Privacy Policy

What we collect

• Work details: name, phone, job title, department and shift, plus what your company adds such as ID, hire date, salary and IBAN.
• Attendance: check-in and check-out times and places, lateness, absence and overtime, requests and leaves.
• Location: at check-in and check-out, and during work hours only if your company enables tracking and you consent in the app. Background location is used to check you in automatically when you arrive at the work site, and is not collected outside work hours.
• Photos: a live check-in photo if your company requires it, and a reference photo for face verification if your company enables it: a numeric template is extracted for comparison, and a matching check-in photo is not stored.
• Camera and microphone: for photos and documents you upload, and voice messages and calls inside the app. They are used only when you use them.
• Messages and documents: what you send in chats, and documents you upload or your company issues.
• Device: an identifier of the device linked to your account, its model and app version, the notification token, and app errors so we can fix them.

Why we use it

• Recording and verifying attendance, and managing leaves, tasks and payroll for your company under your employment contract.
• Sending notifications and reminders, and running chats and calls between employees.
• Protecting accounts, preventing manipulation, and fixing errors.
• We do not sell data, use it for advertising, or share it for any purpose outside your work.

Who can see it

• Your company's managers, only according to their permissions. Each company's data is isolated from others.
• Service providers working only for us: hosting (Hostinger, Germany), mobile notifications (Google Firebase), and translation and the AI assistant (Google Gemini) for text you write when you request a translation or ask the assistant.
• Calls and voice messages run on our own server. WhatsApp messages are sent from your company's linked number.
• Authorities, where the law requires it.

Security and retention

• Connections are always encrypted (HTTPS), sign-in is bound to your device, and passwords are hashed.
• Data is kept while you work for your company, then for the period the law requires, then deleted. Your company sets how long photos and chats are kept.

Your rights

• To know what is collected, access it and get a copy: in the app ← Settings ← «My data».
• To request correction or deletion, also from «My data», or by contacting us.
• To stop tracking during work hours and notifications from the app and phone settings.
• In Saudi Arabia you may complain to the Saudi Data and AI Authority (SDAIA) under the Personal Data Protection Law. To delete your account: Delete account.

Contact us

MITS — Riyadh, Saudi Arabia. Email: sales@ksa-erp.com — WhatsApp: 966575993880. We answer privacy requests within 30 days.

We may update this policy; the date of the last update is shown at the top, and the app asks you to accept each new version.