Privacy Policy
Applies to the LK Group HR web portal and the LK Group Attendance mobile app. Last updated: October 2026 (Outside Duty added).
LK Group F&B (“LK Group”, “we”) runs these systems for its own employees. This page explains what personal information they hold, why, who can see it, how long we keep it, and what you can do about it. The app is for LK Group staff and outlet managers only; it is not for the general public.
What we collect and why
| Information | Why we need it |
|---|---|
| Name, outlet, job type, employee details, bank and statutory numbers (EPF, SOCSO, tax) | Running payroll, statutory contributions and tax forms. Entered by the HR administrator, not by the app. |
| Email address and login (username, password) | Signing in to the app and web portal, and sending the one-time code used when you register. Passwords are stored only as a one-way hash. |
| Selfie taken when you clock in or out | To confirm that the person clocking in is you. The photo is checked on our server for a face and compared with your own saved face to confirm it is you (see Face check below), then stored with that day’s attendance record. |
| Location at the moment you clock in or out | To confirm you are at your outlet. We read your location only when you tap clock in or clock out, and we store the coordinates with that attendance record. The one exception is an Outside Duty, described below, which only people chosen by the company can start. |
| Outside Duty: your location every few minutes, a start selfie, stop photos, places and notes | Only while you have an Outside Duty running, for staff who work away from their outlet. See Outside Duty below. |
| Attendance, leave, claims, advances and loans, payslips | Paying you correctly and keeping the employment records the law requires. |
| Push notification token | Sending you notifications such as approvals and reminders. Notifications are delivered through the Expo push service. |
Face check
The first time you clock in with a clear selfie, our server saves a set of numbers that describes your face (a “face template”, not a photo). On later clock-ins your new selfie is compared with it, so nobody else can clock in for you. It is used only for this check, is never shared or sold, and cannot be turned back into a picture. If a selfie does not clearly match, your PIC or admin may look at that photo to decide. Your template is deleted when you resign or your record is removed, and an admin can reset it at any time (for example after a change of look).
Face ID and fingerprint
If you choose to confirm clock-in with Face ID or your fingerprint, the check is done by your phone’s own security system. We never receive, see or store your face or fingerprint data — the phone only tells the app “yes” or “no”.
Who can see your information
- You, through the app and staff portal.
- LK Group HR administrators, and the outlet managers (PICs) responsible for your outlet, for the parts of the record they need to do their job.
- Service providers that help us run the system: the email service that sends one-time codes, the Expo service that delivers notifications and app updates, and, for the payroll process, government agencies such as EPF, SOCSO, LHDN and your bank where the law or payroll requires it.
We do not sell your information and we do not use it for advertising. The app contains no advertising or analytics trackers.
How long we keep it
Employment, payroll, attendance and tax records are kept for the period required by Malaysian employment, tax and social-security law, then removed. Clock-in selfies and location points are part of the attendance record and are kept with it. Outside Duty data has its own, shorter limits, shown under Outside Duty.
Deleting your app account
You can delete your login yourself: open the app, go to Profile, tap Delete my account and confirm with your password. This removes your username, password and notification token, signs you out on every device and means the app can no longer be used with that login.
What deletion does not remove: your employee record and the payroll, attendance, leave, claim and tax history linked to it. LK Group is legally required to keep those as your employer, and they are not part of your app login. If you leave LK Group, or believe something about you should be corrected or removed beyond what the law requires us to keep, email lkgroup.hrpayroll@gmail.com or ask your outlet manager.
Without the app: if you can no longer open the app, ask for your login to be deleted by contacting us (see Contact below) from the email on your payslip, and say “Delete my LK Attendance login”. We delete the login and its notification token, and reply once it is done. The same legal limits as above apply to your employee and payroll records.
If you delete the login by mistake, you can register again in the app with the email on your payslip, or ask the HR administrator to set up a new login.
Your choices and rights
Under Malaysia’s Personal Data Protection Act 2010 you may ask to see the personal data we hold about you and ask us to correct it. To do that, email lkgroup.hrpayroll@gmail.com or ask your outlet manager. You can also switch off camera, location or notification access in your phone’s settings at any time; clocking in with a selfie and location will not work without them, and an Outside Duty cannot run without location.
Outside Duty / Tugas Luar
When we can see where you are, and when we cannot. Outside Duty is for staff who work away from their outlet, such as visiting a bank, a supplier or a landlord. It only applies to people the company has chosen, and only while they have an Outside Duty running.
What it is
When you start an Outside Duty, the app records your clock-in. While it runs, your phone reports where it is every 10 minutes, including when the app is closed or not in use (Android “location in the background”), and the app shows a notification so you always know. This background location is used only for Outside Duty. You can add a stop when you arrive somewhere. When you end the Outside Duty, your clock-out is recorded and the location reports stop.
What we collect
- A selfie when you start, and an optional photo at each stop.
- Your phone’s location (position, accuracy, date and time) every 10 minutes during the Outside Duty.
- The places you record: name, reason (Bank, Supplier, Landlord, Outlet or Other), a note, and the time you arrived and left.
- Your plan for the day, if you write one.
- A flag if your phone says the location is fake (a mock-location app).
