TrellisCo Bio

Effective date:August 12, 2026

Introduction

This Privacy Policy explains how IMC BUSINESS SOLUTIONS LLP ("we", "our", "us") collects, uses, stores, and protects information when you use the TrellisCo Bio mobile application (the "App"), also referred to as Trellisco Face (package `com.trellisco.biometric`).

The App is an enterprise attendance and time-tracking tool intended for use by businesses to verify employee check-in/check-out through face recognition. It is provided to you by, and on behalf of, your employer or organization. Where the App processes data on behalf of your employer, your employer acts as the data controller and we act as the data processor.

By installing or using the App, you agree to the practices described in this Privacy Policy.

Information We Collect

| Category | Details | Why We Collect It |

| Face images | Photographs captured by the device camera during check-in/check-out, breaks, and face registration. | To verify your identity against your registered face profile, perform liveness detection, and record attendance. Face detection and blink-based liveness analysis are performed on your device using Google ML Kit; the captured image is transmitted securely to our servers for identity verification. |

| Location data | Approximate (coarse) and precise (fine) location, captured only when your employer has enabled geo-fencing. | To validate that attendance and break punches occur within an authorized office location. Location is not collected when geo-fencing is disabled. |

| Login credentials | Client ID, username, and password. | To authenticate your access to the App and its attendance services. Credentials are transmitted securely over HTTPS. |

| License and device identifiers | License key, client ID, device ID (Android ID or a generated unique identifier), and device name (manufacturer and model). | To activate and validate your license and to register the device with our license server. |

| Attendance records | Check-in/check-out and break timestamps returned by our servers. | To display your attendance status and history. |

How We Use the Information

We use the information we collect to:

- Verify your identity through face matching and liveness detection;

- Record and manage attendance, break, and check-in/check-out events;

- Validate attendance within employer-defined geo-fenced locations;

- Authenticate your account and maintain your session;

- Activate and manage licenses on devices;

- Provide, operate, and improve the App and related services;

- Respond to support requests and fulfill legal or compliance obligations.

We do not use your data for advertising, marketing, or profiling purposes.

Legal Basis for Processing

We process personal information based on:

- Employment / employer authorization — the App is provided by your employer for attendance management;

- Legitimate business interests— operating and securing the attendance service;

- Your consent, where required by applicable law (for example, for location access), which you may withdraw at any time through your device settings.

Local Data Storage

Certain data is stored locally on your device:

- Session information (username, access/refresh tokens, client ID, employee tokens) stored in the App's private storage;

- License activation details (activated client ID, device ID).

This data remains on your device and is cleared when you log out or uninstall the App.

Third-Party Services

The App uses the following third-party services:

| Service | Purpose | Data Shared |

| Google ML Kit Face Detection | Face detection and blink-based liveness analysis | Runs **on-device**; no face data is sent to Google |

| Google Play Services (Location) | Obtain the device's current location | Location data (only when geo-fencing is enabled) |

| Our servers (`trellisco.in`) | Login, token refresh, face verification, attendance, break, and admin APIs | Face images, credentials, location, attendance data |

| Our license server (`activate.imcbs.com`) | License validation and device registration | License key, client ID, device ID, device name |

All network communication with our servers is encrypted using HTTPS.

Permissions

| Permission | Purpose |

| Camera| Capture photos for face verification and liveness detection |

| Internet | Communicate with our servers |

| Location (fine/coarse) | Geo-fence attendance validation (only used when enabled by your employer) |

Data Sharing

We do not sell or rent your personal information to anyone. We do not use advertising or tracking SDKs. We share information only:

- With your employer or organization, as necessary for attendance management;

- With our service providers and processors, who act on our instructions and are bound by confidentiality obligations;

- Where required by law, regulation, legal process, or government request.

Data Retention and Deletion

We retain personal information only as long as necessary to provide the attendance service and to comply with applicable legal obligations. Retention periods are generally governed by your employer's data-retention policies.

To request access, correction, or deletion of your personal data, or to exercise any data-subject right, contact us at the address below. We will respond in accordance with applicable law.

Security

We take reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), token-based authentication, and restricting access to personal data to authorized personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

The App is not directed at children under the age of 13, and we do not knowingly collect personal information from children.

International Data Transfer

Your information may be processed in countries other than your country of residence. Where we transfer personal data across borders, we rely on appropriate safeguards as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, where appropriate, notify you through the App or the app store listing. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

IMC BUSINESS SOLUTIONS LLP

Email: enquiry@trellisco.in