Privacy Policy

Last Updated: April 9, 2026

1. Entity Identification

This Privacy Policy applies to the ISY Retail and ISY Management applications (the "App"), developed and managed by ISY Software (ISY Retail).

2. Data Collection (Camera & Location Permissions)

The App utilizes sensitive permissions to provide core security and operational features. Specifically, the App requires access to the following:

  • Camera (android.permission.CAMERA): Used to capture photographic imagery of authorized staff members for identity verification. This is only active during shift start and end sequences.
  • Location (android.permission.ACCESS_FINE_LOCATION): Used to verify that staff members are within the permitted radius of the store location when starting or ending a shift.

Liveness Challenges: To prevent spoofing and identity fraud, the App uses real-time video analysis to perform specific "Liveness Challenges" including blink detection and head orientation verification (looking straight, left, and right).

3. Purpose of Collection

The camera and location permissions are used exclusively for Identity Verification, Attendance Accuracy, and Fraud Prevention.

When a staff member (Cashier) starts or ends a work session:

  • A "Face Verification" check ensures the session is opened by the authorized user.
  • A "GPS Location" check ensures the user is physically present at the store.

4. Data Usage and Sharing

  • Processing: Face liveness detection is performed on-device using ML Kit. Captured biometric images are converted into a secure format and sent to our central management servers.
  • Sharing: We do not sell or share your biometric or identity data with any third-party advertisers or external organizations.
  • Storage: Images are stored securely on our encrypted servers to serve as an audit log for management for the purpose of shift verification.

5. Data Retention

We retain shift verification images for as long as necessary to fulfill the purposes outlined in section 3, or as required by local labor laws and audit requirements. Management can configure retention periods within the admin dashboard.

6. User Rights & Data Deletion

Users have the right to:

  • Request access to their personal data.
  • Request correction of inaccurate data.
  • Request the deletion of their shift verification history.

To exercise these rights, please contact your store management or email us at support@isysoftware.app.