سياسة الخصوصية

Privacy Policy

This policy explains how BioKeep and the BioKeep employee app handle personal data. The service is provided by Brmja.com through biokeep.net.

Who controls your data

• Companies use BioKeep to manage their employees' attendance, requests and payroll.
• Your employer creates your account and decides what is collected and why. We process the data on the employer's behalf and under its instructions.
• We follow the Saudi Personal Data Protection Law.

Data we collect

• Employee data from your employer: name, employee number, phone, job title, branch and work schedule. Leave balances and salary data are included if the company uses payroll in BioKeep.
• Sign-in data: username and password. The password is stored as a one-way hash.
• Device data:
  • An app-generated device ID, the phone model and OS version, the app version and the app language.
  • A public key used to sign requests. The private key never leaves the phone.
  • A Firebase push token for work notifications.
• Precise location:
  • Read only when you check in or out, to verify you are at a work location set by your company and to detect mock locations.
  • The app does not track location in the background.
• Wi-Fi: the connected network's name and identifier at check-in, if your company requires the office network.
• Phone biometrics: the phone's own system checks your fingerprint or face. No biometric data reaches the app or our servers, only the result.
• Work records:
  • Check-in and check-out times and check-in attempt results.
  • Leave, permission, loan and letter requests, with attachments you choose to add (such as a medical report).
  • Your notes to management and task updates.

The app does not collect face photos or contacts, and has no ads or advertising trackers.

How we use data

• To provide your employer's attendance, request and payroll services.
• To prevent check-in fraud, such as mock locations or unapproved devices.
• To send work notifications.
• For support and service improvement.

We do not sell personal data or use it for advertising.

Sharing

• Your employer: the company's admins and the dashboard users it authorizes, each within their permissions.
• Service providers:
  • Cloud hosting for our servers.
  • Google Firebase Cloud Messaging, which receives the push token and the notification text.
  • A WhatsApp messaging provider for verification codes in the company dashboard.
• Authorities: only where the law requires it.

Security

• All connections use HTTPS.
• Passwords are stored as one-way hashes.
• Sensitive requests are signed with the device key.
• Attachments are private and never served by public links.
• Access is restricted by permissions.

Retention

• We keep data while your employer's account is active, or for the period your employer sets or the law requires.
• Signing out removes your push token, so the phone stops receiving your notifications.

Your rights and data deletion

• You can ask to access, correct or delete your data:
  • through your employer's HR team,
  • or by contacting [email protected] or WhatsApp with your name and company.
• After verifying the request with your employer, we delete the app account and device data.
• Your employer may keep attendance and payroll records for the period labor law requires.

Children

The app is for employees and is not directed at anyone under 18.

Changes and contact

• We post changes on this page with the update date.
• Contact: [email protected] · WhatsApp +966 58 020 0670.