Privacy Policy

4. Face Data: collection and consent

“Face Data” means information related to a human face collected through Hajiri’s Face Attendance feature. When Face Attendance is enabled by an organisation and you choose to enrol or check in, Hajiri may collect one or more camera images or video frames of your face; facial landmarks, measurements or mathematical representations derived from those images (a “face template”); liveness, image-quality and match results; and the date, time, device, account and workspace identifiers needed to associate the attendance attempt with the correct user.

Hajiri does not collect Face Data merely because the app is installed or open. Collection begins only after Face Attendance is enabled for the workspace, the app presents a clear notice, camera permission is available, and you affirmatively start enrolment or an attendance attempt. A camera preview or other visible indicator is shown while capture is taking place.

Hajiri and the responsible organisation must obtain clear and conspicuous consent before the first collection or use of Face Data and again if the purpose materially changes. Face Data is not taken from Apple Face ID, the device passcode system or an unrelated photo library. Hajiri does not receive the biometric data stored by Apple Face ID.

• Enrolment images or frames you intentionally capture
• Derived facial landmarks or mathematical face template
• Liveness, quality and match results
• Attendance time, device, account and workspace identifiers

5. Intended uses of Face Data

Hajiri uses Face Data only to provide Face Attendance: create or update an enrolled face template; compare a new attendance capture with the enrolled template; determine whether the attempt matches the enrolled employee; detect basic spoofing or duplicate enrolment; record the result of the attendance event; prevent proxy or “buddy” attendance; investigate a reported matching error or security incident; and maintain the security and reliability of this feature.

Hajiri does not use Face Data to sign in to the app or authenticate access to an account, serve advertising, perform marketing, target a user, infer mood or sensitive characteristics, build an advertising or behavioural profile, identify unknown people, train a general-purpose facial-recognition or artificial-intelligence model, or for any purpose unrelated to the user-requested Face Attendance function. Hajiri does not sell or rent Face Data.

6. Face Data storage and security

When production Face Attendance requires server-side matching or synchronisation, the captured Face Data is transferred from the device using encrypted transport and stored in access-controlled systems used to provide Hajiri. Stored face templates and any temporarily retained capture are protected with safeguards appropriate to sensitive data, including encryption at rest where supported, least-privilege access, logging and restricted production access.

Authorised workspace administrators may see enrolment status, attendance results and operational audit information. They are not given unrestricted access to raw Face Data through ordinary product screens. Access by Hajiri personnel is limited to personnel who need it for security, support, legal compliance or operation of Face Attendance.

7. Face Data sharing and equal protection

Hajiri does not share Face Data with advertising platforms, analytics providers, data brokers, information resellers or social networks. Face Data is not disclosed to another organisation for its independent use.

Face Data may be processed only by Hajiri, the organisation responsible for your workspace, and carefully selected service providers that supply secure cloud hosting, storage, backup, security or face-matching infrastructure solely on Hajiri’s instructions. We disclose only the Face Data necessary for that service. We may also disclose limited Face Data if legally compelled, or when necessary to investigate fraud, abuse or a serious security incident, subject to applicable law.

Every third party or service provider that processes Face Data for Hajiri must be bound by written confidentiality, security, purpose-limitation, retention and deletion obligations that provide the same or an equal level of protection as this Privacy Policy. Such a provider may not sell Face Data, use it for advertising or profiling, combine it for an unrelated purpose, train a general-purpose model with it, or retain it after the authorised service and retention period end. Hajiri remains responsible for requiring and overseeing these protections.

8. Face Data retention

An enrolled face template is retained only while Face Attendance remains enabled for the user and workspace, or until consent is withdrawn, the template is replaced, the user leaves the workspace, the account is deleted, or the organisation instructs Hajiri to delete it—whichever occurs first. After a valid deletion event, the active face template is scheduled for deletion within 30 days.

Images or video frames captured during a successful attendance comparison are used to calculate the template or match result and are deleted from active systems as soon as the comparison and necessary security checks are complete, normally within 24 hours. If an attendance attempt fails or is reported as fraudulent, a limited capture may be retained for up to 30 days solely to investigate and resolve that incident, unless a longer period is legally required.

Encrypted backups may retain deleted Face Data for up to 90 additional days before routine overwrite. Backup copies are isolated from ordinary product use and are not restored except for disaster recovery, security or legal necessity. If restored, the deletion instruction is reapplied. Non-face attendance records—such as employee name, check-in time, location if enabled, shift, method and approval history—may be retained separately under the organisation’s lawful employment, payroll and audit policy.

9. Revoke consent and delete Face Data

You may withdraw consent for future Face Data collection or use at any time. Turning off Hajiri camera permission in Android or iOS settings stops new camera capture. Because changing device permission does not delete Face Data already enrolled, you must also request removal of your Face Attendance enrolment through your workspace administrator or through Hajiri’s Account and Data Deletion page.

A verified request to delete Face Data removes the active enrolment template and any eligible retained face captures within 30 days, with isolated backup deletion completed through the backup cycle described above. We will confirm completion or explain any narrow legal restriction. Withdrawing consent or deleting Face Data does not delete the entire Hajiri account unless you separately request account deletion, and it does not erase non-face attendance, payroll or audit records that the responsible organisation must lawfully retain.

After withdrawal, the organisation should provide a reasonable non-face attendance method where required by applicable law or workplace policy. Hajiri will not collect new Face Data unless you later receive the notice and provide fresh affirmative consent. To exercise these choices, visit https://hajiri.com/account-deletion/ or use the Hajiri contact page with the subject “Face Data request”. Do not send a face image, password, one-time code or identity document through ordinary channels.