Axis Systems LLC ("we", "us") develops and operates the InfoArt mobile applications and web services (the "Services"). This policy explains what information we collect, how we use, store and protect it, and what rights you have. By using the Services you agree to this policy.
Apps covered by this policy: Info Art (Google Play, mn.infoart.app), InfoArt ERP (App Store, mn.merp.hospitalapp) and the InfoArt ERP web system.
This policy has a general part and app-specific parts. For the Info Art / InfoArt ERP employee app, see Section 2.
1. Information we collect (general)
Personal information: name, contact details (phone number, email address) and, where required, national ID number.
Device information: device type, operating system version, app version, IP address, push notification token.
Content you provide: forms, requests, messages, attached files and photos.
Health information (only when using our health apps): health conditions, medications, treatments, test results and appointments.
2. Info Art / InfoArt ERP app — specific terms
InfoArt ERP is an app for employees of organizations that use the InfoArt ERP system. Accounts are created by your employer. Your employer is the controller of your work-related data; we process it on your employer's behalf as a processor.
Device ID (app-generated UUID, iOS IDFV / Android ID)
Preventing attendance from being recorded on someone else's phone
Precise location (GPS)
Only at the moment you tap the attendance check-in/out button, to verify you are at the workplace. Location is never tracked in the background.
Photos (selfie)
A front-camera photo when attendance verification is required; documents you attach
Messages, requests and other content
Internal chat, requests, tasks and approvals
Face ID / Touch ID: verified on your device only. We never receive or store biometric data.
Salary, leave and asset information: displayed to you from your organization's system; it is not collected from your device.
We do not use this data for advertising or tracking, and we do not sell it to anyone.
Face data (attendance selfies)
The InfoArt ERP app uses a face photo in some cases to prevent attendance from being recorded by someone else. This section fully explains how face data is collected, used, stored and deleted.
What we collect: (1) Attendance selfie — a single front-camera photo, taken only when an attendance check-in needs extra verification (a new phone or a phone registered to another employee, a spoofed location, or a check-in outside the workplace area). No photo is taken otherwise, and photos cannot be picked from the photo library. (2) Face template — a numeric vector of 128 values computed from the selfie and from the profile photo held in your organization's HR system. It is not an image and the photo cannot be reconstructed from it.
How we use it: the selfie is compared with the profile photo to produce a similarity score. An authorized HR staff member of your organization reviews the photo and score and manually approves or rejects the check-in. No automated decision is made. Face data is not used for any other purpose (advertising, profiling, machine-learning training, or identifying other people).
Face ID / Touch ID: Face ID used to sign in or confirm signatures is verified on your device only, by Apple's system. Neither the app nor we receive or store Face ID data.
Where it is processed: the comparison runs on your organization's InfoArt ERP server using the open-source OpenCV library. Face data is never sent to any third-party face-recognition service or API.
Sharing: face data is not shared with or sold to any third party. It is visible only to authorized HR staff of your employer, and is not disclosed to anyone else unless required by law.
Retention: attendance selfies are automatically and permanently deleted from the server 90 days after they are taken (the attendance time and its approval status are kept). The face template is (1) replaced when the profile photo changes and (2) deleted when you leave the organization or delete your account.
Deletion on request: use Settings → "Delete account" in the app and your selfies and face template are deleted within 30 days. You can also ask your organization's HR department.
3. How we use information
To operate the Services and carry out your requests and transactions.
To secure sign-in and prevent fraud.
To send notifications (push, email).
To fix errors and improve the Services.
To comply with legal obligations.
(Health apps) to provide health services, appointments and record keeping.
4. Sharing of information
Your organization: InfoArt ERP data is visible only to authorized staff of your employer.
Service providers: server hosting, push notifications (Apple Push Notification service, Google Firebase Cloud Messaging, Expo) and email delivery — only to the extent needed to provide the Services.
With your consent or when required by law.
5. Security
Data is transmitted over HTTPS and stored on access-controlled servers. Passwords are stored as one-way hashes. No system is 100% secure, but we apply appropriate technical and organizational measures.
6. Data retention
We keep data for as long as needed to provide the Services and as required by law (for example accounting and employment records). Data that is no longer needed is deleted or anonymized. Attendance selfies are deleted automatically after 90 days (see Face data).
7. Your rights and account deletion
You may access, correct or delete your data and withdraw your consent to its processing.
Deleting your InfoArt ERP account: in the app go to Settings → "Delete account". The request is sent to your organization's administrator, and your app account and personal data are deleted within 30 days. Records that must be kept by law (for example payroll records) are retained until the legal retention period ends.
If you cannot sign in, you can request deletion by email at the address below.
8. Children's privacy
Our apps are not intended for children under 16. If we learn that we have collected data from such a child without parental consent, we will delete it.
9. Changes to this policy
We may update this policy. Significant changes will be announced in the app or by email. The updated policy takes effect when published on this page.