This policy explains what OFNIR Constructions (Pvt) Ltd collects when you use the OFNIR mobile app or the OFNIR admin panel, why we collect it, who can see it, and what you can ask us to do with it.
On this page
1. Who we are
OFNIR Constructions (Pvt) Ltd of Jaffna, Sri Lanka is responsible for the personal information described in this policy. In this document, “we”, “us” and “our” mean that company.
2. Who this software is for
the OFNIR mobile app and the OFNIR admin panel are internal business tools. They are used by our employees, our site staff and authorised office administrators to record attendance, manage construction sites, and keep the company’s purchase, stock and payroll records. They are not consumer products and are not open to public sign-up: an account is created for you by the company.
3. What we collect
We collect only what the work requires. In practice that is:
- Account and identity
- Your name, employee code, mobile number, email address, job role and profile photo, along with the password you use to sign in. Passwords are stored only as a one-way hash — we cannot read yours, and neither can anyone else with access to the database.
- Attendance and location
- When you check in to a site, the times you check in and out, the site you selected, and the location readings taken while you are checked in. Section 4 sets this out in full.
- Device and technical information
- Your IP address, whether you are using the Android app, the iOS app or a web browser, your device model, the app version, and your browser’s user-agent string. Where the app has permission, the location reading taken at the moment of an action is recorded with it.
- Activity records
- A log of significant actions taken in the system — signing in and out, including failed sign-in attempts, and the creation, change or deletion of business records — together with who did it and the device and network details above. This is an audit trail: it exists so the company can answer questions about its own records, and it cannot be edited or deleted from within the software by anyone, including administrators.
- Work records you enter
- Purchases, invoices, goods-received photographs, stock movements, petty-cash entries, work logs, complaints, leave and overtime requests, and the messages you send through the app’s chat.
- Payroll information
- Days worked, overtime, allowances, deductions and payslips, to the extent the company processes your pay through this system.
We do not collect your contacts, your photo library beyond the individual images you choose to attach, your messages outside this app, or your browsing on other apps and websites. We do not use advertising trackers, and we do not sell personal information to anyone.
4. Location, in detail
Location is the most sensitive thing this app handles, so it is worth being exact about it.
- When it is collected. Only while you are checked in to a site. Checking in starts it; checking out stops it. When you are not on an active attendance session, the app does not record your location.
- What is recorded. Your latitude and longitude, the accuracy the device reported, the distance between you and the site boundary, and whether that puts you inside or outside it. The app also records when you cross a site boundary, and when location signal is lost or resumes.
- Why. To confirm that attendance was marked at the site it was claimed for, so that hours and pay are calculated on an accurate record.
- Background collection. To keep an attendance session honest while your phone is in your pocket, the app may read your location while it is in the background during that session. It does not do so at any other time.
- Refusing or withdrawing it. You can deny or revoke location permission in your device settings at any time. Doing so does not stop you using the rest of the app, but geofenced check-in will not work, and attendance may then have to be recorded and approved manually by your supervisor.
5. Why we collect it
We use the information above to:
- let you sign in and keep your account secure;
- record attendance and calculate hours, overtime and pay;
- run the company’s projects, purchasing, stock and accounts;
- send you notifications about your work, approvals and requests;
- keep an audit trail so the company can trace who changed a record, and detect and investigate misuse of the system; and
- meet our obligations as an employer, including tax and labour records.
We rely on our need to perform the employment relationship and to run the business, and on our legal obligations as an employer, to process this information. Where the law requires your consent for something — device location being the clearest example — we ask for it through your device, and you can withdraw it there.
6. Who we share it with
Your information stays within the company. Inside it, access depends on role: your supervisor and the office staff who administer attendance, payroll and projects can see the records relevant to their work. We do not share it with anyone else, except:
- Service providers who host the system or deliver its push notifications, and who process the information only on our instructions;
- Professional advisers such as our accountants and auditors, where they need it to advise us; and
- Authorities, where we are required to disclose it by law or by an order of a court.
7. How long we keep it
We keep your account and work records for as long as you are employed and for as long afterwards as employment, tax and accounting law requires us to. Attendance, payroll and accounting records are kept for the statutory retention period. Location readings and audit-trail entries are kept for as long as they may be needed to answer a question about the records they support.
When an account is closed, the audit trail keeps the name that was on the actions already recorded. An audit trail that empties itself when somebody leaves would not be an audit trail.
8. How we protect it
- Passwords are stored as one-way hashes and are never recoverable in plain text.
- Access is controlled by role: people see the parts of the system their job requires and no more.
- Traffic between the app and our servers is encrypted in transit.
- Sign-in attempts are rate-limited, and failed attempts are recorded.
No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal information, we will tell you and the relevant authority where the law requires it.
9. Your rights
You may ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct anything that is wrong;
- delete information we no longer have a lawful reason to keep;
- restrict or object to a particular use; or
- explain a decision the system reached about your attendance or pay.
Write to us at ofnirconstruction@gmail.com and we will respond within a reasonable time. Some records — attendance, payroll and accounting entries — we are obliged to keep even if you ask us to delete them, and we will tell you when that is the case.
10. Children
This software is for employed adults. It is not intended for children, and we do not knowingly create accounts for anyone below the legal minimum working age.
11. Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the date at the top. Where a change is significant, we will also tell you through the app.
12. Contact us
For any question about this policy, or to exercise any of the rights above:
OFNIR Constructions (Pvt) Ltd
Jaffna, Sri Lanka
Email: ofnirconstruction@gmail.com
See also our terms and conditions.