Privacy Policy

1. Who We Are

This Privacy Policy explains how Life Safe Medical (“LSM“, “we“, “us“, “our“), Kolkata, India, collects, uses, stores, shares and protects personal data through the LSM Employee App (the “App“).

LSM is the Data Fiduciary (the entity that decides why and how your personal data is processed) under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act“). The App is developed and technically maintained for LSM by its technology partner, Synergic Softek Solutions Pvt. Ltd., Kolkata, which acts on LSM’s instructions as a Data Processor.

2. Who This Policy Applies To

The App is intended only for employees, staff and authorised personnel of LSM (“you“). User accounts are created by LSM; members of the public cannot register. The App is not intended for, and is not used by, anyone under 18 years of age.

This policy also covers limited information about customers, hospitals and their representatives that you record in the App during field visits (see Section 3.5).

3. Information We Collect

3.1 Account and employee information

• Name, employee ID, designation, department, branch/location, reporting manager
• Official mobile number and/or email address
• Login credentials (passwords are stored only in encrypted/hashed form)
• Assigned shift and roster details

3.2 Attendance information

• Punch-in and punch-out date and time
• Attendance regularisation requests and the reasons you enter
• Attendance status (present, late, early exit, etc.) derived from the above

3.3 Location information

• Precise location (GPS) is captured only at the moment you perform an action in the App — punch-in, punch-out, and field visit check-in/check-out.
• Location is used to verify that attendance is marked from an approved work location (geo-fencing) and to record where a field visit took place.
• The App does not continuously track your location, and does not collect location in the background when you are not using these features.

3.4 Camera and photographs

• A selfie photograph is captured at punch-in/punch-out, and may be captured at field visit check-in, to confirm that attendance is marked by the correct employee.
• If you attach photographs during a field visit (for example, of a site or a document), those images are uploaded as part of the visit record.
• The App accesses the camera only when you initiate one of these actions. It does not access your photo gallery or other files unless you choose to attach a file.
• Selfies are used only for attendance verification. We do not use them for any facial-recognition purpose beyond what is described here, and we do not share them outside LSM.

3.5 Field visit and work activity information

• Customer / hospital name, contact person name, designation, phone number and email that you enter
• Visit purpose, meeting notes, visit outcome, follow-up dates and related remarks
• Date, time and location of the visit (see 3.3)

This information relates to LSM’s business contacts and is processed for LSM’s legitimate business purposes, such as customer relationship management and sales follow-up.

3.6 Device and technical information

• Device model, operating system version, App version, and a device or installation identifier
• Push-notification token (to send you work-related notifications)
• Error and crash logs, and basic usage logs needed to keep the App secure and working

3.7 Information we do NOT collect

• We do not access your contacts, call logs, SMS messages, microphone, or personal photo gallery.
• We do not collect financial account details through the App.
• We do not use advertising identifiers and do not show advertisements.

4. Permissions Used by the App

You can withdraw any permission from your device settings at any time. However, attendance and visit features cannot function without location and camera access.

5. How We Use Your Information

• To record and verify attendance, working hours, shifts and regularisation requests
• To record and manage field visits, customer meetings and follow-ups
• To support employment-related administration such as attendance-based payroll processing, leave and performance management, in line with your employment with LSM
• To send work-related notifications and reminders
• To secure the App, prevent misuse or fraudulent attendance, and troubleshoot technical issues
• To comply with applicable labour, tax and other legal obligations

We process your personal data for these purposes as permitted under the DPDP Act, including for purposes of employment and on the basis of your consent where required.

6. Offline Use and Local Storage

If you do not have network connectivity, the App may temporarily store attendance and visit records (including selfies and location) on your device and upload them automatically when connectivity returns. Locally stored records are kept within the App’s private storage and are removed from the device after they are successfully synchronised.

7. How We Share Your Information

We do not sell, rent or trade your personal data. We share it only as follows:

• Within LSM — with your reporting manager, HR, administration and authorised management, strictly on a need-to-know basis according to their roles.
• Technology service providers — Synergic Softek Solutions Pvt. Ltd. (App development and maintenance), and hosting, cloud and push-notification providers that operate the App’s infrastructure. They process data only on LSM’s instructions and are bound by confidentiality obligations.
• Legal requirements — with government authorities, courts or regulators where required by law, or to protect the rights, safety or property of LSM, its employees or others.

8. Where Your Data Is Stored

Your data is stored on secure servers used by LSM and its service providers. Data is stored in India except where a service provider (for example, a push-notification service) processes limited technical data outside India; any such transfer is made in accordance with the DPDP Act and applicable rules.

9. How Long We Keep Your Data

• Attendance, location and selfie records linked to attendance: for the duration of your employment and thereafter for as long as required for payroll, audit, statutory record-keeping and resolution of disputes under applicable laws.
• Field visit and customer interaction records: for as long as required for LSM’s business and legal purposes.
• Technical and crash logs: for a limited period needed for security and troubleshooting.

When data is no longer required, it is deleted or anonymised.

10. How We Protect Your Data

• Encrypted transmission between the App and our servers (HTTPS/TLS)
• Role-based access control, so each user sees only the data relevant to their role
• Hashed storage of passwords and secure session handling
• Audit logs of access to and changes in records
• Restricted access to servers and periodic security reviews

No system is completely secure. If a personal data breach occurs, we will act promptly to contain it and will notify affected persons and the Data Protection Board of India as required by law.

11. Your Rights

Subject to the DPDP Act and applicable law, you have the right to:

• Access a summary of your personal data processed by us
• Correct or update inaccurate or incomplete personal data
• Request erasure of personal data that is no longer needed, unless we are required to keep it by law or for employment-related obligations
• Withdraw consent where processing is based on consent (this will not affect processing already carried out, and may limit your ability to use the App)
• Nominate another person to exercise your rights in case of death or incapacity
• Raise a grievance with us, and, if not resolved, with the Data Protection Board of India

To exercise these rights, contact the Grievance Officer below. We will respond within the timelines prescribed by law.

12. Account and Data Deletion

Employee accounts are created and deactivated by LSM. When your employment ends, your App access is deactivated. You may request deletion of your account and associated personal data by writing to the Grievance Officer with the subject line “LSM Employee App – Data Deletion Request”, stating your name and employee ID.

On a verified request we will delete your App account and personal data, except records we must retain for legal, payroll, tax or audit purposes, which will be retained only for the required period and then deleted.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date, and significant changes will be communicated through the App or by official communication.

14. Contact Us / Grievance Officer