PravioPravio

These pages are templates for counsel to review. They are not legal advice and are not a substitute for a lawyer in the country where you operate. Do not take payment until they have been reviewed.

Privacy notice

Updated 19 September 2026

Who is responsible

The customer company is the controller of its employees’ attendance data. Pravio (the operator of this software) is the processor: we host and process that data on the company’s instructions.

If you are an employee, ask your employer about their workplace privacy notice. This page describes how the product is designed.

What we process

Account data: name, email, password hash, role, language, and employee code.

Attendance: check-in and check-out times, status, optional project notes, and (for a limited period) GPS coordinates, accuracy, and distance from the office pin.

Device binding: a random device id stored in the browser, used to lock check-in to one phone.

Why

To authenticate users, verify presence at a workplace or approved site, and let the company admin review leftover or suspicious sessions.

How long

Each company sets how many days to keep GPS coordinates (default 730 days). After that, a scheduled job removes coordinates and GPS log details. Times and status stay. See Retention.