HR Suite 24 — Privacy Policy

Definitions

1. “App” means the HR Suite 24 Android application and the web portal at hrms.thejunglebiz.com.
2. “We”, “us”, “our” means Shera Edutech Consultancy LLP, Nashik, Maharashtra, India, the developer and operator of HR Suite 24.
3. “Employer” means the company or organisation that subscribes to HR Suite 24 and has issued you an account.
4. “You”, “your” means the employee or other individual who signs in to the App.
5. “Personal data” means any data about you by which you are identifiable, as defined in the Digital Personal Data Protection Act, 2023.
6. “Data Fiduciary” means the person who determines the purpose and means of processing personal data. “Data Processor” means a person who processes personal data on behalf of a Data Fiduciary. “Data Principal” means the individual the personal data relates to.
7. “Applicable Law” means the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025; the Information Technology Act, 2000 and the rules made under it, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and any other law of India that applies to the processing described here.

Who we are and what this covers

1. HR Suite 24 is attendance, leave and payroll software made by Shera Edutech Consultancy LLP. Companies use it to run those functions for their employees.
2. If you use the App, your employer has given you an account. You cannot create one yourself.
3. This policy explains what personal data the App handles, why, for how long, and what you can ask us to do about it. It is written in plain language on purpose, as required by Applicable Law.
4. This policy does not cover any separate system your employer runs, nor any third-party website the App may link to.

Our role and your employer's role

1. Your employer is the Data Fiduciary for your employment records. Your employer decides what information about you is kept, why it is kept, and who inside the company may see it.
2. We act as a Data Processor. We store and process your information on your employer's instructions and only to run HR Suite 24 for them. We do not decide the purposes of processing and we do not use your information for our own purposes.
3. Because your employer is the Data Fiduciary, questions about your own records — a wrong attendance entry, a leave balance, a salary figure — are answered fastest by your company's HR. Please ask them first.
4. If HR cannot resolve it, or if your concern is about how we handle data rather than what your employer recorded, contact our Grievance Officer at clause 19.

What the app collects, and why

We process only the categories below. Nothing else is collected by the App.

1. Some of the above — your selfie, your salary figures and your payroll records — is treated as sensitive personal data under the Information Technology (Reasonable Security Practices) Rules, 2011, and is given the heightened protection described at clause 12.
2. The App does not ask for, and must not be used to store, Aadhaar numbers, bank account credentials, biometric templates, health records or caste or religious information.
3. App updates. If your copy of HR Suite 24 was installed from a direct link rather than from Google Play, the App reads a small file on our server when it opens to see whether a newer version is available. That check sends no personal data about you. If there is an update, the App downloads it and hands it to Android's own installer, which asks for your permission before anything is installed. The Google Play version does none of this — Google Play updates it for you.

Lawful basis for processing

1. Most processing takes place for the purposes of employment, which is a legitimate use recognised under Section 7 of the Digital Personal Data Protection Act, 2023. This covers attendance, leave, payroll, rostering and the prevention of time-and-attendance fraud.
2. Camera and location access are additionally based on your consent, which Android asks you for the first time you punch, and which you may withdraw at any time (clause 6).
3. Some processing is necessary to comply with law, for example retaining wage and attendance registers for the periods that labour and tax legislation requires.
4. We never process your personal data for advertising, profiling or any purpose unconnected with running HR Suite 24 for your employer.

Consent and withdrawal

1. Your employer is responsible for telling you that HR Suite 24 is in use and for obtaining any consent that Applicable Law requires from you as its employee.
2. You may withdraw camera or location permission at any time from your phone's Settings → Apps → HR Suite 24 → Permissions.
3. Withdrawing permission is not penalised by the App, but you will not be able to record a punch from your phone while it is withdrawn, because a punch requires a selfie and a location. You can ask HR to record attendance for you by another method your employer offers.
4. Withdrawal applies going forward. It does not erase punches already recorded, which your employer may be required to keep.

What we do not do

1. We do not sell your information or use it for advertising. The App has no ads.
2. The App contains no analytics, tracking, advertising or profiling tools of any kind.
3. We do not read your contacts, messages, gallery or files. The App cannot upload photos from your gallery — a punch selfie can only be taken live through the camera.
4. We do not track your location in the background, at rest, or at any time other than the moment you punch.
5. We do not run face recognition, face matching or any other biometric identification on your selfie. It is stored and shown as an ordinary photograph.
6. We do not share your information with anyone except your employer and the providers that host our servers in India, who may use it only to run HR Suite 24.

Permissions the app asks for

1. Camera — for the punch selfie. Asked the first time you punch.
2. Location — for the punch location. Asked the first time you punch. Used only while you are punching; the App does not request background location.
3. Fingerprint, face or screen lock — to unlock the App. This is handled entirely by Android; the App never sees or receives your fingerprint or face.
4. Install unknown apps — asked only by the version installed from a direct link, and only so that an update you have approved can be installed (clause 4.3). You may refuse it and the App will keep working. The Google Play version never asks for it.

Sharing and disclosure

1. Your information is visible to the authorised HR and management users of your own employer, according to the roles and permissions your employer configures. It is never visible to any other company using HR Suite 24.
2. We disclose personal data to our hosting and infrastructure providers in India strictly so that they can run the service. They act under contract, may use the data only on our instructions, and may not use it for themselves.
3. We may disclose personal data where we are required to by law, by a court of competent jurisdiction, or by a lawful request from a government authority. Where we are permitted to tell you, we will.
4. If our business is transferred or reorganised, personal data may move to the successor entity, which will remain bound by this policy until it publishes a replacement of at least equal protection.
5. We do not sell, rent, barter or otherwise make personal data available to any third party for their own purposes.

