Privacy Policy FlowERP HR

Privacy Policy for FlowERP HR

Please read this policy carefully to understand how we collect, use, and safeguard your information.

Al-Haddaq for Information Technology (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy applies to the FlowERP HR mobile application (the “App”), which is a companion application to the FlowERP ecosystem, dedicated to time attendance and employee self-service management.

Please read this policy carefully to understand how we collect, use, and safeguard your information.

1. Information We Collect

As a service provider to your employer (the organization or company you work for), we access or collect the following data based on the permissions you grant to the App:

Account and Identity Data: Full name, official corporate email address, employee ID, job title, and department. (This data is pre-created and provisioned by your organization’s system administrator).
Location Data (GPS): The App requests permission to access your precise location only and exclusively when you perform a clock-in or clock-out action. This is used to verify that your attendance is marked within the authorized geographical boundaries set by your employer. The App does not track your location in the background or outside of attendance actions.
Camera and Photo Library: The App requests access to your camera or gallery if you choose to upload a profile picture or attach supporting documents (such as medical certificates, expense receipts, or leave requests).
Device and Connection Information: We collect basic technical logs, including device type, operating system version, and unique device identifiers, to ensure account security, provide technical support, and troubleshoot app performance.

2. How We Use Your Information

We use the collected information solely for the following purposes:

To enable the core functionalities of the App (marking attendance, submitting leave requests, and viewing payslips).
To validate attendance logs based on the approved workplace locations determined by your employer.
To send real-time push notifications regarding HR workflows (e.g., leave approvals, company announcements).
To maintain app security, prevent fraudulent activities, and ensure authorized access.

3. Data Sharing and Disclosure

Your Employer: Because this is an enterprise application, all data you input or record (such as clock-in times, leave requests, and location-verified stamps) is synchronized and shared directly with your organization’s HR department and their private FlowERP database.
Third Parties: We do not sell, rent, trade, or share your personal data with any third-party companies or advertising networks. Data may only be disclosed to comply with applicable laws and regulations in the Kingdom of Saudi Arabia or in response to valid legal processes.

4. Data Security

We prioritize the security of your data. We implement industry-standard technical, administrative, and physical security measures to protect your information from unauthorized access, loss, alteration, or disclosure. All data transmissions between the mobile application and the servers are fully encrypted using SSL/TLS protocols.

5. Data Retention and Deletion

Your personal and professional data is retained as long as your account remains active and authorized by your employer.
As an employee, if you wish to modify your data or request the deletion of your account, you must contact your company’s HR department or FlowERP system administrator directly. The administrator retains full control over managing and deleting user accounts and related records.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. We will notify you of any material changes by posting the updated policy within the App or via an in-app alert.