Privacy Policy

# Privacy Policy for ALFA HR

Last Updated: 6 November 2025

Effective Date: 6 November 2025

## Introduction

ALFA HR Mobile ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ALFA HR Mobile (the "App"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

By using the App, you consent to the data practices described in this Privacy Policy.

## Information We Collect

### Personal Information

We collect personal information that you provide to us when you register for an account or use the App, including:

- **Account Information**: Name, email address, password, employee ID

- **Employment Information**: Department, designation, employment type, employment status, work schedule

- **Contact Information**: Phone number, address, city, state, country, postal code

- **Emergency Contact Information**: Emergency contact name, relationship, and phone number

- **Identity Information**: National ID number, passport number, passport expiry date

- **Financial Information**: Bank account details (account holder name, account number, bank name, branch location, tax payer ID)

- **Biometric Data**: Biometric employee ID (stored securely on your device)

- **Profile Information**: Avatar, date of birth, gender, marital status

- **Education Information**: Degree, major, university, graduation year, grade

### Location Information

The App collects location information to provide attendance tracking and GPS tracking features:

- **Precise Location Data**: GPS coordinates (latitude and longitude) with fine location accuracy

- **Approximate Location Data**: Location data with coarse accuracy

- **Background Location**: Location data collected while the App is running in the background during work hours

- **Location History**: Historical location data for attendance tracking and geofence check-in/check-out

**Note**: Location tracking is only active during configured work hours and is used exclusively for attendance and employee tracking purposes as authorized by your employer.

### Device Information

We automatically collect certain information about your device when you use the App:

- **Device Information**: Device model, manufacturer, operating system version, unique device identifiers

- **Network Information**: IP address, network type (Wi-Fi, mobile data), network connectivity status

- **Battery Information**: Battery level and charging status (to optimize location tracking)

- **App Information**: App version, installation date, usage statistics

### Usage Data

We collect information about how you use the App:

- **Authentication Data**: Login credentials (stored securely using encryption)

- **Session Data**: Authentication tokens, session duration

- **Feature Usage**: Which features you access, frequency of use

- **Error Logs**: Technical error information to improve App performance

### Notification Data

We collect and process notification-related information:

- **Firebase Cloud Messaging (FCM) Token**: Device token for push notifications

- **Notification Preferences**: Your notification settings and preferences

- **Notification History**: Local storage of notifications received

### Attendance and HR Data

The App collects and stores HR-related information:

- **Attendance Records**: Check-in/check-out times, location data for attendance

- **Leave Information**: Leave requests, leave balances, leave history

- **Holiday Information**: Company holidays and public holidays

- **Events and Announcements**: Company events, announcements, and notifications

- **Training Information**: Training records and certificates

- **Complaints and Awards**: Employee complaints and awards records

## How We Use Your Information

We use the information we collect for the following purposes:

### Core Functionality

- **Account Management**: To create and manage your account, authenticate your identity

- **Attendance Tracking**: To record and track your attendance, including location-based check-in/check-out

- **GPS Tracking**: To track your location during work hours as authorized by your employer

- **HR Management**: To manage leave requests, holidays, events, training, and other HR functions

- **Notifications**: To send you important updates, reminders, and s related to your employment

### Service Improvement

- **App Performance**: To monitor and improve App performance, identify and fix bugs

- **User Experience**: To personalize your experience and improve App usability

- **Analytics**: To analyze App usage patterns and user behavior (anonymized data)

### Legal and Compliance

- **Legal Obligations**: To comply with applicable laws, regulations, and legal processes

- **Employment Records**: To maintain employment records as required by law

- **Security**: To protect against fraud, unauthorized access, and security threats

## Data Storage and Security

### Local Storage

The App stores certain information locally on your device using:

- **Shared Preferences**: For app settings and preferences

- **Flutter Secure Storage**: For sensitive data like authentication tokens (encrypted)

- **Hive Database**: For local caching of HR data

- **SQLite Database**: For structured data storage

### Server Storage

Your data is stored on secure servers operated by your employer or their authorized service providers. Data is transmitted using HTTPS encryption.

### Security Measures

We implement appropriate technical and organizational security measures to protect your information:

- **Encryption**: Data in transit is encrypted using HTTPS/TLS

- **Secure Storage**: Sensitive data is stored using encryption

- **Authentication**: Secure authentication mechanisms to prevent unauthorized access

- **Access Controls**: Limited access to personal information on a need-to-know basis

**However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.**

## Data Sharing and Disclosure

### With Your Employer

Your personal information is shared with your employer (the company that provides you access to the App) for HR management purposes, including:

- Attendance tracking and reporting

- Leave management

- Performance evaluation

- Compliance with employment policies

### With Service Providers

We may share your information with third-party service providers who perform services on our behalf:

- **Firebase (Google)**: For push notifications and analytics (subject to Google's Privacy Policy)

