TeamLogger Kiosk Privacy Policy

Last updated: 29 September 2026

TeamLogger Kiosk is a shared workplace attendance app for Android phones and tablets, provided by Build80 as part of TeamLogger. This policy explains the Kiosk app's data practices and supplements the TeamLogger Privacy Policy.

Who uses and controls the service

A customer organization chooses whether to use facial attendance, assigns existing TeamLogger users to kiosks, authorizes enrollment operators, and controls access to its workforce records. The Kiosk app does not create individual TeamLogger accounts. Build80 provides the service and processes workforce information for the organization.

The organization is responsible for lawful employee notice, any required choice or consent, and an appropriate non-biometric attendance process. This policy does not replace the organization's workplace notice or legal obligations. Ask your employer or administrator about the alternative attendance method available to you.

Information the Kiosk app handles

Camera and face setup

The app asks for Android Camera permission before opening the camera. It processes live images on the device to detect and recognize a face, check image quality, and check that a live person is present. Before face setup, a named authorized person selects an existing assigned employee and acknowledges the face data information reviewed with them.

Face setup sends face templates to TeamLogger, along with employee and operator account identifiers, the acknowledgment, face-profile and recognition software/policy identifiers, camera and image-quality information, results of the live-person checks, and security and audit evidence. Assigned kiosks receive the authorized employee list and face templates needed to recognize enrolled workers. Face setup itself does not check anyone in or out.

Attendance and device operation

Attendance records include the employee's name and account ID, Check in or Check out action and time, kiosk and installation identifiers, face-profile and model/policy identifiers, camera settings, capture-quality and liveness evidence, offline/time-trust state, app version, and signed security evidence. Setup also sends the kiosk name and any site label supplied by the administrator.

The authorized enrollment roster can include an employee's name, email, username or employee code to help the operator select the correct account. Enrollment search is performed locally. Device approval, authorization and synchronization records connect the installation with its company and permitted users.

The app does not request location, microphone, contacts, calendar, photo-library or screen-recording access. The Kiosk app contains no advertising or general analytics SDK and does not upload camera photos or videos.

How information is used and who receives it

• Workplace attendance: TeamLogger and authorized customer users use relevant information for enrollment, attendance, reporting and resolving attendance disputes.
• Security and operation: TeamLogger uses device authorization, quality, liveness and signed evidence to apply permissions, prevent misuse, synchronize records, investigate incidents and provide support.
• Service providers: Hosting, storage, security, email and support providers may process relevant information to provide authorized services to TeamLogger under applicable contracts and data-protection terms.
• Legal requirements and business transfers: Information may be disclosed for lawful requests, safety, enforcing agreements or a business transaction with appropriate notice and protections, as described in the general TeamLogger policy.

TeamLogger does not sell personal information for money or use Kiosk face templates for advertising, emotion analysis or training a general-purpose face model. Information may be processed outside your country; the general TeamLogger policy describes international processing and safeguards.

Data protection

The app sends Kiosk data to TeamLogger over HTTPS. It stores local records and cached templates in an encrypted app-private database, with its database secret protected by Android Keystore. App data is excluded from Android backup and device transfer. Named operator permissions and device authorization limit enrollment and access; public attendance does not retain a general user sign-in session.

Retention and deletion

• Camera frames: processed transiently on the device and not retained as photos or video.
• Pending attendance: unresolved events remain in encrypted local storage until the server returns a final result; they do not expire automatically because of age.
• Accepted local receipts: kept on the kiosk for 365 days and then eligible for removal using trusted time. This local period does not determine the retention of server attendance or audit history.
• Face enrollment: an authorized employer or administrator can invalidate an enrollment in the TeamLogger dashboard. Invalidation erases the stored active profile template; assigned kiosks erase obsolete local template copies after receiving a valid authorization update. An offline kiosk must receive that update before its local copy can be erased. Minimum version and audit records can remain to prevent reuse of stale profiles.
• Server and support records: retained according to record type, lawful customer instructions, contractual requirements and applicable payroll, accounting, security, dispute-resolution or legal obligations. Applicable deletion, verification and response commitments are set out in the general TeamLogger retention policy.

On app version 1.0.22 (25) or later, a confirmed inactive device can offer Reactivate this device. Its Reset and close app confirmation deliberately clears local activation, face enrollments, receipt history and attendance waiting to sync. These local records are not preserved for reactivation. Android closes the app; reopen it to activate and enroll again. This reset does not delete records already received by TeamLogger.

Invalidating a face enrollment does not delete the TeamLogger account or historical attendance. Uninstalling the Kiosk app does not delete server records. A request can cover the account, biometric enrollment, attendance records or other specified data. Records that must lawfully remain are handled under the general retention policy.

Privacy questions and your choices

For access, correction, enrollment invalidation, deletion or other privacy assistance, email customersuccess@teamlogger.com. TeamLogger may verify your identity and authority and coordinate with the organization that controls the records. You can make a request without signing in or reinstalling the app.

TeamLogger Kiosk is intended for adult workplace use and is not directed to children. The policy may be updated when functionality, data practices or legal requirements change; the current revision date appears above.

Provider and postal contact: Build80, B2/B401, Lakeview Tower, Vastrapur Lake, Ahmedabad, Gujarat, India 380015.