Privacy Policy

1. Information We Collect

CrewPass may collect the following categories of information:

• Employee profile data such as employee code, name, role, and internal identifiers.
• Authentication data such as login sessions, hashed PIN-based access credentials, and session activity.
• Shift activity data such as shift open time, shift close time, duration, sync status, and related attendance identifiers.
• Device-related data such as per-install application device identifier and basic request metadata needed to keep a single active mobile session.
• A device push-notification token associated with the active login session when notifications are enabled.
• NFC interaction data required to detect that a workplace tag was scanned in the app workflow.
• Optional employee profile photos and courier route-sheet photos selected from the device photo library.
• Bluetooth scan results used to verify proximity to a configured workplace beacon; CrewPass does not use this scan to derive precise GPS location.
• Administrative and support data such as remote close request comments, audit log records, and admin session activity.

2. How We Use Information

• Authenticate employees and administrators.
• Open and close work shifts in CrewPass and connected business systems.
• Sync attendance and shift state with connected Syrve / iiko infrastructure.
• Send operational notifications, including Telegram alerts for shift events and remote close requests.
• Deliver employee messages in the application and as device push notifications.
• Maintain audit trails for shift operations, troubleshooting, security review, and service reliability.

3. Mobile Permissions and Platform Use

CrewPass uses NFC access on supported devices to detect workplace tags used for shift opening and shift closing workflows. The application does not read payment card data and is not intended for consumer payment use.

• On iPhone and Android, CrewPass requests NFC access only for the shift scan workflow.
• Bluetooth access is used when the configured shift workflow verifies that a workplace beacon is nearby.
• Photo-library access is used only when an employee chooses a profile photo or a courier attaches a route sheet.
• The app uses internet access to communicate with the CrewPass backend and connected business systems.
• The app does not use contacts, microphone, health data, advertising identifiers, or payment card data for the normal CrewPass workflow.
• If a feature is not enabled in your company setup, CrewPass does not intentionally collect data for that feature.

4. Data Sharing

We do not sell personal information. Data may be shared only as needed to operate the service, including:

• Connected Syrve or iiko systems for attendance and shift synchronization.
• Telegram, when administrators enable Telegram notifications for operational workflow messages.
• Google Firebase Cloud Messaging and Apple Push Notification service, when device notifications are enabled.
• Infrastructure providers used to host the service, database, and application backend.

5. Data Retention

Shift records, sync results, operational logs, and administrative settings may be retained for as long as reasonably necessary to operate the service, maintain records, comply with legal obligations, and resolve disputes or security incidents.

6. Security

We use reasonable technical and organizational measures to protect data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is guaranteed to be completely secure.

7. Your Choices and Rights

Depending on your location and your relationship with the business using CrewPass, you may have rights to request access, correction, or deletion of certain personal information. Employees should contact their employer or CrewPass support for privacy-related requests.

8. Contact