# Privacy Policy for Kahlo Portal

**Last Updated: December 11, 2025**

## Introduction

Kahlo Portal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

## Information We Collect

### Personal Information
- **Login Credentials**: Username and password for authentication
- **Employee Information**: Name, employee ID, and work-related details
- **Schedule Data**: Work schedules, time-off requests, and calendar events
- **Location Data**: GPS coordinates when using "time to leave" notifications (optional feature)
- **Device Information**: Device type, operating system, and unique device identifiers

### Usage Data
- App usage statistics
- Notification preferences
- Calendar interactions and event views

## How We Use Your Information

We use the collected information to:
- Provide and maintain our employee portal service
- Authenticate users and manage access
- Display work schedules and calendar events
- Send notifications about schedule changes and reminders
- Calculate travel time to work locations (when you enable location-based notifications)
- Provide "time to leave" reminders based on your location and shift start time
- Improve app functionality and user experience
- Communicate important updates and announcements

## Data Storage and Security

- **Secure Storage**: Login credentials and sensitive data are stored securely on your device using encrypted storage
- **Server Communication**: All data transmitted between the app and our servers uses secure HTTPS connections
- **Firebase Services**: We use Firebase Cloud Messaging for push notifications, which operates under Google's privacy and security standards

## Third-Party Services

Our app uses the following third-party services:
- **Firebase Cloud Messaging**: For push notifications (Google Privacy Policy applies)
- **Google Maps Distance Matrix API**: For calculating travel time to work locations (only when you enable location-based notifications)
- **Expo Services**: For app development and deployment infrastructure
- **Expo Location Services**: For accessing your device location when calculating travel time

## Your Rights and Choices

You have the right to:
- Access your personal information
- Request correction of inaccurate data
- Request deletion of your data (subject to legal requirements)
- Opt-out of push notifications through app settings
- Log out and remove stored credentials from your device

## Notification Settings

You can manage notification preferences in the Options tab:
- **Morning Reminders**: 8 AM notifications on the day of scheduled events
- **Evening Reminders**: 10 PM notifications the night before scheduled events
- **Time to Leave Notifications**: Smart notifications that calculate travel time from your current location to work and remind you when to leave (requires location permission)

## Data Retention

- Account data is retained while you remain an active employee
- Schedule data is retained according to company record-keeping policies
- Cached data on your device can be cleared by uninstalling the app

## Children's Privacy

Our app is intended for employee use only and is not directed to individuals under the age of 18. We do not knowingly collect information from children.

## Calendar and Event Privacy

- You can only view details of your own time-off requests and events
- Other employees' event details are not accessible to maintain privacy
- Block dates and limited availability are visible to all employees for scheduling purposes

## Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the app
- Updating the "Last Updated" date
- Sending a notification if changes are significant

## Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

**Kahlo Threading**
Email: [your-email@kahlothreading.com]
Website: https://kahlothreading.com

## Permissions

The app requests the following permissions:
- **Notifications**: To send schedule reminders and updates
- **Boot Completed**: To restore notification schedules after device restart
- **Exact Alarms**: To ensure timely notification delivery
- **Location (Foreground Only)**: Optional - only used when you enable "time to leave" notifications to calculate travel time from your current location to your work location

## Compliance

This app complies with:
- Google Play Store privacy requirements
- Android 13+ advertising ID disclosure requirements
- General data protection best practices

## Data Sharing

We do not:
- Sell your personal information to third parties
- Share employee data outside of the organization
- Use your data for advertising purposes
- Track your location continuously or store location history

### Location Data Usage
When you enable "time to leave" notifications:
- Your location is only accessed at the moment the notification is triggered
- Location data is used solely to calculate travel time to your work location
- We do not store or track your location history
- You can disable this feature at any time by denying location permissions

Your information is only used for employee scheduling and portal functionality within your organization.

---

By using Kahlo Portal, you acknowledge that you have read and understood this Privacy Policy.