Privacy Policy

1. What data we collect

1.1 Account data

When you create a StaffAround account, we collect:

• Your name and email address. You may optionally add a phone number to your profile; we do not use it to sign you in and we do not send you SMS messages.
• A hashed password (never stored in plain text).
• Your country, detected from your network request to display the correct currency — your currency preference is saved to your account.

1.2 Staff and attendance data

You enter this data yourself. It includes staff member names, roles, monthly salary, working schedules, daily attendance records (Present/Absent/Half Day), cash advances and repayment records, and notes you attach to attendance entries. This data belongs to you. We store it securely to sync it across your devices and provide the service.

1.3 Usage and diagnostics data

To fix crashes and understand which parts of the app are actually used, we collect anonymised usage and diagnostic data through Google Analytics for Firebase and Firebase Crashlytics. This consists of:

• Which screens you open, and a small set of app events — signing in, adding a staff member, marking attendance, sharing a salary slip, and starting or completing a subscription purchase.
• Your subscription tier (Free, Plus or Pro) and the language the app is set to, so we can tell whether a problem affects one group of users or everyone.
• Crash reports and error traces, together with the app version, operating system version and device model they occurred on.

We do not send staff names, salary figures, attendance records, advances, notes, or anything else you type into the app to these services. Where an app event describes a staff role, a role you typed yourself is recorded only as “other”. We do not attach your account identifier to this data, so it is not used to build a profile of you as an individual.

You can turn this off. Go to Settings → Usage & diagnostics in the app and switch it off. This stops both usage analytics and crash reporting on your device. The app works exactly the same with it off — the only effect is that we stop receiving crash reports from you, which may mean a problem you hit takes us longer to find and fix.

1.4 Push notification tokens

With your permission, we store your device's FCM (Firebase Cloud Messaging) token to deliver server-sent alerts such as monthly salary reminders and subscription notifications. Daily attendance reminders are scheduled locally on your device and do not require this token. You can revoke push notification access at any time from your device notification settings or from Settings → Notifications in the app.

1.5 Payment data

Subscriptions are purchased and managed through the Apple App Store (iOS) or Google Play Store (Android), with RevenueCat as our subscription management layer. We do not collect, process, or store your card number, CVV, or bank account details. We only retain your subscription status and entitlement information received from RevenueCat.

1.6 Web calculator inputs

When you use the free calculator on staffaround.com, the salary figures, names, and any other details you type are processed entirely within your browser to display results and to generate a PDF on your own device. We do not receive, transmit, or store these inputs, and no account is required. The calculator detects your approximate country from your network request (via our hosting provider, Cloudflare) solely to preselect a currency; this uses your IP address as part of ordinary web traffic and is not linked to any account.

1.7 Website analytics and cookies

The staffaround.com website uses Google Analytics 4 to count visits and see which pages people find useful. It sets cookies in your browser containing a randomly generated identifier, and records the pages you view, your approximate location (country or city level, derived from your IP address), your browser and device type, and how you arrived at the site. Google Analytics does not receive your name or email address, and we have not enabled advertising features, Google Signals, or any linking to Google Ads.

The website sets no advertising or cross-site tracking cookies. You can block or delete these cookies in your browser settings, or install Google’s Analytics opt-out browser add-on. Blocking them does not affect any part of the site, including the salary calculator.

2. How we use your data

• To provide, operate, and maintain the StaffAround service.
• To sync your attendance and salary data across your devices.
• To send attendance reminders and salary alerts you have opted into.
• To process subscription payments and manage your plan.
• To troubleshoot errors and improve app performance.
• To understand which features are used, so we know what to build and what to fix — unless you have turned off Usage & diagnostics.
• To comply with applicable legal obligations.

We do not use your data to show third-party advertising. We do not sell your data to any third party.

3. Staff data — your responsibilities

All staff records in StaffAround are entered and controlled by you. You are the data fiduciary for the personal information of your staff members. You are responsible for:

• Informing your staff that their attendance is being recorded digitally.
• Handling their data in compliance with applicable privacy law in your jurisdiction.
• Ensuring the data you enter is accurate and used only for legitimate payroll purposes.

4. Country detection and currency

We detect your approximate country from your network request (IP geolocation) when you first use the app to display the correct local currency. Pricing is managed through RevenueCat and your App Store or Play Store. Your detected country is saved to your account so that pricing remains consistent across sessions and devices.

5. Third-party services

StaffAround uses the following third-party services, each with their own privacy policy:

• Firebase (Google) — authentication, crash reporting, usage analytics, push notifications, and cloud storage
• Google Analytics 4 — website analytics on staffaround.com
• RevenueCat — subscription management and entitlement tracking
• Apple App Store / Google Play Store — in-app purchase billing
• Resend — one-time passcode (OTP) and transactional email delivery

We only share data with these services to the extent necessary to deliver the functionality described above. Each acts as a processor on our instructions; none of them is permitted to use your data for their own purposes, and we do not sell data or share it with advertisers.

6. Data retention

Your data is retained for as long as your account is active. If you delete your account, your personal data and all staff records are permanently and immediately deleted. Certain transaction records may be retained for longer periods as required by applicable tax or financial regulation.

7. Your rights

Depending on where you are located, you may have the right to access, correct, or delete your personal data; object to or restrict certain types of processing; and receive a copy of your data in a portable format. To exercise any of these rights, contact us at [email protected].

You can stop usage and crash reporting at any time at Settings → Usage & diagnostics in the app, and control push notifications at Settings → Notifications. Neither choice limits any other part of the app.

You can delete your account directly from the app at Settings → Delete My Account, or — if you no longer have the app installed — request deletion at staffaround.com/delete-account. Deletion is permanent and cannot be undone.

8. Data security

All data in transit is encrypted with TLS. Data at rest is encrypted using industry-standard encryption. Access to production data is restricted to authorised personnel only. We implement reasonable organisational and technical controls to prevent unauthorised access, disclosure, or modification.

9. Jurisdiction-specific notices

India (DPDP Act 2023)

We process personal data in accordance with India's Digital Personal Data Protection Act 2023. You may raise a complaint with the Data Protection Board of India if you believe your rights have been violated.

United Kingdom (UK GDPR)

If you are in the UK, you may raise concerns with the Information Commissioner's Office (ICO) at ico.org.uk.

Singapore (PDPA 2012)

If you are in Singapore, you may raise concerns with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

10. Children

StaffAround is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will change. For material changes, we will notify you by push notification or email at least 14 days before the change takes effect.

12. Contact us

For any privacy-related questions or requests, contact us at: [email protected]

Sanora Technologies
India