Privacy Policy
Developer: Centre for Management Development (CMD)
CMD Suite Lite ("the App") is a mobile application for CMD staff, developed and maintained by the Centre for Management Development. It supports internal processes such as attendance, leave, tour and movement tracking, project timesheets, and hall bookings.
1. About This Policy
This policy explains what information the App collects, why, who can see it, and what choices you have. By using the App, you agree to this policy.
2. Who This App Is For
The App is for CMD employees and affiliates only, for official use.
3. Information We Collect
3.1 Account and profile information
- Name, Employee ID, designation, department, email address, phone number
- Role, reporting structure, and work mode (e.g., remote, hybrid, on-site)
3.2 Location information (foreground only)
- Current location verification: The App collects GPS and location data only at the exact moment you actively press the button to use the Digital Punching feature, log Movements, or mark attendance while On Tour.
- We do not track your location in the background.
- Location data is used strictly for point-in-time validation of your attendance and official travel claims.
- You are asked to grant location permission when you use these features.
3.3 Usage information
- Login times, punches, and feature usage, kept as an audit trail for HR and payroll.
- The App does not silently collect device hardware or diagnostic information.
4. How We Use Your Information
| Purpose | What it involves |
|---|---|
| Attendance and payroll | Recording check-in/check-out times and locations |
| Workflow management | Routing leave, missed punch, and movement requests to your Reporting Officer (RO) or HR |
| Project management | Tracking timesheet hours against CMD projects, proposals, or requirements |
| Notifications | Push notifications about approvals, rejections, and organizational alerts |
| Security | Preventing fraud, GPS spoofing, and unauthorized access to CMD systems |
Location data is used only for point-in-time validation of attendance and official travel claims, and is never tracked in the background.
5. Who Can Access Your Information
We do not sell, trade, or rent your personal information. It may be shared with:
- Internal personnel: your Reporting Officers, HR, and CMD Management, for approval workflows and performance tracking
- Authorities: where required by law, court order, or government regulation
6. Data Security
We protect your information using:
- Encrypted communication between the App and our servers
- Secure authentication tokens
- Access controls on backend databases
7. Data Retention
Your data is kept while you are an active CMD employee or affiliate, and afterwards as required by CMD's archiving policies, labor laws, and compliance requirements.
8. Your Choices
- Location: You can turn off location access in your device settings. Digital Punching and Movement tracking will then not work, which may affect your attendance records.
- Notifications: You can turn off push notifications in your device settings, but you may miss important approvals.
- Corrections: If your profile data is wrong, contact CMD HR to have it corrected.
9. Changes to This Policy
We may update this policy as our practices or organizational policies change. Significant changes will be communicated through in-app alerts or email.
10. Contact Us
For questions about this policy or your data, contact the CMD IT or HR Helpdesk:
- Email: mail@cmd.kerala.gov.in