Privacy Policy

1. FAYA and your organization

FAYA operates FAYA Staff. Organization administrators control workplace settings, roles, permissions and enabled features. Your organization also processes employment records under its own policies and obligations. Contact it about employment decisions, payroll and retention of its records.

For questions about this policy, or requests to access, correct or delete personal data, contact FAYA using the support channel at the end of this page.

2. Data we process

Account and organization information includes your name, email, username, profile picture, language, time zone, membership and role. Google sign-in supplies information needed for authentication, such as your name, email and picture.

Work information includes projects, tasks, comments, messages, files, photos, videos and recordings you submit, working hours, attendance, leave and hour requests, and earnings or salary information according to enabled features and permissions.

Technical information includes IP address, browser or device information, app version, error and request logs, session identifiers, notification device tokens and message delivery/read status. This supports operation, security and troubleshooting.

3. Camera, microphone, location and screen recording

The camera is used when you choose to take a photo or use face attendance. The microphone is used when you choose to record a voice message or use a communication feature that requires it. We access the images or files you choose to attach or share.

Attendance or work-session start may send coordinates, accuracy and capture time to verify the workplace or classify attendance. The current Android app does not request background location permission or continuously track location while closed.

Screen recording or sharing starts when you initiate it. Recordings may contain other apps or sensitive information visible on your screen; hide information you should not share before recording.

Manage permissions in your device settings. Denial may prevent the associated feature, and does not give your organization general access to your camera or device files.

4. Face attendance data

When your organization enables face attendance and you use it, we process face images and a numerical facial template for enrollment and attendance matching. Initial processing may occur on the device; matching data and images are sent to the service for verification and recording.

If additional face verification is enabled, the submitted and reference images may be sent to the configured verification provider. Face data is not used for advertising. Enrolled facial templates are deleted when account deletion is executed; contact support to request their deletion or ask about their use.

5. Purposes

We use information to create and authenticate accounts, organize work and communications, calculate and display hours and earnings under organization settings, handle requests, deliver notifications, secure accounts and improve reliability.

When you use FAYA AI, your message and relevant work context are sent to the configured AI provider, such as Hetzner AI. Do not submit sensitive information or confidential material you are not authorized to share.

6. Access and service providers

Work information is available to members, assignees, participants, administrators and clients granted access by organization, project or conversation permissions. Private conversations are not public posts; organizational work records are not necessarily limited to your own device.

Providers support hosting, databases, file storage, email, notifications, verification and AI where used. Google services include sign-in and Firebase Cloud Messaging. Each function sends information needed for that function to its provider.

Processing may occur outside your country depending on providers. Disclosure may also be necessary for binding legal requests or protection of rights and security. We do not sell work content, face data or location data to advertisers.

7. Device storage and widgets

The app stores some preferences, drafts and cached information locally. Private task notes and last-visit snapshots are device-local and separated by account, organization and task. Private notes are not sent to team discussions or synchronized between devices.

Optional widgets can display cached salary, task or working-hour information on your home screen, visible to anyone who can see the screen. Widget caches are cleared on logout or account change. Remove widgets whenever you choose.

Uninstalling or clearing app data may remove local notes and drafts, but does not delete your account or server-side work records.

8. Website analytics

The website uses session cookies and storage for authentication and settings. It also uses Google Analytics and Google Ads to measure visits, interaction and marketing conversions. These services may process browser identifiers, cookies and usage information according to browser and Google settings.

These website tools do not mean that work content is sold. Use browser and Google privacy controls to manage cookies and advertising personalization.

9. Security and retention

HTTPS, authentication and permission controls restrict access. No storage or transmission method is completely secure. Protect your device and credentials and report unauthorized access.

Account and work information is retained as needed to provide the service, maintain organization records, settle earnings, protect security and meet legal obligations. Periods vary by record type and organization policy; request the applicable period for a specific data category from your organization or FAYA support.

When account deletion is executed, sessions and notification tokens are revoked, enrolled face templates and account notifications are deleted, and profile identifiers are removed or replaced with non-identifying values. Shared tasks, communications, hours, attendance and requests may remain to preserve participant rights, financial or security records. Account deletion does not delete every organization document or all submitted content. Contact us to request removal of specific personal data and clarification of the basis and retention period.

Device-local notes and drafts remain until you delete them or clear app data.

10. Your choices and account deletion

Update your profile, manage device permissions and notifications, or request data access, correction or deletion through support. We verify ownership before fulfilling requests to protect your information.

In the app, open Profile, select Delete account and confirm the request. You may also use the public account-deletion page without reinstalling the app. A sole organization owner must transfer ownership first to protect other members.

11. Children and updates

FAYA Staff is a workplace service and is not directed to children. Contact us if you believe a child submitted information without appropriate authorization.

We may update this policy when features or data practices change. The update date appears at the top; material changes are communicated through appropriate service channels.