This policy explains what data the NASEC Management App collects, why it is used, when it is shared, and the choices available to you. Please read it before using the app.
1. Who this policy applies to
This Privacy Policy applies to the NASEC Management App, operated by NAS Engineering Consultancy (NASEC). The app is an internal workforce, attendance, HR, project, reporting, task and communication tool for authorised personnel.
Your employer or the organisation that provides your NASEC account may also set workplace records and retention requirements. Contact HR if you need information about an organisation-specific practice.
2. Information we collect
- Account and identity data: employee ID, authentication credentials, internal user ID, name, work email, phone number, address, job role, manager, employment status and profile photo.
- Location and attendance data: precise GPS coordinates, accuracy, timestamp, assigned worksite/geofence, arrival and departure events, check-in and check-out records, work status, device state and location history used for attendance and authorised safety/HR review.
- Background location: with permission, the app checks location during duty hours to record automatic arrival and departure even when the app is closed, in the background, or the device is locked. If you remain checked in after duty hours, checking may continue until checkout is recorded. Low-power standby location monitoring may remain enabled to restart attendance on the next workday; standby fixes are not uploaded.
- HR and operational data: attendance history, leave requests and balances, approvals, schedules, projects, assigned locations, tasks, task activity, document logs and site-report information.
- Content you provide: profile photographs, chat and task messages, read receipts, report text, photographs, documents, attachments and generated PDF reports.
- Device and technical data: device model, operating-system version, app version, platform, device/vendor identifier when used for authorised-device checks, Firebase installation and push-notification tokens, IP address, authentication/session tokens, diagnostics and network request metadata.
- Permissions and local data: location, camera, notifications, and photos/files you choose through the system picker. The app also stores encrypted credentials/tokens, cached records, attachments, generated reports and unsent attendance events on your device so core features can work securely and tolerate temporary connectivity loss.
3. How we use information
- Authenticate users, secure accounts and manage authorised access.
- Verify presence at an assigned worksite, record attendance, automate check-in/check-out and provide geofence safety alerts.
- Administer employee profiles, leave, schedules, HR approvals and workforce records.
- Provide projects, document logs, tasks, reports, internal chat, attachments and notifications.
- Synchronise records between the app, NASEC ERP and Firebase services; queue and retry authorised operations when a connection is unavailable.
- Protect the service, investigate errors or misuse, enforce access controls, and meet contractual, employment, accounting, legal and regulatory obligations.
4. When location is collected
Precise location is collected only after the device permission flow. Foreground location supports maps, manual attendance and live authorised attendance views. “Allow all the time”/Always access enables automatic attendance and safety alerts while the app is not visible.
You can deny or revoke location access in device Settings. Manual or automatic location-based features may then be unavailable, and you may need to follow your employer’s alternative attendance procedure.
5. How we disclose information
We do not sell or rent personal information and do not use it for third-party advertising. We disclose data only as needed for the purposes above:
- Within your organisation: authorised HR staff, managers, administrators, project personnel, task participants and internal chat members receive information appropriate to their role. Company-chat content is visible to authorised internal members.
- Service providers: Google Firebase provides authentication, realtime database, cloud functions, file/storage capabilities and push messaging. Apple and Google device services deliver operating-system features and notifications.
- NASEC systems and hosting providers: information is sent to the NASEC ERP and infrastructure providers that host, secure, back up or support it.
- Map and routing providers: Esri map tiles, OpenStreetMap Nominatim search and the OSRM routing service may receive requested map coordinates, search terms, IP address and normal network metadata when an authorised map, address-search or routing feature is used.
- Legal and safety disclosures: regulators, courts, law enforcement, advisers or other parties when required by law or reasonably necessary to protect rights, security, safety, users or the public.
- Business changes: a successor or adviser involved in a merger, restructuring or transfer, subject to appropriate confidentiality and data-protection safeguards.
6. Retention and deletion
We retain information for as long as your account or employment relationship is active and afterwards for legitimate HR, attendance, project, security, backup, dispute-resolution, contractual and legal requirements. Different record types may have different retention periods. Local caches, queued events and secure session data are removed through app actions, sign-out, cache cleanup or uninstall, but uninstalling the app does not delete server records.
To request access, correction or deletion, contact your HR administrator or email info@nasec.ae. Some records cannot be deleted immediately where retention is required for employment, legal, security or recordkeeping purposes. We will explain any applicable limitation.
7. Your choices and rights
- Review and update supported profile fields in the app or contact HR to correct other records.
- Control location, camera and notification permissions in device Settings. Photos and files are accessed only when you choose or capture them for an app feature.
- Ask HR or info@nasec.ae for access, correction, deletion, restriction or a copy of your data, subject to applicable law and workplace recordkeeping duties.
- Sign out to end the active session and unregister the current push token where supported.
8. Security and international processing
We use access controls, encrypted network connections, device secure storage and other reasonable administrative and technical safeguards. No electronic system is completely secure, so absolute security cannot be guaranteed.
Service providers or NASEC infrastructure may process information in countries other than the one where you work. We use contractual, technical and organisational safeguards appropriate to the data and applicable requirements.
9. Children
The app is an internal workplace tool and is not directed to children. NASEC does not knowingly collect personal information from children through this app. Contact us if you believe a child has provided information.
10. Changes to this policy
We may update this policy when the app, our practices or legal requirements change. We will update the date above and provide additional notice in the app when a material change requires it.
11. Contact us
Nad Al Shiba Engineering Consultants LLC
Al Wasl, Dubai, United Arab Emirates
Email: r.aziz@nadalshibaconsultants.com
Phone: +971 50 936 3002