Privacy Policy

Gritstone Technologies ("we", "our", or "us") operates the Metlone mobile application ("the App"), a workforce management platform used by organisations to manage employee attendance, field operations, and related HR workflows.

This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights regarding that data. By using the App, you agree to the practices described in this policy.

a. Precise Location Data

The App collects your device's precise GPS location (latitude, longitude, speed, and accuracy) when you are checked in. Location data is collected continuously in the background via a persistent foreground service notification while you remain checked in, and stops automatically when you check out.

We request background location access ("Allow all the time") so that location updates are captured even when the app is not in the foreground — for example, while you are commuting or on-site with the screen off.

b. Battery Level

We read the device battery percentage alongside each location update so managers can see whether a field employee's device is running low. This data is not stored independently; it accompanies the location record.

c. Attendance & Time Data

Check-in and check-out timestamps, timezone, and geographic address (reverse-geocoded from coordinates) are recorded as part of the attendance record.

d. Device & Account Information

We collect basic device information (operating system, app version) and your authenticated user profile (name, employee ID, role) to associate location and attendance records with the correct employee account.

Location data is collected exclusively for the following legitimate business purposes:

• Recording check-in and check-out locations for attendance compliance
• Enabling managers to view the real-time and historical movement of field employees during their working hours
• Generating distance-travelled reports for field workforce analysis
• Ensuring employees are within designated work areas (geo-compliance)

Location tracking is strictly limited to check-in periods. It is not used for advertising, profiling outside of work contexts, or any purpose not listed above.

The App uses the ACCESS_BACKGROUND_LOCATION permission on Android and the "Always On" location mode on iOS. This is necessary because employees often lock their screens or switch to other apps while on the move. Without background access, transit gaps would appear in the location track.

Before background location is enabled, the App displays a clear disclosure dialog explaining what data is collected, why, and how to revoke access. You can revoke background location permission at any time via your device's Settings app.

• You — you can view your own track history within the App.
• Authorised managers and HR administrators within your organisation — they can view real-time position and historical tracks for employees they manage, subject to their organisation's role-based access controls.
• Gritstone Technologies — only for the purpose of operating, securing, and improving the service. We do not sell, rent, or share your location data with third parties for commercial purposes.

Location records are retained for the period specified in your organisation's subscription agreement (typically 12 months), after which they are permanently deleted. Attendance records may be retained longer to satisfy statutory payroll and employment obligations, as required by applicable law.

All location and attendance data is transmitted over HTTPS (TLS 1.2 or higher) and stored in encrypted databases hosted within secure cloud infrastructure. Access to raw data is restricted to authorised personnel and protected by role-based access controls and audit logging.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing in certain circumstances
• Withdraw consent for location tracking by revoking the location permission in your device settings

To exercise any of these rights, contact us at privacy@grit-stone.com.

The App is intended for use by employed adults within an organisational context. We do not knowingly collect personal data from individuals under the age of 16.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify users through the App. Continued use of the App after an update constitutes acceptance of the revised policy.

If you have any questions or concerns about this Privacy Policy or your data, please contact: