Live QR attendance with anti-cheat, GPS, selfie verification, and WhatsApp parent alerts. Trusted by schools, universities, tahfiz centres, and tuition centres across Malaysia.
From classroom QR display to parent alert in under a minute.
Pick a class, hit Start. System generates a dynamic QR that rotates every 60 seconds + a secret code shown on screen.
Open phone camera, scan, enter Student ID + Secret Code. Optional GPS + selfie if the class requires it. No app install needed.
Absent students are auto-marked. Lecturer can update to MC or Absence with Reason. Every action audit-logged.
Only ABSENT / MC / Reason students trigger a parent notification. Never for ATTEND. Email fallback if WhatsApp fails.
Built on Laravel 12, ready for thousands of students per institution.
Rotating QR tokens (default 60s). Pair with a verbal secret code. Static QR fraud — eliminated.
Set lat/lng + radius per class. Submissions from outside the perimeter get flagged or blocked.
Optional in-browser camera capture per class. Stored as evidence for manual admin review.
Detects duplicate device fingerprints and IP addresses within a configurable window. Strict mode auto-rejects.
Five providers supported — Fonnte, Wablas, WaSenderApi, WA Cloud API, or your own gateway. Email fallback built in.
Every institution gets isolated data, its own admin, and quota limits enforced by the plan they subscribe to.
30-day attendance trends, status mix, top absent students, class averages. All rendered in real time.
Token-based REST API for lecturer / parent / student apps. Outbound webhooks with HMAC for your own automations.
100% bilingual across the admin panel, parent portal, scan flow, and notification templates. Dark mode supported.
Whether 30 students or 30,000 — the workflow is the same.
No. Students just open their phone camera, scan the QR code on the projector or screen, and enter their Student ID + Secret Code in a mobile-optimised web form. Works on any modern browser.
Static QR is trivial to abuse — students can photograph it and scan from home. HadirTrack rotates the QR token every 60 seconds, requires a verbal secret code that only the lecturer announces in class, and optionally checks GPS and selfie. The same QR captured 5 minutes ago is already expired.
Only when their child is ABSENT, MC, or marked Absence-With-Reason. Never for ATTEND or LATE — that would spam parents daily. The rule is gated by institution settings and per-parent opt-in, with email fallback if WhatsApp delivery fails.
Five out of the box: Fonnte, Wablas, WaSenderApi, the official Meta WhatsApp Cloud API, and a generic gateway interface for your own self-hosted Baileys / WhatsApp Web JS server. Switching between them is a single dropdown change in the admin panel.
Yes — admin uploads a CSV with student_id, name, phone, email, parent_name, parent_phone, parent_email. The importer is idempotent: re-uploading updates existing rows instead of duplicating them. Bulk-assign to a class in one click.
All data is isolated per institution via institution_id scoping at the database level — no cross-tenant leaks possible. OTP codes are hashed, API tokens are hashed, sessions and selfies stored on the server's storage disk. You can request a full ZIP export of your institution data anytime.
Yes. There's no lock-in. Your data remains accessible during your billing period; after that you can download a full backup before the institution is archived.
Questions, demo requests, enterprise needs — drop us a line.
Spin up your institution in under a minute. 2 months free, no credit card.