Welcome to DiT ERP, developed and operated by Dutt IT Solutions Pvt. Ltd.. We are committed to protecting the privacy and personal data of our enterprise users and employees.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related enterprise services.

Please read this Privacy Policy carefully. By using the Application, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We only collect information necessary to provide efficient Enterprise Resource Planning (ERP) and Human Resource Management (HRMS) features.

A. Personal Identification & Employment Data

When you log in or use the Application, we may collect:

• Full Name, Employee Code/ID, Official Email Address, and Phone Number.
• Designation, Department, Shift Details, and Reporting Manager.
• Employment records (attendance logs, leave applications, expense claims, payslip data).

B. Location Information (GPS & Geofencing)

• Precise and Coarse Location: With your explicit permission, the Application accesses your location (ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION) to verify your presence at designated office geofence locations during Attendance Check-in / Check-out.
• Background Location: If enabled by your organization, the Application may access location in the background (ACCESS_BACKGROUND_LOCATION) solely to verify geofenced work zones during your official work shift.
• Notice: Location data is never shared with third parties for advertising and is never tracked outside of official attendance and workday management functions.

C. Camera, Photos & Documents

Camera & Storage Access: We may request access to your camera and file storage strictly when you choose to:

• Upload profile photos.
• Upload expense receipts and bills for reimbursement claims.
• Upload official employee verification documents.

We do not scan or access your private photo library outside of the specific files you select.

D. Device & Technical Information

• Device identifiers (Device ID, Model, Operating System version) to enforce single-device login security policies.
• Push Notification Tokens (Firebase Cloud Messaging) to send real-time alerts regarding leave approvals, tasks, and company announcements.
• Crash and performance logs to ensure application stability.

E. Biometric Data

If you enable fingerprint or Face ID lock on your device, biometric authentication is handled entirely by your device's operating system (Android BiometricPrompt / iOS Keychain). We do not store or transmit your raw biometric data.

2. How We Use Your Information

We use the collected information solely for internal business operations:

• Attendance & Workforce Management: To record attendance timestamps, track work shifts, and validate geofence boundaries.
• Leave & Regularization Workflow: To process leave requests, approvals, and early exit applications.
• Expense Claims & Payroll: To process employee reimbursement claims with receipt verification and generate payslips.
• Task & Project Management: To assign, track, and monitor task deadlines.
• Security & Authentication: To authenticate users securely using encrypted tokens and prevent fraudulent/mock attendance marking.
• Notifications: To send relevant work notifications regarding task assignments, approvals, and security alerts.

3. Data Storage and Security

We place the highest priority on data protection:

• Encryption in Transit: All communication between the mobile app and our servers is strictly encrypted using industry-standard TLS / HTTPS protocols.
• On-Device Storage: Sensitive credentials and authentication tokens (JWT) are stored using encrypted, hardware-backed secure storage (Android EncryptedSharedPreferences / iOS Keychain).
• Access Control: Your data is accessible only by authorized HR and administrative personnel within your organization.

4. Third-Party Services

We integrate with trusted enterprise service providers solely to support app functionality:

• Firebase Cloud Messaging (Google): For dispatching real-time push notifications.
• Google Maps API: To display office locations and validate geofenced attendance boundaries.

We do not sell, rent, trade, or share your personal or location data with any third-party advertisers or data brokers.

5. Data Retention and Account Deletion

• Retention: We retain employee records for the duration of your active employment and as required by labor and financial compliance laws.
• Account Deletion / Data Requests: Employees may request verification, correction, or deletion of their personal records by contacting their company's HR department or by emailing our data support team at info@duttit.com

6. Children's Privacy

This Application is an enterprise workforce management tool intended solely for adult corporate employees. We do not knowingly collect personal data from anyone under the age of 16.

7. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our legal obligations or application features. We will notify users of any significant updates by updating the "Last Updated" date at the top of this policy and posting a notification within the app.

8. Contact Us

If you have any questions, concerns, or grievances regarding this Privacy Policy or our data handling practices, please contact us:

This policy is effective from September 14, 2026 and governs the use of the DiT ERP mobile application.