GeoKerja Privacy Policy

GeoKerja ("GeoKerja", "we", "our" or "us") is a workforce attendance and workforce management platform operated by Nonplus Sdn. Bhd. This Privacy Policy explains how GeoKerja collects, uses, stores, discloses and protects personal data when you use the GeoKerja mobile application and related services.

GeoKerja is provided to users through their employer or organisation. Your employer determines the business purposes for which attendance and employment-related information is collected and generally acts as the data controller for such information. GeoKerja processes that information on behalf of your employer in order to provide the services and may also process limited information for platform administration, security, legal compliance, technical support and service improvement.

By using GeoKerja, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and any privacy notice issued by your employer.

GeoKerja may collect personal data including your name, employee number, work email address, organisation, department, role, account status, attendance records, check-in and check-out times, work arrangement, assigned workplace, approved home-working location, correction requests, supporting documents, device information, application version, operating system, IP address, security logs, notification token, diagnostic information and communications relating to support requests.

Location information is collected only when required for attendance verification. Subject to your device settings and your employer's configuration, GeoKerja requests a location reading when you voluntarily perform a check-in, check-out or register or update an approved work-from-home location.

GeoKerja is designed to verify attendance at the point of the attendance transaction and is not intended to continuously monitor or track your movements in the background during normal use. If location permission is denied, certain attendance functions may not be available and your employer may require an alternative attendance verification process.

GeoKerja uses personal data to authenticate users, administer accounts, verify attendance, validate workplace locations, maintain attendance records, process correction requests, generate attendance reports, support payroll and workforce administration, provide notifications, respond to support enquiries, maintain system security, detect fraud or misuse, investigate incidents, comply with legal obligations, maintain audit trails and improve the reliability, availability and performance of the platform.

GeoKerja does not sell personal data and does not use personal data for third-party behavioural advertising.

Where you upload photographs or documents to support an attendance correction request, those files are stored within secured cloud infrastructure and are accessible only to authorised persons with a legitimate business need, including yourself, authorised managers, HR personnel, system administrators, GeoKerja support staff where necessary and trusted service providers responsible for operating the platform.

GeoKerja may send operational notifications relating to attendance reminders, request approvals, request rejections, account administration, security alerts and other service-related matters where notification permissions have been granted. Notification permissions may be managed through the application or your device settings.

If you enable biometric authentication, GeoKerja relies on your device's secure authentication services, such as Face ID or fingerprint authentication, to unlock the application. GeoKerja does not receive, collect or store your biometric template. Only the authentication result is made available to the application.

Personal data may be disclosed to your employer and authorised personnel, trusted cloud hosting providers, authentication providers, notification providers, storage providers, customer support providers, security and monitoring providers, professional advisers, auditors, regulators, law enforcement authorities or other parties where disclosure is required by law or reasonably necessary to operate and secure the GeoKerja platform.

Personal data may also be transferred as part of a corporate restructuring, merger or acquisition subject to appropriate confidentiality obligations.

GeoKerja and its service providers may process or store personal data in Malaysia or other jurisdictions where supporting infrastructure is located. Appropriate contractual, organisational and technical safeguards are implemented to protect personal data during cross-border processing in accordance with applicable law.

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy, satisfy contractual requirements, meet legal obligations and support audit, payroll, dispute resolution and compliance requirements. Your employer generally determines the retention period for attendance and employment records. GeoKerja may retain limited security logs, backup data and audit records for a reasonable period following account deactivation.

GeoKerja implements reasonable administrative, organisational and technical safeguards designed to protect personal data against unauthorised access, alteration, disclosure, misuse or loss. These measures include encrypted communications, role-based access controls, authentication mechanisms, monitoring, logging and secure cloud infrastructure. While reasonable security measures are maintained, no electronic system can guarantee absolute security.

Subject to applicable law, you may have the right to request access to your personal data, request correction of inaccurate information, withdraw consent where applicable, request deletion where legally permissible or lodge a complaint regarding the processing of your personal data.

As attendance information is generally controlled by your employer, requests relating to employment records should first be directed to your employer or Human Resources department. GeoKerja will assist your employer where appropriate.

GeoKerja is intended for workplace use and is not designed for independent use by children under the age of 16.

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, technology, service providers or platform functionality. The latest version will always be available within the application together with the effective date. Continued use of GeoKerja following publication of an updated Privacy Policy constitutes acknowledgement of the revised policy to the extent permitted by applicable law.

If you have any questions regarding this Privacy Policy or GeoKerja's privacy practices, please contact:

GeoKerja Support

Email: geokerjasupport@nonplus.my

For employment-related privacy enquiries, including attendance records and HR information, please contact your employer or your organisation's Human Resources department.