Data Deletion Request
This page describes the procedure for requesting deletion of user data collected and stored by the SenseZero mobile app (Android package: io.sensezero.app) and the sensezero.io services provided by SenseZero Inc.
1. App and Operator
- App name: SenseZero (WorkerManager)
- Android package name:
io.sensezero.app - Developer: SenseZero Inc. (CTO: Min-soo Joo)
- Head office address: 304-5, 1551 Dalgubeol-daero, Dalseo-gu, Daegu, Republic of Korea
- Enquiry email: service@sensezero.io
2. How to Request Data Deletion
Because of the nature of SenseZero as an industrial-safety and workforce-management platform, user accounts and data are managed under company-level contracts. To request data deletion, please use one of the following two channels.
Method A. Request via your company administrator (recommended)
- Contact the company administrator (company_admin) of your affiliated company, identifying yourself and requesting data deletion.
- The company administrator can deactivate or delete the relevant user account and worker record from the sensezero.io dashboard (
dashboard.sensezero.io).
Method B. Direct email request to the operator
- Subject: [Data Deletion Request] Full name / Registered email
- Include the following in the email body:
- Registered email address or user ID
- Affiliated company (if applicable)
- Scope of request: full deletion or partial data (e.g. health data, location history)
- Identity verification method (confirmation from company administrator, mobile phone verification registered at sign-up, etc.)
- Send to: service@sensezero.io
- After receipt, we will verify your identity and notify you of the outcome within a maximum of 7 business days.
3. Data that will be deleted
Upon a valid deletion request, the following user-identifying data and activity records will be permanently deleted.
| Data type | Description | Deletion |
|---|---|---|
| Account information | Email, name, phone number, password hash | Immediate deletion |
| Health and activity data | Heart rate, step count, stress index, etc. (Health Connect sync records) | Immediate deletion |
| Location data | BLE beacon-based worksite / zone entry history, GPS coordinates (if any) | Immediate deletion |
| Attendance and work history | Work shift records, daily attendance (work_shifts, attendance_daily, etc.) | Approved records subject to statutory retention obligations (see below) |
| Hazard photos | Worksite hazard photos and attached notes uploaded by the user | Immediate deletion |
| Alert and approval records | SOS, heatwave / cold-wave alert receipt records, approval chain | Anonymised and retained for statistics (personal identifiers removed immediately) |
| Device identifiers | FCM push token, assigned beacon ID mapping | Immediate deletion |
4. Statutory Retention Obligations (Exceptions)
Notwithstanding a deletion request, the following items may be retained for a specified period in accordance with applicable law, and will be automatically deleted upon expiry of that period.
| Item | Legal basis | Retention period |
|---|---|---|
| Approved attendance records, pay slips, and other workforce records | Article 42 of the Labour Standards Act (worker register, wage ledger, etc.) | 3 years |
| Electronic employment contracts | Electronic Documents Act / Labour Standards Act | 3 years |
| Industrial-safety reports and training-completion records | Enforcement Rules of the Occupational Safety and Health Act | 3–5 years |
| Payment and tax-related records (where applicable) | Framework Act on National Taxes, Value-Added Tax Act | 5 years |
During the statutory retention period, the relevant data is pseudonymised or anonymised so that the individual cannot be identified, and is destroyed immediately upon expiry of the retention period.
5. Automatic Deletion Policy
- Inactive members: Where 1 year has elapsed since the last login, an account-deactivation notice is sent without a separate request. If no objection is raised within a further 30 days, the account and identifying data are automatically deleted.
- User-uploaded content such as hazard photos: Anonymised or deleted after a maximum of 2 years from upload (may be shortened subject to the company administrator's policy).
6. Bulk Deletion by Company Administrator
Where a company administrator deactivates or deletes a worker's record due to contract termination, personnel transfer, or similar reasons, the same policy described herein applies.