Privacy Policy - Portal NUHA

1. Introduction

Welcome to Portal NUHA (the "App"), developed by PT. Data Integrasi Inovasi ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App. By using the App, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information from you:

Contact Information: Name, email address, phone number.
Account Information: Username, password, and any other information you provide when you register an account.
Profile Information: Profile picture, interests, preferences, and other information you choose to provide.
Payment or Financial Data: Including but not limited to payroll and other financial information.
Photos: Attendance selfies and other pictures you take with the camera or choose from your device. See Photos and Face Data.

2.2 How We Collect

We collect your personal data when you are registered by the administrator or HR at your office, and when you use the features of the App.

2.3 Usage Data

We collect information about your interactions with the App, including:

Device Information: IP address, device type, operating system, unique device identifiers.
Usage Information: App usage data and actions taken within the App.
Location Data: We collect information about your location when you use our services, for example to verify that attendance is recorded within your office area. Your location can be determined using GPS, network information, IP address, and sensor data from your device. You can enable or disable location access for the App in your device settings. Location data may be kept temporarily in the App's local storage.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide the App services.
To enable the features available in our services, for example Employee Self Service.
To Manage Your Account: To manage your registration and authentication as a user of the App.
To Improve the App: To understand and analyze how you use the App, and to enhance user experience.
To Communicate with You: To send you updates, notifications, and other information relating to the App.
To Ensure Security: To detect, prevent, and address technical issues and fraud.
To monitor user behavior for analysis.
Pictures taken with the camera or chosen from your device are used as evidence of the activity they are attached to (for example attendance or leave requests). Attendance selfies are handled as described in Photos and Face Data.

4. Photos and Face Data Updated

4.1 Attendance Selfie

When you check in or check out, the App asks you to take a photo with your device camera as proof of attendance. This photo is a regular image. We do not perform face detection or face recognition on it, and we do not extract or store facial features, face geometry, or any biometric template from it.
Use: The photo is used only so that authorized HR personnel of your organization can verify your attendance record. It is not used for advertising, profiling, automated identification, or any other purpose.
Storage: The photo is sent over an encrypted connection (HTTPS) to our HRIS servers and stored together with the related attendance record. If the server is temporarily unavailable, the photo is kept temporarily in the App's private storage on your device and is deleted automatically once it has been synced, or when the pending record expires.
Sharing: We do not sell or share attendance photos with third parties. They are accessible only to authorized HR personnel of your organization. Infrastructure providers that host our servers process this data only on our behalf and under our instructions.
Retention and Deletion: Attendance photos are retained for as long as your account is registered or as required by your organization's HR record-keeping obligations, and are deleted afterwards. You may request deletion through your HR department or by contacting us at marketing@dataintegrasiinovasi.net.

Biometric login is optional and can be enabled or disabled in the Profile page.
It uses Apple's LocalAuthentication framework. Face ID matching is performed entirely by iOS on your device. The App only receives a success or failure result and never receives, collects, stores, or shares any Face ID or other biometric data.

5. Sharing Your Information

We will not disclose, grant access to, share, or disseminate your Personal Data without your consent unless otherwise specified in this Policy. We may share your information with third parties in the following situations:

With Service Providers: We may share your information with third-party service providers that perform tasks on our behalf, such as hosting our servers. They may process your data only under our instructions. Attendance photos and face data are not shared beyond what is described in Photos and Face Data.
For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

We will not sell or rent your Personal Data to any third party.

6. Data Retention

Personal Data is stored for as long as needed to achieve the purposes described in this Policy and/or while you are still registered as a user. Specific retention for attendance photos is described in Attendance Selfie. The App does not retain any Face ID or other biometric data.

7. Data Security

We take reasonable measures to help protect your personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction, including the use of encrypted connections (HTTPS) between the App and our servers.

8. Children's Information

The App does not knowingly collect any personally identifiable information from children under the age of 13. If you think that your child has provided this kind of information in our App, we strongly encourage you to contact us immediately and we will make our best efforts to promptly remove the information from our records.

9. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: The right to access and obtain a copy of your personal information.
Rectification: The right to correct any inaccurate or incomplete personal information.
Deletion: The right to request the deletion of your personal information, including attendance photos.
Restriction: The right to request the restriction of processing of your personal information.
Portability: The right to request the transfer of your personal information to another organization.
Objection: The right to object to the processing of your personal information.

To exercise these rights, please contact us by email at marketing@dataintegrasiinovasi.net.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us by email: marketing@dataintegrasiinovasi.net.

Thank you for using the App. Your privacy is important to us, and we are committed to protecting your personal information.