Last updated · Crow Tech Pte. Ltd.
Crow Tech collects no data from this app.
The app connects only to the Crow HR server your employer runs, at the address you type or scan. Crow Tech runs no server for it and receives nothing from it. In App Store and Google Play terms: no data is collected and none is shared.
- No account with Crow Tech.
- No analytics, crash reporting, advertising or tracking.
- No third-party SDKs: only the app’s own code and the phone’s operating system.
- No push notification service: notifications are created on your phone.
Your employer is responsible for your HR records
Crow HR is free, open-source software that each company installs and runs on its own server. Your employer, as the company that runs that server, is the data controller for your HR records: under Singapore’s Personal Data Protection Act it is the organisation responsible for them. Crow Tech writes the software but does not host your employer’s server and has no access to it.
When you connect the app, by typing your company’s server address or scanning the QR code from your Crow HR profile on the web, every request goes to that server and nowhere else. The QR code holds only the server address and your organisation’s short name, no password or token.
Your payslips, leave, attendance, claims, schedule and approvals are records your employer keeps on that server, under its own HR and privacy policies. To see or correct them, or to ask how they are used, contact your employer’s HR team. Crow Tech cannot see, change or delete them.
What the app keeps on your device
- The address and organisation name of each server you connect to (up to five), and your settings in the app.
- Your sign-in session, stored in the iOS Keychain or encrypted with a key held in the Android Keystore. It stays on this device: it does not sync through iCloud Keychain, and the Android app is excluded from backups and device transfer.
- Clock-ins made without signal, stored protected on the phone until they can be sent to your employer’s server.
- On Android, an encrypted copy of your payslip list, leave balances and schedule, so they open without signal (marked as offline). The iPhone and iPad app keeps no copy of your records. Payslip details are never stored on the phone: they are fetched from your employer’s server each time you open one.
Signing out removes the session and stored records for that server. Clock-ins that have not been sent yet are removed only after you confirm. Deleting the app removes everything it stored.
Camera, photos, location, Face ID, local network and notifications
Each permission is used only for the purpose described here, and what it captures goes only to your employer’s server.
Camera: to scan your company’s connection QR code, and to photograph a receipt or document you attach to a claim or leave application. The photo is uploaded to your employer’s server with that claim or application.
Photos: only the photo you pick, when you attach an existing picture instead of taking one.
Location: only if your employer’s attendance policy asks for it, only while you use the app, and only at the moment you clock in or out. It is sent with that clock-in to your employer’s server. The app never tracks your location in the background.
Face ID, Touch ID or fingerprint unlock: optional, handled by your phone’s operating system. The app only learns whether unlocking succeeded.
Local network: only if your company’s server is on your office network, so the app can reach it.
Notifications: if you allow them, the app checks your employer’s server in the background from time to time and shows a local notification with only the number of new updates, so no details appear on your lock screen. There are no push notifications through Apple, Google or Crow Tech.
Signing in
The app signs you in through your phone’s own secure browser window (ASWebAuthenticationSession on iPhone and iPad, Custom Tabs on Android), with whichever methods your employer has turned on: email and password, Google, Microsoft, Singpass or another single sign-on provider. Your password is entered on your employer’s sign-in page or the provider’s, not in the app, and never reaches Crow Tech. Those sign-ins are between you, your employer’s server and that provider, under the provider’s own privacy policy.
App stores and beta testing
Apple and Google handle downloads and, if you join a beta through TestFlight or Google Play testing, beta feedback, under their own privacy policies. They show developers aggregate download numbers and, if you have chosen to share them with app developers, crash reports from your phone’s operating system. The app itself sends nothing to Crow Tech.
You can check all of this
The app and the server are open source under the MIT licence. Anyone can read the source code on GitHub and confirm that the app talks only to the server you choose. The Crow HR documentation explains how the app connects.
This policy covers the Crow HR mobile app. The crow.sg website uses analytics as described in our website privacy policy. For help with the app, see Crow HR app support.
Contact and policy changes
Questions about this policy: [email protected]. For your HR records, contact your employer.
Crow Tech Pte. Ltd.
152 Beach Road, #23-02 Gateway East
Singapore 189721
If a future version changes how the app handles data, for example optional push notifications, we will update this policy and the app’s store privacy information before it ships.
