Privacy Policy
Last updated: August 7, 2026
This Privacy Policy explains how Peopal Solutions
("we", "us", "our") collects, uses, discloses, and protects information when you use the
MyHajri mobile application and admin panel (collectively, the "Service").
MyHajri helps organizations manage employee duty shifts, attendance, and
location-based check-in/check-out at assigned duty spots. By using the Service, you agree
to the collection and use of information in accordance with this policy.
We collect the following categories of information to operate the Service:
a. Account & Profile Information
- Full name, username, email address, and phone number
- Employee ID, department, designation, and assigned company/organization
- Profile photo (if provided)
- Login credentials (passwords are stored using industry-standard hashing)
b. Location & Device Data
- Real-time and periodic GPS location while the app is in use, for the purpose of
duty tracking and attendance verification
- Geofence entry/exit events for assigned duty spots
- Device identifiers (device ID/model, OS version) used for session and device
management
- Check-in and check-out timestamps and associated coordinates
c. Attendance & Duty Data
- Shift schedules, duty assignments, and attendance records (present, absent, late,
on-duty status)
- Holiday and leave-related data configured by your organization
d. Technical & Usage Data
- App usage logs, error/crash logs, and diagnostic information
- IP address, browser type, and access timestamps (for the admin panel)
2. Location Data
Location data is central to the Service's core functionality — verifying that employees
are present at assigned duty spots during scheduled shifts. Specifically:
- Location is collected when the app is actively tracking an ongoing duty/shift.
- Location is used to determine geofence entry/exit, attendance check-in/check-out, and
to generate location logs visible to authorized company administrators.
- Employees can decline location permissions, but doing so may prevent the app's core
attendance features from functioning.
- Location history is retained only as long as necessary for attendance verification,
reporting, and legal/compliance purposes as configured by your employer, see
Data Retention.
3. How We Use Information
We use the information we collect to:
- Verify employee attendance, duty status, and geofence compliance
- Generate attendance, duty, and shift reports for company administrators
- Authenticate users and secure accounts and sessions
- Send notifications related to shifts, check-in/check-out reminders, and duty updates
- Maintain audit logs for security and compliance purposes
- Improve the reliability, performance, and features of the Service
- Respond to support requests and troubleshoot issues
4. Legal Basis for Processing
Where applicable law requires a legal basis for processing (e.g., under GDPR), we rely on:
- Performance of a contract — processing necessary to provide the
Service to your employer/organization
- Legitimate interests — of the organization to monitor duty
compliance and workforce attendance
- Consent — where location or notification permissions are requested
directly from the device
- Legal obligation — where retention or disclosure is required by law
5. How We Share Information
We do not sell your personal information. We may share information with:
- Your employer / organization admin — who manages your account and
can view attendance, duty, and location data collected through the Service
- Service providers — such as cloud hosting, SMS/push notification, and
analytics providers, who process data on our behalf under confidentiality obligations
- Legal & compliance — where required to comply with applicable law,
regulation, legal process, or governmental request
- Business transfers — in connection with a merger, acquisition, or
sale of assets, subject to standard confidentiality terms
6. Data Retention
We retain personal, attendance, and location data for as long as your account is active
and as necessary to fulfill the purposes described in this policy, including satisfying
any legal, accounting, or reporting requirements set by your organization. We do not
currently apply an automatic deletion schedule to location logs; data is retained until
your organization's admin removes it or requests deletion on your behalf.
7. Data Security
We implement administrative, technical, and physical safeguards designed to protect your
information, including encrypted transport (HTTPS/TLS), hashed credential storage,
role-based access control, and audit logging. However, no method of transmission or
storage is 100% secure, and we cannot guarantee absolute security.
8. Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access, correct, or request deletion of your personal data
- Object to or restrict certain processing
- Withdraw consent for location tracking (which may limit app functionality)
- Disable notifications through your device settings
To exercise these rights, contact your organization's administrator or reach us directly
using the details in Contact Us.
9. Employer / Employee Relationship
MyHajri is provided to organizations ("Company Admins") to manage their own
employees. Your employer acts as the data controller for attendance, duty, and location
data collected about you, and determines the retention and access policies within their
organization. We act as a data processor providing the underlying platform. Questions
about how your specific employer uses your data should first be directed to your
employer's admin/HR team.
10. Children's Privacy
The Service is intended for use by working adults employed or engaged by an organization
and is not directed at children under 16. We do not knowingly collect personal
information from children.
11. International Data Transfers
Your information may be stored and processed in a country other than the one in which you
reside. Where we transfer data internationally, we take steps to ensure appropriate
safeguards are in place consistent with applicable data protection laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated
by updating the "Last updated" date at the top of this page. Continued use of the Service
after changes take effect constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
