Privacy Policy

Tsutome · Last updated 23 July 2026

Tsutome is a workforce time-and-attendance app used by QKO staff to clock in and out at their assigned branch. This policy explains what the app collects, why, and how long it is kept.

In short: we store your name, branch and clock-in/out times. Your GPS position is used only at the moment you clock in or out to confirm you are at the branch — it is not saved. If face verification is enabled for you, we store a numeric face template, never a photo.

1. Who we are

The app is operated by QKO ("we", "us") as an internal staff attendance tool. For questions or requests, contact ultrasoundsonicboom@gmail.com.

2. What we collect and why

Data	Why	Kept?
Name, employee ID, assigned branch, work schedule	To show your name on the branch device and record attendance	While you are employed
Clock-in / clock-out time, type (in/out), branch	Attendance and payroll records	Retained as a business record
GPS location (latitude, longitude, accuracy)	Checked against the branch geofence at the moment of clocking in/out, to confirm you are physically at the branch	Not stored. Used transiently for the check, then discarded
Face template (a 512-number mathematical vector)	Only if face verification is enabled for you — confirms the person clocking in is you, preventing someone else clocking in on your behalf	Stored until you leave or ask us to delete it
Wi-Fi access point identifier (BSSID), where enabled	Optional second check that the device is on the branch network	Not stored

3. Camera and face data

The camera is used only during enrolment and at the moment of verification.
No photograph or video is ever stored or transmitted for storage. The image is converted into a numeric template and the image itself is discarded.
At verification, the freshly computed template is sent to our server, compared against your enrolled template, and then discarded. Only the enrolled template is retained.
The template cannot be used to reconstruct your photograph.
Face enrolment is recorded with your consent. If face verification is not enabled for you, no face data is collected at all.

4. Location

The app requests location access because a clock-in is only valid at the branch. The position is evaluated against the branch's geofence and the result (allowed / outside) determines whether the punch is accepted. The coordinates themselves are not written to our records. The app does not track your location in the background or when you are not clocking in or out.

5. Where data is stored

Attendance records and staff details are stored in Supabase (our database provider) and served through Vercel (our hosting provider). Access is restricted to authorised QKO managers and administrators. Data may be processed on servers outside your country of residence.

6. Sharing

We do not sell your data and do not share it for advertising. Data is shared only with the service providers named above, who process it on our behalf, or where we are required to do so by law.

7. Your rights

Ask what data we hold about you and request a copy.
Ask us to correct inaccurate records.
Ask us to delete your face template at any time — attendance still works using GPS.
Ask us to delete your data when you leave, subject to records we must keep by law.

To exercise any of these, contact ultrasoundsonicboom@gmail.com.

8. Children

The app is for employees only and is not directed at children.

9. Changes

If this policy changes materially we will update this page and the date above.

Tsutome · Contact: ultrasoundsonicboom@gmail.com