---
title: Employee Privacy Notice (Dawam staff app)
version: 1.2
effective: 2026-09-14
---

# Employee Privacy Notice

**This notice must be shown to an employee BEFORE their first clock-in, not buried in
settings.** Location is recorded at the moment you clock in; notice after the fact is not
notice.

## Who holds your data

**Your employer — the restaurant that gave you this account — decides what is collected
and why.** They are the controller. Madar supplies the software and stores the data on
their behalf; we do not decide how it is used, and we do not use it for our own purposes.

Questions about your own data go to your employer first. If they instruct us, we act.

## What is recorded

### When you clock in and out

| Data | Detail |
|---|---|
| Time of clock-in and clock-out | exact timestamp |
| **GPS location** | latitude and longitude **at the moment you clock in and out** |
| Distance from the branch | metres between you and the branch location |
| Method | how the punch was made (app, manual, corrected) |

**Be clear about what this means:** your position is recorded at two moments each shift.
You are **not** tracked continuously, your location is **not** recorded between punches,
and the app does not follow you when you are off shift or when it is closed.

Location checking is a **setting your employer chooses to switch on**. Where it is off, no
coordinates are stored.

### Your employment record

Employee code, job title, department, hire date and (if applicable) termination date,
employment status, **national ID number**, photo, emergency contact name and phone, and
free-text notes entered by your manager.

### Pay and time

Base salary, payslips, bonuses, deductions (including automatic lateness or absence
deductions), salary advances, leave balances and leave requests, schedules and shift
assignments, worked minutes, lateness, early leave and overtime, and any documents your
employer uploads to your file.

### Requests and corrections

Requests you submit — leave, advances, punch corrections — including their text and
outcome.

### Actions on the till

Some till actions are recorded against the staff member who performed them, with the
time: for example, **removing a table bill's service charge** is stamped with who waived
it and when. Permission to do this is granted **per role and per user** by your employer,
who decides who may waive a service charge.

## Why

To operate the schedule, record attendance, calculate pay, administer leave, and meet your
employer's legal record-keeping duties.

## Automatic deductions — you can challenge them

Lateness and absence can produce **automatic deductions** calculated by the system from
your punches. These follow rules your employer configures.

If a punch is wrong — a phone with no signal, a GPS reading that drifted, a shift you
worked but could not clock into — **submit a correction request in the app**. A manager can
waive a deduction or correct the punch. A deduction should never stand purely because a
computer produced it, and no automated decision here is final without a human being able
to review it.

## Who sees it

- Your managers and HR staff at your employer, according to their permissions.
- Madar staff only where needed for support and maintenance, under confidentiality.
- We do **not** sell it, and we do **not** give it to advertisers.

## The analytics assistant, and your name

Your manager can ask the system questions in plain language — "who took the most orders last
week", "who was late most often". Answering those involves sending the figures to an AI
provider outside Egypt.

**Your name is not sent.** Before anything leaves, names in the results are replaced with
codes — you become `E-4`, and the provider only ever sees `E-4`. When the answer comes back,
the code is turned back into your name so your manager reads something useful. The same
substitution is applied to your manager's own question, so typing your name into the box
does not send it either.

This is done in the software, not as a promise about how the provider behaves: the name
never reaches them, so there is nothing for them to keep.

What *is* sent is the figure attached to the code — how many orders, how many minutes late.
Your manager can already see that; the assistant does not widen who can.

## How long

Kept while you are employed, then retained for the period your employer must keep
employment and payroll records under Egyptian law. See the retention schedule at
**[Data Retention Schedule](/data-retention.html)**.

## Your rights

Subject to Egyptian data protection law you may ask to see your data, correct it, or object
to how it is handled. Contact your employer; we will support them in responding.

Where the law requires a lawful basis other than consent for workplace monitoring —
because consent given to an employer is rarely freely given — your employer is responsible
for establishing it.

## Contact

Your employer's HR contact, or **privacy@madar-pos.cloud** for questions about the software.