Privacy policy

Effective 23 October 2026. Hudur is a staff attendance service run by Iconiers Tech, Muscat, Oman. This page explains what Hudur collects, why, and who sees it.

What we collect

Account details. The workplace name, timezone and working hours you set, and the name and email of each admin account.

Staff records. What your workplace admin adds: staff names, staff numbers, departments and card codes. The workplace enters these; Hudur does not collect them from anywhere else.

Attendance records. Every check-in: the date, the time, the method used and the device. Also leave, holidays and confirmations.

Failed check-in attempts. When a scan does not match, the input and the result are logged so wrong PIN habits do not survive the first week.

Messages to us. What you send through the contact form or BigOwl, including the name or email you choose to give.

Fingerprints are never stored

Fingerprint check-in uses the check-in device's own fingerprint sensor. The fingerprint stays on that device. Hudur stores only a passkey credential, a key that proves the device checked someone in, and no fingerprint image ever reaches us. Fingerprint is off until the super admin switches it on for a workplace.

PINs and passwords

Staff PINs and admin passwords are stored hashed, never in plain text. Workplace admins never see a staff PIN, they can only reset it.

What we use it for

Running the attendance service: the today page, reports, the daily digest email and support. Nothing else.

Who can see your records

Only the admins of your own workplace see your staff's attendance. Hudur staff cannot browse your records. We never sell your data and never use it for advertising.

Sharing

We share only what is needed to run the service, for example your email provider delivering your digest, and any provider helping us take payments. We do not sell or share data with advertisers.

Cookies

Hudur sets one cookie to keep you logged in. No advertising or tracking cookies.

Security

Records travel over HTTPS. Passwords and PINs are hashed. Your records live on Hudur's hosted server.

How long we keep data

While your account is active. You can export every report at any time, and you can ask us to correct or delete your records or close your account entirely through the contact page.

Changes

If this policy changes, the new version is posted on this page.

Contact

Iconiers Tech, Muscat, Oman. Reach us through the contact page.