Privacy & terms

Privacy policy

Nognog Enterprises in the Philippines is the personal information controller responsible for personal information handled through the Nognog Enterprises marketing website, the NogNog app, and related services. Registered address: Cebu City, Cebu 6000, Philippines. Privacy contact: Data Privacy Contact, reachable at nognogenterprises.support@gmail.com. Accounts are issued to authorized personnel; users cannot create their own account in the app. The service supports attendance and construction operations. It does not request background location access and does not track a device while the app is closed.

1. Information we collect

• Account and profile details: name, employee code, email or other login identifier, phone number, role, department, assigned project or Project Site, profile photo if provided, and account status.
• Attendance and financial records: Time In and Time Out events, schedules, attendance review and corrections, pay rates, estimated pay, payroll summaries, payment-confirmation status, and project labor allocations.
• Location during clock actions: GPS latitude, longitude, accuracy, and timestamp captured when a worker tries to clock in or clock out.
• Location during logistics actions: GPS latitude and longitude may be captured when an authorized driver starts dispatch or performs a logistics action while the app is open.
• Face verification data: a numeric face template, scan-quality and verification results, checks designed to detect photos or screen replays, and private setup and attendance photos. The approved face-setup photo is also used as the worker's profile photo, which is visible to signed-in coworkers inside the app.
• Operational content: information entered into projects, tasks, material requests, logistics, site logs, issues, and other work records, including notes, status changes, photos, and files that authorized users upload.
• Device, notification, and usage data: basic device and app details, push-notification tokens when notifications are enabled, security and activity logs, and limited interaction or performance measurements when analytics are enabled.
• Marketing website analytics: on www.nognogenterprises.com only, Google Analytics may receive the page viewed, referring source, browser and device characteristics, approximate location, engagement measurements, and a pseudonymous browser identifier stored in the _ga cookie.

Marketing website analytics and cookies

The marketing website uses Google Analytics 4 with measurement ID G-QFFZJJG50Y to understand how visitors find and use its public pages. The tag is restricted to www.nognogenterprises.com, and its cookie domain is set to that exact hostname. It does not initialize on app.nognogenterprises.com, local development, or deployment-preview domains.

Google Analytics 4 does not log or store individual IP addresses. Google may use an address transiently to derive coarse location information before discarding it. Analytics data is retained according to the retention settings of the Nognog Enterprises Google Analytics property. Visitors can limit this collection through browser privacy controls, cookie blocking, or Google's browser opt-out tools.

2. Why we use this data

• To record accurate attendance for assigned workers and project sites.
• To confirm that clock actions happen within the assigned project site geofence.
• To record dispatch or logistics action location when an authorized driver performs that action in the app.
• To discourage another person from recording attendance for the assigned account holder.
• To check for possible use of a photo or screen replay during face verification.
• To allow authorized company personnel to review attendance, face evidence, GPS evidence, and corrections.
• To calculate attendance summaries and estimated pay from approved records.
• To manage projects, documents, tasks, materials, deliveries, and other authorized construction operations.
• To deliver service and security notifications when notifications are enabled.
• To protect accounts, investigate misuse, and keep the service reliable.
• To understand marketing-site traffic, search referrals, and which public pages visitors find useful.

3. How processing is authorized

Face verification and attendance location use are explained before setup and recorded with the worker's response. Other processing may be necessary to administer authorized accounts, attendance, payroll review, company operations, security, worker requests, and applicable legal obligations. Withdrawing face-verification consent does not erase an existing legal or operational record, but it can stop future face verification and require an approved manual attendance process.

4. Camera and location use

The camera is used for face setup and attendance verification. The app checks several face images to help determine whether a real person is present; no blink or other gesture is required. The app does not store video. It keeps the numeric face template, verification results, and private still photos needed for attendance review.

Location is requested when a worker performs a clock action. The app checks whether the phone's current GPS reading is close enough to the assigned project site and whether the reading is fresh and accurate enough. Authorized logistics users may also be asked for location when starting dispatch or recording a logistics action while the app is open. The app does not collect location while it is closed or running in the background.

5. Who can receive data

Authorized Nognog Enterprises personnel can access information only for their assigned duties. Contracted cloud providers support account authentication, database hosting, private file storage, web hosting, notifications, and limited service analytics. They process information only to provide these services to Nognog Enterprises and may do so outside the Philippines, including in Singapore or other locations where they operate. Information may also be disclosed when required by law or needed to protect personnel, the company, or the service. We do not sell personal information, and the app does not display advertising.

Google receives analytics events from the public marketing website as a contracted analytics provider. The Nognog Enterprises Google Analytics property does not collect events from the employee app subdomain through this website tag.

Face matching and photo-or-screen-replay checks run on the device. Verification results and the required private attendance photo are then sent to Nognog Enterprises for validation and authorized review. During a face-verified clock action, the app also briefly sends the current numeric face measurement so company systems can double-check the device result; that measurement is discarded after the check and is not stored with the clock event.

6. Storage, access, and security

• App traffic is sent over HTTPS.
• Attendance photos are stored in private storage and shown only to authorized company personnel.
• Face templates are stored as numbers used for matching, not as video recordings.
• Database access is restricted by account role and attendance permissions.
• Authorized company personnel can manage account access and review sensitive attendance records.
• If a clock action is recorded while the device is offline, its details — including GPS readings, verification results, the numeric face measurement, and the compressed evidence photo — stay temporarily in the app's protected local queue on the device and are removed from the device after they synchronize successfully.

