# Privacy Policy for WorkHub
**Last updated: August 11, 2026**
Công ty TNHH An Minh Cao Bằng ("we", "our", or "us") operates the WorkHub mobile and web application (the "Service"). WorkHub is an internal workforce management application for our employees and authorized personnel. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what choices you have.
By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
---
## 1. Information We Collect
We collect information necessary to operate the Service:
### 1.1 Account & Profile Information
- Email address, full name, phone number, job title, profile photo, cover image, and other details you or your administrator provide when creating or updating your account.
- Authentication identifiers from sign-in methods you choose: email/password, Google, Facebook, and/or Sign in with Apple (iOS).
- Account status (e.g., active, pending administrator approval, deactivated/deleted).
### 1.2 Work & Operational Data
- Tasks, posts, messages, comments, expense reports, leave requests, attendance records, documents, vehicle/fleet related check-ins, and other data you create or process through the Service as part of your employment or authorized role.
### 1.3 Location Information
WorkHub may access location data only for legitimate workforce purposes:
**Location while using the app (Foreground)**
- When collected: When you use features that require location, such as location check-in on posts or viewing attendance status.
- Purpose: Verify presence and support in-app attendance / work features.
**Background location (Optional — opt-in only)**
- When collected: Only if you explicitly enable automatic site attendance (“Tự chấm công khi vào/ra công trường”) and your account is configured by your administrator as requiring attendance tracking.
- Purpose: Detect when you enter or leave geofenced work-site areas configured by your employer, including when the app is not open, to support automatic time and attendance logging.
Important notes about location:
- Background location is **not required** to use WorkHub. You may decline and use manual attendance instead.
- Employees designated as attendance-exempt are not prompted for background location for attendance.
- Location data is used solely for internal attendance and workforce management. We do **not** use location for advertising, marketing, or selling data to third parties.
- Geofence areas are defined by your company's administrator.
### 1.4 Camera & Photo Library
- To capture or upload receipt images, operational documents, profile photos, and media attached to posts or messages. Access is requested only when you use these features.
### 1.5 Contacts / Address Book
- To let you manually select a contact to share in chat. WorkHub does **not** automatically upload your entire address book to our servers.
### 1.6 Microphone & Speech Recognition
- To support the in-app Assistant voice input feature, where available. Speech may be processed on-device when supported.
### 1.7 Biometrics (Face ID / Touch ID)
- Used only on your device to unlock the app or confirm login if you enable this feature. Biometric templates are **not** uploaded to our servers.
### 1.8 Push Notifications
- To send work-related alerts, including task updates, messages, and attendance enter/exit confirmations. You may disable notifications in your device settings.
### 1.9 Usage & Technical Data
- App version, device type, session logs, crash/diagnostic reports, and similar technical data to maintain security, diagnose errors, and improve the Service.
---
## 2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Authenticate users and manage access (including Sign in with Apple, Google, Facebook, and email login)
- Support internal HR and workforce activities (including time and attendance)
- Send notifications related to your work
- Improve reliability, security, and user experience
- Comply with applicable legal obligations
We do **not** use your personal information for third-party advertising or sell your personal data.
---
## 3. Account Creation, Linking & Approval
- Accounts may be created by an administrator or through supported sign-in methods.
- You may **link** Google, Facebook, and (on iOS) Apple Sign in to your existing WorkHub account from **Profile → Liên kết tài khoản**, so future social logins access the same account.
- New self-registered accounts created via social login (including Sign in with Apple) may remain in **pending administrator approval** (`inactive` until activated). During this period, full app features remain unavailable until an administrator activates your account.
- This approval workflow is for internal workforce control and does not remove your ability to initiate Sign in with Apple or request account deletion as described below.
---
## 4. Your Choices & Controls
You have meaningful control over certain data collection:
- **Automatic GPS attendance:** Optional. Enable or disable in WorkHub settings. You will see an in-app explanation before any background location permission is requested.
- **Device permissions:** You may revoke location, camera, contacts, microphone, notification, or biometric permissions at any time in your device settings. Some features may not work without the relevant permission.
- **Access & correction:** You may request access to or correction of your personal data via the in-app profile screens and/or by contacting us (see Section 10).
- **Account deletion:** See Section 7.
---
## 5. Disclosure & Sharing of Data
We do **not** sell, rent, trade, or otherwise transfer your personally identifiable information to third parties for marketing or advertising purposes.
We may share or disclose data only:
- With authorized administrators and managers within Công ty TNHH An Minh Cao Bằng for legitimate internal business and HR purposes
- With cloud infrastructure and service providers that help us host and operate the Service (for example authentication, database, push notification, and crash diagnostics providers), under contractual obligations to protect your data
- With identity providers you choose to use (Apple, Google, Facebook) solely to complete authentication
- When required by law, regulation, legal process, or governmental request
- To protect the rights, property, or safety of our company, employees, or others
All data sharing is limited to what is necessary to operate the Service.
---
## 6. Data Security
We implement commercially reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including encrypted transmission (HTTPS) where applicable.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
---
## 7. Data Retention & Account Deletion
We retain your personal data only as long as necessary to:
- Provide the Service while your account is active
- Fulfill legitimate internal business, HR, and legal record-keeping requirements
### How to delete your account
You can request deletion of your account and associated personal data by any of the following methods:
1. **In the WorkHub app (recommended):** open **Profile (Hồ sơ) → Xóa tài khoản**, confirm the prompts, and follow on-screen instructions. Processing may complete immediately after confirmation, subject to system processing.
2. **Email:** vucu868cb@gmail.com
3. **Internal administrator:** submit a formal request through your organization administrator.
Upon receiving a valid request, we will process deletion of your account and associated personal information from our active systems within **7 to 14 business days** (or sooner when completed via the in-app deletion flow), subject to any legal or legitimate retention requirements (for example payroll, tax, or statutory attendance records that the company is required to keep).
Temporary deactivation alone is not the only option: the in-app **Xóa tài khoản** flow is intended to delete the account record and associated personal data that we are not legally required to retain.
If you signed in with Apple, deleting your WorkHub account does not automatically delete your Apple ID. Manage Apple ID settings separately with Apple.
---
## 8. Children's Privacy
WorkHub is intended for authorized adult employees and personnel. We do not knowingly collect personal information from children under 16.
---
## 9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated policy in the app and/or on this public policy page and update the "Last updated" date. Material changes may also be communicated through the Service. Your continued use after changes constitutes acceptance of the updated policy.
---
## 10. Contact Us
If you have questions about this Privacy Policy, account deletion, or our data practices, contact us:
- **Email:** vucu868cb@gmail.com
- **Support (Zalo):** 0869024993
- **Company:** Công ty TNHH An Minh Cao Bằng
- **Address:** Phường Thục Phán, Tỉnh Cao Bằng, Vietnam
Public policy page: https://sites.google.com/view/workhub-anminh/trang-chủ