Introduction
Saudi Solid Rocks Limited Co. (RSG) ("we," "us," or "our") is committed to protecting the privacy and security of users of the Daleel Punch mobile application ("Daleel Punch" or the "App"). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information in connection with the App, in compliance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and other applicable regulations.
Daleel Punch is an employee attendance tool designed exclusively for use by authorized personnel aged 18 or older. The App allows employees to punch in and out of work using location-based tracking and optional biometric verification. This Privacy Policy applies only to employees whose accounts are created and managed by their employer. It does not apply to members of the general public or unauthorized users.
Information We Collect
We collect the following types of personal information to support the App’s functionality and ensure compliance with company policies and local laws:
Personal Information
- Employee Information: Name, employee ID, department, and contact details (e.g., phone number, email) as provided by your employer.
- Geolocation Data: Real-time location data collected while the App is active to verify that you are within an approved worksite during punch-in and punch-out.
- Biometric Data (Optional): Facial recognition or fingerprint data used solely for identity verification, if enabled by your employer.
- Punch Data: Timestamp logs of punch-in and punch-out actions.
- Request Data: Data related to attendance corrections or special requests (if supported in your version of the App).
Automatically Collected Information
- Usage Logs: Information about your interaction with the App, including session times, error logs, and frequency of use.
- Device Information: Device type, model, OS version, unique device identifiers, and IP address.
- Analytics Data: Aggregated or anonymized usage statistics collected through tools like Firebase Analytics to improve App performance.
Third-Party Services
We use third-party services (such as Firebase) for functions including data storage, analytics, and push notifications. These services may collect data in accordance with their own privacy policies.
How We Use Your Information
We collect and process your personal information to:
- Enable secure and verified punch-in and punch-out tracking.
- Confirm your physical presence at authorized locations during attendance events.
- Provide employers with accurate attendance data for operational and payroll purposes.
- Send system or employer-related notifications (e.g., schedule reminders or punch errors).
- Improve App performance, functionality, and reliability.
- Comply with legal obligations, including labor law and data protection regulations.
How We Share Your Information
We do not sell or rent your personal data. We may share your information in the following circumstances:
- With Your Employer: For attendance records, reporting, and workforce management.
- With Authorized Third Parties: We work with service providers (e.g., Firebase) to store data, send push notifications, and process analytics. These parties are contractually obligated to safeguard your data and comply with PDPL.
- For Legal Compliance: When required by law, court order, or official authority, or to protect the rights, safety, or integrity of RSG, its users, or its systems.
- Business Transfers: In the event of a corporate merger, acquisition, restructuring, or asset sale, your data may be transferred to the successor entity under conditions of continued protection.
Data Storage and Security
Storage
- All data is securely stored on our servers and third-party cloud platforms (e.g., Firebase).
- Biometric data is encrypted and stored only for identity verification.
- Data retention follows the principle of minimal retention: information is kept only for as long as necessary for its intended purpose or legal obligation.
Security
We implement robust security practices including:
- End-to-end encryption for sensitive data.
- Access controls and user authentication.
- Regular audits and security testing.
While we take extensive precautions, no digital platform is immune to risks. You acknowledge that RSG cannot guarantee absolute protection against unauthorized access, breaches, or cyberattacks.
Attendance Verification Photos
When you punch in or out, the App captures a photo of your face to verify your identity. In connection with each punch, we collect and process the following:
- A photo of your face captured at the moment of punch-in or punch-out, together with the date and time, your device's location and distance from your assigned worksite, a device identifier, and your employee and site identifiers.
- Photos are compared automatically against your enrolled reference photo to verify your identity. Verification is performed by facial-comparison and anti-spoofing software operated on our own servers; your photos are never sent to any third-party facial-recognition service, and no permanent biometric template of your face is stored — the comparison happens at each punch.
- Photos and punch data are also screened automatically for signs of fraudulent capture (for example, photo or video replay) and may be used to investigate attendance anomalies. Photos from failed or rejected verification attempts are also stored, for review purposes.
- Punch photos are stored securely and automatically deleted after seven (7) days. Attendance records (date, time, result, location, and related punch details — without the photo) are retained for three (3) years.
- Access to punch photos and attendance records is restricted to authorized personnel of your employer (e.g., HR/administration) and the RSG Operations Team, solely for attendance control and fraud review. Photos are never sold, shared with third parties for marketing, or used for any purpose other than attendance verification and fraud prevention.
Your employer is the data controller for your attendance data; RSG processes it on your employer's behalf. For questions or requests regarding your punch photos or attendance data, contact us at rsgsupport@rsg.one or your employer's HR department.
Your Rights
Under the PDPL, you have the right to:
- Access: View your personal data stored within the App.
- Correction: Request correction of inaccurate or outdated information.
- Deletion: Request deletion of your personal data, subject to employer policies and legal retention requirements.
- Objection: Object to certain types of data processing (e.g., for analytics purposes).
- Data Portability: Request a copy of your data in a structured, commonly used format.
To exercise any of these rights, please contact us or your employer’s HR department. We will respond in accordance with PDPL timelines.
Children’s Privacy
The App is intended strictly for employees aged 18 and above. We do not knowingly collect or process data from minors under 18. If we become aware of such data, it will be deleted promptly.
International Data Transfers
Some of the data processed by Daleel Punch may be stored or handled by cloud services located outside the Kingdom of Saudi Arabia. We ensure that any international transfer complies with PDPL requirements and includes appropriate safeguards such as contractual clauses or encryption.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in law, technology, or our services. You will be notified of any material changes via in-app notifications or email, and the updated policy will be effective as of the date posted.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data rights, please contact us at:
RSG – Saudi Solid Rocks Limited Co.
📧 Email: info@rsg.one
🏢 Head Office: Diplomatic Quarter, Riyadh, Kingdom of Saudi Arabia
🏢 Branch Office: Sari Street, Al Khalediya District, Building Jeddah 101, Jeddah, Kingdom of Saudi Arabia
📞 Phone: +966 11 211 1116
🌐 Website: https://rsg.one