Privacy Policy

Data Categories Collected

• Identity data: name, surname, employee record and National ID verification value may be processed.
• Contact data: phone number is used for SMS OTP and account verification.
• Location data: collected only during GPS-based punch in or punch out actions.
• Camera access: used only for QR scanning; camera images are not stored by the app.
• Notification token: may be used for shift, leave, approval and operational notifications.
• App activity records: punch, leave, overtime, approval and feedback records are stored in the organization's system.

Purpose Of Processing

• Identity and session verification
• Workforce attendance and mobile time tracking
• Leave, overtime, shift and manager approval workflows
• Security, audit logging and prevention of unauthorized access
• Internal operational notifications
• Application performance and diagnostics, only when enabled by the organization

Location, Camera And Notifications

Location permission is used only when a user starts a GPS punch action. Camera permission is used only when the QR punch flow is opened. Notification permission is used for operational updates such as shifts, leave, approvals and attendance reminders.

If a user denies these permissions, only the related GPS or QR feature becomes unavailable. Other self-service and approval screens remain available.

Data Sharing And Third Parties

Data is not shared with third parties for commercial purposes. Data may be processed by the organization's FAST PDKS system and authorized service providers required for the service to operate.

• FAST PDKS API: employee, attendance, leave, approval and operational records
• SMS provider: OTP delivery
• Firebase/APNs: push notification delivery
• Diagnostics provider: diagnostic records only when enabled by the organization

Retention And Security

Employee, attendance, leave and approval records are retained according to organizational policies and legal retention requirements. Sensitive session data is stored in secure storage on the mobile device and cleared when the user logs out. Production data transfer must use HTTPS/TLS.

User Rights And Contact

Users may send access, correction, deletion and objection requests through their organization's HR or system administrator.

For FAST Mobile support and privacy requests: info@fastcom.com.tr