سياسة الخصوصية

1. Scope and Roles

MSAR is an internal government workforce system used by the administration to monitor inspectors' field visits to institutions. The administration using the system owns the data and controls the purposes of its processing; MTA Codex develops, operates, and supports the system. Accounts are issued by the administration to its own staff — there is no public sign-up or public use.

2. Information We Collect

• Account data: full name, phone number, a non-reversible password hash, role, and the organizational unit the user belongs to.
• Inspector profile: employee code, job title, grade, rest day, assigned institutions, and a portrait shown next to the inspector's name in the console.
• Device data: device identifier, model, operating system, application version, and last-seen time, used to show which devices an account signs in from and to let the administration block a lost or stolen one.
• Location: coordinates, accuracy, capture time, and whether the reading was a mock location — sampled only at the moment a visit is recorded.
• Evidence photos: the inspector's face photo and the institution photo, each with a SHA-256 integrity digest and capture time.
• Time-integrity evidence: technical measurements that reveal a changed device clock or a restart between the start and end of a visit.
• Visit data: the institution, visit time, notes, and recorded reasons when a visit is not carried out.
• System records: sign-in records, failed sign-in attempts, audit logs of administrative actions, and limited technical data such as error logs.

3. How We Use Information

Data is used solely to operate the workflow: assigning visit routes, proving a visit took place at the right place and time, reviewing and approving visits, producing administrative reports, managing permissions and account security, and delivering work-related notifications. It is never used for advertising, never sold or rented, and never shared with advertisers or data brokers.

4. Camera and Location

Camera access is requested to capture the two evidence photos required by each visit, and the inspector's portrait once during device setup. The application never activates the camera in the background and never captures media without a direct user action. Precise location access is requested only for the location-verification step inside a visit; the application performs no background location tracking and does not record the inspector's movements outside that moment. Permissions can be withdrawn at any time from device settings, after which field visits requiring location proof cannot be completed.

5. Offline Operation and On-Device Protection

The application works offline in the field: a visit and its photos are stored in the application's private storage in an outbox queue and uploaded automatically once connectivity returns. Evidence photos are never written to the device photo gallery, are not accessible to other applications, and are deleted from the device once the server acknowledges receipt.

6. Sharing

We do not sell personal data and do not share it with advertising parties. Within the system, data is visible only to authorized officials according to their role and organizational scope. The MTA Codex technical team may access the minimum necessary data to operate and support the service, or where a legal obligation or an official request from a competent authority applies.

7. Retention and Deletion

Evidence photos are deleted automatically once the configured retention period expires — 365 days by default, adjustable by the administration between 30 days and 10 years. Files placed under legal hold are excluded until the hold is lifted. Visit records and audit data are retained for as long as administrative and legal requirements demand.

Because accounts are issued by the administration to its staff, requests to disable an account or delete personal data are submitted through the system administrator of the user's administration, or by writing to [email protected]. Requests are honoured to the extent they do not conflict with legal obligations to retain official records.

8. Security and Your Rights

We apply technical and organizational safeguards including password hashing, encrypted HTTPS transport, role- and scope-based access control, the ability to block a specific device, account lockout after repeated failed sign-ins, audit logging of sensitive actions, and backups. No electronic method, however, guarantees absolute security. Users may review their own data and visits in the application and console, change their password and portrait, manage device permissions, and request correction or deletion through the channels above.

9. Children

MSAR is a workforce tool for the administration's employees. It is not directed at children, and we do not knowingly collect data from anyone under 18.

10. Updates and Contact

We may update this policy as our services or legal requirements change; the current version and its update date remain available on this page.

• Company: MTA Codex
• Email: [email protected]
• Phone: +20 103 354 1597
• Website: metacodecx.com