Privacy policy

Last updated 11 November 2026

LookIn is attendance and payroll software made by Alifiya ("we"). This policy explains what happens to data when a business ("the employer") uses LookIn, and what we ourselves receive.

The short version

  • Staff, attendance, pay and face data are stored in the employer's own Supabase account, not on our servers. We cannot see it.
  • The employer decides what is collected and is responsible for it (the data controller, or "data fiduciary" under India's DPDP Act).
  • Face recognition is used only with each person's agreement. Anyone can use a PIN instead.
  • We receive only what is needed to set up LookIn and check that it was bought.

Data kept in the employer's account

The employer's LookIn holds: staff names, phone numbers, staff codes, shifts and pay details; check-in and check-out times, the check-in tablet or phone's location check and a small photo at each check-in; face templates (a set of numbers made from face photos) and the face photos used to make them; leave requests, salary slips and documents the employer chooses to upload; and the email addresses of the employer's admins.

It is stored with Supabase, Inc. in the region the employer chose, under Supabase's privacy policy. The employer can view, export, change and delete it at any time.

Face data

  • Before a person's face is registered, the check-in tablet or phone, or the website, shows them what is collected and why, and asks for their agreement. The date of agreement is recorded.
  • Face data is used only to recognise the person at check-in and check-out. It is never sold, shared, or used for anything else.
  • When a person is marked as having left, their face templates and face photos are deleted automatically.
  • A person can ask their employer to delete their face data at any time and use a PIN instead.

What we receive

  • During setup: with your approval on Supabase's own page, our setup service uses a temporary access token to create and install your project. The token is kept in a secure cookie on your browser for up to one hour and is not stored by us. Your login password passes through our setup service once, over an encrypted connection, to create your account, and is not stored.
  • When you buy: Google Play handles payment. We receive the order number and purchase token from Google to check the purchase and issue your licence, and keep them in your own account. We do not receive card or bank details.
  • Support: anything you send us by email.

This website uses no advertising or tracking cookies and no analytics that identify you.

Permissions the app uses

  • Camera: to recognise faces, take check-in photos and scan the setup QR code.
  • Location: to check the check-in tablet or phone is at the business's premises, if the employer turns this on.
  • Internet: to send records to the employer's account.

Your rights

Staff: ask your employer to see, correct or delete your data; they control it. Employers and anyone else: write to support@alifiya.co. See also how to delete data.

Children

LookIn is for businesses and their adult staff. It is not meant for anyone under 18.

Changes

If this policy changes, the new version will be posted here with a new date.