Privacy Policy — Metro InHouse

Metro InHouse (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy applies to the Metro InHouse mobile application (“App”), developed and operated by METRO ZONA HOSPITALITY, LLC. It explains how we collect, use, store, and protect information when you use the App. It is designed to be transparent and understandable for both employers/organizations and staff members.

No self-service account creation. Metro InHouse is a business-to-business (B2B) workforce-management application used by hotels and organizations to manage their staff. The App does not provide a public sign-up or self-registration feature. Staff accounts are created and managed exclusively by an authorized representative of the employer/organization (e.g., a General Manager, Regional Manager, or Administrator) through the Metro InHouse back-office system. Staff members receive their login credentials from their employer/organization and use them only to sign in to the App — they cannot independently create their own Metro InHouse account.

1. Information We Collect

a. Personal Information

Name, email address, phone number, and job role (e.g., Housekeeper, Maintenance, Admin, QA).
Login credentials (email address and password) issued by your employer/organization administrator.
Biometric authentication (optional) – if you enable biometric sign-in, authentication is performed entirely using your device’s operating-system biometric authentication mechanism. Metro InHouse does not collect or store raw biometric data (such as fingerprint or facial-recognition templates) — only a device-generated success/failure confirmation is used to complete sign-in.
Location data – GPS coordinates captured at clock-in/clock-out for attendance verification.

b. Usage & Activity Data

Task status updates, shift logs, and user actions within the App.
Reports and activity logs (accessible to managers and administrators).
Expense records (retained even if a staff account is deleted).

c. Device & Technical Data

Device type, operating system, app version, IP address.
Crash logs and performance data.

d. Media Uploads

Photos, videos, or attachments uploaded for QA, reporting, and maintenance proof.
Voice messages recorded and sent through in-app staff chat.

Background location, while clocked in. While a staff member is actively clocked in to a shift, the App may check location periodically in the background — including when the App is closed or not in active use — solely to detect when the staff member leaves the assigned hotel/property boundary, so the shift can be automatically ended (clocked out). Background location access is never active outside of an actively clocked-in shift, and is not used for any purpose other than this automated clock-out.

2. How We Use Your Information

Verify identity and manage staff accounts provisioned by your employer/organization.
Assign, manage, and track housekeeping and maintenance tasks.
Record task completion with optional location check-ins.
Automatically end (clock out) an active shift when a staff member leaves the assigned hotel/property boundary.
Enable communication through in-app chat and notifications (via Firebase).
Deliver shift reminders, alerts, and password-reset codes by SMS or voice call.
Store media files (photos/videos/voice messages) securely on AWS S3.
Provide managers with activity reports and performance insights.
Maintain security, prevent fraud, and ensure authorized access.
Improve app functionality and user experience.

3. Information Sharing

We do not sell or rent personal data. Information is shared only in these cases:

Employers/Organizations – Your employer, hotel owner, or manager (who created your account) may access your reports, logs, and related information.
Service Providers – Trusted third parties under strict confidentiality, including:
- AWS S3 (for media file storage).
- Firebase (for messaging, push notifications, crash reporting, and chat).
Legal Requirements – If required by law or valid legal request.

4. Data Security

We take security seriously and apply industry-standard practices:

Encryption of data in transit and at rest.
Secure login authentication.
Regular security updates and audits.

Important: No system is 100% secure. Users should also take precautions, such as using strong passwords and protecting their devices.

5. Data Retention & Deletion

User data is retained only as long as necessary for the purposes described.
If a staff member leaves, their account and personal data will be deleted, except for expense history (retained for compliance and record-keeping).
Because accounts are provisioned by your employer/organization, there is no self-service in-app account deletion. Users may request account deletion at any time through their employer/organization administrator, or by contacting us directly at the email below.

6. Your Rights

Depending on your location, you may have the following rights:

Access – Request a copy of your data.
Correction – Update or fix inaccurate data.
Deletion – Request account removal.
Restriction/Objection – Limit or object to certain processing.
Withdrawal of Consent – Where applicable, withdraw previously given consent.

Requests can be made through your employer/organization administrator or by contacting us.

7. Children’s Privacy

The App is not intended for users under 16. We do not knowingly collect personal data from children.

8. International Compliance

Metro InHouse operates in Phoenix, Arizona, USA. We comply with:

GDPR (General Data Protection Regulation – EU/EEA).
CCPA (California Consumer Privacy Act – applicable to US users).

9. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via in-app notices, emails, or updated effective dates.

10. Contact Us

For questions, requests, or concerns about this Privacy Policy, please contact us at:

Email: fahim@spacecats.tech