Privacy Policy

Decibel mobile applications for Android and iOS
Effective date: 25 August 2026  |  Last updated: 25 August 2026

1. Who we are

The App is provided by Decibel360 Cloud (“Decibel”, “we”, “us”, “our”), the developer of the Decibel Human Resource Management System (HRMS). Our website is https://decibel360cloud.com/ and the Decibel service is delivered at mydecibel.com.

Our office address is Suite 405, 4th Floor, Fortune Center, PECHS Block 6, Shahra-e-Faisal, Karachi 75400, Pakistan. You can contact our privacy and support team at it.support@decibelbpo.com or by phone on 03 1111 666 24.

2. The App is provided through your employer

Decibel is an employee self-service app. You can only use it after your employer (or another organisation that has licensed Decibel, your “Organisation”) has created an account for you and you have activated the App using the activation code, portal link or one-time password provided by that Organisation.

Your Organisation decides which Decibel modules are enabled for you, what information is held in your employee record, and how long it is kept. For most personal data processed through the App, your Organisation is the data controller and Decibel processes the data on its behalf as a service provider. If you have questions about how your Organisation uses your data, or want to exercise your rights over your employee record, please contact your Organisation’s HR department first. Decibel acts as a controller only for the limited technical data described in section 4.3.

3. Information we collect

3.1 Information provided by you or your Organisation

• Account and identity data – name, employee ID, work email address, phone number, job title, department, reporting line, profile photo, and the activation credentials used to link the App to your Organisation.
• Employment and HR data – depending on the modules your Organisation enables: attendance and time records, leave requests and balances, payslips and pay information, earned-wage requests, benefits, expense claims, travel requests, performance reviews and goals, training, personal-information updates, documents and attachments you upload, help-desk tickets, to-do items, news and announcements, and details of colleagues shown in the employee directory.
• Communications – messages you send through the in-app chat, and audio/video calls or meetings you join through the App (see section 5).
• Decibel Assistant – if you use the voice assistant, the audio you speak is converted to text on your device using the operating system’s speech-recognition service and the resulting request is sent to your Organisation’s Decibel server to be answered.

3.2 Information collected automatically

• Location data – precise (GPS) location, and on Android also approximate location, when you use location-based features. This may include background location – see section 4 for a full explanation.
• Device and technical data – device model, operating system version, App version, language, time zone, push-notification token, network connectivity state, and unique installation identifiers used for push notifications and crash reporting.
• Usage and diagnostic data – which screens and features are used, and crash reports and performance logs if the App fails, collected through Firebase Analytics and Firebase Crashlytics (Google).
• Camera and photo data – images you take or select to scan QR codes, update your profile picture or attach to requests (expenses, leave certificates, help-desk tickets, etc.).
• Calendar data – if you allow calendar access, the App can add meetings or leave to your device calendar. We do not read or upload your other calendar entries.
• Biometric authentication – if you enable Face ID, Touch ID or Android biometric unlock, the check is performed entirely by your device. The App never receives, stores or transmits your fingerprint or face data; it only learns whether the check succeeded.

3.3 Device permissions we request

You can grant or withdraw any permission at any time in your device settings. Withdrawing a permission only disables the related feature; the rest of the App keeps working.

4. Location data – prominent disclosure

The App collects location data to support the HR features listed below only when your Organisation has enabled those features and you have granted the location permission.

• Attendance – recording where you check in and out, and verifying that you are inside an approved geofence (for example, your office or a client site).
• Automatic attendance – if enabled, the App can mark attendance automatically when your device enters or leaves a geofence. This requires background location (“Allow all the time” on Android, “Always” on iOS) because the App must detect the geofence even when it is closed or not in use.
• Field visits and real-time tracking – for roles that work outside the office, the App can log visit locations and, during working hours defined by your Organisation, share your live location with authorised managers.
• Maps – showing your position on a map when booking a ride, selecting a visit location or viewing a facility. Map tiles and place search are provided by Google Maps Platform.

Location data is sent to your Organisation’s Decibel server and is visible only to your Organisation’s authorised users (such as HR and your manager). Decibel does not sell location data, does not use it for advertising, and does not share it with third parties for their own purposes. You can turn location collection off at any time in your device settings; if you do, location-based attendance and tracking features will stop working and your Organisation may require you to use another attendance method.

4.3 Data Decibel processes for its own purposes

Decibel acts as an independent controller only for aggregated, non-identifying analytics and for crash reports, which we use to keep the App stable, secure and improving. Crash reports may include the device model, OS version, App version and a technical trace of what the App was doing when it failed. They do not include your HR records or message content.

