This policy explains how KMd interior handles information through KMD Interior ERP, our workplace application for staff, site operations, attendance, requests and payroll. For questions about your information, contact buildforls@gmail.com.
Information used by the app
Account and employment information includes your name, email address, phone number if provided, employee identifier, job role, account status, site assignments and profile photo. Authentication information is processed by our sign-in service to create and maintain your session.
Work records include attendance times and location coordinates, attendance photos when submitted, leave reasons, expense receipts, material requests, tasks, progress photos, drawings, notes and approval history. Payroll records may include salary amounts, payment history, bank account details, IFSC codes, UPI details and payment proofs.
When notifications are enabled, the app processes a device notification token, platform information, notification preferences and delivery records. Service providers may also process connection and diagnostic information, such as IP addresses and request logs, to operate and protect the service.
Why information is used
Information is used to authenticate accounts, assign staff to sites, verify attendance against a site's permitted radius, coordinate work, review requests, maintain payroll and payment records, deliver work updates, generate reports and investigate errors or unauthorized use.
Please submit information relevant to your work. Avoid including unrelated personal information or other people's sensitive details in notes, photographs and attachments.
Location, camera and file permissions
The attendance feature requests your device location when you open or refresh the attendance screen and when you mark attendance. While the screen is open, your location is sent to the service to find nearby sites you can check in at; it is not stored for that purpose. Check-in and check-out coordinates, with their reported accuracy, are sent to the service to confirm that you are inside the site's attendance area and are stored with attendance records. The app does not implement continuous background location tracking.
Camera, photo and file access supports the images or documents you choose to submit, including attendance photos, profile photos, progress images and receipts. You can manage these permissions in your device or browser settings. If you deny a permission, the related feature may not work; contact your administrator for assistance.
Access, service providers and sharing
Work records are available to company administrators and other staff according to their role and assigned responsibilities. Payroll and bank information is used by staff responsible for those functions. Authorized users can download or share reports and attachments; recipients of those copies handle them outside the app's access controls.
The application uses Supabase for authentication, database and file storage, and Google Firebase services for web hosting and push messaging. These providers process information needed to deliver their services. The app does not contain advertising features or a feature for selling personal information.
Information may be disclosed when required by applicable law or to investigate misuse and protect accounts. Hosting and processing locations depend on the service configuration and providers used; contact us for information about your deployment.
Device storage and notifications
The app stores session information and preferences, such as language and appearance, on your device or browser so you can continue using your workspace. Sign out when using a shared device. Clearing browser or app data may remove local settings and require you to sign in again.
You can manage available notification categories in the app and turn off operating-system or browser notification permission. Some mandatory workplace updates may still appear inside the app. Disabling push notifications does not delete your account or work records.
Retention and account deletion
You can ask us to delete your account at any time, without signing in or installing the app. Follow the steps at https://kmd-interior-erp-web-96980.web.app/delete-account.html, use Request account deletion in the app, or email buildforls@gmail.com with the subject 'KMD ERP account deletion' and the email address or phone number registered to your account. Do not send your password, OTP or full bank account details. We may need to verify your identity, and we complete verified requests within 30 days.
When we delete an account, we delete the sign-in account, profile details, profile and attendance photos, saved bank, IFSC and UPI details, device notification tokens, notification preferences and notifications sent to you.
We keep salary and payment records, attendance dates, times and locations, leave, expense and material requests, receipts, approval and audit history, and project records you contributed to for up to 8 years after deletion, for accounting, employment and legal reasons. We then delete them. Deleted data can remain in encrypted service backups for up to 30 days until those backups expire. Copies previously downloaded or exported by authorized staff are handled outside the app.
Suspending sign-in or removing the app from your device does not delete your account. To delete it, request deletion as described above.
Your choices and privacy requests
You can update supported profile fields in the app and ask us to access, correct or delete information, raise a privacy concern, or explain how your information is used. Where applicable, you may ask to withdraw permission for processing based on your consent. Some changes may affect the workplace features available to you.
Send requests or grievances to buildforls@gmail.com. Include enough information to identify the account and the issue, without sending authentication secrets. Available rights and any required response periods depend on applicable law.
Protection of information
The app uses authenticated accounts, role-based access controls and HTTPS connections. These measures reduce risk but do not guarantee that information can never be lost or accessed improperly. Keep your password private and report unexpected access to your administrator.
Downloaded files and previously issued temporary file links may remain usable outside a signed-in session until removed or expired. Revoking an account's access cannot recall copies already downloaded.
Workplace use and policy changes
This application is intended for authorized workplace users, not as a service directed at children. If an account or record was created in error, contact us to review it.
We may update this policy when the application's features or information practices change. The date above identifies the latest published text. Any additional notice or permission required for a change must be provided through the appropriate workplace or app process.