Eshikchi ERP

O‘zbekcha: https://telegra.ph/Eshikchi--Maxfiylik-siyosati-10-24

Effective date: 6 November 2026

App operator: Hi IT Solution LLC (Hi IT Solution MChJ).

This policy explains what personal data the Eshikchi ERP app collects, why it is used, who can see it and how long it is kept. Eshikchi ERP is an app that companies use for their employees: attendance, tasks, internal chat, sales and other work processes are handled in it. The app is available in Uzbek, Russian and English.

1. Who is responsible for your data

The Eshikchi ERP app and service are provided by Hi IT Solution LLC. The company that uses the app — your employer — decides which features are turned on, who can see which data and when data is deleted. You can therefore contact your company's HR staff, or us, about your data (section 14).

2. What data is collected

Depending on the features you use and the rights of your account, the following may be processed:

Account and profile: name, login, phone or email, profile photo, company, department and position.
Device and technical data: device name (for example, the phone model), app version, push notification token, an identifier used for device approval, crash reports and usage statistics.
Attendance: check-in and check-out times and your location at that moment, workplace zone entries and exits, and — if your company requires it — an attendance photo (selfie).
Location tracking: only with your consent — see section 4.
Chat: messages; the photos, videos, voice messages and files you send; read marks; reports and blocks; your "last seen" time.
Tasks: tasks, their deadlines, reports (with the earlier versions of an edited report) and attached proof, with the time each photo was taken; if your company sets one, a penalty for a missed deadline.
Suggestions: the text and photos you send in the Suggestions section.
Work data (within your rights): salary, customer, order, contract, payment and debt data. Customer data entered by the company may include name, phone, address and personal or bank details related to a contract.
Installed doors: the photos you send to this section.

3. Why the data is used

To provide the app's features: attendance, tracking, chat, tasks, payroll, sales and others.
To identify you and protect your account: sign-in, verification codes, approval of a new device.
To send notifications.
To keep chat safe: reviewing reports and enforcing blocks.
To find errors and improve how the app works.
To keep your company's employment records: attendance records and the history of your tracking consent.

Your data is not used for advertising and is not sold.

4. Location and automatic attendance

Consent. Your company turns tracking on, but it works only after you read the terms in the app and tap "Agree" ("Roziman" in Uzbek). Consent is asked in the setup after sign-in or when you open the staff map; if tracking is turned on later, the request is shown once on its own. Consent is given separately on each device. Without consent the app sends no tracking records and the server does not store them. The times you give and withdraw consent are recorded.

Android. During the tracking hours set by your company (the shift or the whole working day), the app records your location in the background — even when the app is closed or not in use — and authorized managers can see your location and route on the map. While tracking runs, a persistent notification is shown on the phone. When the phone stays in one place, the location is recorded less often.

iPhone. From version 1.3.8 the app no longer uses continuous background location on iPhone. When the app is in the background or closed, workplace zone entries and exits are recorded as they happen, and the route during tracking hours is recorded only roughly: about one point every 0.5–1 km while you move, and none while you stay in one place. While the app is open on screen, points may be taken more often.

Workplace zones. On both platforms, entering and leaving a workplace zone is recorded around the clock — also outside tracking hours and on days off — for automatic check-in and check-out (or a reminder). These events send location and time, but no continuous route is recorded. If your company uses the attendance-only mode, only zone events are recorded.

What a record contains. A location point: coordinates, time, accuracy, altitude, speed, heading, whether the phone was moving or still (determined from changes in location), a fake-location (mock GPS) flag, battery level and whether the phone is charging. A zone event: which zone, entry or exit, time, location, accuracy, speed, the fake-location flag and battery state.

On the server. Location points received outside tracking hours or in attendance-only mode are not stored. If your company chose not to keep route history, only your latest location is kept.

Without internet. Records are kept on the phone for up to 7 days and sent once the connection is back. When you sign out or withdraw consent, tracking stops and the queue of records on the phone is cleared.

Who can see it. The company owner and staff who have the right to view staff locations or to manage staff (HR) see all of the company's employees; department heads see the employees of the departments they lead and of their sub-departments. You can also see your own route. Colleagues without these rights do not see your location.

Manual check-in. When you check in or out by hand in the app, your current location is sent to confirm that you are in the workplace zone. This does not depend on tracking consent; location permission is asked at your first check-in.

Managing consent. You can give consent, or withdraw it at any time, in Company → Tracking. Once it is withdrawn, tracking stops at once and automatic check-in/check-out no longer work; marking attendance by hand (with the face check) keeps working. You can also change location permissions in the phone settings.

5. Face check and photos

For a manual check-in or check-out, your selfie is compared with a face template made from your profile photo. Both the template and the comparison stay on the phone: the template is kept in the device's encrypted storage, is not sent to the server and is deleted when you sign out.
If your company keeps attendance photos, the selfie taken during the check is sent to the server with the check-in or check-out, and authorized staff can view it. After the check, the selfie is not kept on the phone.
Photos and files you send in chat and task reports are visible to people with access to that conversation or task. Unsent task drafts may be kept on the phone.
Photos sent to the Installed doors section may be published in the public work gallery on the company website after administrator approval.

