Last updated: 2 June 2026 · Effective: 2 June 2026
This Privacy Policy explains how Ixora Corporate Services ("Ixora", "we", "us") collects, uses, stores, and protects information when you use the Ixora One mobile application (the "App"). Ixora One is an internal workforce application provided to employees and authorised personnel of Ixora and its affiliates for attendance, identity verification, and facility management. It is not a consumer product and is not intended for use by the general public or by anyone under 18.
The App is made available only to Ixora employees, supervisors, and authorised staff who have been issued login credentials by their organisation. Use of the App is governed by your employment relationship and your organisation's policies in addition to this Policy.
| Category | What | Why |
|---|---|---|
| Identity & account | Name, employee ID, role/department, phone number, work site assignment, login identifier | To create and manage your account and authenticate you |
| Biometric / face data | A facial image (selfie) captured at check-in, and the facial feature vector derived from it | To verify that the person checking in is the enrolled employee (anti-impersonation) |
| Location | Precise (GPS) and approximate location, including background location for supervisors during an active shift | To confirm attendance happens at the assigned site and to support field-supervisor visit tracking |
| Attendance & activity | Check-in/out times, regularisation requests, productivity entries, in-app actions | To operate the attendance and facility-management features |
| Device & diagnostics | Device model, OS version, app version, crash logs, performance and usage analytics | To keep the App stable, secure, and improve it |
We do not collect or display your personal email for user-facing purposes, we do not sell your data, and we do not use your data for advertising.
Face verification is central to preventing attendance fraud. When you check in, the App may
capture a selfie and, where required, run a liveness check. The image and the derived facial
feature data are processed using Amazon Web Services (AWS) Rekognition, operating
in the ap-south-1 (Mumbai, India) region, acting as our data processor.
The App requests location permission to confirm that check-in/out occurs at your assigned site and to detect location spoofing (mock GPS). For users acting in a supervisor capacity, the App may collect location in the background during an active shift (between check-in and check-out) to record field visits. Background location:
We share the minimum data necessary with the following processors, who are contractually bound to protect it and use it only on our instructions:
| Provider | Purpose | Data |
|---|---|---|
| Google Firebase / Google Cloud | Authentication, database, storage, hosting, crash reporting (Crashlytics) | Account, attendance, location, images, diagnostics |
| Amazon Web Services (Rekognition) | Face matching & liveness | Facial image & feature data |
| Sentry | Crash & error monitoring | Diagnostics, device info |
| PostHog | Product analytics (usage) | Pseudonymous usage events, device info |
We do not sell personal data or share it with data brokers or advertisers.
We retain personal data for as long as your account/enrolment is active and as required to meet attendance, payroll, HR, and legal obligations, after which it is deleted or anonymised. Diagnostic logs are retained for a limited period for security and debugging.
Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you may request access to, correction of, or deletion of your personal data, including your biometric data. Because the App is provided through your employer, some records must be retained for legitimate HR/legal reasons even after deletion of biometric identifiers.
To make a request, use the in-app "Report a tech issue / request" option, contact your HR administrator, or email us (see Section 11). See our Data Deletion page for the step-by-step process.
We use encryption in transit, access controls, least-privilege rules, and reputable cloud infrastructure. No system is perfectly secure, but we work to protect your information and promptly address vulnerabilities.
The App is intended only for adults (18+) employed or authorised by Ixora. It is not directed to children and we do not knowingly collect data from anyone under 18.
Ixora Corporate Services
Email: privacy@ixoragroup.com
Website: ixoragroup.com
We may update this Policy from time to time. Material changes will be communicated in-app or by your organisation, and the "Last updated" date above will change.