Inland World Logistics
Inland One is the internal field-sales application for employees of Inland World Logistics. It is not available to the general public. This policy explains what the app collects, why, who can see it, and how long it is kept.
This policy applies to Inland One, published by [Full registered legal entity name] ("Inland World Logistics", "we", "us"), registered at [registered office address].
Inland One is an internal workforce application. Access requires an active employee record and a mobile number registered in the company HR system. Members of the public cannot create an account or sign in. If you are not an employee of Inland World Logistics, this policy does not apply to you.
Field staff punch in and out from their handset. Each punch records the time, the location and — when the punch is away from the branch — a reason, remarks and a photograph. Punches post to the same HR timesheet as the office biometric readers, so a day worked in the field is recorded in the same way as a day worked in the office.
Representatives file a visit against a customer, with check-in and check-out times, the purpose and outcome of the meeting, travel time, who was met and what was discussed. Customers near the representative's current location are offered first, so filing a visit takes seconds rather than a search through a full customer book.
Calls placed from the app are logged with the number, the person spoken to, the outcome and how long the call lasted. Talk time and total handset time are recorded separately, so an unanswered call still reflects the effort it took.
Each representative sees the customers assigned to them: contact details, recent calls and recent visits in one place.
Placement requests, placement enquiries and tender information can be raised and tracked from the field, without waiting to return to a desk.
Leave applications, leave balances, the holiday calendar and loan applications are available to every employee.
Inland One collects the following, all of it in connection with the employee's work:
| Category | What it includes | Why it is collected |
|---|---|---|
| Identity & employment |
Employee number, name, branch, designation, reporting line, and the mobile number held in the HR system. | To identify the employee, authorise sign-in, and post records to the correct HR file. |
| Attendance | Punch-in and punch-out time, the location of each punch, and — for punches away from the branch — a reason, remarks and a photograph. | To record hours worked on the same timesheet as office biometric attendance. |
| Location | Precise device location, including while the app is closed or in the background, recorded as a route during the working shift. See section 5. | To timestamp customer visits and compute travel time for the employee's own worksheet. |
| Customer visits |
Customer visited, check-in and check-out times, purpose, outcome, travel time, person met, and notes of the discussion. | To maintain the field-sales visit record and the employee's worksheet. |
| Calls | Number dialled from the app, person spoken to, outcome, call duration, talk time and total handset time. | To maintain the customer contact record and measure field-sales effort. |
| Requests & enquiries |
Placement requests, placement enquiries and tender information raised by the employee. | To route operational requests to the responsible team. |
| Staff services |
Leave applications and balances, holiday calendar usage, loan applications. | To provide HR self-service functions. |
| Device | Device identifier used to bind an employee to a single handset, app version, Android version, and technical error logs. | To enforce single-device access, secure the account, and diagnose faults. |
Inland One does not collect information about an employee's personal life, personal contacts, personal messages, photographs in the device gallery, or activity in other applications.
Inland One records a representative's route during working hours so that customer visits and travel time are added to their worksheet automatically.
Location continues to be recorded while the app is closed or running in the background. This is necessary because a field representative spends much of the working day travelling between customers with the phone in a pocket or on a vehicle mount; without background collection the route would break every time the screen is locked, and travel time could not be computed.
Background collection runs in an Android foreground service. A notification is displayed for the entire time tracking is active, so the employee can always see when location is being recorded.
Before Inland One requests location permission, the app displays a disclosure explaining that the route will be recorded from attendance punch-in until shift end, and why. Permission is requested only after that disclosure is acknowledged.
Permission can be withdrawn at any time from Settings → Apps → Inland One → Permissions → Location. Withdrawing it stops all location collection. Attendance and visit filing that depend on location will no longer function, and those records will need to be completed by another means agreed with the employee's branch.
Location is used only to timestamp attendance punches, associate visits with the correct customer, compute travel time, and populate the employee's own worksheet. It is not used to draw inferences about the employee outside working hours, and it is not shared with any third party for their own purposes.
When an attendance punch is made away from the branch, the app captures a photograph at the moment of the punch. The photograph is taken through the app's own camera interface and is attached to that attendance record only. Inland One does not read, index or upload images already stored on the device.
When a representative places a customer call from within Inland One, the app records the number dialled, the customer contact reached, the outcome recorded by the representative, and the duration of the call. Only calls initiated from within the app against an assigned customer are recorded. Personal calls, and calls made outside the app, are not recorded.
Inland One does not record call audio and does not read the contents of SMS or other messages.
If the build reads call duration from Android's call log rather than timing the call itself, it will be using the READ_CALL_LOG permission, which needs its own declaration in Play Console and a matching sentence here. Confirm which method the app uses and amend this section to match, or remove this paragraph if it times calls in-app.
The information is processed because it is necessary for the performance of the employment relationship and for the legitimate management of the company's field-sales operations, and to meet the company's record-keeping obligations.
We do not sell personal information, and we do not use any of it for advertising or marketing to the employee.
| Record | Retention period |
|---|---|
| Attendance records and punch photographs | [e.g. 8 years, per statutory record-keeping] |
| Recorded location routes | [e.g. 12 months, then deleted] |
| Customer visit and call records | [e.g. duration of the customer relationship + N years] |
| Leave and loan applications | [per HR retention schedule] |
| Technical and error logs | [e.g. 90 days] |
When an employee leaves the company their app access is withdrawn immediately. Records already posted to HR and customer systems are retained for the periods above, after which they are deleted or irreversibly anonymised.
Google Play requires a stated retention and deletion policy. Replace every placeholder above with the company's actual periods before publishing this page — "as long as necessary" alone is not sufficient.
Employees may:
Requests should be made to the contacts in section 16. We will respond within [N days].
Where the Digital Personal Data Protection Act, 2023 applies, the company's Grievance Officer is [name], contactable at [email].
Inland One accounts are created and removed by the company, not by the user. An employee who wants their account closed or their data deleted should contact their branch IT co-ordinator or the Inland IT helpdesk using the details in section 16.
On request we will close the account and delete the associated records, except where a record must be retained for statutory record-keeping or for an ongoing employment or legal matter. Recorded location routes are deleted on request in all cases.
Apps with accounts must give a data-deletion route that a reviewer can reach from outside the app. Point the Play Console "Data deletion" field at this section's URL — [https://your-domain/privacy#deletion] — and make sure the helpdesk address in section 16 is monitored.
Inland One is available only to employees of Inland World Logistics and is not directed at children. We do not knowingly collect information from anyone under 18.
We may update this policy as the app changes. The effective date at the top of this page shows when the current version took effect. Where a change materially affects what is collected or how it is used, employees will be notified in the app or by the company's usual internal channels before the change takes effect.
For access, device changes, support, or any question about this policy: