Verby Privacy Policy

Introduction

Verby Platforms LLC (“Verby Platforms,” “Verby,” “we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you use our mobile application and our platforms (collectively, the “Services”).

Please read this Privacy Policy carefully. If you do not agree with its terms, please refrain from accessing or using the Services.

Information We Collect

1. Personal Information

• Employee Identification Data: Employee ID, Full Name, PIN Codes, Role, and assigned identifiers
• Authentication Information: Login credentials, authentication tokens, and device identifiers
• Contact Information: Email addresses used for account management and communication

2. Biometric Data

We may process biometric data strictly for identity verification, attendance validation, and fraud prevention.

• Facial Recognition Data: Facial images and biometric templates generated during registration and verification
• Voice Data (If Enabled): Short voice samples used for optional voice verification and fraud prevention

Important:

Voice data is used solely for authentication purposes, is not continuously recorded, and is handled in accordance with applicable biometric data protection laws.

All biometric data is processed locally on the device only. Facial and voice data never leave the device, are not transmitted, uploaded, or shared with third parties.

Biometric data is never sold, rented, or used for advertising or marketing purposes.

Biometric authentication only occurs when initiated by the user.

The application does not continuously monitor or record facial images or voice data.

3. Attendance and Work Data

• Time Tracking Information: Check-in and check-out times, break records, and work session details
• Work Assignments: Department, role, and task-related assignments
• Attendance Records: Attendance history and activity logs

4. Device and Technical Information

• Device identifiers, operating system version, and device specifications
• Network information such as IP address (used for security and synchronization)
• Camera and Audio Access:
  • Camera access for facial recognition
  • Microphone access (optional) for voice verification and fraud prevention
• Local storage access is used to securely store attendance records and biometric templates on the device.

5. Local Application Storage

• Encrypted data using AES-256
• Local biometric templates and attendance records
• Encrypted local backups for recovery

How We Use Your Information

Primary Purposes:

• Employee identity verification
• Attendance validation
• Fraud prevention
• Work assignment and access management
• User authentication
• Preventing unauthorized access
• Maintaining application security
• Synchronizing attendance records
• Improving application reliability
• Complying with legal obligations

Biometric Data Processing and Consent

• Explicit and informed consent required
• On-device, offline processing only
• No continuous recording
• No transmission to servers or third parties
• Consent withdrawal and deletion supported

Users may withdraw consent for biometric processing where permitted by applicable law.

Locally stored biometric data may be deleted at any time through the application's Settings menu.

Data Storage and Security

• AES-256 encryption
• HTTPS/TLS-secured transmission
• Role-based access control
• Secure authentication mechanisms
• Security monitoring and periodic security reviews

While we implement industry-standard security measures, no method of electronic storage or transmission can be guaranteed to be completely secure.

Data Sharing

We may share personal information only with your employer, authorized administrators, service providers supporting the operation of the Services, or government authorities where required by law.

We do not sell personal information.

We do not share biometric templates with third parties.

International Data Transfers

If personal information is processed outside your country of residence, appropriate safeguards are implemented in accordance with applicable privacy laws.

Your Rights and Choices

• Access your personal data
• Correct inaccurate data
• Request deletion (subject to legal requirements)
• Withdraw consent
• Restrict processing
• Object to certain processing activities
• Request data portability
• Lodge a complaint with the appropriate data protection authority

Data Retention

• We retain personal information only for as long as necessary to provide the Services, maintain employment records, comply with legal obligations, resolve disputes, and maintain system security.
• Attendance records may be retained in accordance with employer policies and applicable legal requirements.
• Locally stored biometric templates remain on the device until deleted through the application's Settings menu.

Employer Responsibilities

Your employer is generally responsible for determining how employee attendance information is collected, used, and retained. Verby provides the software and processes information in accordance with agreements with the employer and applicable law.

Children’s Privacy

The Services are not intended for individuals under 16 years of age. We do not knowingly collect data from children under 16.

Data Breach Notification

If a security incident affecting personal information occurs, we will investigate the incident and provide notifications where required by applicable law.

Compliance

• GDPR
• FADP / nFADP
• CCPA
• Applicable U.S. biometric privacy laws
• Other relevant regulations

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be reflected by a revised Effective Date. Continued use of the Services after such updates constitutes acceptance of the revised Privacy Policy.

Contact

If you have any questions or wish to exercise your privacy rights, please contact your employer or your employer’s system administrator.