Privacy Policy

Last updated: 16 October 2026

1. Introduction

This Privacy Policy explains how MyHRManager ("we," "our," or "the Platform") collects, uses, stores, and protects information when a company ("Client"), its managers, and its employees ("Users") use our software-as-a-service human resources management platform, available via mobile applications and myhrmanagerapp.com (the "Service").

By registering a company account or using the Service as an invited employee, you agree to the collection and use of information as described in this Policy.

2. Information We Collect

2.1 Account and Company Information

• Company name, registration details, industry, and country of operation.
• Owner, manager, and employee names, email addresses, phone numbers, and role assignments.
• Authentication credentials (managed securely via our identity provider; passwords are never stored in plain text).

2.2 Employee & HR Operational Data

• Attendance records, including check-in/check-out timestamps and GPS location captured at the moment of attendance.
• A photograph ("selfie") captured at check-in for identity verification, stored in a private, access-controlled bucket.
• Leave requests and balances, payroll figures (base salary, allowances, deductions, bonuses), and salary advances.
• Scheduling data such as shifts and branch assignments.

2.3 Payment Information

• Subscription plan, billing cycle, currency, and payment confirmation references.
• Proof-of-payment receipts uploaded by the Client, stored in a private storage bucket accessible only to the Client and the Platform owner.
• We do not directly process or store full payment card numbers; payments are confirmed via approved payment gateways or manually.

2.4 Technical & Usage Data

• Device type, application version, and general usage logs for security and troubleshooting.
• Activity logs of administrative actions taken within a company account, for audit purposes.

3. How We Use Information

We use collected information to:

• Provide and maintain the Service;
• Verify attendance and identity;
• Calculate payroll, leave, and advances;
• Generate reports and analytics for company management;
• Enforce subscription plan limits and feature access;
• Detect fraud in payment confirmations;
• Communicate service updates, renewal reminders, and support responses;
• Improve the Service, including through optional AI-assisted features described in Section 5.

4. Legal Basis for Processing

For Clients and Users located in Egypt, we process personal data in accordance with the Egyptian Personal Data Protection Law No. 151 of 2020, including the principles of lawfulness, purpose limitation, data minimization, and the data subject's rights of access, correction, and deletion described in Section 8.

Processing is generally based on: the necessity of processing to perform the HR services requested by the Client; the Client's legitimate business interest in workforce management; and, where required, the consent of the individual employee.

The Client company acts as the data controller for its own employees' data; MyHRManager acts as a data processor providing the technical infrastructure.

5. AI-Assisted Features

Clients subscribed to the Professional plan may enable AI-assisted insights (e.g., attendance-risk indicators, anomaly detection, and a conversational assistant). These features analyze operational data already stored in the Client's account to generate suggestions and summaries.

AI providers used for these features do not receive raw employee identity documents or selfie images; only aggregated or de-identified operational figures are processed for this purpose where technically feasible. API keys and provider credentials are stored in a secured server-side vault and are never exposed to the Client interface.

AI-generated insights are informational and should not be treated as the sole basis for disciplinary or employment decisions. See our Disclaimer document for further detail.

6. Sharing and Disclosure of Information

We do not sell personal data. We may share information with:

• Cloud infrastructure and database providers, strictly for the purpose of storing and processing data on our behalf, under confidentiality obligations.
• Payment facilitators or gateways, limited to the data necessary to confirm a transaction.
• AI service providers, limited as described in Section 5.
• Regulatory or judicial authorities, where required by applicable law.
• A successor entity in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.

7. Data Security

We apply row-level security policies so that a company's data is technically isolated from every other company on the platform. Selfie photographs and payment receipts are stored in private storage buckets and served only via time-limited signed URLs. Administrative access to another company's operational data is restricted; platform-level administrative actions are recorded in an append-only audit log.

No method of electronic storage or transmission is completely secure. While we apply industry-standard safeguards, we cannot guarantee absolute security.

8. Data Retention and Your Rights

We retain operational and payroll-related records for the period required by applicable tax and labor regulations (generally up to five years), after which personally identifying details are anonymized while aggregate financial figures may be retained for statutory reporting.

Subject to applicable law, individuals may request to:

• Access the personal data held about them;
• Correct inaccurate data;
• Request deletion of data no longer required for a legitimate purpose (right to erasure);
• Request a portable export of their data.

Requests relating to employee data should first be directed to the employing Client company; requests relating to company-owner account data may be directed to us using the contact details in Section 13.

9. Children's Privacy

The Service is intended for business use by adults acting in an employment or management capacity. It is not directed at children, and we do not knowingly collect personal data from individuals under the legal working age in the relevant jurisdiction.

10. International Data Handling

The Service supports companies operating in Egypt and internationally, with billing available in Egyptian Pounds (EGP) or US Dollars (USD) depending on the Client's registered country. Where data is processed or stored outside the Client's home country, we take reasonable steps to ensure an equivalent level of protection.

11. Cookies and Website Analytics

Our marketing website (myhrmanagerapp.com) may use essential cookies for functionality and, where enabled, analytics cookies to understand aggregate visitor behavior. Cookie preferences, where offered, can be managed through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to Client account owners via email or an in-app notice at least 15 days before taking effect, except where a shorter period is required for legal or security reasons.

13. Contact Us