Privacy Policy

Effective Date: August 4, 2026  |  Last Updated: August 4, 2026

Eduplex Solutions Pvt. Ltd. ("ESPL," "we," "us," or "our") operates the MATT (Mobile Attendance) mobile application and its associated web portal (collectively, the "App"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices and rights available to you as a user.

By downloading, installing, or using MATT, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.

1. Who This Policy Applies To

MATT is provided to employees, field staff, and other personnel of organizations that have licensed MATT for workforce attendance and out-duty management ("Client Organizations"). Your use of MATT is generally initiated and administered by your employer or the organization that has deployed MATT ("Administrator"). Certain data practices described below may therefore also be governed by your Administrator's own internal policies.

2. Information We Collect

We collect only the information necessary to provide accurate, secure, and auditable attendance tracking.

2.1 Account and Profile Information

• Name, employee/staff ID, designation, department, and contact details (email, phone number) provided by you or your Administrator during account setup.

2.2 Attendance and Location Data

• Check-in / Check-out timestamps for regular attendance and out-duty assignments.
• GPS location data captured at the moment of check-in/check-out, used solely to confirm attendance was marked from an authorized location (geofencing) and to log out-duty visit locations.
• Location data is collected only when you actively use the check-in/check-out feature. MATT does not track or collect your location continuously or in the background.

2.3 Selfie / Camera Data

• A photo ("selfie") captured at the time of check-in/check-out to verify your identity and confirm the authenticity of the attendance entry.

2.4 Biometric Data (Fingerprint)

• Where an organization enables biometric-based attendance, MATT may capture a fingerprint scan through your device's or a connected biometric terminal's secure hardware for the purpose of verifying identity at check-in/check-out.
• We do not store raw fingerprint images. Biometric verification is processed through your device's or the biometric terminal's secure, encrypted hardware module (e.g., Android Keystore / dedicated biometric sensor firmware). MATT and ESPL's servers only receive a confirmation that verification succeeded or failed, along with the associated attendance timestamp — never the underlying biometric template or image.
• Biometric data is used exclusively for attendance verification. It is never used for advertising, profiling, or shared with any third party, and it is never sold.
• You may decline biometric enrollment and use the standard selfie- and GPS-based check-in/out method instead, subject to your Administrator's policy.

2.5 Out-Duty Records

• Date, time, purpose, location, and any notes or attachments you submit when logging an out-duty request, along with the approval/rejection decision and comments from your manager.

2.6 Device and Usage Information

• Device model, operating system version, unique device identifiers, IP address, app version, and crash/diagnostic logs, collected automatically to maintain app stability and security.

2.7 Payroll-Linked Attendance Data

• Approved attendance and out-duty records are shared with your Administrator's payroll system solely for salary and leave processing.

3. How We Use Your Information

We use the collected information to:

• Record and verify attendance (IN/OUT) with timestamp, location, selfie, and/or biometric confirmation.
• Prevent fraudulent or erroneous attendance entries, including confirming genuine check-outs (for example, night-shift check-outs that occur on the following calendar day) versus accidental/missed entries.
• Enforce geofencing so attendance can only be marked from authorized locations.
• Route out-duty requests to managers for approval and maintain an auditable record.
• Generate attendance, exception, and defaulter reports for HR and management.
• Synchronize approved attendance data with payroll systems.
• Maintain, secure, debug, and improve the App.
• Comply with applicable legal, regulatory, or labour law requirements.

We do not use your location, selfie, or biometric data for advertising, marketing, or any purpose unrelated to attendance verification and workforce management.

4. Data Storage and Security

• All data transmitted between the MATT app and our servers is encrypted in transit (TLS/HTTPS).
• Attendance, location, and selfie data are stored on secure, access-controlled servers, with access restricted to authorized ESPL personnel and your Administrator's designated HR/management users.
• Biometric verification, as noted in Section 2.4, is processed on-device or on-terminal via secure hardware; ESPL does not retain raw biometric images or templates.
• We implement role-based access control so that only authorized personnel within your organization can view attendance records.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal, location, selfie, or biometric data. We share data only in the following circumstances:

• With your Administrator/Employer — attendance, out-duty, and verification records are visible to authorized HR and management users within your organization, since this is the core purpose of the App.
• With payroll systems — approved attendance data is synced to your organization's designated payroll system.
• With service providers — we may use trusted infrastructure providers (e.g., cloud hosting) strictly to operate the App, bound by confidentiality and data protection obligations.
• For legal reasons — if required to comply with a legal obligation, court order, or to protect the rights, property, or safety of ESPL, our users, or others.
• Business transfers — in the event of a merger, acquisition, or asset sale, data may be transferred, subject to this Privacy Policy continuing to apply.

6. Data Retention

• Attendance, out-duty, and verification records are retained for as long as required by your Administrator's internal policy and applicable labour/employment record-keeping laws and are deleted or anonymized thereafter.
• Selfie images captured for verification are retained only as long as necessary for attendance audit purposes, as configured by your Administrator, and are not repurposed.
• As stated above, raw biometric data is not retained by ESPL at all.

7. Your Rights and Choices

Subject to applicable law and your Administrator's policies, you may:

• Request access to the personal data MATT holds about you.
• Request correction of inaccurate attendance or profile data.
• Request deletion of your data, where retention is not otherwise required by law or your employment relationship.
• Withdraw consent to biometric enrolment and switch to selfie/GPS-based attendance, where offered by your Administrator.
• Contact us (Section 12) or your Administrator's HR department to exercise these rights.

8. Permissions Used by the App

MATT requests the following device permissions, each used only for the stated purpose:

• Camera — to capture the selfie used for identity verification at check-in/check-out.
• Location (Fine/Precise) — to verify attendance is being marked from an authorized location (geofencing) and to log out-duty visit locations. Used only during active check-in/check-out, not in the background.
• Biometric/Fingerprint sensor — to perform on-device biometric verification, where enabled by your Administrator.
• Storage (limited) — to temporarily cache attendance-related images before upload.
• Network access — to sync attendance and out-duty data with our servers.

MATT does not request access to your contacts, messages, call logs, or other unrelated personal data.

9. Children's Privacy

MATT is a workplace attendance tool intended for use by employees and staff of Client Organizations and is not directed at, or knowingly used by, children under the age of 18.

10. Compliance

We aim to handle personal data in line with applicable data protection laws, including India's Digital Personal Data Protection Act, 2023, and — where relevant to specific Client Organizations — other applicable regional data protection regulations.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features (such as new biometric or attendance-correction functionality), or legal requirements. Material changes will be notified via the App or our website, along with an updated "Last Updated" date.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

By using MATT, you consent to the collection and use of your information as outlined in this policy.