Application privacy policy

This policy explains how Asfour Engineering & Contracting collects, uses, and protects
information relating to users of the Asfour Engineering application. The app
is an internal business system for authorised employees, operators, and users who manage
company, site, and equipment operations.

Information we may collect

• Account and identity data: name, email address, phone number, employee details, and a photo or identity document when required for account creation or verification.
• Work and operational data: attendance, work orders, maintenance, equipment handovers, notes, forms, and operational records entered by the user.
• Photos and files: images and documents the user chooses to capture or upload as evidence of completed work or to document equipment and business records.
• Location: precise or approximate location when a field action requires location verification and after device permission is granted. We do not use location for continuous background tracking.
• Camera and QR codes: to scan QR codes and capture documents or field-work images.
• Device and diagnostics data: notification token, app/device version, and crash diagnostics needed to deliver notifications and improve reliability and security.

How we use information

We use information to authenticate users, enforce permissions, provide app features, document operations, protect accounts, deliver work notifications, support users, diagnose faults, and improve the service. We do not sell personal information or use it for advertising.

Sharing and service providers

Information may be processed by company systems and technical providers required to operate
the service, including ERPNext/Frappe, hosting and storage providers, Google Firebase for
notifications and crash reporting, and Google document-scanning services. Processing is
limited to operating and securing the app; providers are not permitted to use the data for
their own advertising.

Security and retention

We use HTTPS encryption, role-based access controls, and secure on-device storage for session tokens. Fingerprint or facial-recognition data remains within the device security system and is not sent to our servers. Business records are retained as necessary for operations, legal obligations, and audits, then deleted or de-identified in accordance with company policy.

Your choices and rights

You may refuse camera, location, or notification permissions through device settings, although related features may not work. You may request access to or correction of your information, or request deletion of your account and associated data, subject to records that must be retained by law or as company business records, by contacting us below.

Children’s privacy

The app is not directed to children and is intended for authorised business users aged 18 or older.

Contact us

Asfour Engineering & Contracting
Alexandria–Cairo Desert Road, Merghem, Alexandria, Egypt
admin@asf-egypt.com