What we do not collect
- Your location at any time when you do not have an Outside Duty running, including before you start and after you end.
- Your messages, calls, contacts, other apps or files on your phone.
Why we collect it
- To record the time you work away from the outlet, so your attendance and pay are correct.
- To know where you are for your safety and so the company can reach you.
- To check that Outside Duty records are accurate.
We do not use it for any other purpose without telling you first.
Who can see it
Only the Admin and the Head PIC can see the Outside Duty Board. Every time someone opens it or looks at a person’s day, the system records who looked and when. We do not sell or share this data with anyone outside the company, except where the law requires it.
How long we keep it
- Detailed location points: deleted after 90 days.
- Day summary (stops, hours, distance): deleted after 12 months.
- Attendance records are kept for as long as the law and payroll require.
Your choices
You can end your Outside Duty at any time in the app, and location reports stop immediately. You can also turn off location permission for the app, but then an Outside Duty cannot run and you must clock in another way. You may ask to see or correct the data we hold about you, as explained under “Your choices and rights” above: email lkgroup.hrpayroll@gmail.com or ask your outlet manager.
Bila kami boleh nampak lokasi anda, dan bila tidak. Tugas Luar (Outside Duty) adalah untuk kakitangan yang bekerja di luar outlet, seperti berjumpa bank, pembekal atau tuan tanah. Ia hanya terpakai kepada orang yang dipilih oleh syarikat, dan hanya semasa Tugas Luar sedang berjalan.
Apa itu Tugas Luar
Apabila anda memulakan Tugas Luar, aplikasi merekodkan waktu masuk anda. Semasa ia berjalan, telefon anda melaporkan lokasinya setiap 10 minit, termasuk apabila aplikasi ditutup atau tidak digunakan (lokasi di latar belakang Android), dan aplikasi memaparkan notifikasi supaya anda sentiasa tahu. Lokasi latar belakang ini hanya digunakan untuk Tugas Luar. Anda boleh menambah perhentian apabila tiba di sesuatu tempat. Apabila anda menamatkan Tugas Luar, waktu keluar anda direkodkan dan laporan lokasi berhenti.
Data yang kami kumpulkan
- Swafoto (selfie) semasa mula, dan gambar pilihan di setiap perhentian.
- Lokasi telefon anda (kedudukan, ketepatan, tarikh dan masa) setiap 10 minit semasa Tugas Luar.
- Tempat yang anda rekodkan: nama, sebab (Bank, Pembekal, Tuan Tanah, Outlet atau Lain-lain), catatan, serta masa tiba dan berlepas.
- Pelan anda untuk hari itu, jika anda menulisnya.
- Tanda amaran jika telefon anda melaporkan lokasi palsu (aplikasi lokasi tiruan).
Data yang kami tidak kumpulkan
- Lokasi anda pada bila-bila masa apabila tiada Tugas Luar sedang berjalan, termasuk sebelum anda mula dan selepas anda tamat.
- Mesej, panggilan, kenalan, aplikasi lain atau fail dalam telefon anda.
Tujuan pengumpulan
- Untuk merekodkan masa anda bekerja di luar outlet, supaya kehadiran dan gaji anda tepat.
- Untuk mengetahui kedudukan anda demi keselamatan anda dan supaya syarikat boleh menghubungi anda.
- Untuk menyemak bahawa rekod Tugas Luar adalah betul.
Kami tidak menggunakannya untuk tujuan lain tanpa memberitahu anda terlebih dahulu.
Siapa boleh melihatnya
Hanya Admin dan Ketua PIC (Head PIC) boleh melihat Papan Tugas Luar (Outside Duty Board). Setiap kali seseorang membukanya atau melihat hari kerja seseorang, sistem merekodkan siapa yang melihat dan bila. Kami tidak menjual atau berkongsi data ini dengan sesiapa di luar syarikat, kecuali jika dikehendaki oleh undang-undang.
Tempoh penyimpanan
- Titik lokasi terperinci: dipadam selepas 90 hari.
- Ringkasan hari (perhentian, jam, jarak): dipadam selepas 12 bulan.
- Rekod kehadiran disimpan selama yang dikehendaki oleh undang-undang dan urusan gaji.
Pilihan anda
Anda boleh menamatkan Tugas Luar pada bila-bila masa dalam aplikasi, dan laporan lokasi berhenti serta-merta. Anda juga boleh mematikan kebenaran lokasi untuk aplikasi, tetapi Tugas Luar tidak boleh berjalan dan anda perlu merekodkan waktu masuk dengan cara lain. Anda boleh meminta untuk melihat atau membetulkan data yang kami simpan tentang anda, seperti diterangkan di bawah “Your choices and rights” di atas (Akta Perlindungan Data Peribadi 2010): email lkgroup.hrpayroll@gmail.com or ask your outlet manager.
Security
Data is stored on LK Group’s own server and travels over encrypted (HTTPS) connections. Access is limited by role and sign-in, and important actions are recorded in an audit log. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes to this policy
If we change how we use your information, we will update this page and the date at the top.
Contact
Questions about this policy or your information: email lkgroup.hrpayroll@gmail.com or ask your outlet manager.