Privacy Policy

Last updated: 24 September 2026

Niu People is workforce and attendance software used by employers to record staff attendance, leave and payroll. This policy explains what personal data the Niu People service and its attendance kiosk app collect, why, and how it is handled.

Who controls your data. If you are an employee, your employer decides what data is collected about you and why — they are the data controller. Niu People processes that data on the employer's behalf as their service provider. For questions about your own record, contact your employer's HR first; you can also reach us at haseeb@designed.studio.

What we collect

Data	Why
Name, employee code, job title, branch/company	To identify who is clocking in and show attendance to managers.
Civil ID / passport number, nationality, hire date (where the employer enters them)	Employment records and Kuwait labour-law compliance (contracts, indemnity, residency expiry).
Clock-in / clock-out times, and which kiosk device was used	To produce attendance, schedules, leave and payroll.
Face images — a reference photo, plus two photos taken at each punch	To confirm the person clocking in is the right employee, and to stop one person clocking in for another.
Approximate or precise device location (only where the employer enables on-site check-in)	To confirm attendance happened at the workplace.
Dashboard account details (name, email) for managers and HR users	To sign in to the Niu People dashboard.

How face verification works

When an employee clocks in at a kiosk, the app takes two photos — one looking at the camera and one blinking. The blink check is a liveness test: where your employer has switched it on, a punch with no blink is refused, so a photograph of someone cannot be used to clock in. The two images are then compared against that employee's stored reference face.

Face comparison is performed by Amazon Web Services (AWS) Rekognition, which processes the images to return a similarity score. We do not use face data to identify people outside your workplace, and it is never used for advertising.
The proof photos taken at each punch are deleted automatically after 2 days. They exist only so HR can verify a disputed or suspicious punch.
The reference face is kept while the employee is enrolled, so future punches can be matched. It is removed when the employee's face enrolment is reset or their record is deleted.
Only a match score and whether the liveness check passed are kept with the attendance record.

Clocking in by face alone

Some employers switch on face-only clock-in, where staff simply look at the camera instead of entering an employee code. Recognising someone without a code means searching all enrolled faces at that workplace rather than checking one, so it needs a little more:

For each enrolled employee, AWS Rekognition creates a face template — a set of numbers describing facial geometry, not a picture. It is stored in a collection held by AWS. A separate collection is kept for each employer, so a face can never identify someone at a different company.
The template is deleted when the employee's face enrolment is reset or their record is deleted.
A face is only accepted when the match is strong and clearly better than the next closest person. Anyone the camera cannot confidently recognise is asked for their employee code instead — nobody is locked out, and the system does not guess.
Templates are used only to recognise staff clocking in at their own workplace. They are never used to identify people elsewhere, are not shared, and are not used for advertising.

What we do not do

We do not sell personal data, and we do not share it with advertisers or data brokers.
We do not use face data for anything other than verifying identity at clock-in for the employer.
The app is for workplace use and is not directed at children.

Who we share data with

Data is visible to your employer's authorised managers and HR users. Beyond that, we share only with service providers that run the service on our behalf:

AWS — face comparison (Rekognition) and cloud infrastructure.
Our hosting provider, for the servers and database that run Niu People.

We may also disclose data where we are legally required to, for example in response to a lawful request from a competent authority.

Security and retention

Data is transmitted over encrypted connections (HTTPS). Kiosk devices authenticate with a device-specific token that an administrator issues and can revoke at any time. Access to the dashboard is restricted by role, so managers only see the staff and branches they are permitted to.

Attendance, payroll and employment records are kept for as long as your employer needs them, and for as long as Kuwait labour law and tax rules require records to be retained. Face proof photos are the exception — they are deleted automatically after 2 days, as described above.

Your rights

You can ask to access, correct or delete your personal data. Because your employer controls your employment record, requests are normally handled through them — but you can contact us directly and we will help, and act on instructions from the employer who holds the record.

See Data & Account Deletion for how to make a deletion request and what can and cannot be deleted.

Changes to this policy

If we change how data is handled, we will update this page and the "last updated" date above.

Contact

Questions, requests or complaints about privacy: haseeb@designed.studio.

Niu People · Terms of Service · Privacy Policy · Data Deletion
Questions: haseeb@designed.studio