Airo Lens — Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how AiroHR Technologies Pvt Ltd ("AiroHR", "we", "us") collects, uses, stores and protects information in the Airo Lens Android application (the "App") — a face-recognition attendance terminal used by employers to record their employees' attendance. Airo Lens is part of the AiroHR platform and is used by businesses ("Employers") who hold an AiroHR account.

The Employer is the data fiduciary / controller for their employees' data. AiroHR processes that data on the Employer's behalf to provide the attendance service.

1. Information we process

• Facial recognition data (biometric). During enrollment, the App captures several camera frames of an employee's face and converts them on the device into a mathematical face template (a numeric vector). This template — not a photograph — is what is stored and used to recognise the person at the terminal.
• Employee details imported from the Employer's AiroHR account: name, employee code, designation, branch, and (if set) a profile photo shown on the result screen.
• Administrator details: the admin's mobile number and email, used to register the device and authenticate admin access via a one-time code (OTP).
• Device / kiosk location: a label and approximate or precise GPS location of where the terminal is installed, stamped onto each attendance record.
• Attendance records: check-in / check-out / break times and the match confidence for each scan.
• Device information needed to operate the kiosk (app version, model).

2. How facial recognition works

• Recognition runs entirely on the device using an on-device model.
• The App does not upload or store raw face photographs. Only the derived, encrypted face template leaves nothing about your actual image.
• Face templates are stored in an encrypted database on the device (SQLCipher) and transmitted, when synced, only over encrypted connections (HTTPS/TLS) to the Employer's own AiroHR account.

3. How we use the information

Information is used solely to provide the attendance service: to identify enrolled employees at the terminal, record their attendance, apply the Employer's shift and break rules, and show those records in the Employer's AiroHR dashboards and payroll. We do not use any of this data for advertising, profiling, or sale.

4. Legal basis & consent

Biometric (face) data is collected only with the explicit consent of each employee, captured in the App at the time of enrollment. Consent may be withdrawn at any time, after which the employee's face data is deleted (see Section 7). We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP) and other applicable laws.

5. Sharing

We do not sell, rent or share employees' personal or biometric data with third parties. Data is accessible only within the Employer's own AiroHR account and to AiroHR strictly to operate and support the service. We do not use third-party advertising or analytics SDKs on biometric data.

6. Storage & security

• Face templates are encrypted at rest on the device (SQLCipher) and behind the Employer's AiroHR account on our servers.
• All network communication uses TLS/HTTPS.
• The terminal runs in a locked kiosk mode; admin functions are gated behind a mobile OTP (or an offline PIN).

7. Retention & deletion

• An Employer's administrator can delete (un-enroll) any employee's face data from the App at any time — this erases the template immediately.
• Attendance records are retained for as long as the Employer keeps their AiroHR account, or as required by applicable employment/tax law, then deleted.
• To request deletion of your data, contact your Employer (data fiduciary) or admin@airohr.com.

8. Your rights

Subject to applicable law, individuals may request access to, correction of, or erasure of their personal data, and may withdraw consent for biometric processing. Requests are handled through the Employer, or by contacting us at the address below.

9. Children

Airo Lens is a workplace tool intended for use by businesses and their adult employees. It is not directed to children under 18 and we do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, notifying Employers.

11. Contact us

AiroHR Technologies Pvt Ltd
AiroHR Technologies Pvt. Ltd., Level First, No 2, Basaveshwara Complex, Above Dhaanyam Traders, 40 Feet Road, Srinivas Nagar, Sunkadakatte, Bengaluru 560091
Email: admin@airohr.com
Website: https://airohr.com