Privacy Policy

Effective date: 1 August 2026

DD Security Mobile App — a workforce app for DD Security personnel.
Data controller: DD Security Service Pvt. Ltd., P.O. Box 7531, Kathmandu, Nepal
Contact: support@ddnepal.com · +977-1-5107439

1. Who this policy is for

This app is provided by DD Security Service Pvt. Ltd. ("DD Security", "we", "us") to its employed and engaged personnel — security guards, supervisors, and operational staff ("you"). Accounts are issued by DD Security; there is no public sign-up. The app is for adults (18+) and is not directed to children.

2. Information we collect

We collect only what is needed to manage duty rostering, attendance, payroll, and physical-security operations:

Account & profile. Name, work email (your login), job position, and — if you provide them — home address, date of birth, gender, a short bio, and a profile photo.
Attendance. Your GPS location and a check-in selfie photo at check-in and check-out, used to verify you are at your assigned site (geofencing) and to record duty hours.
On-duty location. While you are checked in for a shift, the app records periodic GPS points to support live security operations and guard safety. See section 3 below.
Incident reports. Details you submit — incident type, location, description, names and remarks of involved persons, and any evidence photos you attach.
Notifications. A push-notification (Firebase) device token and your device operating system, so we can send duty alerts and notices.
Security & technical. Authentication tokens and, for password resets, a one-time code sent to your email.

We do not run facial recognition or extract biometric templates; photos are stored as images for verification and audit only. We do not sell your data or use it for advertising.

3. Background location — important

This app collects precise location data to enable on-duty guard tracking and attendance verification, even when the app is closed or not in use — but only while you are on an active, checked-in shift.

Background location capture starts when you check in and stops when you check out.
We use it solely to (a) confirm your presence at your assigned site and (b) support live security operations and your safety during the shift.
We do not track your location when you are off duty, checked out, or not on shift.
Your on-duty location history is automatically deleted after 90 days.

You grant this collection through the location permission on your device, and you can revoke it in your device settings at any time — though attendance and on-duty features will not work without it.

4. How we use your information

Record attendance and verify presence at assigned sites.
Roster duties and calculate payroll.
Coordinate live security operations and respond to incidents and emergencies.
Send you duty alerts, notices, and account messages.
Secure the service and prevent misuse.

Legal basis. Performance of your employment/engagement relationship with DD Security and our legitimate interest in operating a security service; device permissions (camera, location) also rely on the consent you grant on your device. We process personal data in line with Nepal's Individual Privacy Act, 2075 (2018).

5. Device permissions

The app asks for Location (including in the background while you are on duty), Camera, Photos/Storage, and Notifications. You can decline or revoke these in your device settings, but core features (attendance, incident reporting) will not work without them.

6. Sharing & sub-processors

We share data only with service providers that help us run the app:

Google Firebase Cloud Messaging — to deliver push notifications (receives your device token and notification content).
Odoo.sh (Odoo S.A.) — cloud hosting of our system and database.
Email provider — to deliver one-time codes and notices.

We may disclose information where required by law or to protect safety, life, or property. We do not sell your personal data.

7. Data retention

On-duty location history is automatically deleted after 90 days.
Attendance records, photos, incident reports, and payroll data are retained as employment/business records for the duration of your engagement and at least 5 years thereafter, or longer where Nepal labour, tax, or company law requires.
One-time password codes expire within 10 minutes.

8. Deleting your account

You can delete your account in the app (Profile → Delete Account), confirming with your password. This deactivates your login, signs you out on all devices, and removes your push-notification tokens. Because attendance, payroll, and incident records are statutory employment records, they are retained as required by law even after account deletion. To request access, correction, or erasure where legally permitted, contact us at support@ddnepal.com.

9. Security

We protect your data with HTTPS encryption in transit, hashed passwords, and short-lived, rotating access tokens. No system is perfectly secure, but we work to safeguard your information.

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. Contact support@ddnepal.com; we respond within 30 days.

11. Changes

We may update this policy; we will post the new effective date and, for material changes, notify you in the app.

12. Contact

DD Security Service Pvt. Ltd.
P.O. Box 7531, Kathmandu, Nepal
support@ddnepal.com · +977-1-5107439
Governed by the laws of Nepal.