Privacy Policy

Company Name: Teamital

Business Address: Kandoy House, 2 Fairview Strand, Clontarf West, Dublin, D03 R8P3, Ireland

Privacy Email: contact@teamital.com

Teamital is designed for business and workplace use. The platform helps organisations manage employee attendance, time tracking, GPS location tracking, geofencing, route history, leave management, shift scheduling, payroll reports, project management, task management, announcements, notifications and document uploads.

In most cases, the employer or business using Teamital is the Data Controller. This means the employer decides why and how employee personal data is collected and used.

Teamital usually acts as the Data Processor, meaning we process personal data on behalf of the employer according to their instructions.

In limited situations, we may act as a Data Controller, for example when we process business account data, billing records, website analytics, support requests, security logs or legal compliance records.

Depending on how the employer configures the platform, we may process the following types of personal data:

• Name, email address, phone number and account details
• Employee profile information
• Login credentials and authentication data
• Attendance records, clock-in and clock-out times
• Face recognition attendance data, where enabled
• PIN or fingerprint authentication data, where enabled
• GPS location data
• Live GPS tracking data
• Route history
• Geofence clock-in and geofence activity
• Leave records and shift schedules
• Payroll-ready reports and timesheets
• Project and task management records
• Announcements and notification records
• Site photos, employee selfies and uploaded documents
• Device information, IP address, browser type and app usage data
• Crash reports and diagnostic information
• Payment and subscription records

Teamital may allow employers to monitor attendance, working hours, location, route history and work-related activity.

This may include:

• Face recognition attendance
• PIN-based attendance
• Fingerprint authentication
• Geofence clock-in
• GPS tracking
• Live employee location tracking
• Route history
• Site visit records
• Employee selfies
• Site photos
• Uploaded work documents

Employers are responsible for ensuring that employee monitoring is lawful, fair, transparent and proportionate. Employers must inform employees before monitoring begins and must explain what data is collected, why it is collected, when tracking occurs and how long the data is kept.

Our mobile application may request the following permissions:

• Camera
• Location
• Background location
• Notifications
• Storage

Camera access may be used for employee selfies, face recognition, site photos and document capture.

Location and background location permissions may be used for GPS tracking, geofencing, route history, attendance verification and field workforce management.

Notifications may be used for attendance alerts, task updates, announcements, shift reminders and system messages.

Storage access may be used to upload, access or manage documents, photos and files within the app.

We process personal data for the following purposes:

• To provide and operate Teamital
• To create and manage business accounts
• To enable employee login and authentication
• To record attendance and working hours
• To support GPS tracking, geofencing and route history
• To manage shifts, leave, projects, tasks and payroll reports
• To send announcements, reminders and notifications
• To provide customer support
• To process payments and subscriptions
• To maintain platform security
• To detect errors, crashes, misuse or unauthorised access
• To improve the platform and user experience
• To comply with legal, accounting and regulatory obligations

Where GDPR applies, personal data is processed only where there is a lawful basis. Depending on the context, the lawful basis may include:

• Contract: where processing is necessary to provide the platform and services.
• Legitimate Interests: where processing is necessary for platform security, business operations, service improvement, fraud prevention and customer support.
• Legal Obligation: where processing is necessary to meet tax, accounting, regulatory or legal requirements.
• Consent: where required, such as for certain cookies, analytics, permissions or optional features.

Employers using Teamital are responsible for determining the lawful basis for monitoring their employees, including attendance tracking, GPS tracking, geofencing and biometric-related features.

Teamital may support face recognition or fingerprint-based attendance features where enabled by the employer.

Where biometric data is processed for identification or attendance verification, employers must ensure they have a valid lawful basis and meet any additional legal requirements under GDPR and applicable employment laws.

Employers should provide clear notices to employees, explain how biometric-related data is used, and offer alternatives where legally required.

Payments may be processed through third-party payment providers, including Stripe and Revolut.

We do not intentionally store full payment card details on our own systems. Payment providers may process payment information according to their own privacy and security policies.

