Legal

Privacy policy

This translation is provided for information. In case of discrepancy, the Dutch version prevails.

This privacy policy explains which personal data AutoCheckIn processes through the mobile app and the website, why, and what rights you have. We deliberately keep it short and free of jargon. AutoCheckIn is built around one principle: we do not track you — we only record that you enter or leave a site.

Last updated: 4 August 2026

1. Who are we?

AutoCheckIn is a service of Aziri BV, the controller of your data.

• Aziri BV — Senator A. Jeurissenlaan 1154 bus 1, 3520 Zonhoven, Belgium
• Company number / VAT: BE 0711.989.896
• Email: autocheckin@aziri.eu
• Phone: +32 11 46 00 44

AutoCheckIn is a B2B service: your employer or contractor (the “company”) decides to use AutoCheckIn for the statutory attendance registration on site. For those site registrations, your company acts as controller and Aziri BV as processor; for the app and the account itself, we are the controller. The arrangements between us and your company are set out in the data processing agreement.

2. What data do we process?

Depending on how you use AutoCheckIn, we process:

• Phone number — to sign you in (login via SMS code) and to identify your account.
• Name and, where applicable, social security/national register number — only for workers, because the statutory attendance declaration (NSSO Check In at Work) requires it. Your company enters this.
• Clock-in and clock-out events (attendance registrations) — the time at which you enter a site (check-in) and leave it (check-out), linked to the site concerned. This is the core of the statutory registration.
• Location data — see section 3 below. In short: only to determine whether you are inside or outside a site zone. We do not store GPS coordinates or routes travelled.
• Technical data — an anonymous device token for push notifications and troubleshooting, plus the usual logs needed to run the service securely.
• Origin at registration — when someone creates a company account, we store how that person found our website (e.g. a search query or advertisement, and the pages viewed). This concerns the registering business owner, never workers, and serves solely to evaluate our own marketing.

We do not ask workers for email passwords, we collect no contacts, photos or messages, and we use the camera exclusively to scan a site's QR code (no image is stored).

3. How do we handle location?

This is the most sensitive part, so we are crystal clear about it. AutoCheckIn does not use continuous location tracking.

• We use the geofencing feature of your operating system (iOS/Android): you set up a virtual circle around each site, and the device only notifies the app when you enter or leave that circle.
• The app therefore only receives discrete events (“arrived at site X” / “left”), not a continuous stream of coordinates.
• We never store your GPS position, your movements or your route — not outside the site either. Outside a site zone, the app does nothing at all with your location.
• Background location (“always”) is needed because the device must also be able to notify the app when you clock in or out while the app is not open. Without this permission, automatic registration does not work and you have to clock in and out manually (e.g. via QR).
• You can withdraw the location permission at any time in your device settings.

Internally we call this “Zero Tracking”: only the in/out moments required by law, never a trail of where else you are.

4. Why do we process this data (legal basis)?

• Legal obligation — attendance registration on site (NSSO “Check In at Work”) is imposed by law. The registrations are processed to comply with that obligation.
• Performance of the contract — to provide your account, the login and the app functionality to you and your company.
• Legitimate interest — for the security, troubleshooting and proper functioning of the service, and to keep track of the channel through which new customers find us — always with respect for your privacy and the Zero Tracking principle.
• Consent — only for the analytics cookies of Google and Meta on the public website. We load them only after you have accepted them in the cookie banner, and you can always withdraw that choice via the cookie policy.

5. With whom do we share data?

We never sell your data and do not use it for advertising. We only share what is necessary, with:

• Your company/contractor — the administrators see the attendance registrations of their own sites and staff.
• The NSSO (Belgian government) — the legally required attendance declaration is passed on to the competent government service.
• Our technical service providers (processors) — who act solely on our instructions: Supabase (database & authentication, EU hosting), Twilio (sending SMS codes), Resend (email) and Stripe (invoicing the company, no payment data of workers). A data processing agreement has been concluded with each of them.
• Google and Meta (only with your consent) — if you accept the analytics cookies on the public website, Google Analytics and Meta receive measurement data about your visit. This never happens in the customer portal or the app, and never with attendance or location data.

6. How long do we keep data?

We keep attendance registrations for as long as the law requires for social and tax inspection (as a rule, several years). We keep account and contact details for as long as your account is active. After that, we delete or anonymise them, unless a statutory retention obligation provides otherwise.

7. Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction and portability of your data, and the right to object. Because your attendance data often falls under a legal obligation of your company, it is best to address a request to your employer/contractor first; you can also always contact us directly at autocheckin@aziri.eu. You also have the right to lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

8. Cookies

The web app only sets cookies that are technically necessary to keep you signed in. On the public website, we additionally ask for your consent to analytics cookies from Google and Meta; if you refuse, those scripts are not loaded and everything works as normal. The mobile app uses no cookies at all. The full overview and your choice can be found in our cookie policy.

9. Security

Data is transmitted encrypted (HTTPS) and access is strictly segregated per company (multi-tenant with row-level security), so that one company can never see another company's data. Sensitive tokens on your device are stored in the operating system's secure key storage.

10. Children

AutoCheckIn is a professional tool and is not intended for persons under the age of 16. We do not knowingly collect data from minors.

11. Changes

We may amend this policy when the service or the legislation changes. In the event of a material change, we update the date at the top and, where necessary, notify you in the app.

12. Contact

Questions about your privacy? Email autocheckin@aziri.eu or call +32 11 46 00 44. See also our terms of use.