Last Updated: September 10, 2026
This Privacy Policy explains how CRID Haryana collects, uses, processes, stores, shares, retains, and protects information when authorized personnel use the Performance Management System ("PMS") mobile application.
The App is an employee attendance and workforce-management application intended only for authorized organizational and government users.
By using the App, users acknowledge the practices described in this Privacy Policy. Where required, the App requests specific permission and consent before accessing sensitive information such as precise location, camera data, face/liveness information, attendance photographs, and attendance videos.
We may process information associated with the authorized employee account, including:
Name
Username or email address
Mobile number
Employee or user ID
Designation
Department
Reporting officer
Profile photograph
This information is used for authentication, authorization, employee identification within the App, displaying the correct employee profile, administration, and support.
The App may process:
Mobile number
One-time password (OTP) transaction information
Session tokens
Login status
This information is used to authenticate authorized users, maintain secure sessions, and prevent unauthorized access.
Face data is not used to authenticate a user's identity or to log a user into the App.
When an authorized user marks attendance, the App may collect and process:
Attendance date and time
Attendance status
Employee/user identifier
Attendance location
Front-camera attendance photograph
Short attendance video
Related attendance and audit records
The attendance photograph and short attendance video are used only for attendance recording, verification, fraud prevention, and authorized attendance auditing.
The current version of the App does not intentionally record or upload microphone audio as part of the attendance video.
When attendance is marked, the App may collect:
Latitude
Longitude
GPS accuracy
Whether the location appears to be mocked
Location-service status
This information is used to verify that attendance is submitted from an appropriate location and to help prevent fraudulent or proxy attendance.
The App uses the device's front-facing camera during the Mark Attendance process.
Live camera frames are analyzed to obtain limited face/liveness information, including:
Whether a face is present
Whether more than one face is present
Face position
Head orientation or head direction
Eye-open or eye-closed probability
Blink detection
Completion of randomized liveness movements such as looking left, looking right, or blinking
The App uses these signals only to determine whether a live person is present during the attendance process and to reduce impersonation or proxy attendance.
The App does not use face recognition to identify an individual.
The App does not create or store a facial recognition template, face embedding, biometric identity profile, or faceprint for identifying a user.
The App does not use face data for:
Login authentication
Advertising
Marketing
Cross-app or cross-website tracking
User profiling
Behavioral advertising
Identifying anonymous users
Data-broker activities
For security, compatibility, fraud prevention, troubleshooting, and auditing, the App may process technical information such as:
Device identifier
Device type
Device model
Device manufacturer
Operating-system version
SDK version
App version
Build number
Physical-device status
Network type
Time zone
IP address where available to the server
Security or diagnostic information
If a user contacts CRID Haryana for support or a privacy request, we may process the information included in that communication to investigate and respond to the request.
Information may be:
Provided through an authorized organizational account
Entered directly by the user
Supplied by the responsible organization
Collected through device permissions granted by the user
Generated while the user uses attendance functionality
Generated during security, liveness, and fraud-prevention checks
The App requests access to sensitive device capabilities only when needed for the applicable functionality.
Before face/liveness processing begins, the App presents a clear disclosure explaining:
That the front camera will be used
That live face/liveness information will be processed
Why the information is required
That an attendance photograph and short video will be captured
That the attendance photograph and video will be transmitted to the PMS backend
That the information is used only for attendance-related purposes
The user must choose to continue before the face/liveness attendance process begins.
If the user does not agree, the user may cancel the attendance operation.
The App also requests the operating system's camera permission where required.
The App uses Google ML Kit Face Detection to analyze camera frames during the liveness process.
Face/liveness measurements such as head orientation, eye state, blink status, and face-presence information are processed on the user's device for the attendance liveness check.
These temporary liveness measurements are not separately uploaded to the PMS backend as a facial biometric template and are not stored as a persistent facial profile by the App.
The App does not send live camera frames to Google for remote facial-analysis processing.
After the liveness check is successfully completed, the App captures an attendance photograph and a short attendance video.
After successful completion of the liveness challenge, the App captures:
One attendance photograph; and
A short attendance video, generally approximately three seconds in duration.
These files are securely transmitted to the PMS backend for the specific purpose of:
Recording employee attendance
Verifying the attendance submission
Preventing impersonation or proxy attendance
Investigating disputed or suspicious attendance
Permitting authorized attendance auditing
Attendance photographs and videos are not used for advertising, marketing, behavioral profiling, or unrelated facial-recognition purposes.
During recording, the App provides an on-screen indication that the attendance capture or recording process is taking place.
Temporary copies of the attendance photograph and video may be created on the user's device while the attendance submission is being prepared and uploaded.
The App is designed to delete temporary local attendance photograph and video files after successful submission or when an attendance session is cancelled, discarded, or restarted.
The App does not intentionally save attendance photographs or videos to the user's personal Photos/Gallery library.
Camera access is required only when the user uses attendance functionality requiring face/liveness verification and attendance media capture.
Location access while using the App is required when attendance is marked so that the attendance location can be recorded and validated.
Internet/network access is required to:
Authenticate users
Communicate with PMS backend services
Upload attendance information
Upload attendance photograph and video
Retrieve employee profile information
Retrieve attendance history
Check for applicable App updates
Users may revoke camera or location permission through device settings.
If a required permission is denied or revoked, functionality that depends on that permission, including marking attendance, may not function.
