Privacy Policy for Claudion Checkin

Effective date: 1 March 2026 Last updated: 20 August 2026

1. Introduction

This Privacy Policy describes how HTS Qatar ("we", "us", "our") collects, uses, shares and retains information when you use the mobile application Claudion Checkin (the "App").

Summary of data collected. Claudion Checkin collects and shares the following categories of personal data:

Precise location and approximate location
Photos and files and documents
App credentials and session tokens

Each category is described in full in section 2 below, including why it is collected, when it is collected, who it is shared with, and whether it is optional.

Claudion Checkin is a workforce check-in and field-reporting client. It is normally provided to you by your employer or organisation, which operates its own ERPNext/Frappe server. The App transmits the information you submit to that organisation's server, at a URL configured by you or your administrator. Your organisation acts as the controller of the records you submit.

2. Information we collect, access and share

2.1 Location data

What is collected. The App collects your device's precise location and approximate location (GPS coordinates, and where available network-derived location).

Why it is collected. Location is collected to record where a check-in, check-out or field report took place, so that your organisation can verify attendance and site visits. This is the sole purpose.

When it is collected. Location is collected only while the App is open and in the foreground, and only at the moment you tap to check in, check out, or submit a report. The App does not collect location in the background, does not run a background location service, and does not track you continuously.

Permission. Location access requires your explicit consent through the Android permission prompt. You may decline. You may withdraw permission at any time in Android Settings → Apps → Claudion Checkin → Permissions. If location permission is denied, check-in records may be submitted without location, or your organisation's configuration may require location before a check-in can be completed.

Collection and sharing. Location coordinates are collected by the App and transmitted off your device to your organisation's ERPNext/Frappe server, where they are stored in your organisation's records. This constitutes both collection and sharing of location data under Google Play's definitions. Data is transmitted over HTTPS/TLS. HTS Qatar does not maintain a copy of this data on its own systems; the recipient is the server operated by your organisation at the URL you or your administrator configured.

Limits on use. We do not use location data for advertising, profiling, marketing or analytics. We do not sell location data, and we do not share it with data brokers, advertising networks or any party other than your organisation's server.

2.2 Camera and photos

What is collected. Images you capture with the camera or select from your photo gallery — for example receipts, site photos or check-in selfies.

Why it is collected. So that images can be attached to a check-in, check-out or field report record.

When it is collected. Only at the moment you take a photo within the App or explicitly select an existing image. The App does not scan, index or read your photo library otherwise.

Collection and sharing. Selected images are uploaded to your organisation's server over HTTPS/TLS and stored in your organisation's records. This constitutes collection and sharing. Optional — the App is usable without granting camera or photo access, though your organisation's configuration may require a photo for certain record types.

2.3 Files and documents

What is collected. Documents you explicitly select from device storage, for example PDFs.

Why it is collected. So that documents can be attached to a record.

When it is collected. Only at the moment you select a file through the system file picker. The App does not scan or index device storage.

Collection and sharing. Selected files are uploaded to your organisation's server over HTTPS/TLS and stored in your organisation's records. This constitutes collection and sharing. Optional.

2.4 Account and device information

What is collected. The server URL you configure, and your login credentials or session token.

Why it is collected. To authenticate you against your organisation's server and keep you signed in between sessions.

Where it is stored and shared. Credentials and tokens are stored locally on your device and transmitted to your organisation's server for authentication over HTTPS/TLS. Authentication is performed entirely against your organisation's server. HTS Qatar does not operate a central user account system for this App and does not receive your credentials. Required — the App cannot function without this.

3. Summary table of data practices

Data type	Purpose	Collected	Shared with	Optional
Precise location	Attendance and site-visit verification at the moment of check-in	Yes	Your organisation's server	Yes — permission can be denied or revoked
Approximate location	Attendance and site-visit verification at the moment of check-in	Yes	Your organisation's server	Yes — permission can be denied or revoked
Photos	Attach receipts, site images or check-in photos to a record	Yes	Your organisation's server	Yes
Files and documents	Attach documents you select to a record	Yes	Your organisation's server	Yes
App credentials / session token	Sign in to your organisation's server and remain signed in	Yes	Your organisation's server	No — required to use the App

No data in the table above is collected or shared for advertising, marketing, analytics, profiling, fraud prevention or any purpose other than the one stated.

4. Data handling, storage and retention

Claudion Checkin operates as a client-side interface. All data you submit — including location coordinates, photos and documents — is transmitted directly to the server URL configured by you or your organisation.

Storage location. Submitted records are stored on your organisation's ERPNext/Frappe server rather than on systems operated by HTS Qatar. Your organisation controls that server and the records held on it.

Encryption in transit. All data is transmitted over HTTPS/TLS.

Retention. Retention of submitted records is determined by your organisation's own policies on its own server. Data held locally on your device — server URL, session token and cached attachments — is deleted when you sign out of the App or uninstall it.

No advertising or analytics SDKs. The App does not include third-party advertising networks or analytics SDKs, and does not sell or share personal data for advertising purposes.

5. Deleting your data

To remove data held on your device, sign out of the App or uninstall it. This clears the stored server URL, session token and any cached attachments.

Records you have submitted are stored on your organisation's server and controlled by that organisation. Requests to delete submitted check-ins, location records, photos or documents should be made to your employer or system administrator. If you are unsure who to contact, write to us at the address in section 8 and we will direct your request to the relevant administrator.

6. Children

Claudion Checkin is a workplace tool intended for use by employees and contractors. It is not directed to children under 13 and we do not knowingly collect personal information from children.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above and, where required, communicated through the App or the Google Play listing. Continued use of the App after an update constitutes acceptance of the revised policy.