Your employer asked you to install Vasgi Staff

Vasgi Staff is in early testing, and some parts of it are still being built. Where that matters, this page says what happens until they are ready. The Privacy Policy lists them.

In short

It shares your phone's location with your employer only after you tap Start work. It stops when you tap End work or when your working hours end. It never starts sharing by itself.
You can tap Start work only during the working hours your employer has set for you. Your employer can change those hours.
Your employer sees when you checked in and out, your time on shift, and your location in between.
It never starts sharing without showing a notification. The notification has an End work button. If you turn off the app's notifications, it stops sharing, normally within a couple of minutes.
It never reads your messages, contacts, photos or files, and never uses your microphone. The camera is used only by Google's code scanner, to read the setup QR code.
The app is designed to show you exactly what it sent today. This has not yet been checked in a released version of the app, so you can also ask your employer to show you.

What is shared

From when you tap Start work until you tap End work or your working hours end, the app sends your employer:

where your phone is: your exact position on a map, usually accurate to a few metres, and how accurate each reading is;
the time of each reading;
your battery level, and whether your phone is charging;
whether Android reports that the location is coming from a fake-location app;
when you started work and, when sharing stops normally, when and why it stopped: you tapped End work, your working hours ended, a permission was turned off, or location was switched off. If the phone restarts, the app is updated or closed by the phone, or the phone is removed, no stop is recorded.

When you set up the app, it also sends your phone model, your Android version and the app version. Your employer can also see when your phone last contacted our server during your working hours.

Your employer enters your name, your working hours and, if it chooses, your phone number. From your Start work and End work, the system works out your check-in and check-out times and your time on shift. From your location, it works out when you arrived at or left one of your employer's branches.

When it is shared

Only after you tap Start work. The app never starts sharing by itself. You tap Start work in the app when you begin work. You can do this only during the working hours your employer sets for you. If no hours are set, nothing is shared.
Until End work or the end of your hours. Sharing stops when you tap End work, in the app or on its notification, or when your working hours end, whichever comes first.
Your employer can change your hours. It can change them in the dashboard at any time, including adding days or making them longer, up to 16 hours a day. Your phone picks up new hours when you open the app, within minutes while you are sharing, and usually within an hour during your working hours. If your employer changes today's hours while you are sharing, sharing follows the new hours: it continues until the new end time, or stops straight away if you are now outside them. You can tap End work at any time. Every change is recorded in an audit log.
Leave days and holidays. Your hours are a weekly schedule, with no separate setting for leave or holidays. On a day off, do not tap Start work, and no location is shared. If that day is in your weekly hours, your phone still contacts our server when those hours start and then about once an hour, so your employer can see when it was last online (not where it was). Your employer's dashboard shows the day as "Not checked in". During a break you can tap End work, and tap Start work again when you are back.
A daily reminder. When your working hours start, the app may show a reminder, "Tap to start work". It only opens the app. It does not start sharing.
Also when the app is closed. After you tap Start work, it keeps sharing when you use other apps, when the screen is off and when the app is closed. It needs location permission only "While using the app". It does not ask for "Allow all the time".
With a notification. While it is sharing, you will see a notification with an End work button. It says that it is sharing your location.

No notification, no sharing. The app does not start sharing unless it can show its notification. If you turn off its notifications while it is sharing, it stops at its next check, normally within a couple of minutes (longer if your employer set a long location interval or the phone is idle).
After a restart. If your phone restarts, or the app is updated, while you are sharing, sharing stops. It does not start again by itself. If your working hours have not ended, the app shows a notification, "Tap to start work again". Sharing starts again only when you tap Start work.
No location outside working hours. The app stops at the end of your hours. As a second check, our server throws away any location reading from outside your working hours plus 10 minutes.
Contact with our server outside working hours. In the background, the app contacts our server only during your working hours, give or take 10 minutes. Outside them, it contacts our server only when you open the app, to check your working hours, or when you tap Send now. The last contact your employer sees counts only contacts during your working hours. Each contact shows your phone's internet (IP) address, from which a rough area such as your city can be worked out. Our hosting provider, Cloudflare, processes it; our own server uses it only briefly and does not store it.
Only you start it. Only your tap on Start work starts sharing. Your employer cannot start it from the dashboard. Nobody can make it share outside the hours set in the dashboard without changing those hours, and every change is recorded.
How often. By default, about every two minutes while you are sharing, and up to once a minute while you are moving. Your employer can change this to anything from every 30 seconds to once an hour. While you are moving, the app can record up to twice as often as that, for example about every 15 seconds if it is set to 30 seconds.

Who sees it

The people your employer gives a dashboard login, usually the owner and sometimes a manager. They can see when you checked in and out, your time on shift, where you are while you are sharing, your route between Start work and End work, when you arrived at or left a branch, and when your phone last contacted us during working hours. After End work, the dashboard keeps showing the last location recorded before you stopped, with its time, until you share again; nothing new is recorded until you tap Start work. Each of them can see all of the business's staff.
Not your co-workers through the app. The app gives you and your co-workers no way to see anyone's location.
Views on the dashboard are recorded. When someone looks at location data on the dashboard, it is written to an audit log. The live map updates itself every minute, so while someone keeps it open it is logged once every 15 minutes.
Aalaap Jewellers runs the service for your employer. Our people look at data only when needed to keep the service running, secure it or give support, when your employer asks, or when the law requires it. When they look at it directly in our systems, rather than on the dashboard, it is not written to the audit log.
We do not give your data to anyone else. We do not sell your data or use it for advertising. It is stored with our hosting provider, Cloudflare. Google receives some technical information directly from your phone: from its code scanner when you set up the app, and, depending on your phone's settings, from its location service. The Privacy Policy lists every service involved.

