01Who is responsible for your data#
When you sign in, you enter your employer’s server address. Your employee record, leave, attendance, expense claims, advances and payslips are stored on and processed by that server, which your employer controls. Your employer is responsible for that data under its own policies and the law that applies to it. For questions about your HR records, contact your HR team.
Crenya Technologies LLP provides the app and the push notification relay described below.
02What the app sends to your employer's server#
- Sign-in: your username and password go only to your employer’s server. The app keeps the sign-in session in your device’s secure storage and does not store your password.
- Location: only when you tap check in or check out, the app reads your location once and sends it to your employer’s server to confirm you are at your workplace. The app does not track your location in the background or at any other time.
- Photos: only when you attach a receipt to an expense claim, the photo you take or pick is sent to your employer’s server with that claim.
- Requests you make: leave, attendance, shift, expense and advance requests, and the approvals you give as a manager.
03Push notifications#
If you turn on notifications, your device’s push token is encrypted and stored on your employer’s server. To deliver a notification, that server sends the encrypted token and a fixed message (such as “Leave request approved”) to crenya’s push relay, which passes it to Apple Push Notification service or Google Firebase Cloud Messaging. The relay does not receive your name, your request details or any amounts, and it does not keep a record of the notifications it sends. The text on your lock screen is generic; details appear only inside the app. You can turn notifications off in the app or in your device settings at any time.
04What we do not do#
- No advertising, no advertising identifiers and no tracking across apps or websites.
- No analytics or crash-reporting services in the app.
- We do not sell or rent personal information.
05On your device#
The app stores your sign-in session in the device’s secure storage (Keychain on iOS, Keystore on Android), plus your settings such as language and the server address. Payslip PDFs you open are saved temporarily so you can share them. Signing out removes the session from secure storage. Deleting the app removes the data it kept in its own storage; on iOS, Keychain items can outlast an uninstall, so sign out first if you want the session removed from the device.
06Keeping and deleting data#
Your employer’s server keeps your HR records according to your employer’s policies. To have records corrected or deleted, contact your HR team. A signed-out or inactive session (30 days without use) stops notifications, and its device registration is removed automatically.
07Security#
The app connects to your employer’s server over HTTPS. Push tokens are encrypted before they are stored, and requests between your employer’s server and the push relay are signed.
08Children#
crenyaHR is a workplace app for employees and is not directed at children.
09Changes#
If we change this policy, we will update this page and its effective date.
10Contact#
Crenya Technologies LLP · info@crenya.com · crenya.com. For crenya’s other products, see the crenya privacy policy.