Togoo HR Privacy Policy

Effective date: 15 September 2026

RODUD Logistics Services Company, a Saudi company that owns and operates Togoo ("Togoo", "we", "us" or "our"), respects your privacy. This policy explains in simple terms what personal data Togoo HR collects, why we use it, and the choices available to you when you use the mobile or web application.

1. Personal data we collect

Depending on how you use Togoo HR, we may collect:

• Account details: your phone number, login code, preferred language and basic device information.
• Identity and employment details: your name, employee number, contact details, nationality, job title, department, manager, work location, work schedule, contract and employment details, and leave or permission balances.
• Attendance details: check-in and check-out times, attendance history, attendance status and your location when you submit an attendance record.
• Requests and communications: information in leave, permission, overtime, missing-punch and purchase requests, complaints, approvals, comments, and any files or photos you choose to attach.
• Notification and usage details: information needed to send notifications, record whether they were delivered or read, protect your account and understand how the application is working.

2. How we collect personal data

We receive personal data from your employer's records, information you enter or upload, your use of Togoo HR, and device features you allow the application to use.

If you allow location access, Togoo HR may check your location while you are using the application to show whether you are within your assigned work area. Your location is sent when you submit an attendance record. Togoo HR does not access your location in the background.

We access the camera, photos or documents only when you choose to take or attach a file. We do not scan your full photo or document library.

3. Why we use personal data

We use personal data to:

• sign you in and protect your account;
• show your employment information, schedules, balances and attendance history;
• record attendance and confirm whether it was submitted from an assigned work area;
• manage HR requests, complaints, approvals and attached documents;
• send important service and decision notifications;
• maintain, support and improve Togoo HR; and
• meet employment, accounting and legal requirements.

4. Legal basis

We handle personal data in accordance with the Saudi Personal Data Protection Law and other applicable laws. We use data when it is needed to provide the service, meet a legal duty, protect lawful interests or where you have given consent when required.

5. Sharing personal data

Your data is available only to people who need it for their work, such as authorized administrators, HR and payroll staff, managers, approvers, and authorized Togoo support staff. We may also share information with government authorities or professional advisers when required or allowed by law.

We use trusted companies to help us send login messages and notifications, store attachments, and operate the application. They may receive only the information needed to perform these tasks and must handle it under appropriate privacy and security requirements. Notification text may appear on a locked device depending on your settings.

We do not sell personal data or use Togoo HR data for third-party advertising.

6. Storage and transfers

We use appropriate measures to protect personal data and keep attachments private. Some companies that help us operate Togoo HR may process information outside Saudi Arabia. Where this happens, we follow the safeguards required by applicable law.

The application keeps limited account and preference information on your device so that it can work properly. Logging out removes your active session, but some preferences may remain for convenience. Removing the application deletes information stored by the application on your device, but it does not delete employment, attendance or other records held by Togoo.

7. Retention and deletion

We keep HR, attendance, request, complaint, attachment, notification and activity records for as long as needed to provide the service and meet legal, accounting, security and recordkeeping requirements. We delete or anonymize data when it is no longer needed.

Location submitted with an accepted attendance record becomes part of that record. A submission rejected because it is outside the assigned work area is not saved as an attendance record. Logging out does not delete your HR or attendance records.

8. Your choices and rights

You can manage notification, camera, photo, document and location permissions in your device settings. Features that do not need a permission will remain available, but submitting attendance requires location access while you are using the application. You can also control whether notification previews appear on your lock screen.

Subject to applicable law, you may ask to access your personal data, receive a readable copy, correct or complete it, or delete it when it is no longer needed. You may also object or complain about how it is used. Some information may need to be kept to meet legal duties or handle legal claims.

To exercise a privacy right, request account or data deletion, or ask how your data is used or kept, contact Togoo through your usual support channel. You may also complain to the competent Saudi data protection authority.

9. Security, children and policy changes

We use appropriate security measures to protect personal data. No system is completely secure, so please protect your device and login codes and report suspected unauthorized access promptly.

Togoo HR is intended for authorized workforce users and is not directed to children. If a person who is legally a minor is allowed to use the service, any notice or permission required by law must be obtained.

We may update this policy when our service or legal requirements change. The new effective date will appear at the top of this page.