Privacy policy

Planzion is operated by MD SHAHADAT HOSSIN from Bangladesh. You can contact the operator about privacy, support or account deletion at zisansalman@gmail.com.

Your organization decides which workplace features to enable, which records to provide and which authorized people can access them. Ask your organization about its own employment-data purposes and retention requirements. Contact Planzion for questions about the service or help directing a data request.

The information handled depends on the features you and your organization use:

• Account and profile information: name, email, user and company identifiers, workplace assignments, roles, job title, and optional contact details and profile photo. These support sign-in, company access and the workplace directory.
• Workplace records: assigned shifts, actual check-in and check-out times, hours, breaks, availability, leave and correction requests, and enabled HR, onboarding or training records. These support workplace planning, attendance and review.
• Sick-leave information: when you submit an absence with a sick reason, the reason and absence dates are stored with your workplace account for availability planning and authorized absence review. This can disclose health information. The service does not provide diagnosis, treatment or medical advice.
• Team communication: messages, news, events, attachments where supported, and read and notification status. These support communication within the authorized workplace.
• Attendance evidence: location coordinates, accuracy and capture time, workplace-zone checks, and a camera selfie if your workplace requires it. These support attendance verification and applicable workplace rules.
• Device and security information: installation identifiers, push registration tokens, authentication and session information, request IP addresses and audit records. These support notifications, approved devices, abuse prevention and account security.

The app requests location when showing your workplace zone or checking an attendance action. A workplace can require an inside-zone check-in or check-out; its manager controls the applicable rule. Location permission does not itself authorize an attendance action, and denying it can prevent actions that require location evidence.

Optional live location and automatic attendance features require a separate consent step and operate while the app is in use. Planzion does not implement continuous operating-system background location tracking. You can manage permissions in your device settings and optional consent in the app.

Camera or photo access is used when you choose a profile photo or when an attendance selfie is required. Attendance selfies are photographs; Planzion does not use these flows for facial recognition or biometric inference.

Your records are available to you and to people authorized by your organization, subject to company, role, department and feature permissions. Shared messages and workplace updates are available to their authorized participants. Service administration may access data when necessary to provide support, maintain security or operate the service.

Planzion uses Hostinger for hosting. When mobile push notifications are enabled, Firebase Cloud Messaging and Apple Push Notification service process device registration and delivery information. Push alerts use generic update text; private workplace content is viewed after opening the app under the relevant account.

Workplace maps use OpenStreetMap imagery by default. The map provider receives requests for the visible map tiles, your network IP address and app request information. Tile requests identify the displayed area, which can reveal an approximate workplace or device neighborhood; exact GPS coordinates and the location marker are drawn locally and are not sent in these tile requests.

A workplace may supply links to documents or other services. When you follow an external link, that service handles information under its own policy. We may also disclose information when required by applicable law or necessary to address misuse, security incidents or lawful requests.

Planzion uses HTTPS for release API connections and company-scoped access controls. Attendance selfie evidence is encrypted on the server. The mobile app keeps authentication tokens in platform secure storage and encrypts its pending attendance queue. It also caches profile and workplace information for app use; this is not a claim that every locally cached record is encrypted.

Keep your account credentials and device secure. Do not share passwords, verification codes or private workplace records. Contact the operator if you suspect unauthorized access.

Attendance GPS and selfie evidence are retained for up to 30 days; a shorter configured period may apply. Expired server evidence is blocked from normal access and removed through scheduled retention processing, rather than immediate deletion at check-out. Attendance times, hours and other employment records are separate from this location and photo evidence.

Location evidence in an offline attendance queue is removed when the app next opens or accesses that queue after the retention limit. A powered-off or disconnected device cannot be remotely purged at an exact deadline. The attendance action and its original time remain available for review without the expired location evidence. Deletion from backups follows the backup lifecycle; this limit is not a promise that every backup copy is erased at that moment.

A profile photo is separate from an attendance selfie. Your chosen profile photo remains part of your active account until you replace it, remove it or it is handled through account deletion.

Other account and workplace records are kept for the purposes described in this policy while needed to provide the service, maintain account security or meet the organization's documented employment-record obligations. There is no single retention period for every employment record. Category-specific retention, any applicable reason for retaining a record after a deletion request, and request progress are handled through the organization's approved personal-data policy. Contact the organization or the operator for the period and reason that apply to your records.

Sick-leave reasons and absence dates are employment records under that approved category policy. The 30-day attendance GPS and selfie limit does not establish a retention period for those absence records or their audit history.

You can initiate a personal-data export or account-deletion request from Personal data in the app or website. These actions require identity verification and may require review of employment records. Signing out, removing the app or switching accounts does not delete a server account.

You can also request account and associated-data deletion without using the app by emailing zisansalman@gmail.com with the subject 'Planzion account/data deletion request'. Use the email associated with the account and identify the organization so the correct account can be located. Never include your password, verification code or unnecessary sensitive evidence. We may ask you to verify your identity before acting on the request.

Account deletion removes account credentials and direct profile identifiers through the deletion process. Some employment, shared or security records may require review or retention for an applicable documented reason. The request status and category outcome distinguish deleted records from retained records; a submitted request is not a statement that all records have already been removed.

Depending on the law that applies to you and the processing involved, you may have rights to access, correct, erase, restrict, receive a portable copy of or object to processing of your data. Where processing relies on consent, you may withdraw that consent. You may also complain to an appropriate data-protection authority. Contact the operator or your organization to exercise applicable rights.

We process submitted account-deletion requests within 30 days of submission. Check the request status and category outcome for confirmation of completion and any documented reason for retained records.

Updates are published on this page with a new version and effective date. Review this policy when your workplace enables additional features or when the published version changes.