KhataKro is an app for construction businesses to keep attendance, wages, salaries, purchases and site accounts. It is run by Geolatris (“Geolatris”, “we”, “us”). This policy covers the KhataKro mobile app, the website and the web account portal at khatakro.geolatris.com. It explains what we collect, why, who else handles it, and what you can do about it. By creating an account or using KhataKro you agree to this policy.
1. Information we collect
- Account information: your name, email address, phone number, a securely hashed password, and an optional profile photo. If you sign in with Google we receive your name and email address from Google. If you sign in with a phone number, a one-time code is sent to it by SMS.
- Business records you enter: your business, sites and offices, and the people who work for you: names, roles, phone numbers, ID numbers, wage rates or salaries, joining dates and optional photos. Also their attendance, overtime, leave and leave requests, clock-time corrections, salary statements, payments and advances, and your materials, vendors (with GSTIN), subcontractors, client invoices and other expenses.
- Location, only for clock-in: when a staff member taps Clock in or Clock out, the app reads the phone's precise location and sends it with the tap. We store the coordinates, how accurate the phone said they were, the distance from the site or office, and whether Android reported the location as coming from a mock-location app. While the clock screen is open the app also reads the location to show how far away the person is, without saving it. Location is never read in the background, and never from anyone who does not clock in. Owners and managers also save the location of their sites and offices, and the app shows the phone's own position on the map they use to do it.
- Device and usage data: a push-notification token, the app version and build, crash and error reports, and an app-integrity check from Google Play that confirms requests come from the genuine app. A support ticket also carries the phone's platform, system version and device name.
- Photos and files: pictures and documents you choose to attach, such as worker photos, your profile photo, vendor bills, client invoices and screenshots on support tickets. The app opens the camera or your photos only when you choose to add one.
- Messages to us: Help & Support tickets and emails, with a snapshot of your situation at that moment (the screen you were on, your plan, your role and record counts) so we can see the problem as you saw it.
2. How we use it
- To run the app and its features for you and your business.
- To sign you in and keep your account secure.
- To work out wages, salaries, leave balances, balances owed, reports and profit from the records you enter.
- To record attendance from clock-ins, to check a clock-in against a boundary the business has set, and to show the business where each clock-in and clock-out was made.
- To send notifications about your work, such as a leave decision or a salary statement, and reminders you have turned on.
- To send account emails: verification codes, password resets, receipts and notices about your plan.
- To answer your support requests.
- To find and fix faults, prevent abuse and keep the service reliable.
We do not sell personal information, we do not show ads, and we do not use your records or anyone's location for advertising or for anything other than running KhataKro.
3. Who inside a business can see what
Records entered for a business belong to that business. Its owner, and the team members the owner gives permission to, can see them in the app; supervisors see only the sites they are assigned. A staff member's clock-in times and locations, leave, attendance and salary statements are visible to the owner and to anyone the owner allows to see them. When a business keeps records about its workers and staff, it decides what is recorded and why, and we handle those records on its behalf. If you are a worker or staff member, your employer should tell you how it uses them; you can also ask us.
4. Service providers
We share information only with companies that help us run KhataKro, for that purpose only:
- Cloud hosting and database provider: runs our servers and stores your account and business records.
- Google Firebase and Google Sign-In: sign-in, including SMS codes for phone sign-in; app-integrity checks (App Check with Google Play Integrity); delivery of push notifications; and private storage for the photos and files you attach.
- Google Maps: draws the map used to pin a site or office, and on Android turns a searched address into a position on it. Google receives the map area being viewed and the phone's position shown on that map. Clock-in locations are sent to our servers, not to Google Maps.
- Brevo: sends our emails. It receives your email address and the content of the email.
- Sentry: crash and error reports. Reports carry an account number, never your name, email address or phone number.
- Expo: forwards push notifications to your phone.
- Razorpay: processes payment if you subscribe from the web account portal. There is no purchase inside the mobile app. We never receive your card, UPI or bank details; Razorpay handles them.
- Groq: writes AI suggestions on the Site Profitability screen, only when someone in your business taps "Ask AI". It receives that site's income and cost figures, the combined totals of your other sites for comparison, and the material and vendor names on its bills. It never receives the site's name or any person's name or phone number. Groq says it does not keep this data, except briefly when needed to fix a fault or investigate abuse.
When you share a statement, a PDF or a spreadsheet from the app, for example on WhatsApp, it goes where you send it. That sharing is your choice and is outside this policy.
We may also disclose information when the law requires it, or to protect the rights and safety of our users and of Geolatris.
5. How long we keep it
We keep your information while your account is open. When you delete your account you are signed out everywhere and the account closes at once; 30 days later it is permanently deleted, together with any business you own and all of that business's records, photos and files. If you were a member of somebody else's business, you are removed from it, but the records you entered stay with that business. Encrypted backups we keep for disaster recovery are deleted after 14 days. We may keep limited billing records for as long as tax law requires.
6. Deleting your account and data
You can delete your account at any time in the app: open Profile → Delete Account. You can also ask us to delete it by emailing privacy@geolatris.com. A worker or staff member whose details a business entered can ask that business to correct or remove them, or write to us and we will pass the request on.
7. Security
Passwords are stored as one-way hashes, everything travels over encrypted (HTTPS) connections, and access to stored data is restricted. Photos and files are stored privately and shown through links that stop working within 24 hours. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.
8. Children
KhataKro is for businesses and is not meant for anyone under 18. We do not knowingly collect information about children.
9. Your rights and choices
Under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you, you can ask to see the personal data we hold about you, have it corrected, completed or erased, and name someone to act for you. You can do most of this in the app; for anything else, write to us. You can also withdraw a permission at any time: turning off location for KhataKro in your phone's settings stops all location collection, though clock-in will not work without it.
10. Grievance officer
If you have a complaint about how we handle personal data, write to our grievance officer at privacy@geolatris.com. We will reply within one month.
11. Changes to this policy
We may update this policy. We will change the “Last updated” date above and, when a change is significant, tell you in the app before it takes effect.
12. Contact us
Questions about this policy or your data? Email us at privacy@geolatris.com.