Your time on shift runs from each Start work to the recorded stop. If a stop was not recorded, for example after a restart, and you tap Start work again, the time in between still counts and is usually shown as "no signal". If there is a gap in your data while you are checked in, the dashboard shows it as "no signal", not as absence. A day without Start work is shown as "Not checked in", not as absent or late. Vasgi Staff does not score or rank anyone.

When you set it up

You, or the person from your business setting up your phone, will be asked to do these steps, in this order:

read what the app shares, when, and who sees it, in the app or on this page;
scan a one-time QR code from your employer, or type its code;
allow precise location. On Android 10 and newer, choose "While using the app" (and Precise on Android 12 and newer); on Android 8 and 9, tap Allow. The app does not ask for "Allow all the time";
allow notifications (on Android 13 and newer), so that the sharing notification and the daily reminder can be shown;
on many phones, for example Xiaomi, Vivo, Oppo, Realme, OnePlus and Samsung, let the app run without battery restrictions. Without this, the phone may stop the app during your shift, and your employer would see "no signal". This setting only lets the app keep running; it gives the app no access to anything else.

Setting up does not start sharing. Each working day, tap Start work when you begin and End work when you finish.

While it is sharing, the app uses some battery for location and a small amount of mobile data to send its readings. At other times it uses very little.

What is never collected

Your contacts, call logs, SMS or chat messages.
Your photos, videos or files.
Anything from your microphone or camera. To scan the setup QR code, the app uses Google's code scanner, which gives the app only the text of the code. Google's scanner may send Google information about the scan and your phone, including an identifier for your phone or this installation of the app.
Your browsing, or which apps you use.
Your location, or any status notes, before you tap Start work, after sharing stops, or outside your working hours.

How to see what was sent

Open the Vasgi Staff app. Its main screen, where you tap Start work and End work, is designed to show the following; this has not yet been checked in a released version of the app:

whether sharing is on, and until when;
your working hours today, or when your next shift starts;
when you checked in and out today, and how long you have shared your location today;
when the app last sent data, and how many readings are waiting to be sent;
a list of every location point sent today, with the times you started and stopped work.

You can also ask your employer to show you your data on the dashboard, or email us (see below).

If you want to stop sharing

You can tap End work, in the app or on its notification, at any time. You can also switch off the app's location permission, switch off location on your phone, or uninstall the app. The app has no hidden mode and cannot stop you from uninstalling it.

Your employer will usually see when sharing stopped and why, for example "tapped End work" or "location was switched off". If the app could not record the stop, for example because the phone was switched off, and you do not tap Start work again that day, the dashboard may show you as on shift until your working hours end, and then shows "Check-out not recorded", counting your time only up to the last location received. If sharing is part of your job, talk to your employer first.

Uninstalling deletes the app's data on your phone, including readings not yet sent, although a copy may remain in your phone's Google backup if backup is switched on (the app is set up to prevent this, but that has not yet been checked in a released version). It does not delete data already sent. To ask for that, see the next section.

If your employer removes you from Vasgi Staff, deactivates you or removes your phone, the app finds out the next time it contacts our server (within minutes while you are sharing, and otherwise usually within an hour during your working hours or when you open the app). It then stops sharing by itself, deletes readings it had not yet sent, and shows "This phone was removed". Its list of what was already sent stays on your phone for up to about 2 days and is then deleted. If your employer stops using Vasgi Staff altogether, the app is not told in the same way, so uninstall it.

Questions, and asking to see, correct or delete your data

Your employer is responsible for your data. Under India's Digital Personal Data Protection Act, 2023, your employer is the organisation in charge of it (the law calls this the "Data Fiduciary"), and Aalaap Jewellers handles the data on your employer's behalf. As the Act's main provisions come into force, it gives you rights including:

see a summary of the data held about you and how it is used (access);
have wrong or incomplete data corrected (correction);
have data deleted when it is no longer needed (erasure);
take back your consent, if your employer relies on it (withdrawing consent);
have a complaint dealt with (grievance redressal);
name someone to use these rights for you if you die or cannot act yourself (nomination);
complain to the Data Protection Board of India if you are not satisfied with the response.

Some of these rights apply only if your employer relies on your consent. Whatever your employer relies on, we will help you with these requests now.

To use these rights, ask your employer first. You can also email our Grievance Officer, Akshay Kumar Vasgi, at support@vasgi.net. Tell us your name, the business you work for and what you would like. We may need to check who you are with your employer. We will pass your request to your employer, help them respond, and deal with a complaint within one month.

To take back your consent, tell your employer. You can also stop sharing at any time, as described above.

Location points are kept until your employer removes you from Vasgi Staff. Automatic deletion after 90 days is still being built. When your employer removes you from Vasgi Staff, your location history and device records are deleted. The Privacy Policy lists every retention period.

For anything else, email support@vasgi.net.