Last updated: 3 August 2026
CEMTAC Cements (“we”, “the company”) provides the CEMTAC Employee application to its own employees for attendance, leave and payroll self-service. This policy describes exactly what the app collects, why, and what happens to it.
The app is for current CEMTAC employees only. It has no public sign-up: an account is created by the company’s HR department, and without one the app cannot be used.
What the app collects
| Data | When | Why |
|---|---|---|
| Precise location latitude, longitude and the accuracy radius of the reading |
Only at the moment you tap Check in or Check out. Never in the background, and never while the app is closed. | To confirm the punch was made at your assigned workplace. The company defines a geofence per site; the reading is checked against it. |
| Mock-location indicator | With each punch. | Android reports whether a location reading was produced by a real sensor or simulated by another app. A simulated reading is rejected. |
| Wi-Fi network name (SSID) | With each punch, where the device makes it available. | A second, independent check that you are on site, used alongside the location reading. We do not collect passwords, traffic, or a list of nearby networks. |
| Identity and employment record name, employee code, work email, department, designation, shift, profile photo |
Held by the company’s HR system; shown to you in the app. | To identify you and show your own records. |
| Attendance and HR records punch times, leave, gate passes, overtime, shift handovers, travel claims, payslips |
As you create them. | The purpose of the app. These are company employment records. |
| Device and connection details IP address, app version, Android version |
On each request to our server. | Security, fraud detection and diagnosing faults. |
| Notification preferences | When you change them. | Stored on your device only. These never leave the phone. |
What the app does not collect
- Background or continuous location. The app requests a location reading only while you are looking at it and only when you press a punch button.
- Contacts, call logs, SMS, calendar, microphone, or files on your device.
- Advertising identifiers. The app contains no advertising and no third-party analytics or tracking SDKs.
- Photographs, other than a profile picture you choose to upload yourself.
Why we collect location
Attendance at our sites determines pay. A punch that could be made from anywhere is not an attendance record, so the app records where a punch was made and checks it against the geofence for your workplace. The reading is taken once per punch and stored with that attendance row. It is not used to follow your movements, and there is no mechanism in the app to do so — between punches, the app requests no location at all.
You can refuse the location permission. The app will keep working for leave, payslips and every other feature; only punching attendance requires it.
Where the data goes
- Data is transmitted over HTTPS to hrcemtac.in, operated by CEMTAC Cements.
- It is stored on Google Cloud infrastructure in the
asia-south1(Mumbai, India) region. - We do not sell your data, and we do not share it with third parties for their own purposes. It is used solely for the company’s own HR and payroll administration.
- Disclosure to a third party happens only where the law requires it, or where a statutory body (for example in relation to provident fund or employee state insurance) is entitled to it as part of ordinary payroll compliance.
How long it is kept
Attendance, leave and payroll records are employment records, and are retained for the duration of your employment and afterwards for as long as Indian labour, tax and provident fund law requires. Location readings are retained with the attendance row they belong to and are not kept separately.
Security
- All traffic between the app and our servers uses TLS.
- Sign-in uses short-lived access tokens with refresh, held in the app’s private storage. Your password is never stored on the device.
- Access to HR records on the server side is limited by role, so an employee sees their own record and a supervisor sees only their own team.
Your rights
You may ask to see the personal data we hold about you, to have inaccurate data corrected, and to know how it has been used. Requests are handled by the HR department at the address below. Because these are employment records, we may be unable to delete data that we are legally obliged to retain.
Children
The app is provided to employees of CEMTAC Cements and is not directed at children. We do not knowingly collect data from anyone under 18.
Permissions the app requests, and why
| Permission | Reason |
|---|---|
ACCESS_FINE_LOCATIONACCESS_COARSE_LOCATION | To record where an attendance punch was made. Requested at the moment you first punch, and used only then. |
ACCESS_WIFI_STATE | To read the name of the Wi-Fi network you are connected to, as a second on-site check. |
POST_NOTIFICATIONS | Shift reminders and approval updates. Optional — the app works without it. |
INTERNET, ACCESS_NETWORK_STATE | To reach the company server, and to know when the device is offline so a punch can be queued and sent later. |
RECEIVE_BOOT_COMPLETED, WAKE_LOCK, FOREGROUND_SERVICE | To re-schedule shift reminders after a restart, and to finish sending a punch that was queued while offline. |
Changes to this policy
If we change what the app collects, this page will be updated and the date at the top will change. Material changes will also be announced through the app’s notices.