Privacy Policy

Effective date: 20 June 2026

Last updated: 21 June 2026

1. Data We Collect

We only collect data needed for attendance and leave functions:

a. Employee Identity

• Employee number, name, work unit, and position already registered in the RSUD Langsa personnel system.
• Used to identify who performs an attendance check-in or a request.

b. Location (GPS)

• We capture the device's precise location at the moment you check in to ensure attendance is taken within a valid work area.
• Location is not tracked continuously and is not collected in the background — only when you tap the check-in button.

c. Selfie Photo

• The App takes a photo of your face via the camera during check-in as proof of attendance.
• Photos are stored in RSUD Langsa's private storage and accessible only to authorized administrators.

d. Face Detection (On-Device)

• The App checks whether a face is present in the check-in photo. This runs entirely on your device.
• We do not create, store, or transmit biometric data (face templates/embeddings) to any server.

e. Device Information

• Device identifier and model are collected for the "device lock" security feature to prevent buddy-punching (checking in on behalf of others).

f. Notification Token

• A notification token (Firebase Cloud Messaging) is used to send attendance reminders and leave-request status updates.

g. Leave Requests & Attachments

• When you submit leave, time-off, sick leave, or official-duty requests, we store the request type, dates, reason, and approval status.
• You may attach supporting files (e.g. a doctor's note or assignment letter). Such files may contain health information and are treated as sensitive data — stored in private storage and accessed only by staff authorized to process the request.

h. Problem Reports

• If you report an issue, you may attach a screenshot and description to help the IT team follow up.

2. How We Use Data

• To record and verify employee attendance.
• To ensure attendance is taken at a valid location and from an authorized device.
• To process leave requests and their approvals.
• To send attendance reminders and request-status notifications.
• To handle problem reports and personnel administration.

We do not use your data for advertising and do not sell data to anyone.

3. Data Sharing

We do not share your personal data with third parties, except:

• Google Firebase Cloud Messaging — solely to deliver notifications (device token only, not photos/location/attachments).
• Where required by applicable law or regulation.

All attendance and leave data (photos, location, attachments, attendance records) is stored on infrastructure managed by RSUD Langsa.

4. Storage & Security

• Data is stored on RSUD Langsa servers and private storage with restricted access.
• Communication between the App and the server uses an encrypted connection (HTTPS).
• Attendance and leave data is retained for as long as needed for personnel administration in accordance with applicable regulations.

5. Permissions Requested

• Location — to validate the check-in location (only when you tap check-in).
• Camera — for the attendance selfie and, where needed, to photograph a request attachment.
• Notifications — for attendance reminders and request status.

To attach leave files, the App uses the system's built-in file/photo picker. The App only receives the file you choose yourself and does not access your entire gallery or device storage.

You may decline or revoke these permissions in your device settings, though some functions may not work.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting the RSUD Langsa IT team via the contact below, to the extent this does not conflict with personnel data-retention obligations.

7. Account Deletion / Deactivation

App accounts are linked to personnel records and are not self-created by users. You can request account deactivation and deletion of personal data via our Account Deletion page. Certain attendance records are retained as official personnel archives in accordance with applicable regulations, as explained on that page.

8. Children

This App is intended only for RSUD Langsa employees and is not directed to minors.

9. Changes to This Policy

We may update this policy from time to time. Changes will be published on this page along with the update date.

10. Contact

RSUD Langsa IT Team
Email: teamitrsudlangsa@gmail.com
Website: absensi.e-rsudlangsa.id