Privacy policy

1. Who we are and what this policy covers

SamVision (“we”) designs and installs video surveillance, face access and time tracking systems; 5 Sarbadorlar St., Samarkand, Uzbekistan.

This policy applies to the SamVision Cabinet mobile app (Android and iOS), the cabinet.samvision.uz web cabinet and the samvision.uz website. We process personal data in accordance with the Law of the Republic of Uzbekistan “On Personal Data”.

2. Data we collect

• Account data: name, email address, phone number, password (stored only as a hash).
• Company and employee data entered by the company owner or administrator: full name, position, department, face photo used for recognition on terminals.
• Work data: entry and exit times at terminals and turnstiles, attendance, timesheets and payroll — if the company keeps them.
• A device identifier for push notifications (Firebase Cloud Messaging token) and sign-in session details: device model, app version.
• Website requests: the name, phone number and message you submit yourself.

We do not collect location, phone contacts or advertising identifiers. No analytics or crash reporting is built into the app.

3. How we use the data

• Signing in and managing your account.
• Providing the features: recognising employees on terminals, the access log, timesheets, reports, live camera video.
• Sending notifications about events (entries, alarms, device status).
• Answering requests and support enquiries.

We do not sell data or use it for advertising.

4. Who receives the data

A company’s data is visible only to that company’s users, within the permissions they were granted. Face photos are sent only to the company’s own terminals.

Push notifications are delivered through Firebase Cloud Messaging (Google), which receives the device token and the notification text. Telegram notifications go to recipients chosen by the company itself.

We do not share data with any other third parties, except where required by the laws of the Republic of Uzbekistan.

5. Storage and security

Data is transmitted only over encrypted connections (HTTPS). Server access is limited to staff who need it to run the service. Sign-in tokens on the phone are kept in the system’s secure storage.

Data is kept while the account or company exists. After an account is deleted we erase the related data within 30 days; backups are overwritten within the following 30 days.

6. App permissions

• Camera — to photograph an employee’s face and scan a terminal’s QR code. Photos are uploaded only when you save the employee card.
• Notifications — to show push notifications about events.
• Biometrics — this permission comes from the secure storage library. The app does not ask for your fingerprint or face and never receives biometric data.

7. Your rights

You can find out what data we hold about you, correct it, withdraw consent and delete your account. Your name and login can be changed in the app under Account profile. Your account and data are deleted on request — see the Account deletion page.

If you are an employee of a client company, your work data (photo, entries, timesheet) is controlled by your employer. Contact them or us — we will pass your request on.

8. Children

The service is intended for organisations and is not meant for anyone under 18. We do not knowingly collect children’s data.

9. Changes to this policy

We update this policy when the service changes. The current version is always published on this page, with its date shown at the top.