Privacy policy

Who is responsible for the data

The operator of the MyBizz platform is the developer of the service; contact details are given at the end of this document.

The company using MyBizz decides on its own which employees to add and what information to record about them. For its employees' data the employer therefore acts as the owner, while MyBizz processes that data on the employer's instructions and provides the technical means to do so.

What data we process

We collect only what the features listed below cannot work without.

• Account: name, email address, phone number, position and, optionally, a profile photo. The password is stored only as an irreversible hash.
• Check-in and check-out records: date and time, coordinates of the place and their accuracy, distance to the company work zone, and a photo from the front camera if the employer has enabled that requirement.
• Tasks and projects: task contents, comments, attached files, due dates and statuses.
• Payroll and settlements: salary, accruals, bonuses, deductions and payments, transactions with counterparties.
• Technical details: IP address, device model and operating system version, app version, selected language, last sign-in time.
• Push notifications: the device token issued by Apple or Google so that a notification reaches that particular phone.

Why this data is needed

• Signing in and separating access: an employee sees only what the employer has allowed.
• Working-time records: confirming that a check-in was made during working hours and at the workplace. This is exactly what location and photo are for — without them a check-in cannot be verified.
• Assigning tasks, discussing them and tracking deadlines.
• Calculating salaries and keeping settlements with counterparties.
• Notifications about new tasks, comments, deadlines, payroll entries and late arrivals.
• Security: detecting suspicious sign-ins and protecting accounts.

Location and photos

The mobile app requests access to location and camera only at the moment of checking in or out. We do not track an employee's movement in the background and never switch the camera on without their action.

Whether a photo and location are required is decided by the employer in the company settings. If those requirements are switched off, the app does not ask for such data.

Coordinates and photos are visible to the employee in their own check-in history and to managers who have the corresponding permission.

Who can access the data

• The employer: the business owner and the employees to whom the relevant permissions have been granted. The set of permissions is configured separately for each position.
• The employee: their own check-ins, tasks and payroll entries are always available to them.
• Apple and Google: only the device token, the notification title and its text are passed on, solely to deliver a push notification to the phone.
• The hosting provider whose servers run the platform.

We do not sell data, do not share it with advertising networks and do not use it for profiling or for tracking across apps and websites.

How long data is kept

Data is kept for as long as the company uses MyBizz and as long as it is required for the records prescribed by law.

A device token is deleted automatically when the user signs out, removes the app from the phone, or when Apple or Google report that the token is no longer valid.

After an employee account is deleted, their personal data is deleted or anonymised, while work-related records — tasks and accounting entries — remain with the employer to the extent needed for reporting.

Employee rights

• Find out what data is stored about them and obtain a copy of it.
• Correct inaccurate information.
• Request deletion of the account and personal data.
• Withdraw consent to data processing by ceasing to use the app.
• Turn off push notifications in the phone settings at any time.

Some of these matters are handled by the employer, since it is the employer who keeps the employee records. If they did not help, write to us — contact details are below. We reply within 30 days.

How we protect data

• Data exchange between the app and the server goes over the secure HTTPS protocol.
• Passwords are stored as an irreversible hash and cannot be recovered.
• Access inside a company is limited by the permission system: an employee sees only what is allowed.
• Keys for the notification services are kept on the server with restricted permissions and never ship inside the apps.

Children

MyBizz is intended for work purposes and is not designed for use by persons under 16. We do not knowingly collect children's data.

Changes to this policy

If the scope of processed data changes, we will update this document and the date at the top of it. Significant changes will additionally be shown in the app.

How to contact us

For questions about data processing, to obtain a copy of your data or to delete your account, write to us: