Terms of Service
Last updated: 28 August 2026
These terms govern your use of AttendFlow, a workforce and attendance management service provided by Infi-Tech Inc of P.O. Box 1286, Lilongwe, Malawi.
They apply whether you use the service as an employer running a workspace, as a person recorded in somebody else's workspace, or as a partner in our referral programme. Where a clause applies to only one of those, it says so.
By creating an account, accepting an invitation, or continuing to use the service, you agree to these terms. If you are agreeing on behalf of an organization, you confirm you are authorised to bind it.
1.Definitions
The following words carry the meaning given here wherever they appear in these terms.
- Service
- The AttendFlow platform in all its forms — the web console, the marketing site, the mobile application, the public API, and any attendance capture device software we supply.
- We, us, our
- Infi-Tech Inc, the provider of the Service.
- Organization
- A workspace created in the Service, holding one employer's people, structure and records. Also called a tenant. Each Organization's data is isolated from every other Organization's at the database level.
- Customer
- The legal entity that owns an Organization and is responsible for paying for it. Usually the employer.
- Owner
- The user account that created an Organization, or one later designated as such. An Owner holds full administrative rights over that Organization.
- User
- Any individual with an account in the Service, whether an Owner, an administrator, an employee or a Partner.
- Employee Record
- The data an Organization holds in the Service about a person it employs or engages — identity, role, branch, department, attendance, leave and related records.
- Customer Data
- Everything a Customer or its Users put into their Organization, including Employee Records, attendance data, documents and configuration. Customer Data belongs to the Customer.
- Account Data
- The information we hold about a User as a user of the Service — name, email address, phone number, credentials, sessions, and the security and audit events attached to them.
- Attendance Data
- Records of presence produced by the Service, including check-ins and check-outs, their timestamps, the branch or location recorded against them, and where enabled the coordinates, device and verification evidence captured with them.
- Subscription
- A Customer's paid entitlement to use the Service for one Organization, on a plan, for a billing period.
- Plan
- A priced tier of the Service. Plans are defined by employee-count band and are configured by us rather than fixed in these terms.
- Trial
- A time-limited entitlement to use the Service without payment, granted automatically to a new Organization where we offer one.
- Partner Programme
- The referral programme under which a Partner may earn Commission by introducing Customers or other Partners to the Service.
- Partner
- A User admitted to the Partner Programme. A Partner holds one account with one or both capabilities below; there is no separate Partner account and no second login.
- Affiliate
- A Partner capability that earns Commission on the collected subscription revenue of Customers the Partner introduced.
- Recruiter
- A Partner capability that earns Commission on the collected subscription revenue attributed to Affiliates the Partner introduced.
- Commission
- An amount that becomes owed to a Partner under the Partner Programme once the underlying subscription payment has been received and confirmed by us.
- Commission Period
- The number of paid subscription months of one Customer for which a given Partner relationship earns Commission. Set by the Plan in force when the Subscription was created.
- Wallet
- The per-currency record of a Partner's Commission position, derived entirely from a double-entry ledger. A Wallet is a record of what is owed, not a store of money we hold on your behalf as a deposit.
- Available Balance
- The part of a Wallet that has been posted, is not held against a pending withdrawal, and may be requested for payout.
- Withdrawal
- A Partner's request to be paid their Available Balance to a nominated destination, and the payment made in response to it.
- Operator Organization
- Our own tenant in the Service, in which the Partner Programme is administered. A Partner holds a membership in it so that the partner screens resolve. It is not a workspace of theirs and grants no access to any Customer's data.
2.The Service
The Service records who works for an Organization, when they were present, and what follows from that — attendance, corrections, leave, structure and reporting.
We may add, change or withdraw features. Where a change removes a capability a Customer is actively relying on, we will give reasonable notice before it takes effect. Adding features, fixing defects and improving security need no notice.
The Service is offered as software. We do not provide payroll, tax, employment-law or human-resources advice, and nothing the Service calculates or displays is a substitute for your own judgement or professional advice.
3.Accounts and eligibility
You must be at least 18 years old to hold an account, and you must give accurate information when you create one.
An account belongs to one person. Credentials must not be shared. You are responsible for everything done under your account, and you must tell us promptly if you believe it has been compromised.
We verify email addresses before an Organization becomes usable. Until the Owner's address is confirmed, the Organization exists but cannot be operated.
