Privacy Policy

1. Data Collected

Aras Green Energy (“we”, “our”, or “us”) collects the following types of information when you use our mobile application (the “App”):

Location Data

• GPS coordinates (latitude and longitude)
• Collected during employee check-in and check-out
• Collected when map, routing, or zone-based attendance features are used

Attendance & Work Data

• Check-in and check-out timestamps
• Session durations
• Attendance status
• Zone and geo-fence identifiers and names
• Work hours and related operational metadata

Account & Profile Data

• Name
• Email address
• Employee or customer identifier
• Profile details required to link the App to your organization or account

Device & App Data

• Device model
• Operating system version
• App version
• IP address
• Diagnostic logs and crash reports (for stability and performance)

Usage & Analytics Data

• Aggregated and anonymized usage statistics
• Feature usage and performance metrics used to improve the App

Third-Party Service Data

When map or routing features are used, coordinates and IP addresses may be processed by third-party providers (such as map tile or routing services) strictly to deliver those features.

2. How the Data Is Used

We use collected data for the following purposes:

• Core Functionality: To enable employee attendance tracking (check-in/check-out), calculate working hours, and validate presence within assigned zones.
• Location-Based Features: To display maps, calculate routes, detect nearest attendance zones, and verify attendance locations.
• Account Management: To authenticate users and provide access to employee or customer features.
• Security & Integrity: To prevent misuse, detect suspicious or fraudulent activity, and maintain accurate attendance records.
• Service Improvement: To analyze usage patterns, diagnose issues, improve performance, and enhance features.
• Communications: To send essential service notifications, transactional messages, and support responses.
• Legal & Compliance: To comply with applicable laws, regulations, or lawful requests, and to protect rights, safety, and property.

3. Is Data Shared With Anyone?

We do not sell or rent personal data.

Data may be shared only in the following cases:

Employer / Organization

Attendance records, zone information, and necessary account data are shared with the employer or organization managing attendance and operations.

Service Providers

Trusted third-party providers (e.g., cloud hosting, push notifications, analytics, mapping, routing services) process data on our behalf and only as required to operate the App.

Legal & Safety Obligations

Data may be disclosed if required by law, legal process, or to protect users, our company, or the public.

Aggregated / Anonymized Data

We may share anonymized or aggregated data that cannot be used to identify individuals.

Third-party map and routing services may log requests (including coordinates and IP addresses) according to their own privacy policies.

4. How Data Is Protected

• Encryption in Transit: All data transmitted uses HTTPS/TLS encryption.
• Secure Storage: Sensitive data is stored in secured systems with access restrictions.
• Access Controls: Data access is limited to authorized personnel and systems based on role.
• Operational Security: Regular security reviews and best-practice protections are applied.
• Third-Party Safeguards: Service providers are selected carefully and required to meet contractual data-protection obligations.

While no system can guarantee absolute security, we take appropriate measures to protect your data.

5. Data Retention & Deletion

Retention

Attendance and operational records are retained according to employer requirements, legal obligations, and legitimate business needs (e.g., payroll, audits).

Deletion Requests

• Users may request deletion of their personal account data by contacting contact@arasgreenenergy.com.
• Requests are processed within 30 days, unless retention is required by law or operational necessity.

Employer-Controlled Data

Some attendance records may be controlled by your employer. Deletion of such data may require employer approval and may be limited by legal or contractual obligations.

6. User Controls & Choices

• Location Permissions: Location access is required for attendance and zone-based features. You may revoke permission via device settings, but related features may stop working.
• Notifications: Notification preferences can be managed via device settings and the App (if available).
• Access & Correction: Users may request access to or correction of personal data by contacting us.
• Data Export: Users may request a copy of attendance records in a common format (e.g., CSV or JSON), subject to verification.

Third-Party Services

The App may use third-party services such as:

• Mapping and routing services (e.g., OpenStreetMap-based providers)
• Push notification services (e.g., Firebase Cloud Messaging)

These services may process limited technical data (such as IP address or device tokens) according to their own privacy policies.

Children’s Privacy

The App is intended for use by employees and adult users. We do not knowingly collect personal data from children. If such data is identified, we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy to reflect changes in practices or legal requirements. Updates will be published on our website with a revised effective date. Significant changes may also be communicated through the App.

How to Contact Us

Aras Green Energy
Email: info@arasgreenenergy.com
Website: https://arasgreenenergy.com
Address: Iraq, Sulaimani, Qasemlo Street, opposite Karezaushk Hospital