- **Cloud Hosting Providers**: For data storage and hosting services

- **Analytics Providers**: For App usage analytics (anonymized data)

### Legal Requirements

We may disclose your information if required by law or in response to:

- Legal processes (subpoenas, court orders)

- Government requests

- Enforcement of our terms and conditions

- Protection of rights, property, or safety

### Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

## Your Rights and Choices

### Access and Correction

You have the right to:

- **Access**: Request access to your personal information

- **Correction**: Request correction of inaccurate or incomplete information

- **Deletion**: Request deletion of your personal information (subject to legal and employment requirements)

### Location Tracking

You can control location tracking through:

- **App Settings**: Disable location tracking in App settings (may affect attendance features)

- **Device Settings**: Disable location permissions in your device settings

- **Work Hours**: Location tracking is only active during configured work hours

**Note**: Disabling location tracking may impact your ability to use certain features, including location-based attendance check-in/check-out.

### Notifications

You can control notifications through:

- **App Settings**: Manage notification preferences in the App

- **Device Settings**: Control notification permissions in your device settings

### Account Deletion

You may request deletion of your account by contacting your employer's HR department or system administrator. Note that some information may be retained for legal or employment record-keeping purposes.

## Data Retention

We retain your personal information for as long as necessary to:

- Provide the App services

- Comply with legal obligations

- Resolve disputes

- Enforce our agreements

Employment records may be retained for longer periods as required by law or company policy.

## Children's Privacy

The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

## International Data Transfers

Your information may be transferred to and stored on servers located outside your country of residence. By using the App, you consent to the transfer of your information to countries that may have different data protection laws than your country.

## GDPR Rights (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

- **Right to Access**: You can request a copy of your personal data

- **Right to Rectification**: You can request correction of inaccurate data

- **Right to Erasure**: You can request deletion of your personal data

- **Right to Restrict Processing**: You can request limitation of data processing

- **Right to Data Portability**: You can request your data in a portable format

- **Right to Object**: You can object to certain types of data processing

- **Right to Withdraw Consent**: You can withdraw consent at any time

To exercise these rights, please contact your employer's HR department or data protection officer.

## California Privacy Rights (For California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

- **Right to Know**: You can request information about data collection and sharing

- **Right to Delete**: You can request deletion of your personal information

- **Right to Opt-Out**: You can opt-out of the sale of personal information (we do not sell personal information)

- **Right to Non-Discrimination**: You will not be discriminated against for exercising your privacy rights

## Third-Party Services

The App uses third-party services that may collect information:

### Firebase (Google)

- **Service**: Push notifications, analytics, crash reporting

- **Data Collected**: Device information, usage analytics, crash reports

- **Privacy Policy**: [https://policies.google.com/privacy](https://policies.google.com/privacy)

### Google Play Services

- **Service**: App distribution and updates

- **Data Collected**: App installation and update information

- **Privacy Policy**: [https://policies.google.com/privacy](https://policies.google.com/privacy)

## Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

- Posting the new Privacy Policy in the App

- Updating the "Last Updated" date

- Sending you a notification (if significant changes are made)

Your continued use of the App after changes are made constitutes acceptance of the updated Privacy Policy.

## Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

**ALFA HR Mobile Support**  

Email: support@alfa-pal.com  

Website: https://www.alfa-pal.com  

Phone: +97092381288

**Data Protection Officer**  

Email: privacy@alfa-pal.com

**For employment-related data requests**, please contact your employer's HR department or system administrator.

## Consent

By using the ALFA HR Mobile App, you consent to:

- The collection and use of your information as described in this Privacy Policy

- Location tracking during work hours for attendance and GPS tracking purposes

- Receiving push notifications and s

- The processing of your personal information for HR management purposes

You can withdraw your consent at any time by:

- Disabling location tracking in App settings

- Disabling notifications in App or device settings

- Contacting your employer's HR department to request account deletion

## Additional Information

### Permissions Used

The App requests the following permissions:

- **Internet**: Required for API communication

- **Location (Fine & Coarse)**: Required for attendance tracking and GPS tracking

- **Background Location**: Required for automatic attendance tracking during work hours

- **Foreground Service**: Required for background location tracking

- **Notifications**: Required for push notifications and s

- **Wake Lock**: Required to keep the App running during tracking

- **Battery Optimization**: Requested to ensure reliable background tracking

### Data Minimization

We collect only the information necessary to provide the App's functionality and comply with employment requirements. We do not collect unnecessary or excessive personal information.

### Data Accuracy

We strive to keep your information accurate and up-to-date. Please notify your employer's HR department if you notice any inaccuracies.

---

**This Privacy Policy is effective as of the date stated above and applies to all users of the ALFA HR Mobile App.**

**For questions or concerns, please contact support@alfa-pal.com or your employer's HR department.**