4.Organizations and separation between them
Each Organization is a separate tenant. Separation is enforced in the database itself, not only in the application, so a request made in one Organization's context cannot read another's rows.
You must not attempt to reach data belonging to an Organization you have not been granted access to, by any means, including probing identifiers, manipulating requests, or using credentials that are not yours.
A User may belong to more than one Organization and switch between them. Membership of one grants nothing in any other.
5.Your responsibilities as a Customer
You decide what data goes into your Organization and why. In data-protection terms you are the controller of Customer Data and we are your processor; we process it to provide the Service and on your instructions.
Because you decide, these obligations are yours and not ours:
- Having a lawful basis to record and process each person's data, and telling them what you record and why.
- Obtaining any consent the law requires before you enable a feature that needs it — location capture and face verification in particular.
- Keeping Employee Records accurate, and correcting or removing them when you should.
- Granting and revoking access appropriately. Roles and permissions are yours to configure; we cannot know who in your Organization ought to see what.
- Responding to requests from your own people about their data. We will assist you, but the obligation is the employer's.
6.Attendance capture
The Service can record presence in several ways, and which are available to your people is your configuration, not our default.
- Scanning a QR code, on a person's own device or on a shared device you operate.
- Recording the coordinates at which a scan happened, where you enable location capture, so that a check-in can be checked against a branch or office location.
- Delegated scanning, where you permit one employee to record attendance on another's behalf. Every delegated scan records who performed it.
- Face verification, where you enable it and where the person has given consent, to confirm that a scan was made by the person it claims.
7.Location and biometric features
Location capture and face verification are optional, are off unless enabled, and are subject to additional conditions.
Face verification processes biometric data. Where it is offered, it operates on explicit, informed, freely given and withdrawable consent from each individual, recorded by the Service; a person who declines or withdraws consent must be given a non-biometric way to record attendance, and you must provide one. We publish separate biometric privacy, retention and data-subject-rights documentation covering how that data is handled.
You must not use location data to track individuals outside the purpose you told them about, and you must not enable biometric verification for anyone from whom consent has not been obtained.
We may withhold, gate or withdraw either feature — for a region, for an Organization, or entirely — where we judge that the legal or accuracy conditions for offering it are not met.
8.Acceptable use
You must not, and must not permit anyone else to:
- Use the Service unlawfully, or to record or process data you have no right to.
- Attempt to breach, test or circumvent its security, isolation or access controls without our written permission.
- Falsify attendance — including recording presence for a person who was not there, defeating location or verification checks, or tampering with records after the fact.
- Interfere with the Service's availability, or place load on it designed to degrade it for others.
- Reverse engineer, resell, sublicense or white-label the Service without our written agreement.
- Upload malware, or content that is unlawful, defamatory or infringing.
9.Plans, fees and billing
Fees are quoted and charged in Malawi Kwacha (MWK) and are stated per Organization per month.
The price of a Plan is determined by the employee-count band the Organization falls into. Current bands and prices are published in the Service and on our pricing page; they are configuration, not part of these terms, and may be changed as clause 11 provides.
Subscriptions are billed in advance. An invoice is issued for each billing period and payment is due on the terms stated on the invoice.
Fees are non-refundable except where the law requires otherwise or we agree in writing. Cancelling part way through a paid period does not create a refund for the remainder; it stops the next renewal.
You are responsible for any taxes, levies or bank charges that apply to your payment other than taxes on our income.
10.Trials, non-payment and suspension
Where we offer a Trial, it runs for the period stated when the Organization is created and requires no payment. At the end of a Trial you must choose a Plan to continue using the Service.
If an invoice is not paid when due, we may suspend the Organization after giving notice to the Owner. Suspension blocks use; it does not delete anything. Paying the outstanding amount restores access.
We may suspend immediately and without notice where there is a security risk, a legal requirement, or conduct that threatens the Service or another Customer.
11.Changes to pricing
We may change Plan prices and bands. A change takes effect for your Organization at the start of your next billing period, and we will give you at least thirty days' notice before it does.
A Subscription keeps the pricing and commission configuration that applied when it was created until it is changed or renewed under a new one. We retain historical pricing rather than overwriting it, so what you were charged and why remains checkable.
If you do not accept a price change, you may cancel before it takes effect.
