1. Who Can Use This App

Jadwal is a cloud-based HR management platform used by employers to manage their workforce. Access is strictly limited to employees of organizations subscribed to the Service who have received an official invitation from their employer's administration.

This app is not available for public registration. If you have not received an invitation from your HR administrator, you cannot create an account or access any features.

To request access, please contact your HR administrator directly.

2. Data We Collect

To operate the Service we collect the following categories of data:

• Identity data: full name, employee ID, national ID or Iqama number, date of birth.
• Contact data: work email address, phone number, address.
• Employment data: department, job title, salary structure, leave balances, attendance records.
• Location data: geolocation captured at check-in / check-out, used only to verify presence at an assigned office.
• Device data: device model, operating system, application version, IP address, and Firebase Cloud Messaging push tokens.
• Document data: identity documents, contracts, and receipts you upload (e.g. expense receipts).
• Authentication data: credentials managed by Firebase Authentication. Passwords are never stored in our database.

3. How We Use Your Data

• Authenticate you and keep your session secure.
• Record attendance, work shifts, and leaves.
• Process payroll, allowances, deductions, loans, and expense advances.
• Send work-related notifications (announcements, approvals, reminders).
• Generate documents required by Saudi Labor Law.
• Maintain an audit trail of system actions for security and compliance.

We do not sell your data, and we do not use it for advertising.

4. Storage & Security

Each organization's data is held in its own separate database. Your records are not commingled with those of any other organization using the Service, and no organization can read, query, or export another organization's data.

Sensitive fields (national ID, Iqama number, bank IBAN) are encrypted at the application layer before being written to the database. Within your organization, access is restricted to authorized HR and finance personnel through role-based permissions, and every state change is recorded in an append-only activity log.

Retention is determined by your organization, in line with Saudi Labor Law and applicable regulations. When you leave your organization, your record is retained for the legally mandated period and then anonymized or deleted. If an organization stops using the Service, its data is deleted after the contractually agreed period.

5. Third-Party Services

The Service relies on the following third-party providers:

• Google Firebase — authentication, push notifications, and supporting infrastructure. Subject to Google's privacy policy.
• Email provider (SMTP) — for transactional emails such as invitations and notifications.
• Mistral AI — used to extract structured data from documents and receipts you upload. Files are sent for processing and are not retained by the provider for training.

We share only the data strictly necessary for each provider to perform its function. We do not share your data with any party for marketing or analytics, and we never share one organization's data with another.

6. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your account and personal data.
• Object to specific types of processing and withdraw consent where applicable.

7. Account Deletion

Accounts are created and managed by your employer, not by us. To delete your account, please contact your HR administrator. They will process the request in accordance with Saudi Labor Law and their own retention policy.

8. Children

The Service is intended for employees of subscribing organizations. It is not directed at children, and we do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page indicates when the latest revision took effect. Continued use of the Service after a change constitutes acceptance of the revised policy.

10. Contact

To exercise the rights described above, contact your organization's HR administrator first — they control your employment records and can act on the request directly.

For questions about the Service itself, or if your organization is unable to resolve a privacy request, contact us at support@jadwal.tech.