The short version: MBS Attendance collects no personal data on behalf of myBad Studios. All employee data — names, photos, clock-in records, leave and payroll — is stored exclusively on your organisation's own WordPress server. We never see it, never store it, and never have access to it. Facial recognition runs entirely on your device.
1. Who we are
MBS Attendance is developed and published by Ryunosuke Jansen, trading as myBad Studios, based in Johannesburg, South Africa. References to "we", "us" or "our" refer to Ryunosuke Jansen / myBad Studios.
Contact: attendancesupport@mybadstudios.com
2. What data we collect
myBad Studios collects no personal data from users of this app.
MBS Attendance is a tool that connects to your organisation's own WordPress server. All data created or accessed through the app — employee names, photos, clock-in records, leave requests, payroll information — is stored on your organisation's server. Your organisation is the data controller for that information. myBad Studios is not involved in its storage, processing or transmission.
3. Device permissions
The app requests the following device permissions:
The app does not request access to Face ID, the Photo Library, Location, Contacts, Microphone, Bluetooth, or any other device capability beyond those listed above.
4. Facial recognition — important detail
MBS Attendance uses Apple's Vision framework to perform facial landmark detection and matching. This process runs entirely on the device. No facial geometry data, face maps, or biometric identifiers are transmitted to myBad Studios or any third party.
Employee photos used for recognition are downloaded from your organisation's WordPress server, processed locally into mathematical embeddings, and cached on the device. The photos themselves are not retained by the app beyond this process. The cached embeddings are stored locally and can be cleared from the app at any time.
This is not Face ID and does not interact with Apple's Secure Enclave or biometric authentication system in any way.
5. Data stored on your organisation's server
The following data is stored on your organisation's own WordPress server when using the app:
- Employee names, employee numbers and department assignments
- Employee photos (used for facial recognition enrollment)
- Clock-in and clock-out records with timestamps and method used
- Leave requests, approvals and balances
- Absence records
- Payroll data including pay rates, deductions and generated payslips
- POPIA consent records per employee
Your organisation is the data controller for all of the above. You should ensure your WordPress server complies with applicable data protection law including POPIA (South Africa) and any other regulations relevant to your jurisdiction.
6. Third party services
MBS Attendance communicates exclusively with your organisation's own self-hosted WordPress server. No data is sent to third-party analytics providers, advertising networks, crash reporting services or any other external service.
Apple frameworks used within the app:
- Vision — facial landmark detection (on-device only)
- CoreNFC — NFC badge reading
- AVFoundation — camera access
- Network — connectivity monitoring
These frameworks are provided by Apple and are subject to Apple's Privacy Policy.
7. POPIA compliance
MBS Attendance is designed to assist South African organisations in complying with the Protection of Personal Information Act (POPIA). The app includes an employee consent recording feature. However, your organisation as the data controller remains responsible for ensuring lawful basis for processing employee personal information, maintaining appropriate retention policies, and responding to data subject requests.
8. Data security
Communication between the app and your WordPress server uses HTTPS encryption. Authentication tokens are stored in the device's local storage and are not shared with myBad Studios. Locally cached face embeddings are stored in the app's sandboxed document directory and are not accessible to other apps.
9. Children's privacy
MBS Attendance is a business application intended for use by adults in a professional context. It is not directed at children under 13. Since we collect no personal data from any user, we collect no data from children.
10. Changes to this policy
If our data practices change in a meaningful way, we will update this policy and revise the effective date. Since we collect no data, significant changes are unlikely. We encourage you to review this page periodically.
11. Terms of use
Use of MBS Attendance is subject to Apple's Standard End User Licence Agreement, available at:
apple.com/legal/internet-services/itunes/dev/stdeula/
Questions or concerns?
Contact us at attendancesupport@mybadstudios.com. We will respond as quickly as we can.