DigiContractor is a workforce attendance and payroll app used by construction contractors ("Owners") to manage on-site workers through face-recognition attendance, and by their Supervisors to record daily presence. This page explains, plainly, what data the app collects, why, and how it is protected — including exactly what happens to a worker's face data, since that's usually the first question.
DigiContractor is published by Santosh Lama ("we", "us"). The app is used by two kinds of accounts:
Workers themselves do not install or log into the app — their attendance is recorded by a Supervisor or Owner pointing a phone camera at them. This policy explains what happens to data belonging to all three: Owners, Supervisors, and the workers they manage.
Email address or phone number (for sign-in via Firebase Authentication), name, role or designation, a company code linking you to your organisation, your assigned site, and an optional profile photo for Supervisors.
| Field | Collected? |
|---|---|
| Name, father's name, age, role/grade | Yes |
| Mobile number | Yes |
| Joining date and site | Yes — decides from which day a worker is counted in attendance and payroll |
| Daily rate & overtime rate | Yes — used to calculate payroll |
| Face thumbnail and face template | Yes — see §3 |
| Bank account number | Optional — stored only if an Owner/Supervisor enters it. IFSC code is not collected. |
Date, IN/OUT time and site of each attendance entry, the worker's name and ID, and which Supervisor or Owner recorded it; plus any advances, deductions or payments an Owner records against a worker.
Site name and address as entered by the Owner; an activity log and in-app notifications about actions such as adding workers or submitting attendance; and subscription details (chosen plan, trial dates, and — for Owners who subscribe — the plan, billing period, expiry date and a purchase token issued by Google Play Billing, which our server uses only to confirm the subscription with Google Play; payments themselves are handled by Google Play, and we never see card or bank details).
Basic app usage and crash diagnostics via Firebase Analytics and Crashlytics, used only to find and fix bugs.
When an Owner signs in, the app registers that phone's Firebase Cloud Messaging (FCM) token with our server so alerts can reach that phone. The token is stored only for Owner accounts (up to 10 devices per Owner), is removed when the Owner logs out of that phone or when Google reports it is no longer valid, is used only to deliver alerts, and is never used for advertising. The alert text can include a Supervisor's email, a worker's name, the site name, a worker count or a vehicle number.
This is the most sensitive part of the app, so here is exactly what happens:
Location permission is optional. It may be used on the Worksite Location screen to set a reference point for a site. That point is saved only on the phone. In the current version, location is not added to attendance records and is not uploaded to the database. A future update may add an optional site-boundary check; this policy will be updated before that feature is turned on.
Other permissions: the camera (worker photos, attendance scans, Supervisor profile photo) and access to a picture you choose yourself from the gallery when changing a profile photo. On Android 13 and above the app also asks for the optional notifications permission so alerts can appear on your phone; if you do not allow it, alerts still appear inside the app.
We do not use worker data for advertising, and we do not sell any data to anyone.
DigiContractor includes an optional, Owner-only AI Assistant that answers questions like "who is absent today?" or "September payroll summary". It is a local, rule-based feature — not a connection to ChatGPT, Gemini, or any external AI service. It reads the same attendance and payroll numbers already in your account and formats them into a sentence, entirely on your device. No worker data is transmitted anywhere to produce these answers.
Data is stored using Google Firebase: Cloud Firestore (worker details, face thumbnail and face template, attendance, payroll entries, sites, users, notifications, subscription status), Firebase Authentication (sign-in), Firebase Analytics/Crashlytics (diagnostics) and Firebase Cloud Messaging / Cloud Functions (push alerts and each Owner's device token). This version of the app does not use Firebase Storage — the worker thumbnail is saved as text inside the worker's database record. Some information stays only on the phone (app settings, the worksite reference point, the registration photo file).
Access is controlled through sign-in and Firestore security rules that check the user's role, company and assigned site: an Owner can see their own company's workers, sites, Supervisors, attendance and payroll; a Supervisor can only see what their role and assigned site allow (for example the workers and attendance of their site) and cannot open payroll, advances or payments; workers have no accounts. Data is not shared publicly. Device tokens used for push alerts cannot be read by any app user; only our server-side function uses them to send alerts. Data travels to Firebase over encrypted connections, and passwords are handled entirely by Firebase Authentication.
No system can be guaranteed to be completely secure. Please keep your phone and password safe, and remove Supervisors who no longer work with you.
We do not delete data automatically. Worker and attendance information is kept for as long as it is needed for the business's attendance and payroll records while the account is active. Specifically:
Deleting your account. You can ask us to delete your account and its data from inside the app (Owner: ⋮ menu → Security → Delete account; Supervisor: ⋮ menu → Delete account) or, if you no longer have the app, by e-mail. Full details — what is deleted, what is kept and for how long — are on the separate page DigiContractor account deletion. In short:
Because workers are added to the app by their Owner/Supervisor rather than signing up themselves, the Owner is responsible for informing workers that their attendance is tracked by face recognition and for obtaining any consent required under applicable law before adding them. Workers may ask their Owner to view, correct or delete their data at any time. The Owner can change a worker's joining date in the app, and can delete and re-add a worker to correct other details or replace the photo. If the Owner cannot help, the worker can contact us; we may need to confirm identity and involve the Owner, because this data is part of the Owner's company records.
DigiContractor is a workplace tool for adult construction workers and is not directed at, or intended to collect data from, anyone under 18.
If this policy changes, the "Effective" date at the top of this page will be updated. Material changes will be communicated to Owners within the app.
Questions about this policy, or requests to review/delete data, can be sent to:
santoshlama2343@gmail.com
Account deletion: /delete-account.html