Mobile Apps Policies
This page sets out how the USIT mobile applications collect, use and store data, what device permissions each app asks for and why, and how an employer or an employee can request a copy of that data or its deletion.
[One or two sentences: which apps this page covers (name each one as it appears on the App Store and Google Play), who publishes them, and the date this policy last changed.]
Which apps this covers
[List each app by its store name and say what it is for — for example the staff attendance app and the fleet tracking app. If the apps have separate policies, say so here and link them.]
Who the data controller is
[Legal entity name, Jeddah address, CR number, and the email address for privacy questions. For the attendance app, state clearly whether USIT or the employer is the controller — this is the question reviewers and employees ask first.]
What the apps collect
[Itemise it, one row per data type: device location, check-in time and place, device identifier, phone number, name and employee number, photographs if the app takes any, crash diagnostics. For each one, say whether it is required or optional.]
Device permissions and why each is needed
[One line per permission the app requests — location (and whether background location is used), camera, notifications, storage — each tied to the feature that needs it. Say what stops working if the user declines.]
How the data is used
[The purposes, in plain language: attendance records for the employer, vehicle position for the fleet operator, Wasl reporting to the Transport General Authority where applicable. State explicitly that the data is not sold, and name any advertising or analytics SDKs if any are present.]
Who the data is shared with
[The employer or fleet operator who bought the service; the Transport General Authority via the Wasl platform where the vehicle is in regulated transport; named hosting and SMS providers; and anyone required by law. Say where the servers are.]
How long it is kept
[Retention period per data type, and what happens when a contract ends — deleted, returned to the employer, or anonymised.]
Security
[Encryption in transit and at rest, who inside USIT can see the data, and how access is controlled.]
Your rights and how to use them
[Under Saudi Arabia's Personal Data Protection Law: access, correction, deletion, withdrawal of consent. Give the email address to write to and the time you will reply in. For employees, explain what they should ask their employer for versus what they can ask USIT for.]
Deleting your account and data
[Both stores require a route to deletion that works without installing the app. Give the exact steps and the email address, and say how long deletion takes.]
Children
[State that the apps are workplace tools and not directed at children under 18, if that is the case.]
Changes to this policy
[How users are told about changes, and where the effective date appears.]
Contact
[Privacy contact email, phone number and postal address.] You can also contact us through the website.