Everything PunchMe can do

Define office locations as radius circles or custom polygons. Employees can only check in within the configured boundary. Fake GPS / mock location is automatically detected and flagged.

On-device MobileFaceNet model processes a 192-dimensional face embedding. No face data leaves the device during verification. Cosine similarity threshold is admin-configurable. Liveness check prevents photo spoofing.

A timestamped selfie is taken at check-in and uploaded to secure cloud storage. Managers can review photos per attendance record. Provides tamper-proof visual proof of attendance.

Uses the device's built-in biometric auth (fingerprint, face ID). Works as an alternative to face recognition — ideal for companies that don't require face enrollment.

Configurable fallback when primary verification fails. All manual punches are automatically flagged in the dashboard for manager review.

Create multiple named shifts with start time, end time, and a configurable grace period. Employees arriving after grace period are automatically marked late. Shift assigned per employee or per department.

Set a cutoff time (e.g. 11:30 AM). Employees who haven't punched in by then are automatically marked absent — no manual intervention needed.

Configure a minimum hours threshold. Employees who work fewer hours than the threshold are automatically marked as half-day.

Set which days of the week the company operates. Check-in is blocked on non-working days and company holidays. Configurable per company.

Define company holidays in the admin dashboard. Attendance is automatically blocked on declared holidays, with a clear UI message to the employee.

All employees must be physically present in the defined office geofence to check in. GPS verification is mandatory.

GPS is optional (best-effort location capture, never blocks). Employees can punch in from anywhere.

Configure which days of the week are office days and which are WFH days — company-wide or per employee. The app automatically applies the correct verification mode based on the day.

Create paid and unpaid leave types (Casual Leave, Sick Leave, EL, etc.) with annual quotas per type.

Employees submit leave requests with date range, type, and reason directly from the mobile app.

Managers approve or reject requests from the web dashboard. Employees see status updates in real time.

Annual quota tracking per leave type. Remaining balance visible to the employee in the app.

Android's `isMocked` flag is checked on every location reading. Any punch from a mocked location is flagged with the `fake_gps` fraud code.

Eye openness and head pose are checked using ML Kit before face embedding is computed. Static photos and screen replays are rejected.

Attendance records are re-validated asynchronously via Cloud Functions. Records failing server-side validation are marked `geofenceVerified: false` and shown with a warning in the employee's app.

Each employee is bound to a single device ID. Attempts to punch in from a different device are flagged as `multiple_devices`.

All fraud signals (fake GPS, liveness fail, outside geofence, multiple devices) are visible in the manager dashboard with per-record detail.

Admin can configure a re-punch window (e.g., 30 minutes) after checkout. Within that window, employees can undo an accidental checkout. Full identity + geofence verification is re-run.

Every punch, re-punch, and fraud flag is recorded with timestamp, GPS coordinates, verification method, and face match score. Immutable Firestore records.

Firebase Cloud Messaging delivers punch confirmations, leave approval updates, and company notices to employee devices.

Company admins post notices visible to all employees inside the app. PunchMe can also broadcast platform-wide notices.