Your privacy.
Our responsibility.

Sentrifiq is a workforce management app for organisations and their authorised team members. It supports attendance, worksite verification, tasks, schedules, leave, approvals, performance reports, payroll estimates, advances, expenses and related work records.

This policy explains how the developer operating Sentrifiq ("we", "us") handles information through the app and its supporting services. If your employer or another organisation supplies your account, that organisation determines the purposes of its workforce processing and the people permitted to see your records. We process those records to provide the service on its instructions. We also handle service administration, security, support and customer account information.

For questions about this policy or the developer responsible for the service, contact [email protected]. Read this policy alongside your organisation’s employee privacy notice.

The information used depends on your role, the features your organisation enables, your permissions and the records you submit. Information uploaded to work records is associated with an account or organisation; it is not anonymous.

Attendance and task verification. Sentrifiq uses location and its accuracy to check punches, worksite visits and location-required tasks against assigned sites. These checks are advisory and may require human review. GPS uncertainty is not proof of misconduct.

Background work recording. With the required location permission, Sentrifiq can record route points while the app is in the background during configured working days and recording hours. An assigned shift supplies the hours and any configured end-of-shift buffer. Where no shift is assigned, the current default window is 09:00–21:00 on configured working days. Recording may run within that window even before punch-in or after punch-out. Scheduled recording excludes configured holidays and days off, and stops when its window ends or you sign out. A punch or task action may separately request a location fix.

Motion & Fitness. If permitted, the app reads movement classifications, such as stationary, walking or travelling, for work recording periods. These observations help explain gaps in GPS and distinguish a stationary visit from a phone that has stopped reporting. Movement intervals and confidence can be uploaded to your organisation’s work records. This is not a medical or fitness coaching service.

Who can see it. Route and motion history is available to authorised super administrators; other attendance and worksite information is available according to organisation permissions. The app displays recording status on Home. Background location is used for work verification, not advertising.

• Camera and selected photos: attendance selfies, profile images, task evidence and expense receipts that you capture or attach. Your organisation may require an attendance selfie. Selected media is uploaded when you submit it.
• Microphone: audio notes you deliberately record and voice questions you initiate in Ask. Work audio notes can be stored with tasks. The app does not use the microphone to record background workplace conversations.
• Speech recognition: supported iPhone Ask voice recognition runs on the device. The spoken question is transcribed locally; task audio attachments are a separate upload feature.
• Face ID or device biometrics: your device performs authentication for app or expense access. Sentrifiq receives an authentication result, not your Face ID or fingerprint template. An attendance selfie remains an ordinary stored photograph; it is separate from device biometric unlock.
• Notifications and Live Activities: task, attendance and approval updates can use a device token. Work details or notes may appear on the Lock Screen; manage previews and notification permissions in your phone’s settings.

The app does not import your phone address book, SMS inbox, call history or browser history. Work contact details entered by your organisation are separate from access to your phone’s contacts.

• Authenticate accounts, enforce organisation permissions and device binding, and prevent misuse.
• Record attendance, verify sites and tasks, synchronise offline submissions, and show work history.
• Manage schedules, leave, assignments, approvals, reports, KPI scores, payroll estimates, advances and expenses.
• Deliver operational notifications, let authorised staff find work records and provide customer support.
• Maintain security, investigate errors, improve reliability and, where enabled, understand feature use.
• Maintain necessary business, billing, audit and legally required records.

Your employer is responsible for employment, pay and disciplinary decisions and for assessing the lawfulness of workplace monitoring. Location verdicts, estimates and AI answers should be reviewed by a person before a consequential decision.

When product analytics is configured and enabled, PostHog receives screen and action events, app and session information, record identifiers, and diagnostic events. Signed-in analytics profiles can include your name, mobile number, optional email, user ID, organisation ID, role and language. Analytics therefore can be linked to your identity.

Event processing includes safeguards intended to mask authentication tokens, contact details, coordinates and user-authored text in diagnostic or event payloads. These safeguards do not make account-linked analytics anonymous. Session replay is disabled in the current integration. Your organisation’s authorised administrator has a control for app-managed analytics events; contact support with an individual privacy request.

