Hatplan

隐私政策

生效日期：2026-10-06

1. 适用范围与各方角色

Hatplan 是面向建筑工地的考勤与工时管理服务，包括工人使用的手机 App 与雇主使用的管理后台。本政策说明 Hatplan 收集哪些个人信息、用途、披露对象、保存期限，以及信息当事人依新西兰《2020 年隐私法》（Privacy Act 2020）享有的权利。

  • 雇主（使用 Hatplan 的公司）为工人信息的责任方，决定登记哪些工人、设置时薪与考勤规则，并使用考勤记录核算工资。
  • FREEAI LIMITED（地址：10 Aoraki Crescent, Albany Heights, Auckland 0632, New Zealand）为 Hatplan 的运营方，代表雇主存储与处理上述信息，不将其用于雇主委托以外的目的。

2. 收集的信息

2.1 雇主登记的信息

  • 姓名（含用于工资核算的英文法定姓名）、手机号码、所属公司；
  • 工种、班组、用工类型（雇员 / 小时工 / 分包）、分包商名称、雇主会计系统中的员工编号；
  • 时薪及工资规则（由雇主设定）；
  • 界面语言偏好。

2.2 考勤记录

  • 上班、下班、转场的时间与工地；
  • 点击「上班」「下班」「转场」时读取的 GPS 坐标，用于确认是否位于工地围栏范围内（上班须位于围栏内）；
  • 上班现场照片（仅在雇主开启该设置时拍摄）；
  • 休息时长、转场路途时长、工时、人工成本，以及考勤修改记录（修改人、修改前后数值与原因）。

2.3 设备与使用信息

  • App 安装标识、设备平台（iOS / Android）、设备型号、系统版本、App 版本；
  • 推送令牌（用于发送通知）、设备是否支持 Google 服务；
  • 最近一次使用时间；
  • 服务器访问日志中的 IP 地址，用于安全防护与访问频率限制。

2.4 登录信息

短信验证码与登录令牌仅以哈希值形式存储。验证码 5 分钟内有效，使用后即作废。

2.5 不收集的信息

  • 不进行后台定位：位置仅在点击「上班」「下班」「转场」时读取一次，App 不在后台持续追踪位置；
  • 不读取通讯录与短信；
  • 不含广告，不使用广告或第三方统计分析 SDK，不出售个人信息；
  • 目前未接入崩溃报告服务。

3. 使用目的

  • 记录出勤，核对上班地点是否位于工地范围内；
  • 按雇主设定的规则计算工时、加班与人工成本；
  • 每周将工时汇总推送至雇主使用的会计系统（SW CRM），由雇主核算并发放工资；
  • 发送登录验证码，以及自动下班、工时截止等业务通知；
  • 保障账号与服务安全，排查故障。

4. 披露对象

个人信息仅在提供服务所必需的范围内披露给以下对象：

对象披露内容与用途
雇主（所属公司的老板与管理员）工人资料与全部考勤记录，用于用工管理与工资核算。
SW CRM（雇主的会计系统）员工编号、姓名、工时汇总，用于工资核算。
Google Firebase Cloud Messaging推送令牌与通知内容，用于向 App 发送通知。
短信服务商（创蓝 253 国际短信等）手机号码与短信内容，用于发送验证码；推送不可用时发送通知短信。

上述服务商可能位于新西兰境外（包括美国与中国）。FREEAI LIMITED 仅向其提供完成相应服务所需的最少信息，并依《2020 年隐私法》第 12 项信息隐私原则（跨境披露）采取合理措施保护该等信息。除法律要求外，不向其他任何第三方披露个人信息。

5. 保存期限

  • 账号存续期间保存账号与设备信息；
  • 考勤与工时记录属于雇主的工资与工时记录，依新西兰《2000 年雇佣关系法》（Employment Relations Act 2000）与《2003 年假期法》（Holidays Act 2003）须保存 6 年，期满后删除；
  • 工人注销账号后，手机号码、头像照片、设备信息与登录令牌立即删除，考勤记录按上一条保存。详见账号注销说明。

6. 安全措施

Hatplan 的服务器与数据库位于新西兰奥克兰。数据通过 HTTPS 加密传输；后台账号密码以 bcrypt 哈希存储；验证码与登录令牌以哈希值存储；登录与验证码接口设有访问频率限制；雇主仅能查看本公司的数据。

7. 查阅与更正权

依《2020 年隐私法》，信息当事人有权查阅 Hatplan 所持有的本人个人信息，并要求更正不准确的信息。可向所属雇主提出，或发送邮件至 jundongnz@gmail.com。FREEAI LIMITED 将在核实身份后，于收到请求之日起 20 个工作日内答复。对处理结果有异议的，可向新西兰隐私专员办公室（Office of the Privacy Commissioner，privacy.org.nz）投诉。

8. 未成年人

Hatplan 面向在建筑工地工作的成年人，不面向儿童提供。

9. 政策变更

本政策如有变更，将在本页面公布新版本并更新生效日期；重大变更将通过 App 或雇主另行告知。

10. 联系方式

FREEAI LIMITED
10 Aoraki Crescent, Albany Heights, Auckland 0632, New Zealand
电子邮件：jundongnz@gmail.com

Privacy Policy

Effective date: 2026-10-06

1. Scope and roles

Hatplan is an attendance and timesheet service for construction sites, consisting of a mobile app used by workers and a back office used by employers. This policy explains what personal information Hatplan collects, why, who it is disclosed to, how long it is kept, and the rights individuals have under the New Zealand Privacy Act 2020.

