Who we are and who controls the data
Kinera is an employee and human-resources platform used by participating companies. The employing company usually determines which employment data is entered, the purpose of processing, and who may access it; the Kinera service provides the technical platform.
This notice applies to Kinera Android (package id.my.kinera.mobile) and the associated web services. The employer may also provide its own employment privacy notices.
Information processed
- Identity and account details: employee name, company code, work email, employee number, job title, department, grade and reporting structure.
- Attendance: check-in and check-out timestamps, office or approved work-area location, GPS coordinates and reported accuracy, and attendance selfie photographs.
- HR workflows: leave balances, leave and duty requests, approval actions, explanations, activities, visits, training records, certificates and optional uploaded files.
- Payroll: salary components, payslips, tax (including PPh 21) and social-security/BPJS information where enabled by the employer.
- Technical and security details: session/device identifiers, login and security events, and basic request logs needed to deliver and protect the service.
- Face enrollment and re-enrollment: two front-camera registration photographs per registration are transmitted to the Kinera server and archived in encrypted private company storage for identity-enrollment audit. Each registration or replacement creates new audit records rather than overwriting earlier ones.
How we use information
- Authenticate employees and restrict access to the appropriate company, employee account and authorized HR roles.
- Record attendance with user-initiated selfie and location checks, including office geofencing or approved duty areas.
- Process leave, approvals, assignments, reimbursements, training, certificates and payroll/payslip access.
- Keep security and audit records, detect misuse, troubleshoot service failures and satisfy applicable employment and legal obligations.
Camera, location and permissions
The Android app uses its camera when you initiate photo-based attendance or submit a photo. Location is requested for relevant attendance or duty features to compare the device location with an authorized workplace or duty area. The app does not claim continuous background location collection in its current implementation.
Location and camera access may be refused through Android permissions, but related features may not function without them. Selfie capture for attendance is not the same as face recognition or biometric identity verification.
The face-comparison reference is calculated and encrypted within the Android app's private local storage, remains after sign-out, and is not synced to the server. Registration photographs, unlike the reference descriptor, are uploaded to Kinera for audit. Attendance selfies continue to be uploaded as part of attendance records.
The current face-matching feature is a pilot, not independently validated identity recognition or presentation-attack/liveness detection. Contact HR for a non-biometric alternative or a disputed match.
Who can access or receive data
Authorized company HR, payroll staff and approvers may access only the information their employer assigns to their role. Kinera service administrators and contracted infrastructure or technical providers may access limited data when needed to host, maintain, secure or support the service under appropriate controls.
Kinera does not use employee records for targeted advertising or sell employee personal data. If additional SDKs, analytics or notification providers are enabled in a future version, this notice and the Google Play Data safety declaration must be updated before publication.
Storage, protection and retention
Kinera uses authenticated access, tenant separation, HTTPS transmission and protected application sessions. No internet service is risk-free; access can also depend on employer policies and hosting controls.
Employment records, attendance history, payroll, tax, BPJS, approval logs and audit records may be retained by the employing company for operational, employment, statutory or dispute-resolution obligations. Retention periods depend on record category and applicable law. App credentials, sessions and associated data not subject to legitimate retention requirements are removed when a verified deletion request is fulfilled.
Enrollment photographs are sensitive biometric-related personal data. The employer must define lawful retention periods, restrict access to authorized HR Payroll auditors, and provide an appropriate deletion process for requests where no legitimate retention basis remains. Kinera does not claim that biometric images can be kept permanently solely for audit.
Your choices and privacy requests
Contact your employer’s authorized HR administrator to access or correct employment information, ask about applicable retention periods, or exercise rights available under local data-protection law.
To ask for removal of a Kinera mobile account, use the public Account Deletion page linked below. Identity and employment-record obligations may need to be checked before completing the request.
Children, changes and contact
Kinera is intended for organizational staff and authorized personnel, not children. The service may change; a revised notice will be published here with an updated date.
For privacy questions, contact the HR department of the organization that provisioned your account. To initiate account deletion, use the request form on this site; it is available without login.