Privacy Policy PFC Attendance

Last updated: August 15, 2025 · Effective date: August 15, 2025

PFC Company ("we", "our", or "us") operates the PFC Attendance mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our App.

1. Information We Collect

We collect the following types of information:

Identity data: Full name, National ID number, employee code, job title.
Location data: GPS coordinates at the time of clock-in to verify you are within the assigned branch geofence. Location is used only during the clock-in action and is not stored continuously.
Biometric data: An optional face descriptor (a numeric vector derived from your selfie photo) stored locally on our company server to enable face-recognition check-in. We do not share this data with third parties.
Photo data: A selfie photo taken at each clock-in / clock-out event for identity verification, stored securely on our company server.
Attendance records: Clock-in and clock-out times, attendance status, break durations, and overtime minutes.
Device data: Device model and operating system version for technical support purposes.

2. How We Use Your Information

To record and manage employee attendance.
To verify employee identity during clock-in / clock-out.
To confirm that employees are physically present at their assigned branch (geofencing).
To generate attendance reports for HR and payroll purposes.
To send internal notifications related to attendance and transfers.

3. Data Storage and Security

All data is stored on PFC Company's private servers hosted in a secure environment. We implement industry-standard security measures including encrypted transmission (HTTPS), JWT-based authentication, and access control by role. Only authorized HR personnel and branch managers can access employee data relevant to their scope.

4. Data Sharing

We do not sell, trade, or share your personal data with any third party. Data is accessible only to authorized PFC Company employees within the scope of their role.

5. Biometric Data

If you opt in to face recognition, a numeric face descriptor is generated from your photo and stored on our server. This descriptor cannot be reverse-engineered to reconstruct your image. You may request deletion of your face descriptor at any time by contacting HR.

6. Location Data

Location is accessed only when you initiate a clock-in action. We do not track your location in the background or outside of this specific action. Location data is used solely to verify branch proximity and is not stored permanently.

7. Data Retention

Attendance records are retained for a minimum of 2 years in accordance with Saudi Labor Law requirements. Selfie photos are retained for 1 year. You may request a review of your retained data by contacting HR.

8. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your biometric face descriptor.
Withdraw consent for face recognition at any time.

To exercise these rights, contact your HR department or email us at the address below.

9. Children's Privacy

The App is intended for use by PFC Company employees only. We do not knowingly collect data from individuals under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify employees of any significant changes through the App or via HR communication. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

If you have any questions about this Privacy Policy, please contact:

PFC Company — HR Department
Email: hr@pfccompany.com
Website: beige-stingray-371202.hostingersite.com