Aljehad Privacy Policy

App: Aljehad (com.centione.aljehad)
Developer: Centione

Aljehad is the employee self-service app for the staff of Aljehad Int. General Trading & Cont. Co. This policy explains what personal data the app handles, where it goes, and what stays on your phone.

1. Two parties handle your data

Centione builds and publishes the app. Your employer operates the HR server the app connects to and is the organisation that holds your employment record. When you sign in, you enter your company's server address; from then on, everything the app shows comes from, and is sent to, that server.

2. Face check — done on your phone, never uploaded

Before a check-in or check-out, the app confirms it is you, so nobody else can punch for you. This is exactly how it works:

• You are asked first. The first time, the app explains the face check and asks for your agreement. If you decline, nothing is stored and nothing is recorded.
• The front camera runs only during the scan, which starts when you tap check in or check out. The app asks you to blink once, to show a live person is in front of it, and then takes a photo.
• Photos are deleted on the phone. The first time, three photos are turned into a set of numbers (a face template) by a model that runs on the phone, and the photos are deleted. Later, each check-in takes one photo, compares it with the template on the phone, and deletes it.
• No photo, video, face template or result leaves your phone, to your employer, to Centione or to anyone else. The template cannot be turned back into a picture and is kept in the phone's secure storage.
• What your employer's server records is only that you have set up your face on one phone, when, and that phone's model name and an install code the app made up, so that a second phone can be refused. HR can reset this when you move to a new phone.
• The face is used for nothing else: not for identifying people, advertising or profiling. The microphone is never used.

The face template is not removed when you sign out. On Android it is removed when you uninstall the app. On iPhone it is kept in the Keychain, which iOS can keep after the app is removed and can carry in an encrypted backup to a new iPhone; it still never reaches your employer or Centione.

Face detection uses Google ML Kit, which runs on the phone. ML Kit sends Google diagnostic information about how it is running: device and app details, a per-installation identifier, performance figures and error codes. It contains no images and no face data. Google describes this in its ML Kit data disclosure.

3. Location — read only when you check in or out

• Only when you tap check in, check out, or Check my location. The app reads your position at that moment, on that screen. It never reads your location in the background and does not run while the app is closed.
• Check my location shows roughly how far you are from the nearest office. It sends nothing.
• A check-in or check-out sends your position to your employer's server, which decides whether you are inside one of the offices it has registered. If you are outside, the punch is refused. Your position goes nowhere else.
• Never stored on your phone, and never a cached position. A fresh reading is taken each time.
• Not tracking. Your location is used only for your own attendance record and is not used for advertising or profiling. The app contains no advertising identifier.

The app asks for location "while using the app". If you refuse, the rest of the app keeps working; HR can record the day for you instead.

4. Other data the app handles

The app displays and submits the following personal data on your behalf. All of it is created and stored by your employer's HR system; the app is the window onto it.

The salary advance and staff-loan screen is a request to your own employer, not a lending service: the app does not lend or pay out money and charges no interest or fees. The app does not collect contacts, files, photos you choose, health data, advertising identifiers or usage analytics.

5. What stays on your phone

• Your sign-in session is kept in the device's secure storage (Keychain on iOS, encrypted storage on Android). It is removed when you sign out.
• Your face template is kept in the same secure storage, as described above.
• Your preferences — language, theme and your company's server address — are stored as plain settings.
• Payslip details are never saved on the device and never written to logs.
• Your location and your photos are never saved on the device.
• Your basic profile is cached so the app opens faster. It is not included in cloud backups, and it is cleared when you sign out or uninstall.

6. Who receives the data

Your personal data goes to one place: your employer's HR server. The only other recipient is Google, which receives the ML Kit diagnostic information described above, with no images or face data. Centione does not sell, share or transfer your data to third parties, does not show advertising, and has no analytics or tracking in the app.

The release version of the app connects to your employer's server over HTTPS only.

7. How long data is kept

Retention on the server is governed by your employer's HR policies and the employment law that applies to it, not by the app. Uninstalling removes what the app stored on the phone, with the iPhone face-template exception above, but does not change your employment record.

8. Your choices and rights

• Access, correction and deletion of your employment data are handled by your employer's HR department, as the organisation that holds it.
• Camera and location permission can be refused or withdrawn at any time in your phone's settings; only check-in and check-out stop working.
• Moving to a new phone: ask HR to reset your face registration.
• Signing out removes your session and cached data from the device.
• Requests can be withdrawn in the app until HR acts on them.
• Depending on where you live, you may have further statutory rights over your personal data. You can exercise them with your employer; Centione will assist your employer where it is technically able to.

9. Who can use the app

Aljehad is for adult employees of Aljehad. There is no public sign-up; accounts are created by HR. The app is not directed at children and Centione does not knowingly handle data from anyone under 18.

10. Changes to this policy

If this policy changes, the new version is published at this address with a new effective date.

11. Contact

Questions about the app or this policy: centioneapps@centione.com
Questions about your employment data: Aljehad's HR department.