diff --git a/fusion_clock/__manifest__.py b/fusion_clock/__manifest__.py
index a04faf42..b1ec1454 100644
--- a/fusion_clock/__manifest__.py
+++ b/fusion_clock/__manifest__.py
@@ -5,7 +5,7 @@
 
 {
     'name': 'Fusion Clock',
-    'version': '19.0.3.11.7',
+    'version': '19.0.3.11.8',
     'category': 'Human Resources/Attendances',
     'summary': 'Complete Employee T&A with Geofencing, Shifts, Penalties, Overtime, Kiosk, Dashboard & Payroll Export',
     'description': """
diff --git a/fusion_clock/views/kiosk_nfc_templates.xml b/fusion_clock/views/kiosk_nfc_templates.xml
index 91b005f4..c0212827 100644
--- a/fusion_clock/views/kiosk_nfc_templates.xml
+++ b/fusion_clock/views/kiosk_nfc_templates.xml
@@ -14,6 +14,11 @@
                 <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"/>
                 <meta name="apple-mobile-web-app-title" content="Fusion Clock Kiosk"/>
                 <link rel="apple-touch-icon" href="/fusion_clock/static/description/icon.png"/>
+                <!-- Kiosk lockdown: hide Odoo's frontend->backend nav (the floating
+                     "Go to your Odoo Apps" / edit button the website module injects for
+                     logged-in internal users) so a kiosk user can't reach the backend.
+                     Page-scoped here so the real website keeps its nav. -->
+                <style>.o_frontend_to_backend_nav { display: none !important; }</style>
             </t>
 
             <div id="nfc_kiosk_root" class="nfc-kiosk"