Privacy Policy – myBeshay App

This Privacy Policy explains how the myBeshay mobile application (“Application”), provided by Beshay Steel, collects, uses, and protects your information. The Application enables employees to manage attendance, HR requests, and related organizational services through secure mobile access.

1. User Account and Authentication

Users do not create personal accounts within the Application.

All user accounts are provisioned and managed by the Beshay Steel IT Department through Microsoft Azure Active Directory (AAD). Employees authenticate using Microsoft Single Sign-On (SSO).

When signing in, the Application accesses basic enterprise account information (such as user ID and authentication tokens) strictly for identity verification and secure login.

2. Information We Collect

The Application collects only the information necessary for its core functionality, including attendance tracking and secure system access.

a. Location Information (Precise & Background)

We collect precise geographic location data, including when the Application is running in the foreground or background, for the following purpose:

• Attendance tracking: enabling employees to check in and check out based on their physical presence at authorized work locations, even when the app is minimized or not actively in use.

We do not use location data for advertising or market analysis.

b. Device Information

We automatically collect certain device-related information, including:

• Device model and manufacturer

• Operating system version

• Device identifiers (e.g., Android ID / OAID / hardware identifiers)

• IP address

• Network information (e.g., connectivity status)

This information is used for security, performance optimization, and to ensure compatibility of the Application with employee devices.

c. App Usage and Diagnostic Information

To maintain and improve functionality, the Application collects:

• Application usage logs

• Crash reports

• Performance and diagnostic data

This data is used to identify issues, enhance stability, and support internal IT operations.

3. How We Use Your Information

Your information is used for:

• Accurate location-based attendance check-in/check-out

• Secure employee authentication via Microsoft Azure AD

• Improving app performance, diagnostics, and stability

• Supporting internal HR, attendance, and operations systems

We do not use your data for advertising or unrelated purposes.

4. Data Sharing and Disclosure

Your information may be shared only as follows:

• Internal systems and authorized personnel for attendance tracking and HR processes

• Microsoft Azure AD for authentication (handled securely under Microsoft’s enterprise security framework)

• Legal authorities, if required to comply with applicable laws or lawful requests

We do not sell, rent, or disclose your personal or location data to any advertising platforms or external third parties.

5. User Choices and Control

You may control your data in the following ways:

• Location Permissions: You may disable location access at any time from your device settings.

  • However, disabling location access will prevent the Application from performing attendance check-in/out functions.

• Uninstalling the App: You may stop all data collection by uninstalling the Application from your device.

6. Data Retention

We retain location and usage data only for as long as necessary to support organizational, operational, and compliance purposes.

Diagnostic and technical data may be stored in aggregated or anonymized form for up to 24 months, depending on internal IT policies.

7. Data Security

We use administrative, technical, and physical safeguards to protect your data, including:

• Secure authentication through Microsoft Azure Active Directory

• Encrypted communication channels

• Access controls limiting data visibility to authorized personnel only

We continuously monitor and update our systems to maintain high security standards.

8. Third-Party SDKs and Services

The Application may use trusted third-party services such as:

• Microsoft Azure AD Authentication Services

• Mobile OS services (Android/HarmonyOS) for location and device data handling

• Crash/diagnostic frameworks (e.g., native system crash reporters)

All third-party services are used solely to support the App’s core functions and are subject to their respective privacy and security practices.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Continued use of the Application after updates indicates your acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

📧 legal@beshaysteel.com

11. Consent

By using the Application and signing in with your organizational Microsoft account, you consent to the collection and processing of your information—including precise and background location data—as described in this Privacy Policy.