12.The Partner Programme
Clauses 12 to 17 apply only to Partners. Nothing in them applies to a Customer who is not one, and nothing in them gives a Partner any access to a Customer's data.
Admission is at our discretion. Applying does not create an entitlement, and we may decline an application without giving reasons.
A Partner may hold the Affiliate capability, the Recruiter capability, or both. They are independent: holding one does not confer the other, and each earns separately under its own terms. A Partner who holds both still has one account, one identity and one Wallet per currency.
A Partner is an independent contractor. Nothing in the Partner Programme creates employment, agency, partnership or joint venture, and a Partner has no authority to make representations, promises or commitments on our behalf.
13.How Commission is earned
Commission is earned on collected subscription revenue. It is not earned on a registration, a signature, a trial or an invoice.
The sequence is: the Customer subscribes, an invoice is raised, the Customer pays, we confirm the payment, the Subscription becomes active, and only then does Commission become eligible and post to the Partner's Wallet.
If the Customer does not pay, no Commission arises. If a payment fails, no new Commission is posted. If a payment is later refunded or reversed, the corresponding Commission is reversed under clause 15.
The Commission amount and the Commission Period are set by the Plan configuration in force when the Subscription was created, and are visible to the Partner in the Service. Once the Commission Period for a relationship has run, no further Commission arises from that Customer for that Partner unless a new agreement or campaign provides otherwise. Commission already earned remains recorded and payable.
14.Attribution and fair dealing
A Customer is attributed to at most one Affiliate. Attribution is made when the Customer registers, from the referral code they arrived with, and is not transferable afterwards.
The following are not eligible for Commission, and attempting them is a breach of these terms:
- Referring yourself, your own employer, or an Organization you own or control.
- Claiming a Customer already attributed to another Partner, or one already known to us through another channel.
- Creating Organizations, accounts or subscriptions that exist to generate Commission rather than to use the Service.
- Registering on a Customer's behalf in order to insert your own code, or altering somebody else's referral link.
- Misrepresenting the Service, its price, or your relationship with us in order to obtain a referral.
15.Reversal, suspension and forfeiture
Where a payment that gave rise to Commission is refunded, charged back or reversed, we reverse the corresponding Commission. If it has not yet been paid out, it is released from the Wallet. If it has already been paid out, we record a recovery and may set it against future Commission.
Ledger entries are never deleted or silently edited. A reversal is recorded as its own entry against the original, so the history of a Wallet remains complete and auditable.
We may suspend a Partner where we reasonably suspect a breach of clause 14. A suspension stops new Commission accruing. It does not take back what has already been earned: the Available Balance remains the Partner's and remains withdrawable, and taking it back would require a separate, recorded reversal under this clause.
We may terminate a Partner's participation for a proven breach of clause 14, and may withhold Commission that arose from the conduct in question.
16.Wallets and withdrawals
A Wallet records a Partner's position in one currency and is derived from a double-entry ledger. Every figure shown — pending, available, held, total — is a sum of posted entries rather than a stored number, so it reconciles to the ledger by construction.
A Partner may request a Withdrawal of their Available Balance, subject to the conditions we publish in the Service. Those include a minimum withdrawal amount, a verified payout destination, and any limits or checks in force at the time. The conditions are configuration and may change; the ones in force are shown to you before you request a payout, and a request that would breach one is refused with the reason.
Requesting a Withdrawal places a hold on the amount so it cannot be requested twice. The hold is released if the request is cancelled or refused.
Payouts are made to bank accounts and to the mobile money services we support at the time. A Partner is responsible for the accuracy of the destination they nominate; we are not liable for a payment sent correctly to details a Partner gave us incorrectly.
A Partner is responsible for their own taxes on Commission received.
17.Changes to the Partner Programme
We may change Commission rates, Commission Periods, bonuses, withdrawal conditions and programme rules.
A change applies to Commission arising after it takes effect. It does not retrospectively alter Commission already earned or the Commission Period already attached to an existing Subscription.
We may close the Partner Programme on reasonable notice. If we do, Commission already earned remains payable and Wallets remain withdrawable.
18.Intellectual property
The Service, its software, design and documentation are ours and remain ours. These terms grant you a limited, non-exclusive, non-transferable right to use the Service for its purpose while your Subscription is current, and nothing more.
Customer Data is and remains yours. You grant us only the rights needed to host, process, transmit, back up and display it in order to provide the Service to you, and to comply with the law.
