This policy explains what JASARA Crisis collects when you use the mobile application, why, and what happens to it. The app exists to let employees of JASARA Project Management Company ask for help and answer safety alerts; it collects only what that requires.
1. Who is responsible
- Organisation
- JASARA Project Management Company
- Country
- Saudi Arabia
- Contact
- hse.emergency@jasarapmc.com.sa
- Application
- JASARA Crisis for iOS and Android
2. What we collect
Your account
- Your name and work email address, which identify your account. Accounts are created by the organisation; you cannot register from the app.
- Your password, which is verified by the organisation's server and never stored by the app. After sign-in the app keeps a session token in the device's secure storage (Keychain on iOS, Keystore-backed storage on Android) so you stay signed in.
- A contact phone number, if one is recorded on your account or you enter one with a request.
Safety requests you raise
- The type of incident you choose, any description you type, the location you type or select, and the time you sent it.
- Updates the response team records against your request (acceptance, escalation, resolution) and a timeline of those events.
Alerts you answer
- Your response to a safety alert (“I am safe”, “Acknowledged” or “I need assistance”) and when you gave it. Answering “I need assistance” raises a request on your behalf.
Technical information
- The organisation's server keeps standard access logs (your IP address, the time of each request and the app version), and an audit record of safety actions taken through the app.
- The app does not access your device's GPS location, contacts, camera, microphone or photos, and contains no advertising or analytics software.
- The app checks whether the device has a network connection so it can tell you when it is offline. Nothing about this is transmitted.
3. Why we use it
- To alert the organisation's response team when you ask for help, and to let them reach you.
- To show you the status of your requests and to let you answer safety alerts.
- To keep an accurate record of safety incidents and responses, as the organisation's emergency procedures require.
- To keep the service secure and working.
We do not use your information for marketing, profiling or advertising, and we do not sell it.
4. Legal basis
Legal review required: legal basis for processing under the applicable data-protection law
5. Who can see it
- Members of the organisation's emergency response and HSE teams, so they can act on your request or alert. What they see is limited to what their role requires.
- Emergency services or medical providers, where the response team needs to involve them to help you.
- Service providers that host the organisation's server or deliver alerts (for example SMS or email gateways), acting on the organisation's instructions.
- Authorities, where the law requires it.
The app never shows one employee another employee's requests, and never shows you which responder is assigned to yours beyond the fact that one is.
6. How long we keep it
Your account information is kept while you are an employee with access to the application. Request, alert and audit records are kept for Legal review required: retention period for request, alert and audit records, after which they are deleted or anonymised.
7. How it is protected
- Production traffic between the app and the server is encrypted with TLS (HTTPS).
- Access is by short-lived, signed session tokens that the organisation can revoke; signing out revokes them immediately.
- Tokens are stored only in the platform's secure storage and are never written to logs.
- Server-side access is restricted by role, and every safety action is recorded in an audit log.
8. Your rights
Depending on the law that applies to you, you may have the right to access the information held about you, to have it corrected, and in some cases to have it deleted or to object to its use. To exercise these rights, contact hse.emergency@jasarapmc.com.sa or your HSE administrator. Note that safety and audit records may have to be retained even after a request for deletion, where the organisation's legal obligations require it.
The application is for employees only and is not directed at children.
9. Changes and contact
We will update this policy when the application or the way it uses information changes, and show the effective date at the top. Questions about this policy can be sent to hse.emergency@jasarapmc.com.sa.
Governing law: Legal review required: governing law and competent courts