6. Chat: reports, blocking and online status

The people in a conversation see its messages and files; the chat shows whether messages have been read.

Reports. You can report a message or a user, with a reason and an optional comment. When you report a message, a copy of its text, sending time and files is kept as evidence — this copy does not change if the message is later edited or deleted. Reports are reviewed by your company's moderators: the company owner and HR staff with the employee-settings right. They see who reported and who was reported, the reason, the comment and the message copy. A moderator may delete the message for everyone; the copy in the report is still kept. Every decision (who, when, what was decided, the note) is written to the report's history, and the person who filed the report is notified of the outcome.

Blocking. You can block a user in a private chat: after that, neither of you can send the other private messages. Shared group chats and earlier messages stay as they are. To unblock: Chat → ⋮ → Blocked users.

Online status. A private chat shows whether the other person is online now or when they were last online. For this, the server keeps the time your app last disconnected from the chat server (only the latest time). Users who have blocked each other do not see this. The "typing…" indicator is passed to the other people in the chat instantly and is not stored anywhere.

7. Notifications, technical services and permissions

Notifications. Push notifications are sent through Google Firebase Cloud Messaging. For this, your device's notification token and device name are sent to the server; the token is removed from the server when you sign out. A chat notification may contain the sender's name, photo and the message text.
Firebase. Google Firebase Analytics is used for usage statistics, Crashlytics for crash reports and Remote Config for app settings. Your name or user ID is not passed to Analytics or Crashlytics.
Maps and background location. Maps work through Google Maps. Background location is recorded by the Transistor SDK, which runs on the phone, and sent to the Eshikchi ERP server.
No advertising. The app shows no ads. The advertising identifier (Android Advertising ID, IDFA on iPhone) is not collected.
Permissions. Camera (face check, attendance photos, task reports, installed-door photos, chat), microphone (voice and video messages in chat), location (attendance and tracking), photo and file selection, and notifications. You can manage permissions in the phone settings; if a permission is limited, the feature that depends on it may not work.
Diagnostics. The technical log of tracking is kept on the phone for up to 3 days and is sent only if you share it yourself; it may contain location and technical events.

8. Who sees your data and who receives it

Your company: managers, HR and other responsible staff, within their rights (attendance, location, attendance photos, tasks, salary and so on).
Company moderators: chat reports (section 6).
Your colleagues: your name, photo, position and phone number may be visible in chat and in the company structure; chat messages are seen by the people in that conversation.
The public: "Installed doors" photos approved by an administrator, on the company website.
Service providers: Google (Firebase and Google Maps), only for the purposes in section 7.
Hi IT Solution LLC: to run the service and provide technical support.
Government authorities: only in the cases and in the manner set by law.

Your data is not sold.

9. How long data is kept

Tracking history (route and zone events) is kept on the server until your company deletes it; there is no automatic deletion period. When the company deletes an employee, that employee's tracking data is deleted too.
Chat reports, their evidence copies and review history have no automatic deletion period: they are kept while the company account exists, or until they are deleted on request.
Attendance records, the history of tracking consent and sign-in (security) records are kept separately as the company's employment records — also after tracking data is deleted.
Online status: only the time you were last online is kept; "typing" is not stored.
On the phone: the face template — until you sign out; unsent tracking records — up to 7 days; the technical log of tracking — up to 3 days.
Other data (profile, chat, tasks, work data) is kept while your account and the company account are active; your company can delete it, or you can ask for it to be deleted (section 10).

10. Your rights

You can ask:

what data about you is kept;
to correct inaccurate data;
to delete your data or your account.

You can withdraw tracking consent yourself at any time in Company → Tracking.

Send your request to your company's HR staff or to support@eshikchi.uz. Deletion requests are completed within 30 days. Your company may keep attendance records and the consent history as employment documents.

Accounts are created and deleted by your company's HR staff or administrator; there is no self-registration in the app.

11. Security

The app talks to the server only over an encrypted connection (HTTPS). Sign-in tokens and the face template are kept in the phone's encrypted storage. Access to data is limited by the rights your company grants, and signing in from a new device may require administrator approval.

12. Children

Eshikchi ERP is not intended for children: it is used only by employees for whom their employer has created an account. We do not knowingly collect children's data. If you believe a child's data has been entered, contact us and we will delete it.

13. Changes to this policy

When this policy changes, the updated text is published on this page and the effective date above is updated.

14. Contact

Hi IT Solution LLC — Eshikchi ERP

Telegram: @eshikchi_support_bot
Phone: +998 93 434 10 31
Email: support@eshikchi.uz

Eshikchi ERP — Privacy Policy