Where your data is stored

1. All HR Suite 24 data is stored and processed on servers located in India.
2. We do not transfer your personal data outside India. If that ever changes, we will update this policy, notify affected users in the App, and make the transfer only to a country permitted under Applicable Law.

How long information is kept

1. Your records are kept for as long as your employer keeps your account, and afterwards for as long as your employer must keep them by law — for example attendance registers and payroll records under applicable labour, wage and tax legislation.
2. When your employer closes your account or instructs us to delete it, we delete or irreversibly anonymise your personal data unless the law requires us to keep it, in which case it is kept only for the remaining statutory period and only for that purpose.
3. Punch selfies and punch locations are kept for the period your employer configures for attendance evidence, and are deleted on the same basis as clause 11.2.
4. Routine backups are retained on a rolling cycle and are overwritten in the ordinary course; data deleted from the live system is removed from backups as that cycle completes.

How your information is protected

1. Everything between the App and our servers travels over an encrypted connection (HTTPS/TLS).
2. Your sign-in session is stored on your phone encrypted with a key held in Android's secure key store.
3. The App locks itself with your phone's screen lock when you open it and after five minutes away.
4. Sessions end after 30 days without use, and on every device when you change or reset your password.
5. Passwords are stored only as salted one-way hashes. No one at our company, and no one at your employer, can read your password.
6. Access to production systems is restricted to authorised personnel on a need-to-know basis and is logged.
7. We maintain reasonable security practices and procedures of the kind contemplated by Section 43A of the Information Technology Act, 2000 and the rules made under it, proportionate to the nature of the data we hold.

Personal data breaches

1. If a personal data breach occurs, we will inform the affected employer without undue delay and support them in notifying affected individuals.
2. We will report the breach to the Data Protection Board of India within the period prescribed by the Digital Personal Data Protection Rules, 2025, which at the date of this policy is 72 hours from becoming aware of it, and will give affected individuals a description of the breach, its likely consequences, and the steps being taken.
3. You can report a suspected security problem to us at any time at support@thejunglebiz.com.

Your rights and how to use them

1. Right to access — you may ask for a summary of the personal data we process about you and who it has been shared with.
2. Right to correction and updating — your details are in Profile settings in the App. You can ask HR to correct your name, email, mobile or employment details.
3. Right to erasure — you may ask for your account and information to be deleted. Ask your company's HR, or email support@thejunglebiz.com from your sign-in email with the subject “Delete my HR Suite 24 data”. Records your employer must keep by law are kept only for that period.
4. Right to nominate — you may nominate another individual to exercise these rights on your behalf if you die or become incapacitated. Write to the Grievance Officer to register a nominee.
5. Right to grievance redressal — you may complain to our Grievance Officer at clause 19 about anything in this policy or how your data has been handled.
6. Because we act as Data Processor, a request about the contents of your records is routed to your employer, who decides it as Data Fiduciary. We will tell you when we have done that.
7. We acknowledge every request within 72 hours and respond substantively within 30 days. Where a request is complex and needs longer, we will tell you why and give a revised date, which will not exceed the maximum period allowed under Applicable Law.
8. We may ask you to verify your identity before acting on a request, so that your data is not disclosed to someone else.
9. Stop using the app — uninstalling the App removes everything it stored on your phone.

Automated decision-making

1. HR Suite 24 does not make any decision about you solely by automated means. It has no scoring, ranking or profiling engine.
2. The App flags a punch where the location signal appears to have been manipulated, but this is only shown to HR for review. A punch is never automatically rejected, and no action is taken against you by the software.

Children and persons with disabilities

1. HR Suite 24 is for employees and is not meant for anyone under 18. We do not knowingly process the personal data of a child through the App.
2. If we learn that a child's personal data has been entered into the App, we will remove it and tell the employer concerned.
3. Where a user is a person with a disability who has a lawful guardian, the employer is responsible for obtaining the guardian's consent as Applicable Law requires.
4. We do not carry out tracking, behavioural monitoring or targeted advertising directed at children in any circumstances.

Cookies and similar technologies

1. The Android App does not use cookies and contains no advertising or analytics identifiers.
2. The web portal at hrms.thejunglebiz.com uses only strictly necessary cookies — to keep you signed in and to protect the session. These are not used to track you and are not shared.
3. We do not use third-party advertising, retargeting or cross-site tracking technologies anywhere in HR Suite 24.

Changes to this policy

1. If this policy changes, we will update this page and the “Last updated” date at the top.
2. Important changes will also be shown inside the App, and where Applicable Law requires it we will seek fresh consent.
3. Earlier versions are available on request from the Grievance Officer.

Grievance Officer and contact

In accordance with the Digital Personal Data Protection Act, 2023 and Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the following officer has been designated to receive and resolve complaints about personal data.

1. Please write “HR Suite 24” in the subject line, and include your name, employee code, employer's name and a description of the complaint, so that it can be identified and resolved quickly. The same Grievance Officer handles data complaints for all software published by Shera Edutech Consultancy LLP.
2. Complaints are acknowledged within 72 hours and resolved within 30 days of receipt.
3. For general support that is not a privacy complaint, write to support@thejunglebiz.com.
4. If you are not satisfied with our response, you may complain to the Data Protection Board of India in the manner provided under the Digital Personal Data Protection Act, 2023.

Governing law

1. This policy is governed by the laws of India.
2. The courts at Nashik, Maharashtra have exclusive jurisdiction over any dispute arising out of or in connection with this policy, subject to any right you have under Applicable Law to approach the Data Protection Board of India or another statutory forum.