Privacy Policy
Last updated: 12 October 2026 · O'zbekcha
1. Scope
Xodim+ is an attendance, scheduling and payroll service for companies. This policy covers the Xodim+ Android app, the Telegram Mini App and the web panel (xodimplus.uz and its company subdomains).
You use Xodim+ because your employer invited you. Your employer decides why and how employee data is processed; Xodim+ processes it on the employer's behalf.
2. Data we collect
Account data. Name, phone number or email, position, department and work schedule, entered by your company administrator. Passwords are stored only as hashes.
Location. A single coordinate and its accuracy, only at the moment you check in, check out or mark a break. The app does not track location in the background and does not build a movement history.
Selfie photo. If your employer requires it, one front-camera photo is taken at check-in and check-out and stored on our servers.
Face template (biometric data). If your employer enables face verification, a numeric face descriptor is computed from your profile photo and compared with your check-in selfie. The selfie is also analysed to confirm it was taken of a live person. This data is used only to verify attendance.
Camera frames (in the app). The liveness check in the mobile app (blink, head turn) runs on your device. Video frames from that check are not sent to our servers — only the single final photo is.
Attendance and work data. Check-in and check-out times, lateness, requests (leave, advance, corrections), tasks and calculated pay.
Device data. A push notification token (Firebase Cloud Messaging) and the platform type (Android).
Telegram. If you link your account to the Telegram bot, your Telegram chat ID (to deliver notifications).
The app does not access your contacts, gallery, SMS or calls. No advertising identifiers are collected and the app contains no ads.
3. How we use data
To record arrival and departure and to calculate working time and pay.
To verify that a check-in was made at the workplace and by the account holder (location, selfie, face verification).
To send you messages, announcements and updates on your requests.
To keep the service secure and reliable and to diagnose faults.
Your data is not used for advertising and is never sold.
4. Who can see your data
Your employer. Authorised staff of your company (administrator, HR, department head) can see your attendance, selfies, location and pay data. Other companies cannot see your data.
Service providers. Push notifications are delivered through Google Firebase Cloud Messaging and Telegram notifications through Telegram. They receive only what is needed for delivery (device token or chat ID and the message text).
Legal requirements. Competent authorities, where the law requires it and upon a lawful request.
5. Storage and security
Data is transmitted only over encrypted connections (HTTPS). Each company's data is kept separate from others, and access is restricted by roles and permissions.
Data is kept while the company's Xodim+ account is active. When the company closes its account or asks for deletion, the data is deleted, except records that must be kept by law.
A check-in made without internet access is held temporarily in protected storage on your device, sent once the connection returns, and then removed from the device.
6. Permissions the app requests
Location — to confirm you are at the workplace when you check in.
Camera — for the selfie and the liveness check.
Notifications — to show messages and announcements.
You can revoke permissions at any time in your phone settings; the related feature (for example, attendance check-in) may then stop working.
7. Your rights
You can ask to see the data held about you, to have it corrected or to have it deleted. Contact your company administrator first — they manage your account. You can also write to us directly; see Account and data deletion.
8. Children
Xodim+ is intended for employment relationships and is not directed at children. Only employees registered by their employer use the service.
9. Changes and contact
If this policy changes, the new version is published on this page and the date above is updated.
Service operator (app developer): Abdulakimov Xurshidbek.
Questions: contact us on Telegram or email xurshidbekabdulakimov@gmail.com.