We use trusted third-party services to operate, secure and improve Teamital. These may include:

• Amazon Web Services (AWS)
• Supabase
• Stripe
• Revolut
• Firebase
• Google Maps
• Google Analytics
• Cloudflare
• Resend
• Firebase Crashlytics

These providers may process limited personal data where necessary to provide hosting, database services, payments, maps, analytics, crash reporting, email delivery, security and infrastructure support.

Teamital is hosted using Amazon Web Services (AWS) with server infrastructure located in Ireland / Europe.

We also use Supabase as part of our database infrastructure.

We take reasonable steps to store personal data securely and to protect it from unauthorised access, loss, misuse, alteration or disclosure.

We use Google Analytics to understand website and platform usage, improve performance and enhance user experience.

We use Firebase Crashlytics to identify crashes, bugs and technical issues within the application.

Analytics and crash reporting data may include device information, usage data, crash logs, app version, operating system and technical diagnostic information.

Our website and platform may use cookies and similar technologies for:

• Essential website functionality
• Login sessions
• Security
• Analytics
• Performance improvement
• User preferences

Where required by law, we will request consent before using non-essential cookies or analytics technologies.

We use technical and organisational measures to protect personal data, including:

• HTTPS/TLS encryption
• Database encryption
• Password hashing
• Role-based access control
• Audit logs
• Regular backups
• Firewall protection
• Multi-factor authentication for administrators
• Secure hosting infrastructure
• Restricted internal access

No online platform can guarantee absolute security. Users and customers are responsible for keeping account credentials confidential and notifying us if they suspect unauthorised access.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer period is required by law.

Our retention approach includes:

• Employee records are stored securely.
• Attendance logs are stored securely.
• GPS history is stored securely.
• Deleted accounts may be retained for a limited period as required by policy, legal obligations, backups, dispute resolution or fraud prevention.
• Backups are maintained regularly and securely.

Business customers are responsible for defining appropriate retention periods for employee monitoring data where they act as Data Controller.

Our main hosting infrastructure is located in Ireland / Europe.

Some third-party service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions or other lawful transfer mechanisms required by GDPR.

Under GDPR, individuals may have the following rights:

• Right to access personal data
• Right to correct inaccurate data
• Right to request deletion
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent, where processing is based on consent
• Right to lodge a complaint with a supervisory authority

Employees should normally contact their employer first because the employer is usually the Data Controller of workforce, attendance, GPS and monitoring records.

Users may also contact us at contact@teamital.com.

Teamital supports user rights such as:

• Exporting data
• Deleting accounts
• Requesting correction of personal data
• Downloading attendance reports

Requests may be subject to identity verification, legal obligations, backup limitations and the employer’s role as Data Controller.

Teamital is intended only for business and workplace use.

The minimum age to use the platform is 18 years. We do not knowingly provide the platform directly to children.

Employers using Teamital must:

• Use the platform lawfully and fairly
• Inform employees before monitoring begins
• Explain what data is collected and why
• Avoid excessive or unnecessary monitoring
• Limit GPS and background location tracking to legitimate business purposes
• Maintain internal employee privacy and monitoring policies
• Respond to employee data rights requests
• Conduct a Data Protection Impact Assessment where required
• Ensure appropriate access controls for managers and administrators

If we become aware of a personal data breach, we will investigate and take appropriate action.

Where required by law, we will notify affected customers, individuals or regulators within applicable legal timeframes.

Where we act as a Data Processor, we will notify the relevant customer without undue delay after becoming aware of a breach affecting their personal data.

Teamital has not appointed a Data Protection Officer.

Privacy questions and data protection enquiries may be sent to:

contact@teamital.com

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this page.

Material changes may also be communicated through the website, platform or email where appropriate.

If you have any questions about this Privacy Policy or how we handle personal data, please contact us:

Teamital

Kandoy House, 2 Fairview Strand, Clontarf West, Dublin, D03 R8P3, Ireland

Email: contact@teamital.com