hrapp.lk

Privacy policy

Last updated 6 November 2026

This is a working draft for review by a lawyer before launch. It describes how HRApp.lk handles personal data under Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

Who is responsible for the data

Your company is the controller of the employee data it puts into HRApp.lk. We process that data on your behalf, only to provide the service. For your own account details, such as your name and email, we are the controller.

What we collect

Account details (name, email, mobile number), company details, and the employee records, attendance, leave and payroll data your company adds. If clock-in with GPS or a selfie is turned on, we store the location or photo taken at the moment of clock-in, and nothing else.

How we use it

To run the service, send the emails and SMS messages you ask for, take payment through PayHere, and keep the service secure. We do not sell data, and we do not use your employee data to advertise.

Your rights

You can see, correct, export or delete your data. Employees should contact their employer first. To reach us, email [email protected].