Privacy Policy — 27 Workmate

Effective date: 2026-04-26
Applies to: 27 Workmate Android + iOS app (com.estates21.workmate)

Who we are

27 Workmate is an internal employee-facing app published by 21 Estates (UKCO). It provides HRMS + CRM tooling — attendance, leave, expenses, site visits, leads, internal messaging, and AI summaries of business calls — to authorised employees only.

For any questions about this policy, contact dandgulkarsujan@gmail.com.

What we collect and why

Data	When	Why	Retention
Name, email, phone	Account creation	Identification, directory	Until employment ends
Profile details (designation, DOB, emergency contact, address)	Personal data screen	HR record-keeping	Until employment ends
Profile photo	Personal data screen	Directory listing	Until user replaces or employment ends
Location (precise)	During clock-in and the clocked-in shift	Verify attendance is at the office; track field site-visits	60 days, then aggregated to trip logs
Photos (camera / gallery)	Site visit check-ins, expense receipts, chat messages	Proof / attachment	90 days for attachments, otherwise until deleted
Call log entries (number + duration only)	When the user makes a call to a CRM lead from inside the app	Match the just-completed call to the right lead	Read in-memory only — never persisted
Call recording audio (file written by your phone's stock dialer)	When the user makes a call to a CRM lead from inside the app, AND auto-record is enabled in the phone's dialer settings	AI summary of the conversation, written to the lead's history	Audio file deleted within 24 hours of upload; only the textual summary is kept
Device push token	First app launch after sign-in	Deliver task and attendance reminders	Until sign-out
Crash logs + stack traces	On unexpected errors	Bug fixing (Sentry)	30 days

We do not sell personal data. We do not use personal data for marketing. Data is shared only with:

Supabase — database + auth hosting (EU/US data residency)
Mapbox — map tile delivery (coordinates sent per map request)
Google (Gemini) — AI transcription/summarisation of call recordings; audio is sent over HTTPS, processed for the summary, and Google retains it per their Gemini API terms
Expo Push — relay for notifications to Apple/Google push servers
Sentry — crash reports

All processors are contractually bound to equivalent privacy standards.

Permissions we request (Android)

Permission	Used for	Required?
Location — while in use	Clock-in geofence, site visit check-in	Required for attendance/field features
Location — background	Continued attendance tracking during a clocked-in shift	Required for field agents; users can clock in without it
Camera	Selfie clock-in, receipt capture	Optional per action
Photos / Audio media (READ_MEDIA_AUDIO)	Locate the audio file your phone's stock dialer wrote after a CRM call, for AI summary	Optional — needed only for AI Call Summary
All Files Access (MANAGE_EXTERNAL_STORAGE)	Same as above — some OEM dialers (Xiaomi, Samsung) write files outside MediaStore	Optional — Workmate scans only known call-recording directories and only after an in-app call; never browses arbitrary files
Read call log (READ_CALL_LOG)	Match the just-completed call to the right CRM lead by phone number + timestamp	Optional — needed only for AI Call Summary
Read phone state (READ_PHONE_STATE)	Detect end of call	Optional
Notifications	Task + attendance reminders	Optional
Foreground service	Keep the attendance tracker alive during a shift	Required on Android during a clocked-in shift

Each permission is requested at point-of-use, never at app startup. 27 Workmate does not record calls itself; it reads the file the OS dialer auto-records, with the user's consent (i.e. the user has enabled auto-record in their phone's dialer settings). Disable auto-record in the phone's Phone app to stop generating these files.

iOS

iOS does not allow third-party apps to access call audio. AI Call Summary is therefore not available on iOS. The remaining HRMS + CRM features work the same as Android.

Your rights

You can, at any time:

Review or update personal data via Profile → Personal Data.
Revoke any permission in device Settings → Apps → Workmate → Permissions. Auto-record can be disabled in your phone's Phone app at any time and that immediately disables the AI summary feature.
Sign out to stop all background tracking and clear the local session.
Request deletion of your account by emailing the address above. We will purge personal data within 30 days subject to any legal retention requirements (payroll, attendance audit trail).

Children

27 Workmate is strictly for company employees. Not intended for anyone under 18.

Compliance

This app and its data handling are designed to comply with India's Digital Personal Data Protection Act 2023 and the Indian Telegraph Act for call-recording consent. Recording is only ever performed by the user's own phone OS, with the user's prior opt-in via the phone's dialer settings.

Changes

We'll update the "Effective date" above and notify signed-in users in-app when this policy materially changes.