Privacy Policy

Koyyo Privacy Policy

This Privacy Policy describes how Koyyo Pty Ltd. (“we”, “us”, or “our”) collects, uses, and shares your personal information when you use our mobile application (“App”), web application (“Web App”), and facial recognition device (“FRD”) (collectively, the “Services”).

Information We Collect

Personal Information:
  • Staff Information: When you create an account in the App, we collect your name, email address, phone number, and employee ID. Additionally, the App may collect your geolocation data when you clock in/out, track your location during work hours (with your consent), and record your leave requests and roster information.
  • Business Information: When you use the Web App, we collect your business name, contact information, and configuration settings for staff management, time attendance, roster, and leave.
Non-Personal Information:
  • Device Information: We collect information about your device, such as its model, operating system, and unique identifiers.
  • Usage Data: We collect information about how you use the Services, such as the features you access, the time you spend using them, and your location data (if applicable).
  • Facial Recognition Data: The FRD captures and stores facial recognition data for the purposes of time attendance and access control. This data is not linked to any other personal information unless explicitly authorized by you.

How We Use Your Information

We use your information to:

  • Provide and improve the Services: This includes allowing you to clock in/out, track your location during work hours (with your consent), request leave, manage your roster, and access authorised areas using the FRD.
  • Communicate with you: We may use your contact information to send you important updates, notifications, and marketing materials (with your consent).
  • Analyze and improve our business: We may use your information to analyze how you use the Services and to improve their functionality and user experience.
  • Comply with legal and regulatory requirements: We may use your information to comply with applicable laws and regulations.

Sharing Your Information

We may share your information with:

  • Third-party service providers: We may use third-party service providers to help us operate and improve the Services. These providers are contractually obligated to protect your information and only use it for the purposes we authorise.
  • Law enforcement and other legal authorities: We may share your information with law enforcement or other legal authorities if we believe it is necessary to comply with a law, regulation, or legal process.
  • In the event of a business transaction: If we are involved in a merger, acquisition, or asset sale, your information may be transferred to the acquiring party.

Data Retention

We will retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Your Rights

You have the right to:

  • Access your personal information: You can request a copy of your personal information that we hold.
  • Correct your personal information: You can request that we correct any inaccurate or incomplete personal information.
  • Request deletion of your personal information: You can request that we delete your personal information.
  • Object to the processing of your personal information: You can object to the processing of your personal information in certain circumstances.
  • Withdraw your consent: You can withdraw your consent to the processing of your personal information at any time.

To exercise any of these rights, please contact us using the information provided below.


We take reasonable measures to protect your information from unauthorised access, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated Privacy Policy on our website.

Contact Us
If you have any questions about this Privacy Policy, please contact us at:

Effective Date
This Privacy Policy is effective as of 01-Jan-2024