TalentBridge mobile app: Privacy Policy
This policy explains what the TalentBridge mobile app (the "app", Android package com.tenali.talentbridge) does with personal data. The app is published by Tenali Labs, the brand of PROGRC Software and Services L.L.C, United Arab Emirates ("PROGRC", "we", "us").
The app is for employees and consultants of PROGRC. Accounts are created by the company; there is no public sign-up, and the app is not meant for anyone else. It is a phone version of parts of the TalentBridge web platform, which has its own privacy policy at /legal/privacy. Everything in that policy about how the company handles your employment records also applies here.
1. What the app handles
What you type or choose in the app, and sent to the company's TalentBridge server:
- Your work e-mail address and password, to sign in. The password is sent over an encrypted connection to the server and is not saved on the phone.
- Timesheet entries (hours, tasks, notes) and the timesheets you submit.
- Clock-ins and clock-outs: the time of each, and where it happened as a result only (section 8). You can change a clock-in on the day you made it; every change is recorded in an audit trail.
- Leave requests and cancellations: dates, leave type, half-day choice and an optional reason you write. The reason is optional and entirely up to you; if you choose to write something about your health there, it is health information that you provided, and it is used only to process the request.
- Expense claims: category, amount, date, description, and the receipt photos or files you attach (taken with the camera, chosen from your photos, or picked from your files).
- Your profile photo, if you choose one.
- Applications to internal job postings, with an optional message.
- If you approve work: your approve or reject decision and any comment you write.
- Your choices: language, whether notifications are on, whether Face ID, fingerprint or phone unlock is used.
2. What the app shows you from company records
The server sends the app records the company already holds about you, so you can see them: your name, e-mail, roles and job title, profile photo, timesheets, leave balances and requests, expense claims, payslips, and the documents listed on your profile (for example the type, number, country and expiry date of an identity or permit document, and the files themselves when you open them). Bank details and pay rates are never sent to the app. People with an approval or finance role also see the items they are asked to approve or process, which can include other people's timesheets, claims, leave and pay information, limited to what their role allows.
3. What is collected automatically
- Technical details with each request: the app version and the phone's platform (Android or iOS). The server also records the time, your IP address and the phone's user agent for sign-in and security logs.
- A device name (for example the phone's model name) kept with your sign-in so you and the administrators can recognise the phone, and a public key for the phone's approval key (see section 6).
- A notification token, if you turn notifications on (section 5).
- Usage counts, in our own database only (no third-party analytics): when you open the app, which screens you view (the screen's name, never an item or an amount) and a few key actions (submit a timesheet, leave request or claim, approve, reject), with the app version, the phone's platform and the time. They are linked to your account only so the company can count how many different people use the app each day; each event is deleted after 30 days and what remains are daily totals with no name or account in them. Nothing you type or any amount is included.
- Crash and performance reports, sent through EAS Observe, the reporting service of Expo. Each report carries a random identifier of this installation of the app (it is not taken from your account or your phone's hardware, and it changes if you clear the app's data or reinstall), the app version, the phone and operating system it came from, a country, timings such as start-up time, the technical details of an error (including its message and stack trace) and the activity just before a crash. The app does not add your name, e-mail, ID or role, and does not send the screens you visit or the addresses it calls.
4. Why we use it
We do not sell personal data. The app has no advertising, no advertising ID, no third-party analytics or tracking software (the usage counts in section 3 go only to our own server), and does not use your contacts or microphone. Your location is read only when you clock in or out (section 8), is never tracked, and the coordinates are not kept: only a result is (for example Onsite or Remote).
- To sign you in and keep your account secure.
- To record the hours you work and whether you worked Onsite, In office or Remote (clock-in and clock-out), so your timesheet can be checked and approved.
- To let you record time, request leave, claim expenses, see payslips and documents, apply for internal roles, and approve work, as part of your employment or engagement.
- To send the notifications you ask for.
- To find and fix crashes and slow screens, and to count how the app is used (with the usage counts above).
- To meet the company's legal, payroll, tax and audit obligations.
5. Notifications
Notifications are off until you turn them on in the app (you are asked once, on your second visit, or you can use the switch in You). When they are on, the app sends a notification token to the TalentBridge server, which uses it to tell you when your timesheet, leave or claim has been decided, and when an item is waiting for your approval.
The text on the lock screen is always generic, for example "Your claim has an update". It never contains amounts, names of other people or reasons. Tapping it opens the item in the app after you sign in or unlock.
The messages go through Expo's push service, and on Android through Google's Firebase Cloud Messaging (on iPhone, through Apple's push service). Those providers see the token and the generic text, not your records. The server removes your token when you sign out, change or reset your password, turn notifications off, when your mobile access is switched off, or when your account is deactivated.
