Privacy Policy

1. Information we process

Account and profile data: your name, employee code, phone number, work email and avatar, as provisioned by your employer.

Operational records: collection certificates, waste types, bag counts, weights, on-screen signatures, handover confirmations and their timestamps, and the routes you are assigned.

Technical data: device model, operating system, app version, language and theme preferences, and a push-notification token.

2. Location

While you are signed in and on an active route, the app uses your device's precise location to display the route map, calculate the distance and ETA to your next stop, hand navigation off to your maps app, and timestamp your arrival at each stop.

Location is processed only during active duty. The app does not track your location in the background outside active routes, and location history is retained only as part of the operational record of each route.

3. Camera, photos and microphone

The app requests camera and photo-library access so you can attach photos or short videos to urgent requests and operational documentation, and microphone access so you can record voice notes for urgent requests.

Media you capture is uploaded to your employer's workspace and used for no other purpose. The QR handover itself does not use your camera — the hospital representative scans the code displayed on your screen.

4. Biometric sign-in

If you enable fingerprint or face unlock, biometric verification is performed entirely by your device's operating system. Kaste never receives, stores or transmits your biometric data.

5. How information is shared

With your employer, which owns the operational records you create in the course of your work.

With regulators and authorities where disclosure is required by the laws of the Kingdom of Saudi Arabia.

With service providers that host our infrastructure, deliver push notifications and store uploaded media, under contracts that restrict their use of the data.

We do not sell personal data, and we do not use it for advertising.

6. Security and retention

Data is encrypted in transit and at rest. Particularly sensitive identifiers, such as national ID / Iqama numbers, are additionally encrypted at the field level and displayed masked.

Operational records are retained for the period required by your employer's contract and by applicable Saudi regulations, including the Personal Data Protection Law (PDPL), and are then deleted or anonymized.

7. Your rights

Subject to the PDPL, you may request access to, correction of, or deletion of your personal data. For operational records, please direct requests to your employer as the data controller; we will support them in responding.

You can reach our privacy team at privacy@kaste.sa.

8. Changes to this policy

We will update the date at the top of this page when this policy changes and, for material changes, notify you inside the app before they take effect.