Codyn Attendance
Privacy policy · Codyn Attendance
Last updated: 18 July 2026
Who we are
Codyn Attendance is built and operated by Codyn (Atlas Lejon AB, Sweden). When your employer uses Codyn Attendance, the employer is the data controller for your personal data and Codyn processes it on the employer's behalf. Questions: hello@codyn.se.
What we process
Account data (name, email, phone, job title, profile photo where added). Attendance data (check-in and check-out times, workplace, an optional check-in photo where the employer enables it). Location: read only at the moment of check-in to confirm presence at the workplace, never continuously and never in the background. Leave data (requests, types, dates, optional supporting documents). Security data (device identifiers, login events, one-time login codes).
Why we process it
To register working time, manage leave, produce payroll bases, and keep accounts secure (device tracking, login alerts, optional email verification). We do not use the data for advertising and we never sell it.
App permissions
Camera: to scan the entrance QR code and take the check-in photo where required. Location: to verify you are at the workplace when checking in. Both are used only in those moments.
Where it is stored
Data is stored and processed with our infrastructure subprocessors: Supabase (database, authentication, file storage), Vercel (application hosting) and our email provider for system messages. Access is protected by row-level isolation per client workspace.
Retention
Data is kept for as long as your employer's agreement with Codyn requires it and is deleted or returned when the agreement ends, or earlier on the employer's instruction.
Your rights
Under the GDPR you may request access, correction or deletion of your personal data. Contact your employer (the controller) in the first instance, or hello@codyn.se, we help fulfil every request.
Changes
If this policy changes materially we update this page and note the new date above.