Welcome to Amanah ("Amanah," "we," "us," or "our"). Amanah is a secure business document management platform designed to help companies, employees, and authorized users securely access, upload, download, organize, and manage important business documents, including company records, employee documents, and document expiry reminders.
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Amanah mobile application (the "App"). This Policy applies to all users of the App, including company administrators, employees, and other authorized users acting on behalf of a registered business ("Organization").
By accessing or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Policy, please do not use the App.
Amanah is intended solely for business and organizational use. It is not designed or intended for personal, consumer, or individual use outside of an employment or organizational relationship.
We collect the following categories of information in order to provide, maintain, and improve the App.
When you register for or use the App, we may collect personal information such as:
When an Organization registers to use Amanah, we may collect business-related information, including:
Where an Organization uses Amanah to manage its workforce documentation, we may process employee-related information submitted by the Organization or its administrators, such as:
Organizations are responsible for ensuring they have the appropriate legal basis and authorization to submit employee information to the App, including obtaining any necessary consents or notices required under applicable law.
The App allows users to upload, store, organize, and manage documents, which may include contracts, licenses, certificates, identification documents, company policies, and other business records ("Uploaded Documents"). Uploaded Documents are stored securely and are accessible only to authorized users within the relevant Organization, based on permissions configured by the Organization's administrators.
We do not access, review, or use the content of Uploaded Documents except as necessary to provide the App's functionality (e.g., storage, retrieval, expiry notifications) or as required to maintain security, comply with legal obligations, or respond to a valid request from an authorized administrator.
We may automatically collect certain information about the device you use to access the App, including:
When you use the App, our servers and service providers may automatically record certain log information, including:
We use the information we collect for the following purposes:
We do not use personal information for third-party advertising, and the App does not display third-party advertisements.
Where the General Data Protection Regulation ("GDPR") or similar data protection laws apply, we rely on the following legal bases to process personal information:
Where an Organization submits employee or company information to the App, the Organization acts as the data controller for such information, and Amanah acts as a data processor providing the technical infrastructure to store and manage that information on the Organization's behalf.
We do not sell, rent, or trade personal information to third parties for marketing purposes. We may share information only in the following circumstances:
We use the following third-party service providers to operate and support the App. These providers process data on our behalf and are contractually obligated to maintain appropriate confidentiality and security safeguards.
Amanah uses Supabase for backend infrastructure, including:
Supabase processes data on our behalf in accordance with its own security and privacy practices. For more information, please refer to Supabase's privacy documentation.
Amanah uses Firebase Cloud Messaging, a service provided by Google, to deliver push notifications regarding document expirations, updates, and announcements. FCM may process device tokens and related technical information necessary to deliver notifications to your device. For more information, please refer to Google's Firebase privacy documentation.
We do not use any third-party advertising networks, analytics platforms for advertising purposes, or social media integrations within the App.
We implement industry-standard technical and organizational measures designed to protect information from unauthorized access, disclosure, alteration, and destruction, including:
While we strive to protect your information using commercially reasonable safeguards, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted through the App.
We retain personal information, company information, employee information, and Uploaded Documents for as long as necessary to provide the App's services to your Organization, or as required to comply with legal, regulatory, tax, or accounting obligations.
When an Organization terminates its use of the App, or when a user account is deactivated, we will retain or delete information in accordance with our data retention practices and any specific instructions provided by the Organization's administrator, unless a longer retention period is required by applicable law.
Depending on your jurisdiction, you may have certain rights regarding your personal information, including:
The right to request confirmation of whether we process your personal information and to obtain a copy of that information.
The right to request correction of inaccurate or incomplete personal information.
The right to request deletion of your personal information, subject to certain legal exceptions (e.g., where retention is required by law or necessary for legitimate business purposes).
Where applicable, the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, or to have it transferred to another service provider.
To exercise any of these rights, please contact us using the details provided in Section 14. If you are an employee whose information was submitted by your Organization, we recommend contacting your Organization's administrator, as they are typically responsible for managing such requests in their capacity as data controller. We will assist Organizations in fulfilling such requests where appropriate.
The App itself does not use browser-based cookies. However, our website (if applicable) may use limited cookies or similar technologies necessary for basic website functionality. The App may use device identifiers and similar technologies solely for authentication, security, and push notification delivery purposes, as described in this Policy. We do not use tracking technologies for advertising or cross-application tracking purposes.
Your information may be processed and stored on servers located in countries other than your own, including through our third-party service providers such as Supabase and Firebase, which may operate data centers in multiple jurisdictions. Where we transfer personal information internationally, we take appropriate steps to ensure such transfers comply with applicable data protection laws, including the use of appropriate contractual safeguards where required under GDPR or similar regulations.
The App is intended for business and organizational use by adults and is not directed at, nor intended for use by, children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with personal information, please contact us using the details in Section 14.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the functionality of the App. When we make material changes, we will update the "Effective Date" at the top of this Policy and, where appropriate, provide additional notice through the App or other communication channels. We encourage you to review this Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: contact@amanahpro.online
We will make reasonable efforts to respond to your inquiry in a timely manner.