This website uses Plausible Analytics to count page visits and a few actions, such as using the payroll calculator, tapping a phone or email link, or sending a demo request. Plausible sets no cookies and stores no IP addresses or personal identifiers. We see only aggregated totals, such as how many people visited a page and which country they visited from. The demo form itself sends your details only to the Sentrifiq team.

We do not sell or rent personal data, show behavioural advertising, share it with data brokers, or use it to track you across other companies’ apps and websites for advertising. Operational location recording for your employer is distinct from cross-company advertising tracking.

Ask. Authorised super administrators can ask questions about the attendance, task, payroll, advance and location records they are allowed to access. Supported question interpretation and answer generation run on the administrator’s device; authorised database lookups still contact Sentrifiq’s backend. Structured lookup requests are recorded in the organisation’s audit trail.

Photo and receipt search. Visual indexing for task-photo search runs on the phone. Original work photos remain in the organisation’s protected storage. Company proof search may extract text from receipts or work images on the device and upload that text for indexing. When semantic company-proof search is enabled, extracted text and the search query are processed by the embedding service in Supabase’s hosted infrastructure.

Do not include unrelated personal or sensitive information in work evidence or search requests. AI summaries and inferred visits can be incomplete or wrong. These features are used to retrieve work information; this policy does not grant permission to train a third party’s general-purpose AI model on employee records.

We share information with your organisation’s authorised staff for the features described here, and with service providers needed to operate those features. Reports or files exported by an authorised user become subject to the recipient’s handling practices.

Providers are engaged for their service functions and must protect personal information consistently with the commitments in this policy and applicable requirements. Provider infrastructure may process data outside your country. Ask us about the arrangements for your organisation before submitting data subject to a specific residency requirement.

Information may also be disclosed to comply with applicable law, protect the service or people from misuse, resolve a dispute, or support a business transfer subject to appropriate confidentiality and privacy safeguards.

Work records. Account, attendance, task, photo, document, financial and audit records are retained while needed to operate your organisation’s service, resolve corrections or disputes, and satisfy applicable record-keeping requirements. Deactivating an account, signing out or uninstalling the app does not itself delete employer-held records. Attendance photographs and task evidence are not promised automatic deletion after 90 days.

Route and motion history. Sentrifiq’s operational retention configuration uses a 90-day window for background route points and movement intervals, with scheduled removal of older records. Derived timeline records, where enabled, follow the source retention window. Coordinates attached to attendance or task evidence are separate work records and may be retained longer.

Deletion requests. We assess the records requested for deletion, the organisation’s instructions and applicable obligations. If information must be retained, the reason and applicable period should be explained in the response. Copies may remain in protected backups until their normal rotation; deleting an active record is not an assurance of immediate erasure from every backup or exported report.

Protection. Sentrifiq uses encrypted service connections, authentication, server-enforced organisation separation, role-based permissions and protected storage access for private evidence. Offline queues and caches on the device support synchronisation. Keep your phone protected with a passcode. No electronic system can guarantee absolute security.

You may request access, correction or deletion of personal information, withdraw consent where processing depends on consent, and raise an objection or complaint where applicable law provides those rights. If your organisation supplies your account, its administrator can help identify the work records and retention requirements involved. You can also contact us directly.

We may need to verify that a request concerns your account and coordinate with your organisation. Account deactivation and subscription cancellation are different from deletion. A request is submitted when your email is sent; this webpage does not itself upload a request or erase records.

Withdrawing a permission prevents the related future use by the app but does not erase information already submitted. Certain work features may be unavailable without the permission required to provide them.

Sentrifiq is intended for authorised adult workplace users aged 18 and above. We do not knowingly provide the service to children. Contact us if a child’s information has been submitted so that it can be investigated and addressed.

The legal basis for processing and available rights depend on your location, the purpose and the organisation’s relationship with you. Your organisation is responsible for establishing the lawful basis for its employee records and workplace monitoring. Where applicable, you may complain to the relevant data protection authority. A device permission alone does not establish the legal basis for all employer processing.

We update this policy when features or data practices change. The date at the top identifies the latest revision. Material changes will be communicated through appropriate app, account or organisation channels.