Privacy Policy — Zuvi Team

Last updated: 10 September 2026

Zuvi Team is a private workforce application for employees of Zuvelio. It is not a consumer product. You can ask for an account from within the app, but no account works until a Zuvelio administrator approves it, so the app cannot be used by anyone outside the company.

This policy explains what the app collects, why, and who it is shared with.

1. Who we are

Zuvelio Jewels Private Limited
Contact for privacy questions: zuveliojewelsllc@gmail.com

2. What the app collects

Data	Why	Where it goes
Name, work email, employee ID, role, profile photo	To identify you inside the app and attribute your work	Zuvelio's own server
Personal contact details you enter in your profile — phone number, home address, and an emergency contact	So HR can reach you, and can reach someone on your behalf in an emergency	Zuvelio's own server
Bank account details — bank name, account number, IFSC/IBAN	So your salary can be paid to the right account	Zuvelio's own server. Never shown to colleagues.
Government identifiers — Aadhaar number and PAN	Required for payroll, statutory deductions and tax filing	Zuvelio's own server. Never shown to colleagues, and never used for anything beyond payroll and statutory filing.
Attendance, leave, work-from-home, overtime, regularisation records	HR record-keeping and approvals	Zuvelio's own server
Payroll data — salary slips, advances, deductions	To show you your own pay records	Zuvelio's own server
Employment documents you upload	HR compliance	Zuvelio's own server
Tasks, notes, comments, chat messages and their attachments	The core work features of the app	Zuvelio's own server
Photos and files you choose to attach	Only files you explicitly pick or capture are read. The app does not scan or index your gallery.	Zuvelio's own server
Camera and microphone during a call	Audio and video calls between colleagues	Streamed between the two devices, directly where the network allows and otherwise via a relay server (see section 4). Calls are not recorded, and their audio and video are never stored.
Push notification token, device model, OS version	To deliver notifications to the right device	Zuvelio's own server; delivery is routed via Expo and Google (see section 4)

3. What the app does not collect

No location. The app requests no location permission and collects no GPS or network location.
No contacts. Your phone's address book is never read.
No advertising identifiers, no ad networks, no cross-app tracking.
No third-party analytics or behavioural profiling.
No biometric data leaves your device. If you enable fingerprint or face unlock, the check is performed by the operating system. The app is told only whether it succeeded. Zuvelio never receives your fingerprint or face data.
Your data is never sold, and never shared for advertising.

4. Who else processes your data

We use a small number of infrastructure providers strictly to run the service. They process data on our instructions only:

Railway — hosts the Zuvelio server and database.
Expo — delivers push notifications and app updates.
Google (Firebase Cloud Messaging) — delivers push notifications to Android devices.
Google Play — distributes the app itself.
A call relay (TURN) provider — when two devices cannot reach each other directly, call audio and video are relayed through this service to complete the connection. The relay passes the stream through; it does not record or retain it.

We do not share your data with anyone else, and we disclose it outside these providers only where the law requires it.

5. How your data is protected

All traffic between the app and the server uses HTTPS.
Your login session is held in the device's encrypted secure storage (Keystore on Android, Keychain on iOS), not in ordinary app storage.
Access inside the app is limited by role — you see your own HR and pay records, and only the work assigned to or shared with you.

6. How long data is kept

Employment, attendance and payroll records are retained for as long as your employment continues and afterwards for the period required by applicable employment and tax law. Work content such as tasks, notes and messages is retained while it remains operationally relevant. When you sign out or uninstall the app, the notification token for that device is removed.

7. Your rights

You may ask us to access, correct, or delete the personal data we hold about you, and you may object to or restrict certain processing. Some records — payroll and statutory attendance in particular — must be retained by law even after such a request; we will tell you when that applies. Write to the address in section 1 and we will respond within 30 days.

To ask for your account or your data to be deleted, see Account and Data Deletion, which sets out the steps and says exactly what is erased and what has to be kept.

8. Children

The app is for employees only and is not directed to, or usable by, anyone under 18.

9. Changes to this policy

If this policy changes materially we will update the date at the top of this page and notify employees through the app.