Tribe — App Privacy Policy

Our role

Tribe is an employee self-service mobile app provided by Ainlytx Tech Solutions Ltd (DIFC, Dubai, UAE · Reg: 12360). It is made available to you by your employer. Your employer decides what data is processed and why, and is the data controller. Ainlytx operates the app and its servers on your employer's behalf as a data processor, acting on their instructions. Questions about your personal data are usually best directed to your employer's HR team first; our contact details are at the end.

Information we process

• Account & identity — your name, work email, employee identifier and role, used to sign you in and show your information.
• Attendance selfie (camera) — when you punch in or out, the app captures a front-camera photo as evidence of the punch. The camera is used only at the moment you take a punch.
• Location — when you punch in or out, the app records your device location and attaches it to that punch, as configured by your employer. Location is not tracked in the background.
• Biometric app-lock — if you enable it, the app uses your device's fingerprint / face unlock to lock and unlock the app. This check happens entirely on your device; your biometric data is never transmitted to or stored by us.
• Device & notification data — a push-notification token and basic device information, used to deliver notifications and operate the app.
• Employment records you view or submit — attendance, leave, comp-off, holidays, and payslip information provided by your employer's systems.
• Diagnostics — limited technical logs needed to keep the app secure and working.

How we use this information

To provide the app's features (attendance, leave, payroll viewing, approvals, notifications), to authenticate you and keep your account secure, to deliver notifications you have enabled, and to maintain, troubleshoot and protect the service — processed on your employer's instructions in the context of your employment.

Sharing

• With your employer, whose data this is.
• With infrastructure providers that host the app on our behalf — primarily Google Cloud (application, file and database hosting in the region selected for your organisation). They process data only on our instructions.
• Where legally required (e.g. a lawful request from a competent authority).

We do not sell your personal data, and we never use it for advertising or model training.

Where your data is stored

Your employer's data is hosted in the region selected at provisioning (default asia-south1), which for Tribe deployments is India, the United Arab Emirates, or the United Kingdom. Postgres row-level security enforces tenant isolation at the database layer, so each organisation's data is kept separate.

Security

All traffic between the app and our servers is encrypted in transit (HTTPS). Access is restricted, attendance photos and documents are held in access-controlled cloud storage, and are served only through short-lived signed links.

Retention

We keep personal data for as long as your employer requires it for the purposes above and as required by applicable law, then delete or anonymise it. Data subject access, rectification and erasure requests are honoured within 30 days.

International transfers

Where an organisation's users are located in more than one country, personal data may be processed in the region selected for that organisation. Any transfer of personal data between jurisdictions is carried out in accordance with applicable data protection law; details of the safeguards applied are available on request from legal@ainlytx.ai.

Your rights

Depending on where you live and the law that applies (including the DIFC Data Protection Law and, where relevant, the UK GDPR), you may have rights to access, correct, delete or restrict the use of your personal data, and to object to certain processing. Because your employer is the controller, please raise these requests with your employer's HR team, who will coordinate with us.

Children

Tribe is a workplace app intended for employees aged 18 and over. It is not directed to children, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, notifying you in the app.

Contact

Legal & privacy: legal@ainlytx.ai
Security: security@ainlytx.ai
General enquiries: hello@ainlytx.ai