Privacy Policy

The information we collect depends on how you use TREAL and the role assigned to your account. We may collect:

• Account information: name, email address, password (stored in hashed form), company affiliation, designation, role, and profile photo.
• Employment and HR data: attendance records, leave requests, expense submissions, payroll-related information, tasks, approvals, emergency contacts, and employee directory details provided by you or your employer.
• Location data: approximate or precise location when you check in or out for attendance, or when location is collected during sign-in, only with your permission.
• Photos and files: images you upload such as expense receipts or profile pictures using your device camera or photo library.
• Device and notification data: device tokens, device type, operating system, and related identifiers used to deliver push notifications through Firebase Cloud Messaging.
• Usage and log data: app activity, IP address, browser or device information, timestamps, and diagnostic data needed to operate, secure, and improve the service.

We use collected information to:

• Provide, maintain, and improve the TREAL web and mobile experience.
• Authenticate users and manage accounts and access permissions.
• Process attendance, leave, expenses, payroll, tasks, and approvals.
• Send service-related notifications, reminders, and product updates.
• Respond to support requests and communicate with you about the service.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our Terms of Service.

The SM-OMS Android app may request the following device permissions to support core workforce features:

• Location: used for attendance check-in/out and related workforce verification features.
• Camera and storage/media: used to capture or upload receipts, attachments, and profile images.
• Notifications: used to deliver alerts about leave, expenses, attendance, tasks, approvals, and other workplace updates.

You can change or revoke permissions in your device settings at any time. Some features may not function without the permissions required for that feature.

We do not sell your personal information. We may share information in the following situations:

• With your employer or organization administrators who use TREAL to manage workforce operations.
• With service providers that help us operate the platform, such as cloud hosting, analytics, and push notification delivery.
• When required by law, regulation, legal process, or governmental request.
• To protect the rights, safety, and security of TREAL, our users, and others.
• With your consent or at your direction.

TREAL may rely on third-party services to operate parts of the platform. These providers process information only as needed to perform services on our behalf and are subject to contractual obligations to protect data. Examples include:

• Firebase Cloud Messaging: push notification delivery to mobile devices.
• Cloud infrastructure providers: hosting, storage, and application delivery.
• Payment processors: subscription billing when your organization purchases paid plans.

Third-party services may have their own privacy policies. We encourage you to review those policies where applicable.

We retain information for as long as necessary to provide the service, fulfill the purposes described in this policy, resolve disputes, enforce agreements, and comply with legal obligations.

If you use TREAL through an employer account, your organization may control retention of employee records and business data within the platform according to its internal policies.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration.

No method of transmission or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, or to request a copy of your data.

To submit a privacy request, contact us at support@oms.smartmux.com. If you are an employee user, your employer may also manage certain data through their TREAL administrator account.

TREAL is intended for business and workforce use. It is not directed to children under 13, or the minimum age required in your country. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date above.

Continued use of TREAL after changes become effective means you accept the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at support@oms.smartmux.com.