Amrta Spa Front Desk Privacy Policy

1. About this app

Amrta Spa Front Desk is a private app for Amrta Spa staff only. It is not available to the public, on the App Store or on Google Play. The iPad version is installed privately on Amrta Spa's registered staff devices only, using Apple Ad Hoc distribution, and the Android tablet version uses private distribution. Staff sign in with a staff PIN to use it. Statpods builds and runs the app for Amrta Spa.

2. Who is responsible

Amrta Spa is the data controller (decides why and how staff, guest, sales and booking data are used). Statpods is the data processor: it processes personal data on Amrta Spa's behalf and on its instructions, only to provide and support the app. Questions about how Amrta Spa uses your data can go to Amrta Spa management or to Statpods at hello@statpods.com, which will pass them on where needed.

3. Data the app handles

• Staff sign-in: staff sign in with a personal PIN. PINs are stored only in hashed form, and repeated wrong attempts lock the PIN for a period.
• Staff attendance: when staff clock in or out, the app records the time, the outlet and device, and a photo taken with the tablet's front camera.
• Sales and bookings: guest bookings, treatments, sales, payments and receipts that Amrta Spa records in the app. This can include guest names and contact details that Amrta Spa collects.

4. Attendance photos

Photos are used only so authorised Amrta Spa managers can confirm who clocked in or out. The app does not use face matching, face recognition or any other biometric identification. Photos are kept for 90 days and then deleted. The attendance record (times, outlet) is kept after the photo is deleted.

5. How data is used

Only to run Amrta Spa's front desk: check-in and checkout, bookings, receipts, attendance and reports for Amrta Spa. No advertising, no tracking across apps or websites, no selling of personal data, no use for any other Statpods customer.

6. Access

Access is limited by role. Staff see what they need for their work. Only authorised Amrta Spa managers can view attendance photos. Statpods staff access data only when needed to provide, maintain or support the app.

7. Security

Data is sent over encrypted connections; data stored on the tablet is kept in the app's protected storage until it syncs; access requires sign-in; we apply reasonable safeguards to protect personal data.

8. Sharing

We do not sell personal data or share it for advertising. We use service providers, such as cloud hosting and storage providers, only to run the app, and we disclose data where required by law.

9. Retention

Attendance photos 90 days, then deleted. Other records are kept for as long as Amrta Spa needs them for its business and legal requirements, then deleted or anonymised on Amrta Spa's instructions.

10. Your rights

Staff and guests can ask to access or correct their personal data, or ask questions, through Amrta Spa management or hello@statpods.com. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA) and help Amrta Spa meet its own data protection obligations.

11. Changes

We will update this page and its date when this policy changes.