Tawazon — Privacy policy
Organizations and access
Tawazon is intended for employees of contracted organizations, with organization-provided accounts and no public self-registration. Tawazon provides employee services, IT support, asset management and additional features according to account permissions. Users select the trusted domain supplied by their organization. Each organization has a separate database and manages its accounts and access permissions.
Data processed
The service processes account and employee identifiers, authentication information, support requests, asset and network information, and attachments selected by the user. When personal finance is enabled, income, expense, debt and related information is exchanged with the organization's server. Optional location coordinates can be sent to the server for contextual indicators. Device notification tokens are registered with the server using Firebase Cloud Messaging. Preferences, session information and some cached data are stored on the device.
Permissions
Camera access supports photos and barcode scanning. Files are selected through system pickers. The prepared Android release does not request microphone or broad storage permissions. Device biometric authentication does not provide biometric templates to the app. Location and notification access can be controlled in Android settings.
Purposes and service providers
Data is used to authenticate users and provide requested services. Authorized organization personnel may access it according to assigned permissions and the organization's policies. Firebase is used for notifications. For location-based indicators, the Django backend sends coordinates to Open-Meteo for weather, Nominatim (OpenStreetMap) for place names and Aladhan for prayer times.
Protection
Live company connections require HTTPS. The prepared Android release excludes application data from Android cloud backup and device transfer through its declared rules. These controls are not a guarantee of absolute security or a claim that all server data is encrypted at rest.
Retention, deletion and contact
Retention periods and deletion procedures are determined by the policy of the client organization associated with the account and its subscription terms for the main platform. Tawazon does not impose a single retention period for all organizations. Data handling when a subscription expires or is cancelled follows those policies and terms; subscription termination alone does not mean all data is immediately deleted. To learn the periods applicable to your account or the deletion request procedure, contact your organization administrator and consult the applicable privacy policy and subscription terms. Enquiries may also be directed to bee.almasri77@gmail.com with your organization name and domain, without your password. The applicable policies and terms govern the data deleted or retained, exceptions and backup handling. Uninstalling the app does not delete organization server records. Material policy updates will identify their effective date.