What Romaa records, and why

Information we collect

We collect the following categories of information so that the app can perform its construction-site management functions.

1.1  Account and profile

• Employee identification details, including employee ID and assignment ID.
• Name, contact details and profile information linked to your employee account.
• Authentication credentials used to log in, handled as described in section 04.

1.2  Location

• Precise GPS coordinates (latitude and longitude) captured at the moment you clock in or clock out.
• Location is read only during the punch-in and punch-out action, and is used to verify your presence at the work site.

1.3  Camera and photographs

• The app uses your camera or photo library to capture a verification photo at clock-in.
• That photo is uploaded to our server as part of the attendance record.

1.4  Device

• Device details such as model, operating system and device identifiers, collected during attendance to support security and attendance verification.

1.5  Work and project records

• Information you enter into the app: work-done records, bill of quantities (BOQ), daily labour reports, machinery usage, stock and site asset records, purchase orders, billing data and leave requests.

Permissions we request

You can decline any of these permissions. Some features, including attendance clock-in, will not work without them.

How we use your information

We use the information we collect to:

• Authenticate you and maintain your session.
• Record and verify attendance, using location, photo and device data.
• Run the project, material, billing, leave and asset management features.
• Store and synchronise the work records you create.
• Maintain the security and integrity of the app and your account.

Data storage and security

• Authentication tokens are held in a secure local store on your device and are cleared on every app launch, so each session requires a fresh login.
• Data you submit is transmitted to and stored on our application server.
• Every request to our server is authenticated with a bearer access token.
• We apply reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Sharing and disclosure

We do not sell or rent your personal information. We share it only:

• With your employer or the organisation that provides your access, since the app is an internal workforce management tool.
• With service providers who host or support our infrastructure, under confidentiality obligations.
• When required by law, regulation, legal process or a governmental request.

Data retention

We retain your information for as long as your account remains active, and for as long as we need it to provide the app's services, comply with legal obligations, resolve disputes and enforce agreements. Attendance and project records may be kept in line with your employer's record-keeping requirements.

Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information.
• Withdraw permissions you previously granted, through your device settings.

To exercise any of these rights, contact us or your organisation's administrator using the details in section 10.

Children's privacy

The app is intended for use by employees and is not directed to anyone under the age of 18. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. Any change is reflected in the "Last updated" date at the top of this page. Continued use of the app after a change takes effect means you accept the revised policy.

Contact us

Romaa is published by MAARR Smart Solutions Private Limited. If you have questions or concerns about this policy or your data, reach us at: