Darg is operated by Code Possession Pty Ltd. This policy covers the Darg mobile app, the admin web app and this website. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Location
Location information is collected only when clocking in or out for attendance verification.
Darg never tracks where you are in the background. The app asks for location access only while it is in use, and reads the phone’s position once each time you press clock in or clock out.
What we collect
From people who use the app:
- Your name, and the email or mobile number you sign in with. We send verification codes to it by email or text message.
- When you clock in or out: the time, where you were at that moment and how accurate the position was, and your phone’s model, system version and app version. On Android, also whether the position came from a mock location app. An attempt that is refused is recorded in the same way.
- Entries you add yourself, leave requests, and the reasons you give for them.
- When you sign in, when the app renews your sign-in, and when you change your password or ask for a verification code: the time, the network address (IP) of your device and the app that made the request.
From organisations that use Darg:
- The organisation’s name, country, time zone, work locations and shifts.
- The names, and the email addresses or mobile numbers, of the people an admin invites.
- Changes made by admins and managers, kept in an audit trail.
- Billing details. Card payments are taken by Stripe. We do not receive or store card numbers.
From people who use the Contact form on this website: your name, email address, organisation if you give it, and your message. Your network address (IP) is used to limit how many messages can be sent from one place.
We do not collect contacts, photos, health information or biometric information.
Why we collect it
- To record attendance and show it to you and your employer.
- To check that a clock in or clock out happened at a work location.
- To sign you in and keep your account secure.
- To bill organisations for their subscription.
- To send verification codes, invitations and messages about your account, by email or text message.
- To reply to messages sent through the Contact form.
We do not sell personal information and we do not use it for advertising.
Your employer
Your employer decides who uses Darg in their organisation. Admins and managers in your organisation can see your attendance records, including the location recorded at each clock in and clock out. For those records we act on your employer’s instructions.
Your attendance records stay with your employer if you leave the organisation or delete your account.
Who else receives information
We use these providers to run the service. Each receives only what it needs for its task.
- Stripe takes subscription payments from organisations.
- Resend delivers our email: verification codes, invitations and notices about your sign-in. It also delivers messages sent through the Contact form to our support inbox. It receives the address and the message, and handles them in Japan (Tokyo).
- Twilio sends our text messages: verification codes and invitations. It receives the mobile number and the text of the message, and handles them in the United States.
- Cloudflare delivers this website. In the admin web app and on this website’s Contact form, Cloudflare Turnstile checks that sign-up, sign-in, password reset and contact messages come from a person. For that check your browser connects to Cloudflare, which receives your network address (IP) and details of your browser.
- Google Fonts supplies the typeface on this website and in the admin web app. Your browser requests it from Google.
- OpenStreetMap supplies map images when an admin views or edits a work location.
- Our address lookup. When an admin types an address into a work location, the text is sent to an address service that we host ourselves, which finds matching addresses. It is not stored.
We also disclose information when the law requires it.
Address data
Incorporates or developed using G-NAF © Geoscape Australia licensed by the Commonwealth of Australia under the Open Geo-coded National Address File (G-NAF) End User Licence Agreement.
Where it is stored
Attendance records and accounts are stored in Australia (Sydney). The providers above handle information in other countries, including Japan and the United States.
How long we keep it
- Attendance records are kept while your employer’s organisation uses Darg.
- Your account is deleted 14 days after you ask. See Delete your account.
- Sign-in records and verification codes are deleted on a schedule after they expire.
- Contact form messages are not stored in Darg. They arrive as email in our support inbox.
- A closed organisation’s records are deleted when the organisation asks, unless the law requires us to keep them.
Security
Connections to Darg are encrypted. Passwords are stored as one-way hashes. Each organisation’s records are kept separate from every other organisation’s.
Access and correction
You can see your own clock records, timesheets and leave requests in the app, and change your name, email, mobile number and password there. To correct an attendance record, ask your manager.
You can also ask us for a copy of the personal information we hold about you, or to correct it. Email support@darg.com.au. We answer within 30 days.
This website
This website sets no cookies and uses no analytics. The admin web app sets one cookie to keep you signed in.
Complaints
Email support@darg.com.au. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
When this policy changes we update this page and the date at the top.