Hazri Book — Privacy Policy

Last updated: 19 July 2026

Hazri Book is a workforce attendance application provided to employers (the “Service”), published by Astalabista (“we”, “us”). This policy explains what the Hazri Book worker app collects, why, and how it is handled.

Business context. Hazri Book is used by an employer (your company) to record and verify the attendance of its field workers. Your employer is the data controller of your attendance data; Astalabista operates the app and hosting on the employer’s behalf as a service provider (processor). If you are a worker, please also refer to your employer’s own policies.

1. Information we collect

• Identity & account data: your company code, employee code (which may be your Iqama/ID number), name, job/trade, assigned site, and your PIN (stored only as a secure one-way hash — never in readable form).
• Attendance capture data: at each check-in/check-out — a photo taken by you, your GPS location (latitude/longitude and accuracy), and the date/time. A server-side timestamp is also recorded.
• Device & technical data: app version, device model/OS, and basic diagnostic/error logs needed to keep the app working.

We do not collect data for advertising, and we do not sell personal data.

2. Why we collect it (purpose)

• To record and verify attendance (who was present, where, and when) for your employer’s payroll, audit, and workforce-management needs.
• To detect and flag out-of-area or missing-data punches for supervisor review.
• To operate, secure, support, and improve the Service.

The legal basis is your employment relationship and your employer’s legitimate interest in verifying attendance, consistent with applicable law (including Saudi Arabia’s PDPL where relevant).

3. How it is used and shared

• Your attendance data (including photos and location) is made available to authorized users at your employer (supervisors, project managers, HR, management) through the Hazri Book admin console.
• We share data only with service providers who host and run the Service on our behalf (cloud hosting, database, and object storage), under confidentiality obligations, solely to provide the Service.
• We may disclose data where required by law or to protect rights and safety.
• We do not share your personal data with third parties for their own purposes or for advertising.

4. Location & camera

• Location is collected only at the moment you check in or out, to verify you are at your assigned worksite. The app does not track your location continuously or in the background.
• Camera is used only to take the attendance photo you capture at check-in/out.
• Where location or a photo cannot be captured, the punch is still recorded and flagged for your supervisor rather than silently dropped.

5. Data storage & security

• Data is encrypted in transit and at rest. Attendance photos are private and accessed only through short-lived signed links — never from a public location.
• Access is role-based and tenant-isolated so each employer sees only its own data. All approvals, edits, and exports are recorded in an immutable audit log.
• Hosting is on a reputable managed cloud region with managed backups. In-Kingdom (Saudi/GCC) hosting is available to employers who require it for data-residency compliance.

6. Data retention

Attendance records are retained for as long as your employer requires them for payroll, audit, and legal obligations, and are deleted or anonymized when no longer required or upon a valid employer/individual request, subject to law.

7. Your rights

Depending on your jurisdiction (including under PDPL), you may have rights to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. Because your employer controls your attendance data, please direct such requests to your employer; we will support them as the service provider. You may also contact us using the details below.

8. Children

Hazri Book is a workplace tool intended for employed adults. It is not directed to children.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version.

10. Contact

Astalabista — privacy contact: astalabista.digital@gmail.com

This policy governs the Hazri Book worker mobile application. Your employer may provide additional notices regarding its own use of the data.