1. Introduction
This policy explains how personal data is collected, used, and protected when you use the Employee App (iOS/Android) and related portals on the organization management platform operated by القطاع الثالث("the Organization," "we"). The app is for authorized employees only; it is not intended for the general public.
By using the app or signing in, you acknowledge that you have read this policy. If you do not agree, please do not use the service and contact your HR administrator.
2. Who controls your data?
The data controller is your organization (employer) using the platform to manage HR operations. We provide the technical platform on its behalf. For access, correction, or deletion requests, contact your HR or IT administrator first; you may also email us at privacy@maddar.sa.
3. Data we collect
- Account and employment data: name, email, phone, department, job title, employee ID, and profile data entered by the Organization.
- Login and security: session identifiers, login attempt logs, two-factor verification (if enabled), and approximate IP address for security.
- Location (GPS): only when you clock in/out, if the Organization enables geo verification — to confirm you are within the allowed work area.
- Attendance: punch times, daily status, and related notes (e.g. aggregated coordinates in attendance records).
- Requests and tasks: request content (leave, punch correction, etc.), attachments you upload, and comments.
- Notifications: in-app notification history; and an Expo Push Token to send alerts to your device when registered.
- Device and app data: device type, OS, and app version — for support and security.
4. How we use data
- HR services: attendance, leave, requests, tasks, announcements, and payroll (per your permissions).
- Identity verification and account protection.
- Operational notifications related to your work (requests, tasks, announcements).
- Compliance with labor regulations and Organization policies.
- Platform stability and abuse prevention.
We do not sell your personal data. We do not use your data for advertising or cross-app tracking.
5. Data sharing
Data may be shared with:
- Your Organization: managers, HR, and authorized administrators per permissions.
- Infrastructure providers: hosting, email, and Expo Push Notifications — only as needed to operate the service, under confidentiality and data-processing obligations.
- Public authorities: when required by law or court order.
6. Location
Location is collected only when you request a punch (not continuously in the background unless the OS requires it when permission is granted). You may deny location permission in device settings; geo punch may then be unavailable. See Privacy Choices.
7. Data retention
We retain data for the employment relationship and afterward per Organization policy and applicable law (e.g. attendance and payroll records). When your account is terminated by the Organization, archiving or deletion rules defined by the Organization apply.
8. Security
We apply reasonable technical and organizational measures (HTTPS, secure sessions, limited permissions, backups). No system is 100% secure; report suspected account compromise to your Organization immediately.
9. Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict processing, or object. To exercise these rights, contact your Organization or see our Privacy Choices page.
10. Children
The service is not directed at anyone under 18 and we do not knowingly collect children's data.
11. Changes
We may update this policy. The revised version will be posted at this URL with a "Last updated" date. Continued use after an update constitutes acceptance where permitted by law.
12. Contact
Privacy inquiries: privacy@maddar.sa. For employment-related data matters, contact HR at القطاع الثالث.