Privacy
Policy.

Effective and last updated: 15 November 2026.
App name: Worker
Android package: com.sdpl.wagesapp
Provider and privacy contact: Samoon Digital Private Limited · samoondigital@gmail.com

Worker (“App”) helps you keep Personal (Labour/Self) and Team (Contractor) attendance, earnings and payment records. This policy explains how we collect, use, share, retain and protect information in the App and its related online services. It replaces the earlier app privacy notice hosted on Google Sites. This is the app policy; our website privacy notice covers browsing this company website.

1. Information we process

Google account and profile: your name, email address, Google account identifier and available profile photo, together with authentication/session information and the app profile details you save. One Google account can own Personal and Team profiles.

Mobile numbers and work records: your own mobile number where required for Personal setup, worker names and contact numbers, attendance, dates, wage rates, earnings, payments, advances, notes and related saved history. These records may concern you or people whose information you enter. Recording a payment does not itself transfer money. The App does not need bank passwords, card details or OTPs for these records.

Notifications and technical information: attendance updates, receiving preferences, sender blocks, delivery/device registrations, installation and push identifiers, app/device and operating-system information, usage events, crash diagnostics, and technical or security logs. Network providers may process IP addresses and request information when delivering and protecting the service.

Support: your email address and the information you choose to send when asking for help, correction, access or deletion.

2. Permissions and contact selection

Contacts: optional Android contacts access helps show names and phone numbers on the worker-selection screen. Depending on the Android version and flow, a system contact picker may return only the contact you select. The in-app contact list is read on your device. Only the details you choose and save as a worker become part of your synced records; we do not upload your entire address book. You can continue with manual worker entry and manage permission in Android settings.

Your mobile number: where supported, Google Phone Number Hint helps you choose an available number during Personal setup; manual entry is available if it is unavailable, fails or is cancelled. A valid number is required to continue into Personal. Team setup does not require your own number. Number selection does not require SMS, call-log or phone-state permission. We do not read your SMS or use OTP verification for attendance matching.

Notifications: Android notification permission controls alerts displayed on the phone. The app’s receiving preference controls attendance updates in your account inbox. Turning off OS permission alone does not disable the server inbox. You can manage permissions in Android settings and supported notification choices in the App.

3. Why we use information

We use information to provide sign-in, account/profile management, attendance and payment recordkeeping, local/offline access, cloud synchronisation, reports and user-requested sharing. We also use relevant information for phone-matched attendance updates, support, abuse prevention, account deletion, service maintenance and reliability improvements. Firebase Analytics helps us understand app usage; Crashlytics helps diagnose failures; Remote Config supports operational settings such as maintenance status.

We do not sell personal information or use wage records for advertising. The current App does not include an advertising SDK or paid subscription flow. If we introduce advertising or purchases, we will update applicable disclosures and request any required permission or consent before those practices apply.

4. Attendance updates and phone matching

When a contractor’s attendance entry or correction is saved online, an enabled eligible account whose number matches the worker’s recorded number may receive an update. Update details may include the sender’s name, attendance date, wage amount and correction status. This content can appear in the account inbox and in a device notification, including on a lock screen depending on your settings.

Numbers are user-provided or selected and are not verified through OTP. Matching is not proof of identity or number ownership. Numbers can be shared, entered incorrectly or reassigned, so keep them accurate. Ambiguous matches are not assigned to an arbitrary account. Receiving an update does not grant access to the contractor’s ledger or automatically add earnings to your Personal records.

You can manage receiving preferences, correct your own number in Personal settings, block a sender from an update, or contact us about incorrect information. Disabling receiving does not erase existing records automatically. The contractor may retain their own worker and attendance records independently.

5. Service providers and disclosures

We use Google for sign-in and supported phone-number selection; Cloudflare for backend hosting, databases, security and background processing; and Firebase/Google for Cloud Messaging, Analytics, Crashlytics, installation services and Remote Config. Providers process information relevant to these functions and may process it outside your country. Attendance notification content passes through Google/Firebase for delivery.

Provider privacy information: Google Privacy Policy, Firebase privacy and security information, and Cloudflare Privacy Policy.

Saved records are associated with the account that created them. Phone-matched notifications disclose the update described above to the matching recipient; they do not share the full ledger. Reports you export or share go to the applications and recipients you choose. We may also disclose information when required by law or reasonably necessary to protect users, prevent abuse or secure the service. We do not publicly publish your private ledger.

6. Local storage, retention and security

The App keeps account-related local records and caches on your device to support offline use and incremental sync. Unsynchronised changes may be lost if you clear app storage or uninstall. Android device backups may include eligible app data depending on your device and backup settings; the backup provider’s rules apply. Reports and copies you save outside the App remain under your control.

Account, ledger and sync-history records are retained to provide saved history until account deletion, subject to necessary legal or security retention. Marking a record inactive, archived or void may preserve its historical information rather than permanently erase it.

Inbox updates, accepted-device receipts and inactive device registrations are generally eligible for cleanup after approximately 90 days. Completed delivery-processing records and resolved failure archives are generally eligible after approximately 30 days. Pending, held or unresolved delivery work may remain for recovery. Cleanup can be delayed by maintenance or operational failures. Limited security, deletion-audit information and copies retained under service providers’ own retention policies may remain longer. We do not promise that every record is erased on an exact day.

We use HTTPS, account-based access controls and protected authentication storage to help safeguard information. No device, network or storage system can be guaranteed completely secure. Protect your Google account, phone and any exported reports, and contact us if you suspect misuse.

7. Your choices, rights and account deletion

You can manage supported account details, your Personal number, receiving preferences, sender blocks, contact permission and OS notifications through the App or Android settings. You can email us to request access, correction, deletion or help with your information, and exercise any rights available under applicable law.

Delete in the App: while signed in and online, open Settings → Delete my account, review the warning and confirm. This requests removal of your account, both Personal and Team profiles, and associated records from active systems, subject to the limited retention described above. Uninstalling alone does not delete the online account.

Request deletion without the App: email samoondigital@gmail.com from your registered email address with the subject Account Deletion Request — Worker and package name com.sdpl.wagesapp. We may need to verify account ownership. Never send your password, OTP or identity documents unless a specific lawful verification process has been explained to you.

Deleting your account does not automatically erase reports already exported or records independently maintained by another user, such as a contractor’s own ledger. Contact us about information others have entered about you. Deleting app account data also does not automatically erase information separately retained by Google, Firebase or other providers under their own policies; contact us if you need assistance with a privacy request.

8. Children, changes and contact

The App is intended for adults aged 18 and above and is not directed to children. Contact us if you believe a child has provided personal information so that we can investigate and take appropriate action.

We may update this policy as the service changes. The revised policy will show its effective date. We will provide additional notice or seek consent where required for material changes.

Privacy contact: Samoon Digital Private Limited
Email: samoondigital@gmail.com
Related: Terms of Service