Privacy Policy

1. Introduction

Welcome to الجدار الهندسي (CPM - Construction Project Management). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our mobile application.

By using our app, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our application.

2. Information We Collect

We collect several types of information to provide and improve our service:

2.1 Personal Information

• Account Information: Name, email address, phone number, role (Developer, Engineer, Viewer, Manager)
• Professional Details: Position, assigned projects, work zones, team memberships
• Authentication Data: Email, password (encrypted), session tokens

2.2 Location Data

• GPS-Based Attendance Validation: Verifies that engineers and workers clock in/out from designated construction site work zones
• Geofencing: Ensures users remain within approved geographic boundaries during their work shift
• Time Fraud Prevention: Prevents unauthorized clock-ins from remote locations
• Work Zone Compliance: Continuously monitors that workers stay within construction site perimeters while clocked in
• Automatic Alerts: Notifies supervisors if workers leave designated zones during active shifts

Background Location Access: Location data is collected in the background (even when the app is not actively in use) to monitor compliance with work zone boundaries throughout the shift duration. This ensures continuous verification of physical presence at construction sites.

2.3 Usage Data

• Task Activities: Task assignments, progress updates, step completions
• Work Records: Clock-in/out times, attendance history, early leave requests
• Communication: Chat messages, task notes, image uploads, file attachments
• Project Data: Projects, zones, blocks, units, templates, plans

2.4 Device Information

• Device Details: Device model, operating system version, unique device identifiers
• Firebase Cloud Messaging (FCM) Tokens: For push notifications
• App Version: For compatibility and support purposes

2.5 Media and Files

• Photos: Task documentation images, step progress photos, chat images
• Construction Plans: Uploaded project plans and blueprints
• Notes: Text notes added to tasks and steps

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Core Functionality

• User authentication and account management
• Project and task management
• Team collaboration and communication
• Progress tracking and reporting
• Template and workflow management

3.2 Attendance and Compliance

3.3 Communication and Notifications

• Sending push notifications for task assignments, completions, and updates
• Delivering chat messages and team communications
• Notifying about plan changes and early leave requests
• Broadcasting important announcements

3.4 Service Improvement

• Analyzing app usage to improve features
• Identifying and fixing technical issues
• Enhancing user experience
• Developing new functionalities

4. Data Storage and Security

We take data security seriously and implement industry-standard measures:

4.1 Storage Location

• All data is stored on secure cloud servers (Laravel backend)
• Database encryption at rest
• Regular automated backups
• Geographically distributed storage for reliability

4.2 Security Measures

• Encryption: All data transmission uses HTTPS/TLS encryption
• Password Protection: Passwords are hashed using industry-standard algorithms
• Access Control: Role-based permissions limit data access
• Session Management: Secure token-based authentication
• Firebase Security: Protected FCM token storage and delivery

4.3 Data Retention

• Active user data is retained while your account is active
• Attendance records are kept for 2 years for compliance purposes
• Project data is archived after project completion (as per company policy)
• Deleted accounts are permanently removed after 30 days

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following limited circumstances:

5.1 Within Your Organization

• Project data is shared with assigned team members
• Supervisors and managers can view assigned workers' attendance and progress
• Chat messages are visible to participants in the conversation

5.2 Service Providers

• Firebase (Google): For push notifications and cloud messaging
• Cloud Hosting: For secure data storage and backend services

5.3 Legal Requirements

• Compliance with applicable laws and regulations
• Response to valid legal processes (court orders, subpoenas)
• Protection of our rights and safety

6. Location Data Specific Policies

• Collection Purpose: Location is collected ONLY for GPS-based attendance validation and work zone compliance
• Not Shared: Location data is NOT shared with third parties or used for advertising
• Not Sold: We do NOT sell or monetize location data
• Limited Access: Only authorized supervisors and managers can view location-based attendance records
• Retention: GPS coordinates are retained for 2 years for compliance and auditing
• Control: You can disable location services in your device settings, but this will prevent clock-in/out functionality
• Transparency: All location tracking occurs with user awareness during work hours

7. Your Rights and Choices

You have the following rights regarding your personal data:

7.1 Access and Portability

• Request a copy of your personal data
• Export your data in a machine-readable format
• View your attendance history and location records

7.2 Correction and Updates

• Update your profile information at any time
• Correct inaccurate data
• Request changes to your account details

7.3 Deletion

• Request account deletion (subject to legal retention requirements)
• Delete specific messages or images you've uploaded
• Opt-out of non-essential communications

7.4 Location Settings

• Disable location services in your device settings (note: this prevents attendance features)
• Request deletion of historical location data (after legal retention period)

8. Permissions Required

Our app requests the following Android permissions:

• INTERNET: For connecting to backend services
• ACCESS_FINE_LOCATION: For precise GPS-based attendance
• ACCESS_COARSE_LOCATION: For approximate location (backup)
• ACCESS_BACKGROUND_LOCATION: For continuous work zone monitoring during shifts
• CAMERA: For capturing task documentation photos
• READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE: For uploading and saving images and plans
• RECEIVE_BOOT_COMPLETED: For maintaining notification services
• WAKE_LOCK / VIBRATE: For delivering push notifications
• FOREGROUND_SERVICE: For location tracking during active work

9. Children's Privacy

Our application is designed for professional construction management and is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date at the top of this document
• Sending a push notification for significant changes

You are advised to review this Privacy Policy periodically for any changes. Changes are effective immediately upon posting.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Third-Party Services

Our app uses the following third-party services:

• Firebase Cloud Messaging (Google): For push notifications
  Firebase Privacy Policy
• Google Play Services: For location services and app distribution
  Google Privacy Policy

13. Contact Us

14. Consent

By using our app, you hereby consent to our Privacy Policy and agree to its terms. For location data specifically, you will be prompted to grant explicit permission when you first use attendance features.