7. Retention

• Private clock-event evidence photos normally follow a fixed 90-day policy. After that period, the database reference is removed and the private file is automatically queued and processed for deletion.
• An approved numeric face template is kept while face verification remains active. The private setup photo is normally deleted after 90 days. Rejected, replaced, and revoked enrollment photos and templates follow the same 90-day cleanup period.
• Detailed face and GPS verification metadata is retained for five years, then sensitive details are removed while core attendance, payroll, correction, and payment records remain available under their applicable business and legal retention rules.
• When a payroll dispute, investigation, or legal matter is active, authorized personnel may protect the relevant worker's attendance evidence from scheduled cleanup until the matter is resolved.
• Account, project, payroll, dispute, security, and audit records are kept only while needed for their stated purpose or a legitimate operational, worker-rights, fraud-prevention, or legal requirement. A deletion response will identify any information that must be retained and the reason or applicable period.

8. Your privacy rights

Current and former personnel may request access to or correction of their personal information, object to or withdraw consent from future processing where applicable, request deletion or blocking where permitted, and ask how their data was handled. They may also raise a concern with Nognog Enterprises or the Philippine National Privacy Commission. Requests involving sensitive personal information require reasonable identity verification.

9. Children

This is a workforce and construction-operations app for authorized personnel. It is not designed for children and does not offer public account registration.

10. Contact and account deletion

Privacy questions may be sent to nognogenterprises.support@gmail.com. Current and former personnel can start an account-deletion request from the public account deletion page without signing in. Some attendance, payroll, dispute, security, or audit information may be retained when required for legitimate operations, worker rights, fraud prevention, or legal obligations.

Terms of service

This app is for authorized Nognog Enterprises personnel only. By using the app, you agree to use your own account and provide truthful attendance information.

These terms apply to use of the app. They do not replace an employment agreement, company policy, collective agreement, or any right provided by law.

1. Account security

• Use only the account assigned to you.
• Do not share your password or ask another worker to clock in or out for you.
• Change temporary passwords when required by the app.
• Tell authorized company personnel immediately if you think your account was used without permission.

2. Attendance rules

• Clock in and out only for your own attendance.
• Use the app at the assigned project site unless authorized company personnel record a valid correction.
• Do not fake location, use another person's face, present a photo or screen replay, or manipulate the device to bypass verification.
• Attendance records may be reviewed, adjusted, voided, or rejected by authorized company personnel.

3. Monitoring and review

The app records account activity and attendance activity needed to operate the service, protect the company, and resolve attendance disputes. Location is collected when a worker performs a clock action or when an authorized logistics user performs a location-required logistics action while the app is open.

4. Access changes

The company may disable or change access when employment status changes, when a worker is reassigned, or when account misuse is suspected.

5. Pay and operational records

Attendance pay shown in the app is a gross operational estimate based on approved records, not a payslip or a promise of payment. Authorized reviewers may correct attendance and confirm payroll status according to company procedures. Project, inventory, logistics, and other operational records must be truthful and may be audited.

6. Availability and updates

Some online features may be unavailable during maintenance or poor connectivity. Offline attendance records remain subject to server validation when they synchronize. The company may require an app update when it is needed for safety, security, compatibility, or correct operation.

7. Privacy and questions

The privacy policy on this page explains how personal information is handled. Questions about these terms or the app may be sent to nognogenterprises.support@gmail.com.

Face verification notice

Nognog Enterprises uses face verification to help confirm that the person clocking in or out is the assigned worker. The app presents a separate notice and records the user's choice before face setup begins.

1. How face verification works

1. During setup, the camera captures several centered face images and checks for possible use of a photo or screen replay. No blink or other gesture is required. The app creates a numeric face template and uploads a private setup photo for review by authorized company personnel. Once approved, the setup photo is also used as the worker's profile photo shown to signed-in coworkers inside the app.
2. During clock actions, the app performs a quick face scan, repeats these checks, and compares the result with the approved face setup. The current numeric face measurement is briefly sent so company systems can double-check the device result, then discarded; it is not stored with the clock event.
3. One compressed private clock-event photo is stored as attendance evidence for every submitted punch so authorized company personnel can review unusual or disputed records.
4. Video is not stored by the app.
5. The app does not use face data to infer age, gender, emotion, race, health, or work performance.

2. Review and correction

A successful scan can mark a clock action as verified by the device. These checks reduce the risk of a presented photo or screen replay, but they cannot guarantee that every attempt will be detected. Low-quality scans, mismatches, inconclusive checks, missing GPS, or unusual records may require review by authorized company personnel before they are accepted for payroll summaries.

3. Consent

Before face setup, the app shows a short summary and asks for two separate responses: an acknowledgment that the worker has read this notice and the privacy policy, and a distinct consent to process the numeric face template and private setup and attendance photos for attendance identity verification. Attendance GPS capture is disclosed in the privacy policy and handled under the company's attendance policy; it is not bundled into the face-verification consent. The notice version, the worker's responses, and the time of acceptance are recorded.

• You understand that face verification is used for attendance and account security.
• You understand that the verification checks run automatically without requiring a blink or other gesture.
• You understand that automated results do not by themselves finalize payroll; human review applies.
• You understand that refusing or withdrawing consent stops future face verification and that the company will apply its attendance-recording procedure for workers without face verification.

4. Retention and withdrawal

Private clock-event and face-setup photos normally follow the fixed 90-day evidence policy. An active approved numeric face template is retained while face verification remains enabled for the worker. Rejected, replaced, or revoked enrollments follow the same 90-day cleanup period. A documented dispute or legal hold pauses scheduled cleanup for the relevant worker until the matter is resolved. A worker may ask authorized company personnel to record a consent withdrawal; future face verification then stops, and attendance is recorded through the company's procedure for workers without face verification. Existing attendance, payroll, dispute, security, or audit records may still be retained when legitimately required.