1. Introduction
This Privacy Policy explains how RingMe (“we”, “us”) collects, uses, stores, and protects personal data when you use the HRC application on Android, iOS, or Web (the “App”) and related services at https://hrc.ringme.vn.
HRC is a workforce / HR management product for organizations: face-based attendance, scheduling, requests, timesheets, payroll, and related operations. By creating an account or using the App, you agree to this Policy.
2. Data we collect
Depending on your role and features you use, we may process:
- Account data: name, email address, phone number (if provided), password (stored hashed), language preference.
- Organization / employment data: company, branch, department, job role, employment status, bank details for payroll (if entered), invite codes.
- Biometric / face data: face images and derived face embeddings used only for enrollment and attendance matching. Face matching runs on our self-hosted systems (not a third-party consumer face cloud for matching).
- Attendance data: check-in / check-out time, punch photos, similarity scores, Wi‑Fi network identifiers (SSID/BSSID) of the branch network when required, optional approximate location, and a device identifier.
- Work data: shift schedules, leave and other work requests, timesheets, payroll calculations and payslips, tasks, bulletins, and in-app notifications.
- Device & diagnostics: app version, OS, crash logs and analytics events (e.g. via Firebase Crashlytics / Analytics), and push notification tokens (FCM) if enabled.
- Support content: feedback or messages you submit through the App.
3. How we use data
- Authenticate users and manage multi-company memberships.
- Provide face enrollment, attendance check-in/out, kiosk punching, and related security checks (e.g. branch Wi‑Fi rules, shared-device alerts).
- Run scheduling, approvals, timesheets, payroll, tasks, and notifications.
- Operate, secure, troubleshoot, and improve the App (including crash reporting).
- Comply with legal obligations applicable to us or the employing organization.
4. Legal bases & organizational roles
For employee workforce data, the employer / company administrator typically acts as the data controller for HR purposes. RingMe provides the HRC platform as a processor / service provider to that organization, except where we process data for our own account administration, security, and product operations.
5. Permissions on mobile devices
- Camera — face enrollment and attendance / kiosk capture.
- Location — optional or policy-based attendance context; also may be required by the OS to read Wi‑Fi information on some Android versions.
- Wi‑Fi / nearby devices — verify that check-in occurs on an approved branch network when the company enables this rule.
- Internet — sync with HRC servers.
- Notifications — optional push alerts.
6. Sharing of data
We do not sell personal data. We may share data only with:
- Authorized users in your company (managers, HR) according to role permissions in HRC.
- Infrastructure / service providers that help us run the product (e.g. hosting, email delivery for OTP, Firebase for crash/analytics/push), under appropriate safeguards.
- Authorities when required by law.
7. International transfers & storage
Data is processed on servers operated for HRC (production domain hrc.ringme.vn).
If subprocessors process data in other regions, we take steps consistent with applicable law.
8. Retention
- Account and employment records: while the account/company relationship is active and as required for payroll / legal retention set by the organization.
- Attendance punches and face templates: retained while needed for attendance verification and company policy; deleted or anonymized when no longer required or upon valid deletion request handled with the employer.
- Diagnostics: retained for a limited period for security and quality.
9. Security
We use industry-standard measures such as HTTPS/TLS in transit, password hashing (e.g. BCrypt), access control via authenticated tokens, and company-scoped (multi-tenant) data isolation. No method of transmission or storage is 100% secure; please protect your credentials.
10. Children’s privacy
HRC is intended for workplace use by adults. We do not knowingly collect data from children under 16 (or a higher age required in your jurisdiction) for consumer use of the App.
11. Your rights
Subject to applicable law and your employer’s policies, you may request to:
- Access, correct, or update profile information in the App.
- Request deletion of your account or face template (may require company admin action where they are the controller).
- Withdraw optional permissions (camera, location, notifications) in device settings — some features may stop working.
12. Third-party services
The App may use Google Firebase (Analytics, Crashlytics, Cloud Messaging) and email delivery for registration OTP (sent from supporthrc@ringme.vn). Those providers process limited technical or contact data under their own terms.
13. Changes
We may update this Policy from time to time. The “Last updated” date will change, and the current version will be published at https://hrc.ringme.vn/privacy.
14. Contact
Privacy / support inquiries:
Email: supporthrc@ringme.vn
(support & OTP sender)
Product: HRC · https://hrc.ringme.vn
Operator: RingMe