Organization-level isolation
Every organization's data has its own boundary. On the phone, each organization uses its own database and settings; in the cloud, access rules let an organization read and write only its own records.
Home › Security
Built with security and organization isolation in mind
The measures below are how the app works today. We describe them plainly and avoid promises no software can keep.
Security measures
Secure sign-in
Administrators sign in with Firebase Authentication. Passwords are handled by Firebase and are never stored by us. A verified email address is required before an organization is created.
Role-based access
An attendance-only user can open the punch screen and nothing else. Administrative screens and operations refuse that role, even if reached another way.
Face data kept out of the cloud
Face templates and enrolment photos stay on the phone where they were registered, or in an encrypted backup file an administrator exports. The cloud rules also reject any record that tries to carry face data.
Liveness protection
An on-device check helps resist attempts to punch with a photo or a screen, and unknown faces are not matched to anybody.
Locked attendance and audit trail
Corrections keep the original punch and record who changed what and why. Locked payroll periods cannot be changed, including by calendar edits.
Controlled cloud sync
Cloud sync is optional. It mirrors employees, shifts and punches to your organization's account over encrypted connections, and can be turned off.
No backups to other services
The app disables Android cloud backup, so its data is not copied into personal device backups.
Account deletion
Administrators can request deletion in the app or on this website. Data is permanently deleted after a 30-day window in which the request can be cancelled.
What we do not do
- Upload face templates or enrolment photos
- Track location in the background or between punches
- Show ads or collect the advertising ID
- Sell data or share it for marketing
Good to know
Security is shared: organizations decide who has the administrator password and where the kiosk phone is kept. No system is completely secure, and we use reasonable technical and organizational safeguards rather than promising perfection.
Found a security issue? Email elixirinfotechindia@gmail.com.