1. Who this policy covers
Fieldura is a workforce application supplied to companies (“your employer”) so their field representatives can record customer visits and so their managers can verify that those visits happened. It is provided by Fieldura, Yarmouk, Baghdad, Iraq (“we”, “us”).
The app is not for general consumer use. You will normally only have an account because your employer created one for you.
Who decides how your data is used. Your employer is the data controller: they decide what is recorded, who can see it, and how long it is kept. We are the data processor — we operate the software on their instructions. Questions about why you are being tracked, or requests to see or delete your records, should go to your employer first. We will help them respond.
2. What the app collects
| Data | When | Why |
|---|---|---|
| Account details — name, work email, role, team/manager, region | Created by your employer | To sign you in and show you the right customers and reports |
| Precise location (GPS latitude/longitude) | Only at the moment you tap check-in or check-out. Never in the background, and never as a continuous route trace. | To record where a visit took place and measure the distance to the customer’s registered address |
| Photos you take during a visit | Only when you use the in-app camera | Visit evidence. The app uses the camera directly and cannot read your photo gallery. |
| Visit record — customer, timestamps, duration, your notes | When you record a visit | The core activity log your employer relies on |
| Location-integrity signal — whether the device reported a simulated (“mock”) GPS position | At check-in | To flag falsified locations. It records a yes/no result, not your device’s contents. |
| Technical data — platform, device name you supply at sign-in, app version, IP address, error logs | While using the app | Security, session management and diagnosing faults |
| Customer/contact records — names, workplace addresses, coordinates | Entered by your employer or by representatives | To plan and verify visits. This is data about third parties, supplied and controlled by your employer. |
What we do not do
- We do not sell or rent personal data.
- We do not serve advertising, and the app contains no advertising or analytics SDKs.
- We do not track your location outside an explicit check-in or check-out action, and the app requests no background-location permission.
- We do not access your photo gallery, contacts, messages, call logs or microphone.
- We do not use your data to train machine-learning models.
3. Offline storage on your device
The app is built to work without a signal. Visits, notes and photos you record are saved in a private database on your device and uploaded when a connection returns. Until then they stay on the phone. Uninstalling the app before syncing deletes any records that have not yet been uploaded.
4. Permissions the app asks for
- Location (precise, while in use) — required. Without it a visit cannot be verified.
- Camera — required to attach visit photos.
You can refuse or later revoke these in your device settings. Doing so does not delete data already recorded, but it will prevent you from completing new check-ins.
5. Legal bases (where GDPR or similar law applies)
- Contract / employment — operating the service your employer has engaged us to provide.
- Legitimate interests — your employer’s interest in verifying field activity and preventing falsified reporting, balanced against your privacy. Location is therefore captured only at discrete check-in events rather than continuously.
- Legal obligation — where record-keeping is required of your employer.
Your employer is responsible for telling you, in advance, that visit locations are recorded.
6. Who your data is shared with
- Your employer — your managers and administrators can see your visits, locations, photos and derived verification flags.
- Infrastructure providers that host the service on our behalf under written data-processing terms: DigitalOcean, LLC (New York, United States).
- Authorities, where we are legally compelled to disclose.
Each customer company’s data is isolated from every other company’s at both the application and the database level.
7. Security
- All traffic between the app and our servers is encrypted with TLS/HTTPS. The production app will not transmit over an unencrypted connection.
- Passwords are stored only as salted one-way hashes.
- Access is role-based: representatives see their own records, managers see their own team’s.
- Tenant separation is enforced in the database itself, not only in application code.
No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.
8. How long data is kept
Visit records, photos and location points are retained for as long as your employer’s account is active, or for the retention period they configure. Deleted records are first marked deleted and recoverable, then permanently purged within 30 days. When an employer ends their subscription we delete or return their data within 30 days, except where law requires us to keep it longer.
9. Your rights
Subject to local law, you may request access to your personal data, correction of it, deletion, restriction of processing, portability, or object to processing. Because your employer controls these records, please contact them first; if you contact us directly we will forward your request to them and support their response. You may also complain to your national data-protection authority.
10. International transfers
Data is hosted in the United States (DigitalOcean, New York). If you or your employer are located elsewhere — including Iraq and the wider Middle East — your personal data, including visit locations and photos, is transferred to and stored in the United States. Where such a transfer requires safeguards under your local law, we rely on appropriate measures such as standard contractual clauses and our written data-processing terms with our hosting provider.
11. Children
Fieldura is a workplace tool for adults. We do not knowingly collect data from anyone under 18.
12. Changes
We will update the date at the top of this page when this policy changes, and notify employer administrators of material changes.
13. Contact
Fieldura
Yarmouk, Baghdad, Iraq
Privacy enquiries: abdrhf20@gmail.com
This policy is governed by the laws of the Republic of Iraq.