Privacy Policy – DEC Mobile

1 Introduction

DEC Mobile ("App") is an internal workforce and site-operations application intended only for authorized employees and contractors of DEC Infrastructure and Projects (India) Private Limited ("Company"). The App is developed, implemented, managed, and published on Google Play by Nutrinium Technologies Private Limited on behalf of the Company.

The App supports construction site operations such as attendance, reporting, and internal requests and approvals.

2 Who Controls Your Data (Data Controller)

For employment and worksite operations data, your employer is the Data Controller — the entity that determines the purposes and means of processing.

3 Information We Collect

We collect information to provide, secure, and operate the App.

3.1 Account & Authentication Information

• Employee ID, name, designation/role, department, assigned site(s)
• Organization-issued username
• Contact details (work email and/or phone) if configured by the Company
• Authentication credentials (password/PIN) stored using one-way hashing — never stored in plain text
• Device biometrics (optional): if enabled, the biometric template stays on your device OS/secure hardware. The App does not access or store raw biometric images or templates.

3.2 Attendance & Time Tracking Data

• Check-in/check-out timestamps, attendance status, shift details
• Leave requests/approvals (if enabled), overtime, work duration summaries

3.3 Location Information

• Precise (GPS) and/or approximate location at check-in/check-out
• Location timestamps and accuracy data
• Foreground only: location is captured when the App is open and in active use

3.4 Camera, Photos & Media

• Photos captured in-app for work progress, incidents, quality checks, inspections, deliveries, or equipment condition
• Media you choose to upload from your device (if enabled)

We do not access your gallery or photos unless you explicitly choose media for upload and grant the relevant permission.

3.5 Work-Related Operational Data

• Work-related operational reports
• Requests (material, labour, equipment, etc.), approvals/rejections, comments, audit trails
• In-app notification history (if enabled)

3.6 Device & Technical Information

• Device model, OS version, App version
• Push notification token (e.g., FCM token) for notifications
• IP address and basic network information for security/troubleshooting
• Diagnostics, crash logs, and performance metrics

We do not collect contacts, SMS, call logs, or other unrelated personal data for the App's core functions.

3.7 Audio/Video (Optional, Feature-Dependent)

• Voice notes/audio clips only if you use the voice note feature and grant microphone permission
• Videos only if you choose to record or upload them for work documentation

4 How We Use Your Information

• Authenticate users and enforce role-based access
• Record and verify attendance and prevent fraud
• Enable work reports with photo/media attachments
• Process internal requests and approval workflows
• Maintain audit trails for operational accountability and compliance
• Provide notifications and operational communications
• Maintain and improve reliability (debugging, crash analysis)
• Protect against misuse and unauthorized access

5 Legal Basis (Where Applicable)

Depending on jurisdiction, processing may rely on:

• Employment/contract necessity and legitimate interests for workforce operations
• Legal obligations (labour, safety, payroll, audit requirements)
• Consent for optional features (e.g., microphone for voice notes) and device permission grants (location/camera/photos)

6 How We Share Your Information

We may share information only in the following circumstances:

• Within the Company — authorized supervisors, project/site management, HR/admin/finance on a need-to-know basis.
• Service Providers (Processors) — hosting, storage, notification delivery, and crash/performance monitoring providers under confidentiality and data processing agreements.
• Company Systems Integration — synchronization with internal systems (e.g., ERP/HRMS) for payroll, leave, inventory, assets, and project documentation as configured by the Company.
• Legal/Safety — if required by law, regulation, court order, or to protect safety and security.
• Business Transfers — merger, acquisition, or asset transfer, with notice where required.
• With Your Direction/Consent — where you explicitly authorize sharing beyond the above.

7 Data Retention

We retain data only for as long as necessary to provide the App and for legitimate business purposes, including compliance with legal, safety, payroll, and audit requirements. Retention periods may vary by data type and project, and are defined by the Company's internal policies.

Certain payroll, safety, and audit records may be retained after an employee leaves the organization where required or permitted by law. When data is no longer required, it is deleted or anonymized where feasible and in accordance with applicable laws.

8 Security

We use reasonable safeguards to protect data, including:

• Encryption in transit (HTTPS/TLS)
• Role-based access controls and least-privilege access
• Secure credential handling (hashed passwords/PINs)
• Logging and monitoring for suspicious access and abuse prevention
• Secure backups and controlled administrative access

8.1 Security Incidents

If a security incident affects personal data, the Company will take reasonable steps to investigate, mitigate, and provide notices where required by applicable law and Company policy.

9 Your Choices, Controls, and Rights

• Permissions — You can manage location, camera, photo, and microphone permissions in device settings. Disabling required permissions may limit functionality.
• Access / Correction / Erasure — Subject to applicable law, you may request access to your personal data, correction of inaccurate data, or erasure of data no longer necessary for the stated purposes (noting that certain records may be retained for payroll, safety, audit, or legal compliance).
• Grievance Redressal — You may raise privacy-related grievances by writing to dec@nutrinium.in. The Company will respond within timelines required under applicable law and Company policy.
• Nomination — Where applicable under Indian law, you may nominate another person to exercise your rights in the event of your death or incapacity.

10 Account Deletion & Data Deletion Requests

Because the App is provided for employment/worksite operations, account deactivation is handled by the Company (HR/IT) or Vendor on behalf of the Company.

Employees can request deletion of their account and associated personal data (subject to legal retention) by emailing dec@nutrinium.in with the following details:

• Full name
• Employee ID
• Username
• Deletion request details

11 Children's Privacy

The App is not intended for individuals under 18 and is meant only for authorized personnel.

12 International Data Transfers

Data may be stored and processed in India and, where service providers operate globally, may be processed in other regions with appropriate protections — including contracts, Data Processing Agreements (DPAs), and security controls — as required by applicable law.

13 Permissions Explained (Android)

Common permissions requested by the App (actual permissions depend on features enabled by the Company):

14 Third-Party Links

If the App links to external sites, their own privacy practices apply. Please review their policies before submitting personal data to them.

15 Changes to This Policy

We may update this policy from time to time. We will revise the "Last Updated" date and may notify users in-app or through internal channels for material changes.

16 Contact Us

For privacy-related inquiries or grievances: