Privacy policy

Effective 4 November 2026 · applies to NEXTACH PUNCH (Android) and the other NEXTACH products

In short

• Everything you enter stays on your own phone or computer. NEXTACH does not run servers that receive it.
• Google Drive backup is optional. The app can reach only the backup files it creates in your own Drive.
• We do not sell, share or use your data for advertising.

1. Who we are

NEXTACH develops business software, including NEXTACH PUNCH, an attendance and payroll app for Android. Contact: nextach53@gmail.com.

2. Data the app keeps on your device

The business that installs NEXTACH PUNCH (the "Admin") enters and controls this data. It is stored only in the app's private storage on that device:

• Company profile and logo, attendance month and settings.
• Employee details entered by the Admin: name, code, department, designation, phone number, joining date, shift, leave entitlements and photo.
• Face templates: when an employee's face is enrolled, the app stores numbers that describe the face (not a picture) so it can recognise the employee at the attendance kiosk. Face matching runs entirely on the device.
• Attendance punches, corrections with their reasons, leaves and reports.
• App users (Admin and users), their PINs (stored only as a secure one-way hash) and an activity log.

3. Device permissions

• Camera: to scan faces and ID card QR codes for attendance, and to take employee photos. Camera frames are processed on the device and are not uploaded.
• Fingerprint / biometrics: to unlock the app login using Android's own fingerprint prompt. The app never receives or stores fingerprints.
• Internet: only for Google Drive backup.

4. Google Drive backup (optional)

If the Admin taps "Connect Google Drive", Google asks the Admin to choose a Google account and allow access. The app asks only for the permission drive.file, which means it can see and manage only the files it creates itself (backups in the folder NEXTACH_PUNCH_Backup). It cannot see any other files in that Google Drive. The app uses this access only to upload, list, download (for restore) and remove old backup files, and it reads the account's e-mail address to show which account is connected.

Backups go directly from the device to the Admin's own Google Drive. NEXTACH does not receive them. The Admin can disconnect at any time in the app, or remove access at myaccount.google.com/permissions.

NEXTACH PUNCH's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google APIs is not used for advertising, is not sold, and is not transferred to anyone.

5. Data that leaves the device only when you choose

• Licence activation: the Admin creates a request file and sends it to their NEXTACH provider. It contains the company name and contact details, the number of users and employees, and a device code made from the phone's identifiers by a one-way hash. It is used only to issue and manage the licence.
• Reports and backups shared by you: PDF, Excel, WhatsApp messages or backup files go only where you send them, using the apps you choose.

6. Keeping and deleting data

Data stays on the device until the Admin deletes it. In Company Profile the Admin can choose to keep only the last few years of data; older data is removed automatically after a backup is made. Uninstalling the app deletes all data on the device. Backups in Google Drive stay until the Admin deletes the NEXTACH_PUNCH_Backup folder. Employees who want their data corrected or removed should contact their employer (the Admin), who controls it.

7. Security

Data is kept in the app's private storage, protected by Android. App logins use PINs or the phone's fingerprint unlock, and each user has only the rights the Admin gives.

8. Children

NEXTACH PUNCH is a business tool for employers and is not directed at children.

9. Other NEXTACH products

NEXTACH BOOK, MULTI, FEE and DORMA also keep their data on the customer's own computer. NEXTACH receives only the files the customer chooses to send, such as a licence request.

10. Changes

If this policy changes, the new version will be published on this page with a new effective date.

11. Contact

Questions about privacy: nextach53@gmail.com.