سياسة الخصوصية

1How the two apps work

The manager keeps all HR data in HR Admin on their own device. To record attendance, the manager creates a “share code” (an iCloud link) for each employee, which the employee enters once in ATS. From then on, ATS sends check-in/out records through iCloud (CloudKit) to the manager; HR Admin pulls them to the manager’s device and they are then deleted from iCloud. Neither app connects to a server owned by the developer.

2Data in the manager’s app (HR Admin)

Employee data and records: basic data (name, code, phone, mobile, email, birth date, gender, religion, marital status, start and end of service), departments, qualifications, contracts, courses, vacations, sanctions, documents, advances, missions, permits, payroll, attendance rules (schedules, grace times and allowed work location), and attendance records. All of it is stored locally on the manager’s device in a database inside the app’s container, and is not sent to us or to any third party.

• There are no sign-in accounts and no passwords. Access uses the iCloud account signed in on the device, and we do not store that account’s details.
• The manager can record a check-in or check-out manually for one employee or a group of employees; the source (App / Employee / Group) is saved with the record and shown in the attendance report.
• On first launch the app runs with fictitious sample data, which is permanently deleted when “Start real use” is chosen.
• The interface language choice is saved on the device.

3Data in the employee’s app (ATS)

The app keeps on the employee’s device their check-in/out records (type, date, time and location coordinates if available) and whether each was sent, plus the share-code details (the employee’s name as typed by the manager, the shared zone, and the allowed work area if the manager set one). The recorded time is the employee’s device time. If there is no connection, a record is saved on the device and sent later with its original time. The app does not ask for a name, email or phone number.

4Location

• ATS: the employee’s location is read only when they tap “Check in” or “Check out” (“While Using the App” permission). If the manager set a work area (coordinates and radius) in the attendance rule, recording works only inside it, and spoofed locations are rejected. The coordinates are saved with the record on the employee’s device and sent with the attendance record to the manager.
• HR Admin: the manager’s device location is read only when they tap “Use my current location” to fill in the work-location coordinates of a rule; it is not tracked at any other time.

Neither app tracks your location in the background.

5iCloud (CloudKit) and the share code

• For each employee, the manager creates a private shared zone in the manager’s own iCloud account and a share link. Its storage counts against the manager’s iCloud.
• The zone contains: the share title (the employee’s name), the allowed work area from the employee’s rule if any, and the attendance records (type, time, day, and coordinates if available).
• Anyone who has the share link can join the zone and write to it, so send the link only to the employee concerned. The manager can cancel the code at any time, which deletes the zone and stops the employee from recording with it. Participant details may be visible to the manager according to how iCloud sharing and each participant’s account settings work.
• Records are pulled to the manager’s device when HR Admin opens and are then deleted from iCloud.
• We do not use the public CloudKit database and have no access to this data. It is processed by Apple under Apple’s terms and privacy policy.

6Backups

HR Admin creates an automatic backup on the device once a day (the last 10 are kept); you can also create a backup manually or restore one, and a safety copy is saved before any restore. You can export a backup to a file saved wherever you choose (such as iCloud Drive or Files). You are responsible for protecting files you export or share.

7What we do not do

• We do not collect your data on our servers and do not use analytics or tracking tools.
• We show no ads, and we do not sell or share your data for marketing.
• Neither app uses the microphone, camera, photos or contacts.

8Deleting and controlling your data

• Manager: can edit or delete any record or backup inside the app. Deleting an employee removes all of their records and closes their share code.
• Employee: “Change code” hides the data from the screen but keeps it on the device, and deleting ATS removes its local data from the device. Records already received by the manager are managed by the manager or the organization, so ask them to access, correct or delete them.
• Deleting either app removes its local data from the device. You can revoke location access at any time in device settings, and manage iCloud data in its settings.

9Responsibility of the organization using the apps

If you use the apps to manage employee data for an organization, that organization is responsible for informing employees about the collection of location and attendance data and obtaining any required consent, and for complying with the data-protection and labor laws that apply to it.

10Children

The apps are not directed to children under 13, and we do not knowingly collect data from them.

11Changes to this policy

We may update this policy from time to time; the “Last updated” date at the top will change accordingly.