Privacy policy

App: Revo HR (it.linuxit.revohr)
Developer: Linuxit.it di Giacomo Santamaria – P.IVA IT04450430659, Via G. Palermo 2, 84129 Salerno (SA)
Contact: security@revolutionmarketing.it
Last updated: 26/10/2026

Revo HR is a work app: it is used by people who received an account from their company (their employer) to clock in and out and see shifts, absences, documents and payslips. The app only connects to the company's own management system; Linuxit.it di Giacomo Santamaria, which develops and publishes it, does not receive the data handled through the app, except when it hosts the management system on the company's behalf.

Who processes the data

Data controller: the company that created the account (the employer) . Requests about your rights go to them.
Data processor: Linuxit.it di Giacomo Santamaria, only when the company's system is hosted on its servers, under its contract with the company (GDPR art. 28).

What data

Profile: name, work email, employee number, work sites, job role.
Attendance: date, time, site and method of each clock-in (QR code or manual entry), shifts, leave and absence requests.
Documents and payslips made available by the company.
Linked device: an identifier generated by the app, model, operating system and app version, to recognise the phone and allow unlinking it.
Notification code (Firebase Cloud Messaging token), if notifications are allowed: used only to deliver them to this phone.

Device permissions

Camera: only to read the clock-in QR code. Images are neither stored nor sent.
Fingerprint or face: if enabled, unlocking is checked by the phone's system; the app only receives the result, never biometric data.
Network: to connect to the company system and send clock-ins made offline once the connection is back.
Notifications: asked after activation, for notices about shifts, documents, absences and deadlines. They can be refused or turned off in the phone settings: the app still works.
The app does not use location and does not read contacts, SMS or calendar.

What stays on the phone

The access token is kept in the system's secure storage. Clock-ins waiting to be sent are kept in an encrypted store and deleted once sent. Signing out or uninstalling the app deletes this data from the phone.

Notifications

Notifications start from the company's system, go through Linuxit.it di Giacomo Santamaria's relay service and are delivered to the phone by Google's Firebase Cloud Messaging (Google Ireland Ltd.), acting as the delivery service provider. They contain only a generic text (for example "A new document is available") and the notice type: never amounts, document contents, absence reasons or other personal data. The relay keeps neither the text nor the phone's code; its logs only hold send counts. The notification code is deleted when the phone is unlinked or the app uninstalled.

Sharing

Data travels encrypted (HTTPS) only between the app and the company's system, except for the notifications described above. It is not sold, not used for advertising and not shared with third parties. The app contains no ads and no third-party analytics or tracking.

Retention

The company keeps the data for as long as needed for the employment relationship and legal obligations (for example attendance records and payroll documents) . You can request account deletion at any time: see Account deletion.

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing (GDPR arts. 15-22) by contacting the company that gave you the account, or by writing to security@revolutionmarketing.it: we forward the request to the company. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Children

The app is meant for people at work and is not directed at children under 16.

Changes

Any changes are published on this page with the update date.