Privacy Policy
At a glance
- Aldrees Workspace is an internal app for Aldrees employees only. Accounts are issued by Aldrees; there is no public sign-up.
- We collect face photographs, location, and time only when you record attendance, to confirm it is really you, at work, at that moment.
- Face data is stored on Aldrees-owned servers, is never shared with third parties, and is deleted when your employment ends.
- We do not sell your data, show ads, or track you across other apps or websites.
1. Who we are
Aldrees Workspace (the “app”) is operated by Aldrees Petroleum and Transport Services Company (“Aldrees”, “we”, “us”), with its registered address at Exit 28, Khurais Road, East Naseem District, P.O. Box 609, Riyadh 11421, Kingdom of Saudi Arabia. Aldrees is the controller of the personal data processed through the app.
2. Scope of this policy
This policy explains what personal data the app collects, why, how it is protected, how long it is kept, and the rights you have over it. It applies only to the Aldrees Workspace mobile application.
The app is provided exclusively to employees of Aldrees for work purposes. Accounts are created and issued by Aldrees HR and IT; the app does not offer public registration. This policy supplements, and does not replace, any employee privacy notice Aldrees provides to you as part of your employment.
3. Information we collect
Account and identity information
Your employee number, name, work email address, and the sign-in credentials issued to you by Aldrees. When you sign in, you may be asked to confirm a one-time verification code as a second authentication step.
Attendance information
The type of each attendance event (check-in, check-out, or random spot check), its date and time, the location at which it was recorded, the face photograph captured for it, and whether identity verification succeeded. To keep attendance times accurate, the app checks the time against a network time source.
Face data
Photographs of your face captured for enrollment and attendance verification. Face data is described in full in Section 4.
Work data
Information you enter or view while using the app's business modules as part of your duties, for example inventory transactions. This is company business data processed on Aldrees systems.
Device and technical information
- A random identifier generated when the app is installed, used to recognize the installation in requests to our servers.
- A push notification token and the app version, used to deliver work notifications to your device.
- Technical records that our servers may keep when the app connects to them, such as IP address, request time, and error information, used for security and troubleshooting.
- The result of a local device-integrity check (for example, whether a device is jailbroken), used to protect company systems.
What we do not collect
The app does not access your contacts, photo library, microphone, calendar, or health data. It does not contain advertising or third-party analytics software, and it does not track you across apps or websites owned by other companies.
4. Face Data
Aldrees Workspace collects face data for one purpose only: to verify the identity of an Aldrees employee when an attendance event is recorded.
What we collect. During enrollment, the app captures several photographs of your face using your device's front-facing camera. Each time you record a check-in or check-out, or respond to a random attendance spot check, the app captures a single photograph of your face together with the location and time of that attendance event. Before any image leaves your device it is resized, re-encoded, and stripped of all embedded metadata, including EXIF GPS data.
How we use it. Face data is used solely to confirm that the person recording the attendance event is the enrolled employee. We do not use face data for advertising, marketing, profiling, emotion or demographic analysis, or for any purpose unrelated to attendance verification.
How we process and store it. Images are transmitted over an encrypted TLS connection to servers owned and operated by Aldrees. On those servers a mathematical representation of the face (a face template) is generated and compared against your enrolled template. Your enrollment images, attendance images, and face template are stored on Aldrees-controlled servers and are accessible only to authorized Aldrees personnel.
Sharing. We do not sell, rent, or share face data with any third party. No face data is transmitted to any third-party service, cloud recognition provider, analytics provider, or advertising network. The face detection performed on your device runs entirely offline and transmits nothing.
Retention and deletion. Face data is retained for the duration of your employment with Aldrees and is deleted when your employment ends. You may request deletion of your face data at any time by contacting the Aldrees HR department at info@aldrees.com. Upon such a request, your enrollment images, attendance images, and face template are deleted from our systems, and face-based attendance will no longer function until you enroll again.
Apple Face ID. Separately from the above, the app offers Apple Face ID as an optional convenience for unlocking your saved sign-in credentials on your device. Apple Face ID data never leaves your device's Secure Enclave and is never accessible to, collected by, or transmitted to Aldrees. The app receives only a success or failure result.
