At Mawered, we take the protection of your personal data very seriously. This privacy policy explains how we collect, use, store and protect your information in accordance with the Tunisian Personal Data Protection Code and the European GDPR.
We collect the following information:
- Identification information: name, surname, email, phone
- Professional information: company, position, industry
- Usage data: connection logs, pages visited, features used
- HR data (for our clients): employee information as configured
Your data is used only for:
- Provide and improve our HR services
- Communicate with you (support, updates, billing)
- Comply with our legal and regulatory obligations
- Analyze usage to improve our platform
We NEVER sell your data to third parties.
We implement technical and organizational security measures:
Encryption
AES-256 encryption for data at rest and in transit (SSL/TLS)
Controlled Access
Two-factor authentication and strict role management
Backups
Daily encrypted backups with 30-day retention
Hosting
Secure servers in Tunisia compliant with local standards
In accordance with GDPR and Tunisian law, you have the following rights:
- Right of access: view your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: delete your data (right to be forgotten)
- Right to portability: retrieve your data in a standard format
- Right to object: refuse certain processing of your data
The Mawered mobile app uses certain features of your device, exclusively for the following purposes:
- Biometrics (fingerprint / face recognition): used only to unlock the app on your own device ("App Lock"), if you enable this option. Biometric data is processed by your phone's operating system and is never transmitted to Mawered or stored on our servers.
- Camera: used only to scan the QR code that connects the app to your organization during first-time setup. No photo is taken, stored or transmitted.
- Location: collected only at the moment you clock in or out from the app, to timestamp and geolocate your punch on behalf of your employer. Not collected in the background or outside of that action.
- Push notifications: a device identifier is registered to send you notifications (approvals, reminders). You can disable notifications in your phone's settings.
For any questions about this policy or to exercise your rights:
Email: [email protected]
Address: Mawered SARL, Tunis, Tunisia
Response time: Maximum 30 days
This policy may be updated. The latest version is always available on this page.