5. How we use information

• To provide the App’s HR self-service features on behalf of your Organisation.
• To authenticate you and keep your account secure, including biometric unlock and one-time passwords.
• To deliver push notifications about approvals, reminders, announcements, messages and calls.
• To enable chat, voice and video calls between colleagues. Calls are set up through the App and carried by the Jitsi Meet service; chat messages are delivered through an XMPP messaging server operated for your Organisation.
• To display maps and location-based information.
• To diagnose crashes, monitor performance and improve the App.
• To comply with legal obligations and enforce our agreements with your Organisation.

We do not use your personal data for advertising or marketing, and we do not sell it.

6. How information is shared

• Your Organisation – all HR data you enter and location data collected by the App is stored on your Organisation’s Decibel tenant and is available to your Organisation in accordance with its own policies.
• Service providers that help us run the App, acting on our instructions:
  • Google LLC – Firebase Cloud Messaging (push notifications), Firebase Analytics and Crashlytics (usage and crash reporting), Firebase Authentication and Realtime Database (in-app chat and call signalling), Google Maps Platform and Places (maps). Google Privacy Policy
  • 8x8, Inc. – Jitsi Meet SDK (voice and video calls). Jitsi Meet Privacy Terms
  • Apple Inc. (iOS) – Apple Push Notification service and on-device speech recognition. Apple Privacy Policy
  • Cloud hosting providers that host Decibel servers for your Organisation.
• Legal reasons – if required by law, regulation, legal process or governmental request, or to protect the rights, property or safety of Decibel, our customers or others.
• Business transfers – in connection with a merger, acquisition or sale of assets, subject to this policy.

7. Data storage, security and retention

• All communication between the App and Decibel servers is encrypted in transit using TLS (HTTPS).
• Data cached on your device (for offline access and speed) is stored in an encrypted local database. The encryption key is generated on your device and kept in the iOS Keychain or Android Keystore, and is never transmitted.
• Sensitive attachments and credentials are excluded from device backups.
• Biometric data never leaves your device.
• Access to production systems is restricted to authorised personnel and logged.

HR and location data is retained for as long as your Organisation keeps your employee record, according to its retention policy and applicable employment law. Crash and analytics data is retained by Google for the periods described in its policies (Crashlytics: 90 days; Analytics: up to 14 months) and then deleted or aggregated. Data cached on your device is removed when you sign out, deactivate the App or uninstall it.

8. Your choices and rights

• Permissions – control camera, location, microphone, photos, calendar, notifications and biometric access at any time in your device settings.
• Analytics – Firebase Analytics data is collected only in a form that does not identify you by name; you can limit ad-related identifiers in your device settings (“Limit Ad Tracking” / “Delete advertising ID”), although the App does not show ads.
• Access, correction, deletion and portability – you may have rights under the data-protection laws of your country (for example the GDPR in the EU/UK, or the Personal Data Protection laws of Pakistan and other jurisdictions). Because your Organisation is the controller of your HR data, please direct these requests to your Organisation’s HR team; we will assist them in responding. For requests relating to data Decibel controls (section 4.3), contact us at it.support@decibelbpo.com.
• Account deletion – to delete your account and associated data, use Settings → Deactivate / Delete account in the App where available, or ask your Organisation’s HR team to deactivate your account. You may also email it.support@decibelbpo.com and we will coordinate the deletion with your Organisation within 30 days, except where retention is required by law.
• Complaints – you have the right to lodge a complaint with your local data-protection authority.

9. International transfers

Your Organisation’s Decibel server is hosted in the region chosen by your Organisation. Our service providers (including Google and 8x8) may process data in other countries, including the United States, under appropriate safeguards such as standard contractual clauses. By using the App you acknowledge that your data may be transferred to and processed in countries outside your own.

10. Children

The App is intended for employees and contractors of Organisations that use Decibel and is not directed at children under 16. We do not knowingly collect personal data from children.

11. Third-party links and content

The App may display links or content provided by your Organisation (for example news items or external forms). Those sites and services have their own privacy policies, which we do not control.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version at https://decibelprivacypolicy.mydecibel.com/ and update the “Last updated” date above. Where the changes are significant we will also notify you in the App.

13. Contact us

Decibel360 Cloud
Suite 405, 4th Floor, Fortune Center, PECHS Block 6, Shahra-e-Faisal, Karachi 75400, Pakistan
Phone: 03 1111 666 24
Email: it.support@decibelbpo.com
Website: https://decibel360cloud.com/  |  https://mydecibel.com