Legal
Privacy Policy
Effective 18 August 2026
This policy explains how Ingalla, operated by V GROUP SARL, processes information when companies and their workers use the Ingalla web and mobile services.
Information we process
Account and employment information may include names, work email addresses, phone numbers, dates of birth, addresses, identity and emergency-contact details, departments, job information, compensation, bank details supplied for payroll, attendance, leave, requests, tasks, comments, reviews, assets, documents, and support messages. Precise location is collected only when a worker chooses to mark attendance or an administrator sets an office location.
How we use information
We use information to authenticate users, operate company workflows, verify attendance near an approved workplace, provide payroll and document records, process requests and approvals, protect accounts, deliver service messages, troubleshoot problems, and meet legal or contractual obligations. Ingalla does not sell personal information or use it for third-party advertising.
Who controls workplace data
The company that provides a worker's Ingalla account generally controls its workforce records and decides who may access them. V GROUP SARL processes that information to provide Ingalla. Workers should also contact their employer for questions about company retention rules, corrections, or workplace decisions.
Sharing and service providers
Information is shared only with authorized users in the same company and with providers needed to run the service, including hosting and PostgreSQL database infrastructure, private object storage for documents, transactional email delivery, and Apple or Google platform services. Providers receive only what is needed for their service and are required to protect it.
Location
Ingalla requests foreground location permission when attendance is marked. Coordinates, accuracy, time, and the matching office are sent to the company workspace to confirm that the device is within the attendance radius. Ingalla does not request background location, continuously track a device, or use location for advertising.
Retention and deletion
Workplace records are kept for the period configured or required by the employer and applicable law. Account deletion requests are acknowledged promptly and completed within 30 days after verification. Backups may take up to 90 days to expire. Limited payroll, security, fraud-prevention, or legal records may be retained only as required and access is restricted.
Security
We use encrypted network connections, hashed passwords, access controls, private file storage, scoped permissions, and authenticated download links. No system can guarantee absolute security, so users should protect their credentials and report suspected misuse promptly.
Your choices and rights
Depending on applicable law, users may request access, correction, export, restriction, objection, or deletion. Location permission can be changed in device settings, though attendance check-in will then be unavailable. Requests may be submitted from the app or the account deletion page.
Children
Ingalla is a workplace service and is not directed to children. Company administrators must not create accounts for anyone who cannot lawfully use a workplace service in their country.
Contact and changes
Questions may be sent to [email protected]. We may update this policy as the service or legal requirements change. Material changes will be communicated through the service or by email where appropriate.