ALFWARIS Employee Support

1. Who This Policy Applies To

ALFWARIS Employee is intended for authorized workforce users. Accounts are not available through public self-signup; they are provided and managed by an organization or its authorized administrators. The public ALFWARIS recruitment portal is separately available to job applicants and does not create an employee account.

2A. Job Applicant Information

When a person applies through the ALFWARIS recruitment portal, Alfwaris may collect the application details the person provides, including contact and identity details, residence and address, date of birth, emergency-contact details, work history, availability, transportation information, language skills, the selected job type and application language, identity-document images, and an optional profile photo.

This information is used to receive, review, administer, and document the recruitment process; detect potentially repeated applications for internal review; schedule interviews; prepare and send an approved version of work terms; record an electronic signature where the applicant chooses to sign; and, after an authorized human decision, create an employee record. Candidate-fit scoring is limited to documented operational factors and assists authorized recruiters only. It does not automatically hire or reject an applicant and excludes protected or sensitive attributes described in the recruitment system.

Applicant identity documents, profile images, and signatures are stored in private storage and are made available only to authorized personnel through time-limited access. Applicants cannot browse or retrieve other applications. Recruitment records are retained only as needed for the recruitment process and applicable operational, employment, contractual, security, or legal requirements; the appropriate period can vary by record and requirement.

2. Information We Handle

Depending on the features used and information maintained by the organization, Alfwaris may handle:

• Account and identity information: name, username, phone number, email address where available, employee and account identifiers, role, department, and organization/tenant association.
• Employment and workforce information: shift assignments and occurrence dates, attendance and time records, hours, leave requests, approvals, advances, violations, salary-related information, and work records.
• Financial and sensitive work information: bank name, IBAN, salary information, national identity information, identity or work-card documents, vehicle information, and emergency-contact information where maintained for the workforce service.
• Photos and documents: a profile image or work-related image/document when you choose to provide it.
• Precise location information: latitude and longitude, capture time, accuracy, speed or heading when available, location provider, shift/occurrence identity, and geofence-related status.
• Device and technical information: device identifiers, operating-system/platform information, app version, language, notification token, and limited technical data needed to deliver notifications, protect the service, or diagnose operational issues.

3. Precise and Background Location

ALFWARIS Employee uses precise location for attendance, verification of presence at an assigned work location, shift-related operational tracking, and geofence-related workflows where enabled by the organization.

Tracking is linked to a specific shift and occurrence. Under the current application configuration, its tracking window can begin up to 60 minutes before the scheduled shift start and ends at the end of the shift window or when the shift is cancelled or completed, as applicable. It is not continuous, all-day employee monitoring.

During an applicable tracking window, location updates may continue while the application is in the background or the device is locked, subject to device permissions and operating-system behavior. When network access is unavailable, a limited number of captured points may be retained locally on the device and sent when connectivity returns. This local technical queue is not a server retention period.

Where the application records it from the actual device state, a location record may identify its execution context as foreground, background, or unknown. Alfwaris does not label a point as background merely because of its timestamp.

4. How We Use Information

• Provide account access, workforce-management features, schedules, attendance, leave, payroll-related functions, and employee records.
• Support shift operations, location and geofence workflows, safety, security, fraud prevention, and service integrity.
• Deliver requested notifications and operational messages.
• Maintain, secure, troubleshoot, and improve the application and respond to support or privacy requests.
• Meet applicable employment, accounting, contractual, security, and legal obligations.

5. How Information Is Shared

Information is available to Alfwaris, the relevant organization and its authorized administrators, and service providers that process information to operate the application. These providers include:

• Supabase, for application backend, database, authentication/session-related services, and storage.
• Firebase Cloud Messaging, for push notification delivery, and Firebase App Check, for app and device integrity protection.
• Apple services, including Apple Push Notification service, Core Location, and device biometric/Face ID APIs when used on Apple devices.

Alfwaris may also disclose information when required by law, to protect rights, safety, and security, or in connection with a legitimate organizational, contractual, accounting, or legal obligation.

6. Face ID and Biometric Authentication

When enabled by the user on a supported device, the application may use the device’s Face ID or biometric authentication mechanism to protect local account access. Alfwaris does not receive or store raw fingerprint or facial biometric templates through this feature.

7. Security

Alfwaris uses administrative and technical safeguards designed to protect personal information, including authenticated sessions, organization-based access controls, and app/device integrity protections where available. No method of transmission or storage is completely secure, so please use the application and support channels responsibly.

8. Data Retention

Alfwaris retains employee and workforce information for the duration necessary to provide the workforce-management service and for as long as reasonably required for legitimate operational, employment, accounting, security, contractual, and legal obligations.

Retention periods may vary depending on the category of information and applicable organizational or legal requirements. When an employment relationship ends or a deletion request is made, information is deleted or restricted where possible. Records that must be retained for legal, accounting, contractual, security, or employment-record purposes may be retained as required.

9. Your Privacy Choices and Requests

You can manage certain device permissions, including location, notifications, camera, photos, and biometric access, through your device settings. Disabling a required permission may limit the related feature, such as attendance or shift-tracking functionality.

To request access to, correction of, deletion of, or restriction of personal information, or to request account deletion, email support@alfwaris.app or contact your organization’s administration. Deleting the application from a device does not by itself delete the account or employment records.

10. Children

ALFWARIS Employee is a workforce application and is not directed to children.

11. Analytics and Crash Reporting

As of the Last Updated date, the production ALFWARIS Employee application does not use Firebase Analytics, Firebase Crashlytics, or Sentry for analytics or crash reporting. If this changes, this policy will be updated before or when the change takes effect as appropriate.

12. Changes to This Policy

Alfwaris may update this Privacy Policy to reflect changes to the application, legal requirements, or data practices. The updated version will be posted on this page with a revised Last Updated date.

13. Contact Alfwaris

For privacy questions, personal-data requests, account deletion requests, data deletion requests, or support related to privacy, contact Alfwaris at support@alfwaris.app.