About This Policy
Kinnavi (勤ナビ) is a business-to-business (B2B) workforce attendance platform provided by Scient Labs to employer organizations ("Client Companies"). The App is used by employees of our Client Companies to record clock-in and clock-out events during their work.
This Privacy Policy explains what personal information the App collects, how it is used, and how it is protected. It applies to employees ("you", "users") of Client Companies who have been provisioned a Kinnavi account by their employer.
Data Controller & Data Processor Roles
For most requests regarding your personal data (access, correction, deletion), you should contact your employer's HR or IT department, who will instruct Scient Labs accordingly. You may also contact Scient Labs directly using the details in Section 13; we will coordinate with your employer to fulfill your request.
Information We Collect
When you sign in, the App collects your email address and password to authenticate your identity. Your name and employee ID are retrieved from your employer's workforce records that have been registered in the Kinnavi platform.
When you clock in or clock out, the App collects your precise GPS location (latitude and longitude) for attendance verification purposes. Location is collected only at the moment you tap Clock In or Clock Out — the App does not continuously track your location in the background.
The App records the timestamp and location coordinates of each clock-in and clock-out event, linked to your employee ID.
The App stores the following data locally on your device in encrypted app-private storage (not accessible to other applications):
- Authentication tokens
- Your email address and password (encrypted) — used to automatically re-authenticate when your session expires, so you do not need to sign in repeatedly
- Your user ID and linked employee ID
- Current clock-in status
All locally stored data is permanently deleted when you sign out of the App.
Android Permissions
The App requests the following Android permissions:
You may revoke any permission at any time through your device's Settings. Revoking location permission will prevent the App from recording new attendance entries, but previously recorded attendance remains unaffected.
How Your Information Is Used
Your data is processed solely for the following purposes defined by your employer:
- Authenticating your identity and managing your session
- Recording attendance with location verification
- Displaying your attendance status within the App
- Automatically restoring your session after it expires
- Providing your employer with attendance data for workforce management, payroll, and statutory compliance
Data Sharing
Scient Labs does not sell, rent, or trade your personal information. Your data is shared only in the following circumstances:
- With your employer: Your attendance records, location at clock-in/out, and account data are accessible to authorized personnel at your employer (e.g., HR, administrators, line managers) for workforce management purposes.
- With Scient Labs personnel: Authorized Scient Labs staff may access your data solely for technical support, maintenance, and security monitoring of the Kinnavi platform.
- With legal authorities: If required by law, court order, or regulatory request, subject to applicable legal protections.
The App uses Google Play Services locally on your device to obtain location readings. No personal or location data is transmitted to Google through this usage.
Data Security
- In transit: All data exchanged between the App and the Kinnavi server is encrypted using HTTPS/TLS.
- On device: Authentication tokens and credentials are stored using Android's EncryptedSharedPreferences (AES-256), inside the app's sandboxed private storage.
- On server: Passwords are hashed using industry-standard algorithms. Access to production data is restricted to authorized personnel, protected by access controls and audit logging.
Despite these measures, no transmission or storage method is completely secure. We cannot guarantee absolute security but continuously work to protect your information.
Data Retention
- Local data: Retained on your device until you sign out, after which all stored tokens, credentials, and session data are permanently deleted.
- Attendance records: Retained on our server for the period specified in the contract between Scient Labs and your employer, typically aligned with Japanese labor law requirements (3–7 years).
- Account data: Retained while your employment relationship with the Client Company is active. After termination, data is retained or deleted according to your employer's instructions, subject to legal retention obligations.
Account & Data Deletion
You can immediately delete all locally stored data (tokens, credentials, clock-in state) from your device at any time by:
- Tapping "サインアウト" (Sign Out) inside the App, or
- Uninstalling the App, or
- Clearing app data through your device's Settings > Apps > Kinnavi > Storage
To request deletion of your personal data from our servers, submit a deletion request through our dedicated page:
https://privacy.scientlabs.dev/data-deletion/
Alternatively, email info@scient-labs.com with the subject line "Kinnavi Data Deletion Request" from your registered email address.
Requests are processed as follows:
- We will acknowledge your request within 7 business days.
- We will forward the request to your employer (the data controller) for authorization.
- Upon employer authorization, we will delete the requested data within 30 days.
- Certain data may be retained in anonymized form where required by Japanese labor law (e.g., aggregated attendance records for statutory periods) or for security audit logging. Such data cannot be used to identify you.
If you believe your deletion request has not been appropriately addressed by your employer, you retain the right to escalate to Japan's Personal Information Protection Commission (PPC).
Your Rights
Under Japan's Act on the Protection of Personal Information (APPI) and other applicable laws, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion or suspension of use of your data
- Request disclosure of the data we hold about you
- Lodge a complaint with Japan's Personal Information Protection Commission
Because your employer is the data controller, please first direct these requests to your employer's HR or IT department. If your employer instructs us to act, we will respond promptly. You may also contact Scient Labs directly (Section 13), and we will coordinate the request with your employer.
Children's Privacy
The App is designed exclusively for workplace use by employed adults (aged 18+) and is not intended for or directed at children. We do not knowingly collect personal information from individuals under 18. If we become aware that we have inadvertently collected data from a child, we will delete it promptly in consultation with the employer.
International Data Transfers
Kinnavi servers are located in Japan. If you access the App from outside Japan, your data will be transferred to and processed in Japan. By using the App, you consent to this transfer. We ensure adequate protection for any cross-border data transfers in compliance with APPI requirements.
Contact Us
For privacy questions or to exercise your rights, contact:
For requests regarding your personal data, you may also contact your employer's HR or IT department directly, as your employer is the data controller.
This Privacy Policy is governed by the laws of Japan. Any disputes shall be subject to the exclusive jurisdiction of the courts of Japan.