資料安全摘要
Last updated: October 12, 2026 · Single source of truth for the Google Play Data Safety form and the Apple App Store App Privacy nutrition labels.
培訓及合規資料
機構啟用培訓後，我們處理指派、課程進度、測驗答案及結果、出席、獲批准的 CPD／CPT 時數、證書編號及到期日，以及外部培訓紀錄。員工自行提交證明時才上載證書照片或 PDF，資料與員工連繫，用於培訓管理及審批，不作廣告或 AI 草稿用途。存取按員工角色及團隊範圍限制；查看或匯出他人紀錄均有審計記錄。
培訓資料保留及刪除
機構自行設定培訓紀錄、測驗結果及證書檔案的保留期。資料按設定期間保留，並按帳戶刪除程序處理，同時考慮僱主適用的紀錄保存責任。請向人力資源部查詢適用的保留期。 帳戶刪除程序.
This page lists every category in Google Play's Data Safety form, in order, with the answers we provide for the HRFlowTech mobile app (com.hrflowtech.app). The same answers populate the Apple App Privacy section in App Store Connect. The full narrative is in the Privacy Policy.
Across the entire app:
- All collected data is encrypted in transit (TLS 1.2+).
- Users can request deletion of their data on the Account Deletion page or in-app at Profile → Delete my account.
- We follow the Google Play Families policy: the app is not directed to children.
- We have committed to follow the Google Play Developer Policy and have completed a security review.
- No data is shared with advertising networks or data brokers. No data is sold.
Personal info
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Name | Yes | No | Required (set by tenant) | Account management, app functionality |
| Email address | Yes | No | Required | Account management, communications |
| User IDs (staff ID, tenant ID) | Yes | No | Required | Account management, app functionality |
| Address | No | — | — | — |
| Phone number | Optional (only if added to employee profile) | No | Optional | Account management |
| Race, ethnicity, sexual orientation, political views, religious beliefs | No | — | — | — |
| Other personal info (position, department, hire date) | Yes | No | Required (set by tenant) | App functionality |
Financial info
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Payment info | No (Stripe handles billing on the web only) | — | — | — |
| Purchase history | No | — | — | — |
| Credit score | No | — | — | — |
| Other financial info (payslip data, salary, deductions) | Yes — visible to the employee only | No | Required by tenant | App functionality (payroll self-service) |
Health and fitness
Not collected.
Messages
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Emails | No | — | — | — |
| SMS or MMS | No | — | — | — |
| Other in-app messages (AI Assistant prompts and replies) | Yes | Sent to the AI model provider for processing only; not used for training | Required when using the Assistant | App functionality (AI Assistant) |
Photos and videos
員工自行提交外部培訓證明時，可選擇上載證書照片。照片與員工連繫，用於審批及培訓紀錄。培訓不作鏡頭監控或生物識別處理。
Audio files
Not collected. The app does not access the microphone.
Files and docs
員工自行提交外部培訓證明時，可選擇上載證書檔案（PDF 或圖片）。薪酬單 PDF 以串流供查閱。培訓證明按機構設定的期間保留。
Calendar
Not collected.
Contacts
Not collected.
App activity
培訓互動包括課程進度、測驗答案與分數、指派、完成及 CPD／CPT 時數。模組啟用後，這些資料與員工連繫，用於培訓管理及審核報告。
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| App interactions (attendance punches, leave submissions, payslip views) | Yes | No | Required by tenant | App functionality |
| In-app search history | No | — | — | — |
| Installed apps | No | — | — | — |
| Other user-generated content | Yes (leave reasons, AI Assistant prompts) | No | Optional | App functionality |
| Other actions | No | — | — | — |
Web browsing
Not collected.
App info and performance
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Crash logs | Yes — aggregated, no user content | TODO: confirm whether sent to a third-party crash service (Sentry / Crashlytics) before publishing | Required | App diagnostics |
| Diagnostics (OS version, app version) | Yes | No | Required | App diagnostics |
| Other app performance data | No | — | — | — |
Device or other IDs
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Device or other IDs (push token, device install ID) | Yes | Sent to APNs / Firebase Cloud Messaging for push delivery only | Required for push notifications; user can disable in OS settings | App functionality (push notifications, security) |
| Advertising ID (IDFA / GAID) | No | — | — | — |
Location
| Type | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Approximate location | Optional — only when the tenant has enabled location-verified attendance and the user has granted permission | No | Optional — user can deny the OS permission | App functionality (attendance verification) |
| Precise location | No | — | — | — |
See also: Privacy Policy · AI Use & Safety Policy · Account Deletion