Mobile App Privacy Policy

This policy is about the mobile app. The policy at www.tekyagent.com/privacy/ covers this website and the connected-social-accounts feature of the product.

Who this policy is for

AI TekyAgent ERP is workplace software. You use the app because your organisation licenses the product and has given you an account. You cannot create an account inside the app.

Where the app is used by an employer for their staff, that employer is the data controller for the employment information it holds, and TEKYDOCT SDN BHD operates the system on their behalf as a data processor. Questions about your own records — seeing them, correcting them, or asking for them to be deleted — should go to your HR team first.

What the app collects, and why

• Your identity. Name, work email address and user ID, so we can sign you in and show you your own records.
• Your employment record. Job title, department and hire date, plus the statutory identifiers your employer holds — NRIC or passport number, SPK membership number, and work permit number and expiry, which Brunei payroll and employment records require.
• Payslip information. Salary, allowances, deductions, statutory contributions and the bank account you are paid into, so you can read your own payslips.
• Attendance. Clock-ins and clock-outs, breaks and any corrections, to record your working time.
• Location, when you clock in or out. Optional — see below.
• Photos. Only when you capture a photo with a punch or attach a document.
• Leave. Requests, approvals and balances.
• Medical certificates and other documents you attach to a leave request. Applying for medical leave requires a medical certificate, and your employer’s policy may ask for evidence on other leave types too. A medical certificate is health information and we treat it as such: it is stored with your leave request, visible to the people in your organisation who handle leave, and to nobody else. You do not need to provide one to use the rest of the app — only to apply for the leave that requires it.
• Messages and files you send to Ask Teky. See below.

Location

The app reads your device location only at the moment you clock in or out. It does not track you in the background and does not read your location at any other time.

You may refuse the location permission and still clock in and out. However, if your organisation has enabled geofenced attendance, a punch without a location may be flagged or refused by their policy — that setting belongs to your organisation, not to us.

Your coordinates are sent to Google. When a location is captured, the app shows a small map preview of where you are. That preview is provided by Google Maps, and your latitude and longitude are sent to Google in order to render it. Google handles that data under its own privacy policy.

Ask Teky — the in-app assistant

The app includes Ask Teky, reached from the bottom navigation. It is optional, and only appears if your organisation has licensed it.

What you type goes to a third party. When you send a message to Ask Teky, your question is sent to your organisation’s TekyAgent system and then to OpenAI, which generates the reply. Your conversations are stored so you can refer back to them. You may also attach a file — a spreadsheet, for example — for the assistant to read; those files are uploaded and stored too.

Please do not type anything into Ask Teky that you would not want processed by a third party. It is a general-purpose assistant, not a private notepad.

Notifications

The current version of the app does not send push notifications and does not register your device for them. If that changes, we will update this policy and the app’s Google Play Data Safety declaration before the feature is enabled.

What the app does not do

• It contains no analytics, advertising or crash-reporting software. There is no third-party tracking of any kind in the app.
• We do not sell your data, and we do not share it for advertising.
• It does not back your data up to any personal cloud account. Android automatic backup is explicitly disabled for this app.
• It does not read your device contacts, calendar, text messages, call history, browsing activity, or the health data your phone itself holds (such as Apple Health or Google Fit). That is separate from Ask Teky above, where messages you deliberately type are stored, and from a medical certificate you deliberately attach to a leave request — the point here is that the app does not read anything off your phone that you have not handed it.

Where your data goes

Your information travels over an encrypted connection (HTTPS) to the TekyAgent system operated by TEKYDOCT SDN BHD. The two exceptions are the Google Maps location preview and the Ask Teky processing described above.

Your sign-in credential is held in your device’s hardware-backed secure storage — the Android Keystore or the iOS Keychain — rather than in ordinary app storage.

How long it is kept

Employment records are retained according to your organisation’s retention policy and Brunei’s statutory requirements for employment and payroll records. Ask Teky conversations and any files you attach are kept for up to 12 months.

Your rights

Subject to applicable law, including Brunei’s Personal Data Protection Order 2025, you may request access to, correction or deletion of your personal data, object to or restrict certain processing, and withdraw consent where processing relies on it.

Because your employer is the controller of your employment records, please direct such requests to your HR team first. If you cannot resolve a request with them, contact us at info@tekydoct.com. We may need to verify your identity before completing a request.

Account deletion

Accounts cannot be created or deleted inside the app. Where your account was provided by your employer, they manage its closure and the retention of your records under their own policy. If you hold an account directly with us, contact info@tekydoct.com.

Security

We use appropriate technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but we work to safeguard your information.

Children

This app is workplace software for employees. It is not directed to children and is not intended for anyone under 18.

Changes

We may update this policy when the app’s data handling changes, and will revise the “last updated” date above when we do. Material changes will be reflected here and in the app’s Google Play Data Safety declaration at the same time.

Contact

TEKYDOCT SDN BHD, Bandar Seri Begawan, Brunei. Email info@tekydoct.com.