.
• Proof photos — when your workplace uses vouching, the app captures a live photo with your device camera to verify attendance. Photos are used only for attendance verification and are visible to your workplace's reviewers.
• Device information — a label identifying the KIND of device a tap came from, and a random one-time id generated for each attendance event so the same tap is not recorded twice if your phone retries. Neither is a persistent identifier for you or your handset, and neither is used for advertising or tracking.
• Notification tokens — if you allow notifications, the app registers a push token so your employer's approvals and reminders can reach your device. Notifications are delivered through Expo's push service, which necessarily sees the token and the contents of the notification.
• Location, when you record attendance — when you time in, start or end a break, time out, vouch for a colleague with a photo, or record attendance at a calendar event, the app reads your device's location and attaches it to that record so your supervisor can verify where the attendance was taken. It may be converted into a readable place name (for example a street and city). Your location is never read in the background, never while the app is closed, and never on a schedule — only when you record one of those events. The reading is taken moments after you tap; if a fresh fix is not available, the app may use a position your device already had, no more than two minutes old, rather than none. If no location can be obtained at all, the app records only the reason (for example that the fix timed out) and your attendance is still recorded.

About location, specifically

Your employer requires location on attendance taps, so refusing the location permission will prevent you from timing in. If your device simply cannot get a fix — indoors, poor signal, location services switched off — you can still time in; only an outright refusal blocks it.

On our servers, exact coordinates are deleted once the record is settled. A tap that needs review keeps its coordinates only until a reviewer approves or rejects it; a tap that is approved automatically has its coordinates removed as it is recorded. What remains on our side afterwards is the attendance record itself, not your position.

A copy may remain on your own device for longer. Taps are held in the app's offline queue until they are confirmed as sent, and a tap that the server permanently rejected is kept there so it is not silently lost. Those entries include the coordinates. They are stored only in the app's private storage on your phone and are removed when you sign out or uninstall the app.

While coordinates are held, they are visible to your workplace's reviewers alongside the attendance record. If a reviewer opens the location on a map, the coordinates are sent to Google Maps at that moment. Converting coordinates into a place name uses your device's own operating-system mapping service.

What we do NOT collect

• No background or continuous location tracking. Location is read only at the instant you tap, and only in the foreground — see above.
• No advertising identifiers, no ads, no third-party analytics or trackers.
• No contacts, messages, or files from your device.
• No audio recording — the microphone is never used.

How data is used and shared

Data is used solely to operate attendance, leave, overtime, and payroll-related features for your employer. It is never sold and never used for advertising. Data is shared with your employer's authorized personnel (for example, supervisors approving your requests) and with the service providers we depend on to run InyoCheck: our hosting provider, and Expo's push-notification service when notifications are delivered to your device. If a reviewer opens an attendance location on a map, those coordinates are sent to Google Maps at that moment. Converting coordinates into a place name uses your device's own operating-system mapping service. We use no advertising networks and no analytics providers.

Security, stated plainly

Traffic between the app and our servers is encrypted in transit (TLS), and passwords are stored only as salted hashes — we cannot read them.

We do not separately encrypt stored records at the application level. Attendance records, proof photos and account details are held as ordinary data in our hosted database. Any encryption of the underlying disks or backups is provided by our infrastructure host, not by InyoCheck itself. We would rather say this plainly than imply protection we do not implement.

Where your data is held

InyoCheck runs on Railway. The application server and the database are both deployed in Railway's EU West region — Amsterdam, the Netherlands. If you are in the Philippines, this means your employment records are stored outside the country. Your employer remains the controller of those records and is responsible for the lawful basis of that transfer; we process the data on their instructions and do not use it for anything else.

Retention and deletion

Attendance records are retained as employment records under your employer's policies. Philippine employers are generally required to keep employment records for at least three years, so your employer — not InyoCheck — decides how long your records are kept.

To correct or delete your data, or to close your account, contact your employer's administrator; they can deactivate your account in the app, and can permanently delete a deactivated account, which removes that person's attendance history. You may also contact us directly at the address below.

Proof photos are deleted as soon as a reviewer decides — approving or rejecting a tap removes the photo. Photos are not archived.

Getting your data out

Your employer can export attendance records as CSV from the app on every plan, and can export a complete copy of their entire company's data — employees, schedules, attendance, corrections, leave, overtime, payroll and the audit trail — at any time, without our involvement. We consider this a right, not a feature: if you stop using InyoCheck, your records are yours and you should not have to ask us for them.

Offline use

Events recorded while offline are stored on your device and synced to the server when connectivity returns.

Contact

Questions or requests: don@stackintegrated.com