5. Location data
The app requests your device's location only while you are using it, at the moment you record a check-in, a check-out, or a random spot check. The coordinates are sent with that attendance event so Aldrees can confirm it was recorded at an approved work location.
The app does not collect location in the background, does not track your movements between attendance events, and does not use location for any other purpose.
6. How we use information
- To authenticate you and keep your account secure.
- To record your attendance and verify that each attendance event was made by you, at an approved location, at the stated time.
- To run random attendance spot checks and send you the related notifications.
- To provide the app's business modules you use in your work.
- To protect the app and company systems against misuse, fraud, and unauthorized access, and to troubleshoot problems.
- To meet Aldrees' obligations under applicable employment and other laws.
We process this information because it is necessary to administer your employment, because Aldrees has a legitimate interest in accurate attendance records and secure systems, to comply with legal obligations, and, where required by law for sensitive data such as face data, on the basis of your consent obtained at enrollment.
8. Storage, security, and transfers
Personal data collected through the app is stored on servers owned and operated by Aldrees, located in the Kingdom of Saudi Arabia. All communication between the app and our servers is encrypted using TLS.
On your device, sign-in credentials are stored in the iOS Keychain (or the equivalent secure storage on Android) and are not accessible to other apps. Face data is not stored on your device.
Access to personal data on our servers is limited to authorized personnel and protected by technical and organizational security measures. No system is perfectly secure, but we work to protect your data and will act promptly if a security incident occurs.
Push notification tokens processed by Google and Apple may be handled on servers outside the country where you are located. Face data does not leave Aldrees-controlled servers.
9. Retention
| Data | How long we keep it |
|---|---|
| Face data (enrollment images, attendance images, face template) | For the duration of your employment; deleted when employment ends, or earlier on your request. |
| Attendance records (time, type, location) | For the duration of your employment; deleted when employment ends. |
| Account information (credentials, work email, employee number) | For the duration of your employment; deleted when employment ends. |
| Basic employment record (your name, job title, and period of employment) | Retained after your employment ends, as a record that you worked for Aldrees. |
| Push token and installation identifier | Until you sign out, uninstall the app, or your account is deactivated. |
| Server technical records | For the duration of your employment; deleted when employment ends. |
In short: when your employment with Aldrees ends, all personal data collected through the app is deleted, except your name, job title, and period of employment, which Aldrees keeps as a basic record of your employment.
10. Your rights and choices
Subject to applicable law, including the Personal Data Protection Law of the Kingdom of Saudi Arabia, you have the right to:
- be informed about how your personal data is processed;
- access your personal data and obtain a copy of it;
- request correction of inaccurate or incomplete data;
- request deletion of data that is no longer needed, including your face data;
- withdraw consent where processing is based on consent.
To exercise any of these rights, contact the Aldrees HR department at info@aldrees.com. Because accounts are issued by Aldrees rather than created in the app, account and data deletion requests are handled by HR. Withdrawing consent to face data processing or requesting its deletion means face-based attendance will stop working for you; HR will tell you what alternative attendance method applies.
You can also turn off camera, location, notification, and Face ID permissions at any time in your device settings. Some app features will not work without them.
11. Device permissions
| Permission | Why the app asks for it |
|---|---|
| Camera | To capture face photographs for enrollment and attendance verification. |
| Location (while using the app) | To record where each check-in, check-out, or spot check takes place. |
| Face ID | Optional. To unlock your saved sign-in credentials on the device. No Face ID data is shared with the app or Aldrees. |
| Notifications | To notify you of random spot checks and other work updates. |
12. Children
The app is intended only for Aldrees employees and is not directed to children. We do not knowingly collect personal data from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed. We will inform you of material changes through the app or through internal company channels.
14. Contact us
For questions about this policy or your personal data:
- HR department: info@aldrees.com
- Privacy contact: info@aldrees.com · +966 11 235 5555
- Address: Exit 28, Khurais Road, East Naseem District, P.O. Box 609, Riyadh 11421, Kingdom of Saudi Arabia