ECS Workforce Privacy Policy

a. Account and employment information

Your name, employee ID, email, phone number, department, designation, assigned work sites and shifts, and profile photo. Your employer provides this.

b. Location data (precise, including in the background)

• When you check in or check out, the App reads your precise GPS location to confirm you are inside your assigned work site's boundary (geofence).
• While you are checked in, the App continues to check your location in the background, even when the App is closed or not in use. It does this through a visible foreground-service notification, to confirm you stay within your work site. If you leave the site, the App may record an exit event, automatically check you out (if your employer's policy enables this) and notify your administrator.
• We also check location data for signs of fraud, such as mock or spoofed GPS and impossible travel speeds.
• Location is not tracked when you are not checked in. It is never sold and never used for advertising.

c. Camera, photos and biometric verification

• The camera is used to take your profile photo, to perform a liveness check (blink or head turn) when you check in or out, to take a selfie when you request a device change, and to take a selfie when the App is unlocked. Selfies are sent to your employer's administrators for verification.
• Face ID or fingerprint (if your employer enables facial check-in) works only on your device using your phone's own biometric system. We never receive or store your fingerprint or face template, only a success or failure result.
• Photo library access is used only when you choose a profile picture.

d. Microphone

Used only when you choose to record a voice note to send to your administrators.

e. Attendance and work records

Check-in and check-out times, breaks, overtime, attendance corrections, leave, off-site permissions, expense claims with receipt images, loan requests, and payslips.

f. Device information

Device identifier, model, OS version and push notification token. These are used to link your account to one approved device and to deliver notifications.

• Recording and verifying attendance at your assigned work site
• Preventing attendance fraud (location spoofing, device sharing, identity checks)
• Processing leave, overtime, expense, loan and payroll requests
• Sending you work notifications (approvals, reminders, announcements)
• Keeping the service secure and fixing problems

We do not use your data for advertising, and we do not sell it.

• Your employer (HR, managers and administrators) can see your attendance, location events, selfies, requests and voice notes, because this is the purpose of the App.
• Service providers that operate the App for us: cloud hosting and database, and Google Firebase Cloud Messaging for push notifications.
• Authorities, when required by law.

If you have no connection, check-ins are stored encrypted on your device and synced later. Sign-in tokens are kept in your phone's secure storage. Data on our servers is sent over encrypted connections (HTTPS) and access is restricted by role.

Attendance and employment records are kept for as long as your employment requires and as Saudi labour regulations require. App-unlock selfies are deleted automatically after 30 days. When your employment ends, your employer may ask us to delete your data, subject to legal retention obligations.

You can turn off location, camera or microphone permissions in your phone's settings at any time, but check-in and some features will not work without them. Under Saudi Arabia's Personal Data Protection Law (PDPL), you may ask to access, correct or delete your data by contacting your HR department or us (see below).

The App is only for employees and is not intended for anyone under 18.

We will update this page and the "Last updated" date when the policy changes.