Privacy policy
In plain words: what data the QRLog attendance app collects, why, and who can see it. The app is for employees of companies that use QRLog.
- Effective date: 29 July 2026
- Reading time: ~4 minutes
In short
-
We don't track you all day
Location is checked only when you scan the QR code. Nothing is collected in the background.
-
No ads
Your data is not used for advertising and is never sold.
-
Your company is in charge
Your data belongs to the company you work for. Other companies can't see it.
-
You can ask for deletion
You can request deletion of your account and data at any time.
This policy explains what data the QRLog attendance app (the "App") collects and how it uses it.
Who controls the data
Data controller
Your employer
Your company decides what data is collected and why.
Data processor
QRLog
We process data on your company's behalf and on its instructions.
Questions about your data can go to your employer first.
What data we collect
-
Personal and work details
Name, phone and/or email, job title, branch
To create the account and record attendance to the right person.
-
Sign-in data
PIN — stored only as a hash
So only you can sign in. It is never stored in plain text.
-
Location (GPS)
Only when you scan the QR code
To check you are within the allowed radius of your workplace.
-
Check-in photo (selfie)
Photo at check-in/out; work photo on field visits
To confirm the check-in was made by you.
-
Profile picture optional
Only if you add one yourself
Shown on your profile. Not compared with anything; you can remove it any time.
-
Device data
Device "fingerprint" (browser identifier)
So no one can check in on your behalf.
-
Working time and usage
Check-in/out times, leave and holiday records, when you last opened the app
For attendance reports and timesheets.
-
Payroll data
If your company has entered it
For attendance-based payroll reports.
If taking photos bothers you, talk to your manager: the photo requirement can be turned off for individual employees. Check-ins are then still recorded by location and device checks.
How the data is used
- Recording attendance (check-in and out) and reports
- Checking you are at the right workplace (geofence)
- Confirming identity by photo (face match) and preventing fraud
- Sending shift and check-out notifications
Only your company's management and your branch manager can see your data. Other companies cannot.
Technical services
To run the app, data is processed by the services below. They process it only on QRLog's behalf.
-
Cloudflare R2
Photo storage
-
Amazon Web Services (Rekognition)
Face matching
-
Web Push
Push notifications
-
Hosting provider
The data centre where the servers run
-
OpenAI
Answers in the "AI assistant" chat. Only your message and your own attendance figures are sent; photos are not.
Retention and security
Retention
Check-in and check-out selfies are deleted automatically after 90 days. Attendance records and reference, profile and work photos are kept while you are employed and for as long as the law requires.
On closure
When a company account is closed, the data is deleted or anonymised.
Protection
All traffic is encrypted (HTTPS/TLS). PINs are never stored in plain text. Access inside the company is limited by role.
Your rights
- View
- Correct
- Request deletion
To use these rights, contact your employer first, then us: info@qrlog.az
Children and changes
Children
Not for anyone under 16
The app is not meant for children, and we do not knowingly collect data from anyone under 16.
Changes
Published on this page
This policy may change. Updates are published here and the date above is updated.