Privacy Policy

Last updated: 15 October 2026

What we collect

Employee details the organization adds (name, employee number, email), the device identifier and its public key, and the location and time of each punch.

Biometric data

We never collect or store fingerprints or face images. Verification happens inside the secure chip of the employee's phone; we only receive a digital signature.

Profile photo

Optional. Added by the employee or their organization for display in the app and dashboard only, never for verification. The employee can remove it from “Account” at any time.

Notifications

We send notifications through OneSignal and share with it only the device’s notification ID and the message text — never location or attendance records.

Location

We use location only at the moment of a punch or a presence check, and never track the employee in the background.

Apple Watch

Optional. Linked to the employee's account from their phone after they confirm with their biometrics, registered as a second device with its own public key, and used only to punch and show the day. The employee or their organization can unlink it at any time, and it is unlinked automatically when the phone changes or the employee signs out.

Hosting

Data is hosted inside the Kingdom of Saudi Arabia, except as described under “Dashboard assistant”.

Dashboard assistant

An optional assistant for dashboard users that explains how to use the system, provided by Anthropic (outside the Kingdom) as a data processor on our behalf. Only the question and conversation text are sent to it — never employee data or attendance records — and it does not use them to train its models. We keep questions for 180 days to improve answers, then delete them. Please don't type personal data about employees into the assistant.

Audit trail

We record important dashboard actions (who changed what, and when) to protect the organization, and keep them for 3 years before they are deleted automatically.

Sharing

We do not sell data or share it, except with the organization that owns the account or where the law requires.

Your rights

Employees can ask to see or correct their data through their organization. Attendance records are work records owned by the organization and stay with it for the life of its subscription.

Deleting your account

In the app: “Account”, then “Delete my account” — always available, even if the account is suspended. Right away: the phone is unlinked and the profile photo, notification ID and sessions are deleted. When the organization completes the request, your personal data is erased for good: name, email, phone, job title, your devices, the locations and IP addresses of your punches, the reason you gave for deleting, and your personal details in the audit trail. Attendance times and requests stay with the organization as anonymous work records.

Questions: support@absoom.com