Information collected through PMS is used only for legitimate application and organizational purposes, including:
Providing employee attendance functionality
Authenticating and authorizing users
Recording attendance
Verifying attendance time and location
Performing liveness checks
Preventing impersonation and proxy attendance
Displaying attendance history
Protecting App and backend security
Detecting potentially fraudulent activity
Maintaining technical reliability
Troubleshooting application issues
Investigating misuse
Performing authorized administrative and audit functions
Meeting applicable employment, legal, audit, and recordkeeping obligations
Responding to user support and privacy requests
Personal information and face data are not used for third-party advertising or cross-app tracking.
CRID Haryana does not sell, rent, trade, or provide face data to advertising platforms, analytics providers, data brokers, information resellers, or marketing companies.
Temporary face/liveness measurements used for head movement, blink, eye-state, and face-presence checks are processed on the device and are not separately transferred to third parties as a facial biometric profile.
The attendance photograph and short attendance video are transmitted from the device to the authorized PMS backend.
Attendance photographs/videos and related attendance information may be accessible only where necessary to:
Authorized CRID Haryana personnel
Authorized government or organizational administrators
Authorized supervisors
Authorized auditors or officials
Approved IT infrastructure or hosting providers acting on behalf of the responsible organization
Authorities where disclosure is required by applicable law
Any approved service provider that processes such information is expected to process it only for the authorized service and protect it in accordance with applicable contractual, legal, and organizational requirements.
Face data is not shared for advertising, marketing, profiling, or unrelated commercial purposes.
Live liveness measurements such as eye state, blink result, face presence, and head orientation are used temporarily during the on-device attendance check and are not stored by the App as a reusable facial biometric profile.
The attendance photograph and short attendance video are uploaded to and stored within:
[SERVER / DATA STORAGE LOCATION — INSERT THE ACTUAL PMS HOSTING LOCATION OR GOVERNMENT-CONTROLLED INFRASTRUCTURE DETAILS HERE]
These files are maintained only for authorized attendance verification, administration, security, audit, legal, or recordkeeping purposes.
Access to stored attendance media is restricted to authorized systems and personnel.
Temporary liveness measurements generated during the live face check are used only for the current attendance session and are not retained by the App as a persistent facial template or biometric profile.
Temporary attendance photograph and video files stored locally on the device are deleted after successful transmission or when the applicable attendance session is cancelled or discarded.
Attendance photographs and attendance videos stored on the PMS backend are retained for:
[FACE MEDIA RETENTION PERIOD — INSERT THE EXACT APPROVED PERIOD, FOR EXAMPLE "90 DAYS" OR "1 YEAR"]
After the applicable retention period expires, the attendance photograph/video will be deleted or otherwise handled in accordance with the responsible organization's approved legal, audit, employment, and government records-management requirements.
Where an applicable law, investigation, audit, court order, or binding government records policy requires longer retention, information may be retained for the legally required period.
Users may request access, correction, or deletion of eligible personal information by contacting:
Privacy email: rosy.gandhi-hry@hry.gov.in
Requests will be reviewed in accordance with applicable law and organizational requirements.
Certain official employee attendance, administrative, audit, or government records may not be immediately deletable where retention is required by law, government recordkeeping requirements, an active investigation, or binding organizational policy.
Where deletion applies, eligible information will be securely deleted or irreversibly anonymized as appropriate.
Apart from the face-data practices described above, personal information may be disclosed where necessary to:
Authorized administrators, supervisors, auditors, and officials of the responsible organization or government department
Approved hosting, infrastructure, security, communications, or support providers acting on our instructions
Government, regulatory, judicial, or law-enforcement authorities where disclosure is required or permitted by law
A lawful successor organization in connection with an authorized organizational restructuring, subject to applicable protections
We do not sell personal information.
We use reasonable administrative, technical, and organizational safeguards designed to protect information handled through PMS.
These safeguards may include:
Access controls
Authorized employee accounts
Authenticated sessions
Server-side security controls
Restricted administrative access
Secure network communication
HTTPS/TLS encryption during transmission
Security and audit controls
No electronic transmission or storage method can guarantee absolute security.
PMS information is processed on systems operated for or on behalf of the responsible organization and approved service providers.
Attendance face photographs and videos are stored as described in the Face Data Storage section of this Privacy Policy.
Where information must be transferred between systems or jurisdictions, such transfers will be handled according to applicable laws, government policies, security requirements, and contractual protections.
The Performance Management System is intended only for authorized workforce users.
The App is not directed to children and CRID Haryana does not knowingly use the App to collect personal information from children.
The App may use third-party technology required to provide its functionality.
Google ML Kit Face Detection is used for on-device face/liveness analysis as described in this Privacy Policy.
The App may also interact with Google Play or the Apple App Store for distribution, application updates, or version information. Those services process information according to their respective privacy policies.
Third-party SDKs or services included in production versions of PMS will be reflected, where required, in applicable Google Play Data Safety and Apple App Privacy disclosures.
We may update this Privacy Policy when:
PMS functionality changes
Our information-handling practices change
Applicable laws or government requirements change
App-store requirements change
New services or technologies are introduced
The revised Privacy Policy will be published at the applicable Privacy Policy URL and the Last Updated date will be changed.
Material changes may also be communicated within the App or through the responsible organization where appropriate.
For privacy, support, or data-related questions, please contact:
CRID Haryana
Privacy Email: rosy.gandhi-hry@hry.gov.in
Support Email: rosy.gandhi-hry@hry.gov.in
Phone: 0172-2748142