The weekly timesheet reminder, if you turn it on, is scheduled on the phone itself; nothing about it is sent anywhere.
6. What is kept on your phone
- Your sign-in tokens, in the phone's secure storage (Android Keystore or iOS Keychain), on this phone only.
- A private approval key in the phone's secure hardware, used to confirm approvals. It never leaves the phone; only its public part is sent to the server.
- A small profile copy (name, e-mail, roles), your language, and your notification, reminder and unlock settings.
- Optional offline copies of timesheet edits and saved screens, encrypted (AES-256) with a key kept in secure storage.
- Files you opened, such as payslips and receipts, and your profile photo, kept temporarily so they open faster.
- All of this, except your language choice and a count that stops the notification offer from repeating, is removed when you sign out or your session is ended. Uninstalling the app removes the rest.
- Face ID, fingerprint or phone unlock is handled by the phone. The app is only told whether it succeeded; your face or fingerprint never reaches the app or us.
- The app blocks screenshots and screen recording on screens that show pay, approvals and personal documents.
7. Who receives data
Where your data is stored: the TalentBridge server and database run on Microsoft Azure in the Central US region, so your data is stored in the United States, not in the United Arab Emirates. Expo and Google also process the notification and crash data they receive on their own systems, which may be outside the United Arab Emirates.
- PROGRC and the people in the company who are allowed to see it for their job (for example your manager, HR, payroll and finance).
- Service providers that run the service for us: Microsoft Azure (hosts the TalentBridge server and database); Expo (notification delivery and crash reporting); Google (Firebase Cloud Messaging, which delivers notifications to Android phones). When the iPhone version is released, Apple's push service will deliver notifications to iPhones. They process data on our behalf, under their terms, and not for their own advertising.
- When you choose a new password, the server checks it against the Have I Been Pwned list of leaked passwords. Only the first five characters of a one-way hash leave the server, never the password and never who you are.
- Authorities, auditors and advisers, where the law or a legal claim requires it.
8. Permissions the app asks for
- Location, while the app is open: once when you clock in and once when you clock out, so your timesheet can say whether you were Onsite (in the country of the customer you work for), In office (at one of that customer's offices) or Remote. The app asks the first time, explains why, and works without it (your clock-in is then marked "Location unknown"). It never reads your location in the background or between clock-in and clock-out. The reading is sent to the company's server over an encrypted connection. The server works out the result itself, from an offline border dataset (the reading is not sent to any map, geocoding or other third-party service), and **discards the coordinates**: it keeps only the country, Onsite or Remote, whether you were in an office, how far from the nearest office, the phone's accuracy, and whether the phone reported the location as simulated (a "mock location" flag). If you clock in without a connection, the reading waits on your phone, encrypted, and is sent when you are back online; the coordinates are discarded then too. Your approvers, and the other people who may open your timesheet, see that result for the days on it (with a "Mock location" mark if the phone reported one), never coordinates. Location results are kept for as long as the related timesheet record. You can turn the permission off in the phone's settings at any time.
- Camera: only when you choose to photograph a receipt or take a profile photo.
- Photos and files: only the photo or file you pick for a receipt or profile photo.
- Notifications: only after you choose to turn them on.
- Face ID, fingerprint or phone unlock: only if you turn on unlocking with it.
- Internet: to talk to the TalentBridge server.
9. Security
The app talks to the server over an encrypted (HTTPS) connection only. Sign-in tokens are short-lived and stored in secure storage. Approvals need a signature from the phone's key and, when asked, your password. The server limits repeated sign-in attempts. The company can switch off mobile access for any account at any time, which signs the phone out.
10. How long data is kept
Records in TalentBridge are kept for the length of your engagement with the company plus 7 years, the same as in the company's web privacy policy (/legal/privacy), and longer only where the law or a legal claim requires it. Sign-in records and notification tokens of a phone are removed when you sign out of it. Crash and performance reports are kept by Expo; its documentation states a minimum of 60 days, and its product announcement says 90 days.
11. Your choices and rights
- Turn notifications, the weekly reminder and unlock-with-biometrics on or off in You, or in the phone's settings.
- Sign out in You at any time; this removes the data kept on the phone.
- Ask to see or correct your data, or to have it deleted: contact your HR administrator or legal@progrc.com. HR handles deletion requests within 30 days. How deletion works for company accounts is on /privacy/delete-account.
- Depending on where you live, you may also have the right to object to processing, to data portability, and to complain to a data protection authority.
12. Children
The app is for working adults (18 or older) whose company has given them an account. It is not meant for children and we do not knowingly collect data from them.
13. Changes
If we change what the app does with data, we will update this page and the date above, and tell you in the app or by e-mail when the change is important.
14. Contact
Tenali Labs, the brand of PROGRC Software and Services L.L.C, United Arab Emirates. Privacy contact: legal@progrc.com.