Who does what
Your academy decides what it keeps about its students, and answers to their parents. ZYNTEIRO TECHNOLOGY SDN. BHD. runs EZ Attendance and handles the data only for your academy, as the data processing agreement says.
Where it is kept
Each academy has its own database and its own folders for photos, on a server in Malaysia. Nightly backups are kept for 14 days.
Faces
- Stored only after an academy admin records a parent's or guardian's written consent: who signed, the date, and a tick. Without it the child trains as usual and is checked in by name.
- What is kept: a few photos from enrolment (at most 10), cut to the face; the faces from the child's 5 latest face check-ins; and a face signature for each, a list of numbers the app compares.
- Coaches' phones keep the signatures, not the photos, so check-in works with no signal. They are removed when the coach signs out.
- Faces of people who are not enrolled are compared on the phone and not kept.
- Withdrawing consent, the child leaving, or their record being deleted deletes every face photo and signature of that child. Attendance and fees stay.
Check-in photos, only if the academy turns them on
One face-and-shoulders photo for each face check-in, for an admin to show a parent who says their child never came. Only admins can open one, and every view is recorded. Each photo is deleted 30 days after its check-in and is never copied into a backup.
Who sees what
Coaches see the students, their packages and check-ins, and check children in. Admins also run fees, settings and staff, and every change they make is in the change log. Extra columns from your student sheet, such as IC numbers, are shown to admins only.
Who else handles data
Cloudflare protects and carries the traffic between the phones and the server. Stripe takes the academy's payments, by card or FPX; the card and bank details never pass through EZ Attendance. Resend sends the sign-up e-mail, with only the admin's name and e-mail address. Stripe and Resend never receive a child's data.
This website
No cookies, no trackers, and no fonts or scripts from other sites. The sign-up form uses the cookies it needs to work, nothing else.
Questions and requests
Parents: ask your academy. It can show you, correct or delete your child's data in the app, and you can also complain to the Personal Data Protection Commissioner. Academies: write to [email protected] or [email protected].