Privacy Policy — Risk Wise HSE App and Portal

What we collect

• Account: name, email, phone number, job title, language, and a profile photo if you add one.
• Employee file (employees only): nationality, ID or Iqama number and expiry date, contract details, pay and bank details for salaries, certificates and documents.
• Attendance from the phone: check-in and check-out times; your location when you check in and out; while you are checked in, whether you are inside the work site (a report when you leave or return, a regular signal, and a few random presence checks); and a selfie when you check in and out.
• Face ID, Touch ID and fingerprint are checked by your phone only. We never receive or keep your face or fingerprint; we keep only the public key of the phone you registered.
• Work records: observations, incidents, inspections, reports, requests and the photos and files you add to them.
• Device and security: the app's notification token, sign-in times, IP address and a log of actions in the portal.

Why we use it

• To record attendance and pay salaries.
• To run health, safety and environment (HSE) work on our projects.
• To send you notices about your work.
• To keep accounts secure and to answer support requests.

Location

The app uses your location only while you are checked in from the app, to confirm that you are on the work site. It does not use your location at any other time. If you turn location off, you cannot check in from the phone.

Who can see it

• Authorized company staff, each according to their role.
• The client and the contractors of a project see only that project's HSE records they take part in.
• Google (Firebase) and Apple deliver notifications to phones; they receive the device token and the text of the notice.
• We do not sell personal data and do not use it for advertising.

Where it is kept

On our servers in Riyadh, Kingdom of Saudi Arabia.

How long we keep it

While your account is active. After that, we keep employment, attendance, payroll and HSE records for as long as Saudi law and our contracts require, and then delete them. Other personal data is deleted when it is no longer needed.

Your rights

• See your own data in the app and the portal (My Page).
• Correct your contact details yourself; changes to ID details are approved first.
• Ask for your account and data to be deleted: how to delete your account.
• Ask any question about your data: info@riskwiseco.com.

Changes

When this policy changes, we update this page and its date.