IndAroma Hub — Privacy Policy

Last updated: June 4, 2026

Who this is for

IndAroma Hub is a private app for employees of IndAroma / Cake Affair Inc. (“we,” “us,” “the Company”). It is used by staff to view schedules, clock in and out, see pay information, request time off, message coworkers, and earn rewards. It is not a consumer or public app.

Information we collect

We collect only what the app needs to do its job:
  • Account & identity: your name, phone number, email, role/position, and (if you provide them) address and emergency contact. Your phone number is used to sign you in via a one-time text code.
  • Work information: your schedule, time-card punches, pay statements, time-off balances and requests, and rewards activity.
  • Messages & shared content: chat messages, voice notes, and photos you choose to send in the app.
  • Location (only at clock-in): if your manager enables on-site clock-in, the app checks your location at the moment you clock in to confirm you are at the work site. It does not track your location in the background or at any other time.
  • Bluetooth (only at clock-in): if beacon clock-in is enabled, the app briefly uses Bluetooth to detect the on-site beacon when you clock in. It is not used to track you.
  • Camera, microphone & photos: used only when you take a photo or record a voice message to send in chat.

How we use it

We use this information to operate the staff app — to schedule you, record hours, show your pay, verify on-site clock-ins, deliver internal messages and notifications, and run the rewards program. We use it for these employment and operational purposes only.

What we do NOT do

  • We do not sell your personal information.
  • We do not use your data for advertising, and we do not track you across other apps or websites.
  • We do not access your location or microphone in the background — only at the moment you use the related feature.

How it’s stored and who can see it

Your data is stored on our secure hosting infrastructure (Supabase) and is accessible to authorized Company managers and administrators for normal business purposes. We share data with service providers that help us run the app (such as hosting, text-message, and notification providers) only as needed to provide the service, and we do not share it with anyone else except where required by law.

Your mobile information and text messaging consent

No mobile information, mobile opt-in information, or text-messaging consent will be shared with, sold to, or provided to any third party or affiliate for marketing or promotional purposes. We do not share, sell, rent, or otherwise provide your mobile phone number or your messaging consent data to third parties, affiliates, lead generators, or data brokers.

What we use your phone number for. We use your mobile number only to send one-time login codes, and to send work schedule, shift, and urgent operational notifications related to your employment. Message frequency varies; typically 1–10 messages per week. Message and data rates may apply.

Who processes it. We share your number with service providers strictly to the extent they need it to deliver the messages described above — today that means Twilio Inc., our SMS and voice provider, and our hosting and notification providers. They act on our instructions and are not permitted to use your number for their own marketing. This limited processing is not a sale or a marketing disclosure.

Your choices. Reply STOP to any text to cancel, or HELP for help. You can also email contactus@indaroma.com to withdraw messaging consent or have your number deleted. Carriers are not liable for delayed or undelivered messages.

Messages and oversight

Chat is provided for work communication. Authorized administrators may, in limited and logged circumstances, review message content (including unsent messages) for legitimate business, safety, or compliance reasons. Routine messaging is private to the conversation participants.

Your choices

You control optional permissions (camera, microphone, location, Bluetooth, notifications) on your device and can turn them off in iOS Settings at any time — some features won’t work without them. To access, correct, or delete your personal information, contact us using the details below.

Data retention

We keep your information for as long as you are associated with the Company and as required for employment, legal, and accounting purposes, after which it is deleted or anonymized.

Children

IndAroma Hub is intended for employees and is not directed to children.

Changes

We may update this policy; we’ll revise the “Last updated” date above when we do.

Contact

Questions about this policy or your data? Email contactus@indaroma.com.