Privacy Policy

This Privacy Policy explains how the WrkEZ mobile application collects, uses, stores, and protects personal data.

1. Scope and Our Role

This Privacy Policy explains how the WrkEZ mobile application collects, uses, stores, and protects personal data.

WrkEZ operates under two distinct roles:

• As a Processor — for personal data that our customers (employers, the "Data Controllers") submit to or generate within the Service about their employees, contractors, and candidates. We process this data only on the customer's documented instructions.
• As a Controller — for the limited data we determine ourselves, such as website-visitor, account, billing, and support data.

If you are an employee or candidate of one of our customers, please direct privacy requests to your employer (your Data Controller) in the first instance; we will assist them in responding.

2. End-User Use of the Service

By using the Service, you agree to the collection and use of information as described in this Policy. The personal information we collect is used to provide and improve the Service, and we do not use or share your information except as described in this Privacy Policy.

Data, documents, pictures, and GPS location collected through the application are owned and used by your company. WrkEZ and its developer have no control over the data collected. If you have any concerns, please contact your company's HR Department.

3. Information We Collect

3.1 Personal Information Provided by Users

For a better experience, while using the Service we may require you to provide certain personally identifiable information, including but not limited to pictures, location, and your use of the application. The information we request is retained by us and used as described in this Policy.

3.2 Personal Data Collected from Our Customers

We collect personal data from our customers, who are the Data Controllers, for the purpose of providing HR SaaS services. The types of personal data we may collect include, but are not limited to:

• Employee information (e.g., name, contact details, employment history)
• Financial information (e.g., salary, benefits, bank details)
• Attendance and leave records
• Performance evaluations and training records
• Identity documents processed through the Service (e.g., Emirates ID, Qatar ID, passports)
• Log data (e.g., IP address, browser details, operating-system version)

3.3 Log Data

Whenever you use our Service, in the case of an error we collect data and information called Log Data. This Log Data may include your device's Internet Protocol ("IP") address, device name, operating-system version, the configuration of the app, the time and date of your use, and other statistics.

3.4 Third-Party Services

The app may use third-party services that collect information used to identify you, including Google Play Services and Apple App Store Services, each of which has its own privacy policy.

4. How We Use Personal Data

We use personal data solely for the purpose of providing HR SaaS services to our customers, processed in accordance with the instructions provided by the Data Controllers. We do not use personal data for any other purpose without the explicit consent of the Data Controller or as required by law. We do not sell, rent, or lease personal data.

5. Data Controller Responsibilities

By submitting personal data to WrkEZ, the Customer agrees that WrkEZ and its affiliates may process, transmit, and/or store personal data only to the extent necessary for, and for the sole purpose of, enabling WrkEZ to perform its obligations under the SaaS Agreement. The Customer is responsible, as the sole Data Controller, for complying with all applicable data-protection laws, including the UAE PDPL regulating the processing of personal data and special categories of data. The Customer agrees to:

• obtain all necessary consents and make all necessary disclosures before including personal data in Content and using the Service;
• inform WrkEZ of any special categories of data and any processing restrictions (including cross-border restrictions) prior to processing; and
• ensure that the Service meets such requirements.

6. Data Security

We employ industry-standard security measures to safeguard personal data against unauthorised access, loss, or alteration, including:

• Encryption of data in transit and at rest
• Access controls and user authentication
• Regular backups and disaster-recovery procedures
• Ongoing monitoring and testing for vulnerabilities

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Upon termination of the customer's subscription, we securely delete or anonymise personal data in accordance with our data-retention policy, including any AI-derived artefacts such as embeddings and AI processing logs, unless retention is required by law.

8. Data Sharing and Transfers

We do not sell, rent, or lease personal data to third parties. We may share personal data with our service providers who assist us in delivering HR SaaS services, subject to strict confidentiality obligations. The WrkEZ delivery model is subject to change at the developer's discretion; however, such changes will not result in a material reduction in the level of protection provided for Customer data.

9. Individual Rights

Data subjects have the right to:

• access, rectify, erase, and restrict the processing of their personal data;
• object to processing (including direct marketing and certain automated processing);
• withdraw consent; and
• request data portability where applicable.

In relation to significant automated decisions, individuals may request human review or an explanation. To exercise these rights, individuals should contact their respective Data Controller (employer), who will work with us to address their requests.

10. Cookies

Cookies are files with a small amount of data commonly used as an anonymous unique identifier, sent to your browser from the websites you visit. The WrkEZ application does not use cookies explicitly; however, it may use third-party code and libraries that use cookies to collect information and improve their services. You can accept or refuse these cookies; if you refuse, you may not be able to use some portions of the Service.

11. Links to Other Sites

The Service may contain links to other sites that are not operated by us. We strongly advise you to review the privacy policy of those websites. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

12. Children's Privacy

The Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If we discover that a child under 18 has provided us with personal information, we immediately delete it from our servers. If you are a parent or guardian and are aware that your child has provided us with personal information, please contact us so that we can take the necessary action.

13. Breach Notification

If a personal-data breach occurs, we will notify affected customers / Data Controllers without undue delay and assist them in meeting their notification obligations to the relevant supervisory authority and to affected individuals, within the timeframes required by applicable law.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, and material changes may be notified through the Service or by email. You are advised to review this page periodically.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

To request deletion of a WrkEZ account and the personal information associated with it, see Account & Data Deletion.