Last updated 28 October 2026

Privacy Policy

CoreConnect IOT is a site IoT device. One iPhone is registered to a site and is shared by the staff on duty at that site. It is not a personal phone, and it is not used to locate or follow an individual staff member.

Who operates the app

The app is operated for the security site that issued the device login. Questions about staff records are handled by that site’s administrator. Product information is published at https://coreconnect-iot.com.

Information the device uses

• Site device login, so the shared phone can be registered to one site.
• Staff name, staff code, and NRIC or passport number, so attendance can record which staff member is using the shared device.
• Face data, used only to identify the staff member at clock-in, clock-out, and the start of a patrol. Encrypted face templates stay on the device for that site. The app does not keep the camera photo as the attendance record.
• Location of this shared site device. CoreConnect collects location data to enable work-perimeter checks, patrol tracking, and emergency location even when the app is closed or not in use. Supervisors use it to confirm the device stays inside the assigned site and to record the patrol route. If the signal is weak indoors or unavailable, the device still operates. Location is not used for advertising and is not used to follow a staff member off duty.
• NFC reads of patrol clocking points at the site.
• Photos the staff member attaches to an incident report or an hourly report.
• Attendance, patrol, incident, hourly, and technical-report records created on the device.

Why it is used

The information is used to run site security work: attendance, patrol, and reports. Records may be stored on the device when the site is offline and sent to the site’s CoreConnect IOT service when a connection is available. They are visible to the site’s authorised administrators and command staff. They are not sold and are not used for advertising.

How long it is kept

Operational records stay for the site’s security and audit needs. Face templates for a site are removed from the device when that staff record is deactivated, replaced, or the device is reset or moved to another site.

Staff requests

A staff member can ask the site administrator to review or correct the attendance and report records held for that site. The administrator controls the staff record on the shared device.