Data Safety Summary
Last updated: October 12, 2026 · Single source of truth for the Google Play Data Safety form and the Apple App Store App Privacy nutrition labels.
Training & compliance data
When your organisation enables training, we process assignments, lesson progress, quiz answers and results, attendance, approved CPD/CPT hours, certificate numbers and expiry dates, and external training records. Certificate photos or PDF files are uploaded only when a member of staff chooses to submit evidence. They are linked to the staff member and used for training administration and approval. They are not used for advertising or AI drafting. Access follows the staff member’s role and team scope; views and exports of other people’s records are audited.
Training retention and deletion
Your organisation configures the retention period for training records, quiz results and certificate files. Data is retained for that configured period and handled through the account deletion process, subject to any applicable record-keeping duties of your employer. Contact your HR administrator for the period that applies to you. Account deletion process.
This page lists every category in Google Play's Data Safety form, in order, with the answers we provide for the HRFlowTech mobile app (com.hrflowtech.app). The same answers populate the Apple App Privacy section in App Store Connect. The full narrative is in the Privacy Policy.
Across the entire app:
- All collected data is encrypted in transit (TLS 1.2+).
- Users can request deletion of their data on the Account Deletion page or in-app at Profile → Delete my account.
- We follow the Google Play Families policy: the app is not directed to children.
- We have committed to follow the Google Play Developer Policy and have completed a security review.
- No data is shared with advertising networks or data brokers. No data is sold.
Personal info
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Name | Yes | No | Required (set by tenant) | Account management, app functionality |
| Email address | Yes | No | Required | Account management, communications |
| User IDs (staff ID, tenant ID) | Yes | No | Required | Account management, app functionality |
| Address | No | — | — | — |
| Phone number | Optional (only if added to employee profile) | No | Optional | Account management |
| Race, ethnicity, sexual orientation, political views, religious beliefs | No | — | — | — |
| Other personal info (position, department, hire date) | Yes | No | Required (set by tenant) | App functionality |
Financial info
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Payment info | No (Stripe handles billing on the web only) | — | — | — |
| Purchase history | No | — | — | — |
| Credit score | No | — | — | — |
| Other financial info (payslip data, salary, deductions) | Yes — visible to the employee only | No | Required by tenant | App functionality (payroll self-service) |
Health and fitness
Not collected.
Messages
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Emails | No | — | — | — |
| SMS or MMS | No | — | — | — |
| Other in-app messages (AI Assistant prompts and replies) | Yes | Sent to the AI model provider for processing only; not used for training | Required when using the Assistant | App functionality (AI Assistant) |
Photos and videos
Optional certificate photos are collected when an employee uploads evidence of external training. They are linked to the employee and used for approval and training records. No training camera monitoring or biometric processing is used.
Audio files
Not collected. The app does not access the microphone.
Files and docs
Optional certificate files (PDFs or images) are collected when an employee submits external training evidence. Payslip PDFs are streamed for viewing. Training evidence is retained for the period configured by the organisation.
Calendar
Not collected.
Contacts
Not collected.
App activity
Training interactions include lesson progress, quiz answers and scores, assignments, completion and CPD/CPT hours. These are linked to the employee and used for training administration and audit reporting when the module is enabled.
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| App interactions (attendance punches, leave submissions, payslip views) | Yes | No | Required by tenant | App functionality |
| In-app search history | No | — | — | — |
| Installed apps | No | — | — | — |
| Other user-generated content | Yes (leave reasons, AI Assistant prompts) | No | Optional | App functionality |
| Other actions | No | — | — | — |
Web browsing
Not collected.
App info and performance
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Crash logs | Yes — aggregated, no user content | TODO: confirm whether sent to a third-party crash service (Sentry / Crashlytics) before publishing | Required | App diagnostics |
| Diagnostics (OS version, app version) | Yes | No | Required | App diagnostics |
| Other app performance data | No | — | — | — |
Device or other IDs
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Device or other IDs (push token, device install ID) | Yes | Sent to APNs / Firebase Cloud Messaging for push delivery only | Required for push notifications; user can disable in OS settings | App functionality (push notifications, security) |
| Advertising ID (IDFA / GAID) | No | — | — | — |
Location
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Approximate location | Optional — only when the tenant has enabled location-verified attendance and the user has granted permission | No | Optional — user can deny the OS permission | App functionality (attendance verification) |
| Precise location | No | — | — | — |
See also: Privacy Policy · AI Use & Safety Policy · Account Deletion