If you send us feedback or suggestions, we may use them without obligation to you.
19.Confidentiality
Each of us may learn things about the other that are not public. Each will use the other's confidential information only to perform these terms, and will protect it with at least the care it uses for its own.
This does not apply to information that is public through no fault of the receiver, was already known to it, or must be disclosed by law — and where the law compels disclosure, the disclosing party will tell the other unless it is forbidden from doing so.
20.Security and incidents
We apply role-based access control, per-tenant isolation at the database, encryption in transit and at rest, and audit logging of security-relevant events. Access to production data is restricted and recorded.
No system is perfectly secure. If a breach affects your Customer Data, we will tell you without undue delay, with what we know, what we are doing, and what you may need to do.
You must tell us promptly about any vulnerability or suspected compromise you become aware of, and give us a reasonable opportunity to address it before disclosing it publicly.
21.Availability and support
We aim for high availability but do not guarantee uninterrupted service. Planned maintenance is announced where practicable; emergency maintenance may not be.
Support is provided by email and through the channels published in the Service, during business hours in Malawi. Where a separate service level agreement is signed, that agreement governs availability and response times and prevails over this clause.
Except as these terms expressly state, the Service is provided as is and as available, and we exclude all other warranties to the fullest extent the law allows.
22.Limitation of liability
Neither of us limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited.
Subject to that, we are not liable for indirect or consequential loss, for loss of profit, revenue, goodwill or anticipated savings, or for loss or corruption of data to the extent it would have been prevented by backups you were responsible for keeping.
Subject to that, our total liability arising out of or in connection with these terms in any twelve-month period is limited to the fees you paid us for the Service in the twelve months before the claim arose. For a Partner, it is limited to the Commission we paid or owed you in that period.
These limits apply however the liability arises, whether in contract, tort, statute or otherwise.
23.Indemnity
You will indemnify us against claims, losses and reasonable costs arising from your use of the Service in breach of these terms, from Customer Data you had no right to process, or from your failure to obtain a consent clause 5 or 7 required of you.
24.Termination
You may cancel a Subscription at any time, effective at the end of the current billing period.
Either of us may terminate for material breach that is not remedied within thirty days of written notice. We may terminate immediately where a breach cannot be remedied, or where continuing would put us or another Customer at legal or security risk.
On termination your right to use the Service ends. Clauses that by their nature survive — definitions, intellectual property, confidentiality, limitation of liability, indemnity, governing law — survive it.
25.What happens to your data afterwards
You may export Customer Data at any time while your Organization is active, using the export facilities in the Service.
After termination we keep Customer Data available for export for thirty days. After that period we may delete it, and after deletion we will not be able to recover it for you.
We may retain records we are required to keep — invoices, payment records, ledger entries and audit logs — for as long as the law requires, and we retain anonymised or aggregated data that cannot identify you or your people.
Financial records are never deleted on request. A ledger that can be edited is not a ledger.
26.Changes to these terms
We may change these terms. The date at the top records when they were last changed.
For a change that materially reduces your rights or increases your obligations, we will give at least thirty days' notice to the Owner's registered email address before it takes effect, and you may cancel before it does. Other changes take effect when published.
Continuing to use the Service after a change takes effect means you accept it.
27.General
These terms, together with any order form, service level agreement or data processing agreement signed between us, are the whole agreement between us about the Service.
If a clause is held unenforceable, the rest stands and the clause is read as narrowly as needed to make it enforceable.
A failure to enforce a term is not a waiver of it.
You may not assign these terms without our written consent. We may assign them to a successor of our business.
Neither of us is liable for a failure caused by something outside our reasonable control, including power and network failure, natural events, and acts of government — except an obligation to pay.
28.Governing law and disputes
These terms are governed by the laws of the Republic of Malawi.
We will try in good faith to resolve any dispute by discussion first. Failing that, the courts of Malawi have exclusive jurisdiction.
29.Contact
Infi-Tech Inc · P.O. Box 1286, Lilongwe, Malawi
Email: info@infi-tech.net · Telephone: +265 993 585 213
Questions about these terms, about a Subscription, or about the Partner Programme should go to that address.
This document describes how AttendFlow operates and the basis on which it is offered. It is provided for information and does not constitute legal advice. If any part of it conflicts with a signed agreement between you and Infi-Tech Inc, that agreement prevails.