数据安全摘要
Last updated: October 12, 2026 · Single source of truth for the Google Play Data Safety form and the Apple App Store App Privacy nutrition labels.
培训及合规资料
机构启用培训后，我们处理分配、课程进度、测验答案及结果、出席、获批准的 CPD／CPT 时数、证书编号及到期日，以及外部培训记录。员工自行提交证明时才上传证书照片或 PDF，资料与员工连接，用于培训管理及审批，不作广告或 AI 草稿用途。访问按员工角色及团队范围限制；查看或导出他人记录均有审计记录。
培训资料保留及删除
机构自行设置培训记录、测验结果及证书文件的保留期。资料按设置期间保留，并按账户删除程序处理，同时考虑雇主适用的记录保存责任。请向人力资源部查询适用的保留期。 账户删除程序.
This page lists every category in Google Play's Data Safety form, in order, with the answers we provide for the HRFlowTech mobile app (com.hrflowtech.app). The same answers populate the Apple App Privacy section in App Store Connect. The full narrative is in the Privacy Policy.
Across the entire app:
- All collected data is encrypted in transit (TLS 1.2+).
- Users can request deletion of their data on the Account Deletion page or in-app at Profile → Delete my account.
- We follow the Google Play Families policy: the app is not directed to children.
- We have committed to follow the Google Play Developer Policy and have completed a security review.
- No data is shared with advertising networks or data brokers. No data is sold.
Personal info
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Name | Yes | No | Required (set by tenant) | Account management, app functionality |
| Email address | Yes | No | Required | Account management, communications |
| User IDs (staff ID, tenant ID) | Yes | No | Required | Account management, app functionality |
| Address | No | — | — | — |
| Phone number | Optional (only if added to employee profile) | No | Optional | Account management |
| Race, ethnicity, sexual orientation, political views, religious beliefs | No | — | — | — |
| Other personal info (position, department, hire date) | Yes | No | Required (set by tenant) | App functionality |
Financial info
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Payment info | No (Stripe handles billing on the web only) | — | — | — |
| Purchase history | No | — | — | — |
| Credit score | No | — | — | — |
| Other financial info (payslip data, salary, deductions) | Yes — visible to the employee only | No | Required by tenant | App functionality (payroll self-service) |
Health and fitness
Not collected.
Messages
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Emails | No | — | — | — |
| SMS or MMS | No | — | — | — |
| Other in-app messages (AI Assistant prompts and replies) | Yes | Sent to the AI model provider for processing only; not used for training | Required when using the Assistant | App functionality (AI Assistant) |
Photos and videos
员工自行提交外部培训证明时，可选择上传证书照片。照片与员工连接，用于审批及培训记录。培训不作摄像头监控或生物识别处理。
Audio files
Not collected. The app does not access the microphone.
Files and docs
员工自行提交外部培训证明时，可选择上传证书文件（PDF 或图片）。工资单 PDF 以流式传输供查阅。培训证明按机构设置的期间保留。
Calendar
Not collected.
Contacts
Not collected.
App activity
培训互动包括课程进度、测验答案与分数、分配、完成及 CPD／CPT 时数。模块启用后，这些资料与员工连接，用于培训管理及审核报告。
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| App interactions (attendance punches, leave submissions, payslip views) | Yes | No | Required by tenant | App functionality |
| In-app search history | No | — | — | — |
| Installed apps | No | — | — | — |
| Other user-generated content | Yes (leave reasons, AI Assistant prompts) | No | Optional | App functionality |
| Other actions | No | — | — | — |
Web browsing
Not collected.
App info and performance
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Crash logs | Yes — aggregated, no user content | TODO: confirm whether sent to a third-party crash service (Sentry / Crashlytics) before publishing | Required | App diagnostics |
| Diagnostics (OS version, app version) | Yes | No | Required | App diagnostics |
| Other app performance data | No | — | — | — |
Device or other IDs
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Device or other IDs (push token, device install ID) | Yes | Sent to APNs / Firebase Cloud Messaging for push delivery only | Required for push notifications; user can disable in OS settings | App functionality (push notifications, security) |
| Advertising ID (IDFA / GAID) | No | — | — | — |
Location
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Approximate location | Optional — only when the tenant has enabled location-verified attendance and the user has granted permission | No | Optional — user can deny the OS permission | App functionality (attendance verification) |
| Precise location | No | — | — | — |
See also: Privacy Policy · AI Use & Safety Policy · Account Deletion