Privacy Policy

Last updated: Sep 24, 2025

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service, and informs You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy has been created with the help of the Privacy Policy Generator.


Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:


Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When You access the Service through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service through a mobile device.


Information Collected While Using the Application

While using Our Application, to provide features of Our Application, We may collect, with Your prior permission:

This information is collected to support specific features of the Service, such as attendance verification and evidence-based reporting. The Company may upload this information to its servers and/or a Service Provider's server or store it on Your device. You can enable or disable access to this information at any time through Your Device settings.


Explanation of Data Collection

The collection of this data is conducted to prevent fraud during the user attendance process. The use of photos or files serves as additional evidence to strengthen the claim that the user has properly completed the attendance process. Additionally, files can be used to support arguments when submitting certain requests.


Facial Recognition and Data Privacy

To ensure secure and accurate attendance validation, our application uses facial recognition technology provided by Regula Forensics (Face SDK). This technology helps confirm user identity and prevent fraudulent attendance attempts.

Data Collected

When you perform face recognition, the following data is collected and processed:

Purpose of Data Use

This data is used solely to:

Data Storage Duration

Facial Data Usage and Retention

We collect and store facial image data for a maximum period of 2 months. This retention period is necessary to monitor employee performance, including tracking attendance times and dress code compliance. After this period, facial data is automatically and permanently deleted from our systems.

We use a third-party service, Regula Forensics, solely for the purpose of face comparison to ensure users are not committing fraud during attendance. Facial images are sent temporarily to Regula's API for real-time comparison only. Regula does not store any of the facial data sent to it. Their processing is transient and performed in accordance with their privacy policy, which can be reviewed here: https://regulaforensics.com/privacy/

We do not share, sell, or distribute facial data to any other third parties under any circumstances.

Third-Party Processing (Regula Forensics)

We use Regula Face SDK to process facial data. Here's how Regula handles your data:

For more information about how Regula handles your data, you may refer to their official privacy policy: https://regulaforensics.com/privacy/


Data Retention Information

Facial Data

Face image data will be stored for approximately 2 months after it is input by the user, to review employee performance.

Supporting Document Attachments

Document data will be stored for approximately 2 months after it is input by the user, as evidence for requests or as supporting documents.

Personal Data

User data will be stored as long as the user remains an employee of the company. After the user leaves, data will be retained for approximately 1 week and then permanently deleted, to allow for the preparation of necessary documentation.


Use of Your Personal Data

The Company may use Personal Data for the following purposes:


Sharing Your Personal Data

We may share Your Personal Data in certain situations:


Retention of Your Personal Data

We will retain Personal Data only as necessary for legal obligations or business purposes. Usage Data may be retained for analysis or security improvements.


Transfer of Your Personal Data

Your data may be transferred to countries outside your jurisdiction. We ensure adequate security and protections are in place.


Request to Delete Personal Data

You have the right to delete or request deletion of Your Personal Data through the Service or by contacting Us. Some data may need to be retained to meet legal obligations.

To request deletion of your personal data, you may:

When you submit a deletion request, we will process your request in accordance with applicable laws and our data retention policies. Please note that certain data may need to be retained for legal obligations or legitimate business purposes as described in this Privacy Policy.


Privacy Policy Update: Use of Facial Recognition Technology

Use of Facial Recognition Technology

Our application utilizes facial recognition technology provided by Regula Face SDK, integrated through the flutter_face_api plugin, to compare a user's live facial image with a reference image for identity verification purposes.

Third-Party Data Processing

The facial recognition functionality is powered by Regula Forensics, a third-party provider specializing in biometric verification solutions. Depending on the implementation, facial data may be processed locally on the user's device or transmitted to Regula's servers for processing.

Data Retention by Regula Forensics

According to Regula's privacy policy, personal data, including facial images, are retained only for as long as necessary to fulfill the purposes for which they were collected. The specific duration of data retention may vary based on the context of processing and applicable legal requirements. For detailed information on Regula's data retention practices, please refer to their privacy policy: https://regulaforensics.com/privacy/

Purpose of Data Sharing

Facial data is shared with Regula Forensics solely to perform identity verification by comparing the user's facial image with a reference image. This process is essential to ensure the authenticity of the user's identity within the application.

Data Security and Privacy Practices

Regula Forensics employs industry-standard security measures to protect personal data from unauthorized access, disclosure, or misuse. Their privacy practices are designed to comply with applicable data protection laws and regulations. For more information on how Regula handles personal data, please review their privacy policy: https://regulaforensics.com/privacy/


Apple Developer Request - Specific Placement

Information regarding the collection and usage of facial data, if applicable, would be found under the section "Information Collected while Using the Application." This section specifies the types of data collected, including pictures and other information from the device's camera, which can encompass face data. The relevant text for data regarding the user's face can be placed here:

"Pictures, including facial data, are collected with the user's consent to prevent fraudulent activities during attendance processes. These images are used as supporting evidence to ensure that users properly and accurately record their attendance. The data may also be used to support claims or requests made by the user in other related matters."


Privacy Policy – App Usage Scope

Restricted to One Company

This application is exclusively for internal use within a single company, Istana Buah Siliwangi. Only employees, contractors, and partners of Istana Buah Siliwangi are authorized to access and use the app.

Not for Public Use

The application is not intended for general public use. All features are specifically designed to support the internal operational needs of Istana Buah Sultan Agung.

App Features

The core features of the application include:

Account Provisioning

User accounts are provisioned exclusively by the company's administrator, based on registered employee data within the Istana Buah Siliwangi system. Users cannot create accounts independently.

Paid Content

There is no paid content in this application. Istana Buah Siliwangi employees are not charged for access, subscriptions, or any features. The application is entirely free to use for authorized personnel.


Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal data, you can contact us at:

Email: andiglobalsoft@gmail.com