Legal
Privacy Policy
Last updated: August 2, 2026
This Privacy Policy explains how JAZ ("JAZ", "we", "us", or "our") collects, uses, shares, and protects information when you or your organization use our website, our web platform at app.jaziq.net, and our iOS and Android mobile applications (together, the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.
1. Information We Collect
We collect information you or your employer provide directly, information generated automatically through your use of the Service, and information collected via specific device permissions you grant. This includes account and profile information, employee and organizational records, attendance and task activity, device and log data, and, where applicable, location and camera data as described below.
2. Account Information
When your organization creates a JAZ account, we collect information such as your name, work email address, phone number, job title, department, and password (stored in encrypted/hashed form, never in plain text). Employers may also add employee records — such as employee ID, role, department, salary or payroll fields, and schedule — to administer the Service on their team's behalf.
3. Attendance & Location Data (GPS)
Where your organization enables GPS-based attendance, the JAZ mobile app requests location permission and collects your device's location at the moment you clock in or clock out, in order to verify that attendance is recorded from an authorized work site. JAZ does not track location continuously, in the background, or outside of an active clock-in/clock-out action. You can decline location permission, but your organization may then require an alternative attendance method (such as QR check-in) to use the Service. Employers are responsible for informing their employees that location data is collected as part of the attendance process, in line with applicable local labor law.
4. Camera Permission (QR Code Attendance)
Where your organization enables QR-based attendance, the JAZ mobile app requests camera permission solely to scan a site-specific QR code to record a clock-in or clock-out event. The camera is only active while you are actively scanning a code from within the attendance screen; JAZ does not capture, store, or upload photos or video from this camera access, and the camera is never used for background surveillance.
5. Push Notifications
With your permission, the JAZ mobile app sends push notifications for events such as task assignments, attendance reminders, approvals, announcements, and messages from your organization. Push notifications are delivered using Firebase Cloud Messaging (FCM), which assigns your device a unique messaging token so notifications can be routed to it. You can disable push notifications at any time from your device's system settings; this will not affect your ability to use the rest of the Service.
6. Cookies & Local/Session Storage
Our marketing website (jaziq.net) uses a single functional cookie to remember your language preference (English or Arabic) — we do not use advertising or third-party tracking cookies on the marketing site. The JAZ platform (app.jaziq.net) and mobile apps use secure, encrypted authentication tokens stored locally on your device or in your browser's session storage to keep you signed in between visits; these tokens are not used for cross-site tracking or advertising.
7. How We Use Information
We use collected information to provide and operate the Service, verify and record attendance, assign and track tasks, generate reports and payroll-ready exports, send the notifications described above, communicate with you, provide customer support, detect and prevent fraud or misuse, and maintain the security, integrity, and performance of our platform.
8. Third-Party Services & Data Sharing
We do not sell personal information, and we do not share it for third-party advertising purposes. We share information only with service providers who help us operate the Service, under contractual confidentiality obligations, including: Supabase (managed database hosting for the information described above); Firebase (push notification delivery, as described above); and, if your organization subscribes to a paid plan, a payment processor to handle billing. We may also disclose information when required by law, to protect the rights and safety of JAZ or our users, or in connection with a merger, acquisition, or sale of assets.
9. Data Security
We use industry-standard technical and organizational measures to protect information against unauthorized access, alteration, or loss, including encryption of data in transit (HTTPS/TLS) and at rest, hashed password storage, role-based access controls limiting who within your organization can view sensitive data, and isolated, access-controlled cloud infrastructure. No method of transmission or storage is 100% secure, but we work to continuously maintain and improve these safeguards.
10. Data Retention
We retain information for as long as your organization's account remains active, or as long as needed to provide the Service and fulfill the purposes described in this policy — including applicable labor and record-keeping regulations for attendance and payroll data. When your organization closes its account, we delete or anonymize personal information within a reasonable period, except where we are required to retain it to comply with a legal obligation, resolve disputes, or enforce our agreements.
11. Your Rights & Choices
Depending on your location and applicable law, you may have rights to access, correct, export, or delete certain personal information, and to withdraw consent for optional permissions such as location or camera access at any time through your device settings. Because employee data within the Service is administered by your employer, employees should generally direct requests regarding their workplace data to their employer first; employers and organizations may contact us directly using the details below for assistance with any request.
12. Children's Privacy
The Service is intended for business use by working adults and is not directed to children. We do not knowingly collect personal information from children under the age of 16, and we will delete any such information if we become aware of it.
13. International Data Transfers
Information may be processed and stored in countries other than your own, including by the infrastructure and service providers listed in this policy. Where required by applicable law, we implement appropriate safeguards to protect information transferred internationally.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will post the updated version on this page and revise the "last updated" date above; material changes will be communicated through the Service or by other reasonable means.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at hello@jaziq.net or through our Contact page.