For the iPromans mobile application · Last updated: 31 July 2026
This Privacy Policy explains what information the iPromans mobile application processes, why, and what choices you have. iPromans is a workplace management application used by organisations to run projects, tasks, daily worklogs, and approvals.
The App is provided to staff by the organisation they work for. Accounts are created and managed by that organisation — there is no public sign-up. Most information in the App belongs to your employer and is processed on its behalf and under its instructions.
When an authorised user signs in, we process their account details, including name, email address, phone number, date of birth, employee ID, assigned role (for example employee, intern, team lead, manager, HR, or administrator), department, and profile photograph where one has been uploaded. Sign-in credentials are transmitted securely to authenticate the session; see Section 8 for how the resulting session is stored.
The App displays and manages your organisation’s work records. Depending on the signed-in user’s role and permissions, these may include:
You see only what your role and permissions allow. Employees see their own work; team leads, managers, and administrators additionally see oversight views for the people they are responsible for.
When you attach files to an approval request, those files are uploaded and stored so approvers can review them. See Section 5.
To operate reliably, the App processes limited technical information such as network requests to our server and the response status of those requests. The App does not collect your location, does not read your contacts, call log, SMS, camera, or microphone, and contains no third-party advertising, analytics, or advertising-based tracking SDKs.
The App requests only one Android permission:
| Permission | Why the App uses it |
|---|---|
INTERNET |
To securely send and receive data to and from our backend server. Every screen in the App is a view over that server; the App has no offline database. |
The App does not request camera, location, contacts, microphone, call log, SMS, or storage permissions. Attaching a file to an approval uses the system document picker, which hands the App only the specific file you choose and requires no storage permission.
We do not sell personal information, and we do not use it for advertising or profiling.
We share information only as needed to operate the service:
When you attach one or more files to an approval request, the App uploads them to our backend, which stores them in cloud object storage and returns a reference that is saved with the request. Approvers in that request’s chain can then open them.
Files are selected through the system document picker — the App does not browse or index your device storage, and only receives the specific files you pick. Attachments are retained as part of the approval record; see Section 7.
The App can link your personal GitHub account so that your commits are attributed to you across repositories connected to your department. This is entirely optional.
If you choose to link it, the App opens GitHub’s own authorisation page in your browser. You sign in with GitHub directly — the App never sees or stores your GitHub password. We store only the resulting connection and your GitHub account name. Your organisation may separately enable a GitHub integration at department level; that is configured by an administrator, not by you.
You can request removal of the link at any time — see our Account & Data Deletion page. Removing it does not affect your GitHub account or any commits, which remain governed by GitHub’s own terms and privacy policy.
Work records — projects, tasks, worklogs, and approvals — are retained by your organisation for as long as necessary for its operational, administrative, and legal purposes. Account records are retained while the account remains active. When information is no longer required, it is deleted or anonymised.
See our Account & Data Deletion page for how to request deletion and what can and cannot be removed.
Access to the App requires authentication, and communication with our server is encrypted in transit (HTTPS/TLS). Access to records is restricted by role, so a user sees only what their role permits.
The App is designed so that credentials are held as briefly as possible:
HttpOnly cookie, which application code
cannot read;No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your credentials confidential, sign out on shared devices, and use a secured device.
The App is a workplace tool intended for staff of the organisations that deploy it. It is not directed to children and children do not hold accounts. Where an organisation enrols interns, those accounts are created by the organisation for individuals engaged in a work or training capacity.
Subject to applicable law, individuals whose personal data we process may request access to, correction of, or deletion of their information, may object to or restrict certain processing, and may withdraw consent where processing is based on consent (including for the optional GitHub link).
Because records in the App belong to your organisation, requests relating to work records may be directed to your workspace administrator, or made to us using the contact details below and we will coordinate with your organisation.
The App relies on our own backend server and its hosting and file-storage infrastructure. The App embeds no advertising, analytics, crash-reporting, or tracking SDKs. Its typeface is bundled inside the App, so no font is fetched from a third party at runtime. In addition:
We may update this Privacy Policy from time to time. When we do, we will post the updated policy here and revise the “Last updated” date above. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
If you have questions or requests regarding this Privacy Policy or your information, contact us at:
Email: itskillparkdbi@gmail.com