Milestone Aluminium · ESS Mobile

Privacy Policy

Last updated: 5 May 2026

This Privacy Policy describes how Milestone Aluminium (“we”, “us”, “our”) collects, uses and protects the information of users (“you”) of the Milestone ESS Android application (“the App”). The App is provided exclusively to active employees and authorised personnel of Milestone Aluminium and its group companies.

1. Information We Collect

We collect only the information needed to operate the App.

Account information

• Employee ID, name, designation, department and work email
• Profile photo (if you upload one)
• Authentication tokens issued by our backend

Operational data

• Attendance check-in / check-out events
• Approximate and precise GPS location at the moment of check-in, check-out or travel arrival (used solely to verify proximity to a registered company site or travel destination)
• Leave, expense, travel, transfer and bulk check-in requests you create or approve
• Receipts and supporting documents you attach to expense claims
• Push notification token (Firebase Cloud Messaging) so we can deliver alerts
• App version, device model and operating system version (for diagnostics and to notify you when a newer version is available on the Google Play Store)

Camera

The App requests access to your device camera only when you choose to capture an image — specifically to (a) take a profile photo or (b) photograph a receipt while filing an expense claim. Camera access is invoked on demand each time and is never used in the background. Captured images are uploaded to our backend strictly for the purpose for which you captured them; we do not record video, scan QR codes, or use the camera for any other reason.

Photos & media

When attaching a profile photo or expense receipt, you may alternatively pick an existing image from your device using the Android system Photo Picker. The App receives access only to the single image you explicitly select; we do not request the READ_MEDIA_IMAGES or READ_EXTERNAL_STORAGE permissions and have no ability to read your photo library or other files. The selected image is uploaded to our backend solely to be attached to the expense claim or profile you were filling out.

We do not collect: contacts, SMS, call logs, microphone audio, browsing history or advertising identifiers. The App contains no third-party advertising.

2. How We Use Your Information

• Authenticate you and authorise access to features based on your role and site assignments
• Validate site-based attendance via geofencing
• Route leave, expense, travel and other workflow requests to the correct approver
• Deliver push and email notifications for approvals, rejections, birthdays and company announcements
• Diagnose crashes, prevent abuse and improve the App

3. Legal Basis

The App is provided as a workplace tool in connection with your employment. Your use of the App is processed on the basis of (a) your employment contract, (b) our legitimate business interest in operating an employee self-service platform, and (c) our legal obligations relating to attendance, payroll and expense record-keeping.

4. Data Sharing

We do not sell your personal information. We share it only with:

• Our authorised internal HR, payroll and operations teams
• Service providers that host or transmit the data on our behalf (Firebase Cloud Messaging by Google for push notifications; our hosting provider for the backend at portal.milestonealuminium.com)
• Government or regulatory bodies where required by law

5. Data Retention

Operational records (attendance, leave, expense, travel) are retained for the duration of your employment and for the period required by applicable employment, tax and audit regulations. Push tokens are deleted when you log out or uninstall the App.

6. Security

• All communication with our backend uses HTTPS (TLS).
• The App supports biometric / device-credential lock.
• Authentication tokens are stored in encrypted local storage.
• Access to backend data is restricted by role.

7. Your Rights

Subject to applicable law, you may request to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent for non-mandatory processing
• Receive a copy of your data in a portable format

To exercise these rights, contact your HR administrator (see Section 9).

8. Children

The App is not intended for use by anyone under 18 and is not made available to the general public.

9. Contact

Milestone Aluminium
Email: hr@milestonealuminium.com
Website: https://portal.milestonealuminium.com

10. Changes

We may update this policy from time to time. The “Last updated” date above will reflect any changes. Continued use of the App after an update constitutes acceptance of the revised policy.