  • The employer (the company using Hatplan) is responsible for its workers' information. It decides which workers are registered, sets hourly rates and attendance rules, and uses attendance records for payroll.
  • FREEAI LIMITED (10 Aoraki Crescent, Albany Heights, Auckland 0632, New Zealand) operates Hatplan and stores and processes this information on the employer's behalf. It does not use the information for any purpose other than providing the service to the employer.

2. Information collected

2.1 Information registered by the employer

  • Name (including legal English name for payroll), mobile number, company;
  • Trade, crew, worker type (employee, hourly or subcontractor), subcontractor name, and employee ID in the employer's accounting system;
  • Hourly rate and wage rules, as set by the employer;
  • Interface language preference.

2.2 Attendance records

  • Times and sites of clock-in, clock-out and site switches;
  • GPS coordinates read when the worker taps Clock in, Clock out or Switch site, used to confirm the worker is within the site fence (clock-in requires being inside the fence);
  • A site photo at clock-in, only where the employer has enabled this setting;
  • Break time, travel time between sites, hours worked, labour cost, and an audit trail of edits (who made the change, the values before and after, and the reason).

2.3 Device and usage information

  • App installation ID, platform (iOS or Android), device model, operating system version and app version;
  • Push notification token and whether the device supports Google services;
  • Time of last use;
  • IP addresses in server access logs, used for security and rate limiting.

2.4 Sign-in information

SMS verification codes and sign-in tokens are stored only as hashes. A verification code is valid for 5 minutes and cannot be reused.

2.5 Information not collected

  • No background location tracking. Location is read once, only when the worker taps Clock in, Clock out or Switch site. The app does not track location in the background.
  • No access to contacts or SMS messages;
  • No advertising, no advertising or third-party analytics SDKs, and no sale of personal information;
  • No crash reporting service is currently installed.

3. Purposes of use

  • Recording attendance and confirming that clock-in takes place at the site;
  • Calculating hours, overtime and labour cost under the employer's rules;
  • Sending weekly hour summaries to the employer's accounting system (SW CRM) so the employer can process payroll;
  • Sending sign-in codes and service notifications, such as automatic clock-out and pay period close;
  • Keeping accounts and the service secure, and diagnosing faults.

4. Disclosure

Personal information is disclosed only as far as needed to provide the service:

RecipientInformation and purpose
The employer (company owners and administrators)Worker details and all attendance records, for workforce management and payroll.
SW CRM (the employer's accounting system)Employee ID, name and hour summaries, for payroll.
Google Firebase Cloud MessagingPush token and notification content, to deliver notifications to the app.
SMS providers (such as Chuanglan 253 international SMS)Mobile number and message text, to deliver sign-in codes, and notifications when push is unavailable.

These providers may be located outside New Zealand, including in the United States and China. FREEAI LIMITED gives them only the minimum information needed for their service and takes reasonable steps to protect it in line with Information Privacy Principle 12 (cross-border disclosure). Personal information is not disclosed to any other third party except where required by law.

5. Retention

  • Account and device information is kept while the account exists;
  • Attendance and time records are the employer's wage and time records and are retained for 6 years as required by the Employment Relations Act 2000 and the Holidays Act 2003, then deleted;
  • When a worker deletes their account, the mobile number, profile photo, device information and sign-in tokens are deleted immediately, and attendance records are retained as above. See Account deletion.

6. Security

Hatplan's servers and database are located in Auckland, New Zealand. Data is encrypted in transit over HTTPS. Back-office passwords are stored as bcrypt hashes; verification codes and sign-in tokens are stored as hashes. Sign-in and verification endpoints are rate limited. Each employer can access only its own company's data.

7. Access and correction

Under the Privacy Act 2020, individuals may request access to the personal information Hatplan holds about them and ask for inaccurate information to be corrected. Requests may be made to the employer or by email to jundongnz@gmail.com. FREEAI LIMITED will respond within 20 working days of receiving the request, after verifying identity. A complaint about the outcome may be made to the Office of the Privacy Commissioner (privacy.org.nz).

8. Children

Hatplan is intended for adults working on construction sites and is not directed at children.

9. Changes

Any change to this policy will be published on this page with a new effective date. Material changes will also be communicated through the app or the employer.

10. Contact

FREEAI LIMITED
10 Aoraki Crescent, Albany Heights, Auckland 0632, New Zealand
Email: jundongnz@gmail.com