Diwanديوان
Privacy Policy
Last updated: 26 October 2026
The short version
- Diwan is an employee app. Your employer creates your account and decides what HR data is kept; we run the service on their behalf.
- We read your device location only at the moment you check in or check out. There is no background tracking.
- The camera and photo library are used only when you choose to attach a document or receipt.
- There are no ads, no advertising or analytics SDKs, and we never sell personal data.
- To see, correct or delete your data, contact your employer's HR department.
Contents
- Introduction
- Our role and your employer's role
- Who this policy is about
- Information we collect
- How we use personal data
- How we share personal data
- Data processed outside Egypt
- Data retention
- Security
- Your rights and account deletion
- Device permissions
- Children's privacy
- Changes to this policy
- How to contact us
1. Introduction
This Privacy Policy explains how Seamlabs ("Seamlabs", "we", "us") handles personal data in the Diwan mobile app for iOS and Android, this website, and the related services (together, the "Service").
Diwan lets employees of companies that use our HR platform check in and out of work, view their shifts, timesheet and payslips, send requests such as leave, and share documents and receipts with HR. Managers can also review their team's requests.
By using the Service you acknowledge that your personal data will be handled as described here. If you do not agree, please do not use the app and speak to your employer's HR department.
2. Our role and your employer's role
Diwan is provided to you by your employer (the "Company"). For the HR data processed through the Service, the Company is the data controller: it decides who gets an account, what information is recorded and how long it is kept. Seamlabs acts as a data processor (service provider) and processes that data only on the Company's documented instructions and under our agreement with it.
Seamlabs acts as an independent controller only for a narrow set of activities needed to run and secure the Service itself — for example, crash diagnostics, security logs and replying to messages you send us directly.
Questions about your employment records (salary, attendance decisions, leave balances and similar) are best answered by your Company's HR department.
3. Who this policy is about
- Employees who use the Diwan app.
- Managers who review requests and attendance for their team.
- Visitors to this website.
4. Information we collect
4.1 Information provided by your employer
To set up your account, the Company enters or imports information such as your name, employee code, mobile number, job title, department and branch, manager, work schedule and shifts, leave entitlements, salary components and payroll results, and employment documents it holds about you.
4.2 Information you provide
- Sign-in details: the workplace code your HR department gives you, your mobile number and your password. Passwords are stored only as a secure hash.
- Requests: leave, attendance-correction, shift-change and overtime requests and expense claims, including dates, hours, amounts, reasons and notes you write.
- Documents and receipts: photos or files you choose to upload — an employment document with its number and expiry date, a receipt for an expense claim, or a certificate attached to a leave request. Images are reduced in size on your phone before upload.
- Your settings: your language preference, which is kept on your phone, and your acceptance of the in-app notice about data collection, which is recorded with the app version.
4.3 Location data
When you tap Check in or Check out, the app reads your device's location once and sends it with the attendance record: latitude and longitude, the accuracy of the reading, the time, and whether the device reports the location as simulated ("mock location"). This is used to confirm that you are at your assigned branch. The coordinates are removed from the attendance record after 12 months; the check-in itself (time and direction) is kept as part of your attendance history.
The app does not collect location in the background, does not track your movements, and does not read your location at any other time. Location access is requested with "while using the app" permission only. You can withdraw it at any time in your device settings, but you will then be unable to check in from the app; ask your HR department about alternatives.
4.4 Camera and photos
The app asks for camera or photo library access only when you choose to photograph or attach a document or receipt. Only the image you select is uploaded. The app does not scan or upload your photo library.
4.5 Device and technical data
To keep your account secure and bind it to your phone, the app sends a random installation identifier created by the app, your device platform (iOS or Android), device model, operating-system version and app version. Your account can then only be used from that phone until you release it in the app or HR releases it. Our servers also record technical logs of requests (such as time, the action performed and the IP address) for security and troubleshooting.
The app does not collect your contacts, messages, call logs, calendar, microphone audio, advertising identifier or other apps installed on your device.
4.6 Crash reports
If the app crashes or hits an error, it may send a diagnostic report to our crash-reporting provider (Sentry), whose servers are outside Egypt. For a small sample of sessions it also sends timing data about how the app performs. These reports are deliberately stripped before they leave your phone: they contain the technical error, the app screens involved and an internal user ID that is meaningless outside our own database. They do not include your name, mobile number, location, pay, the content of your requests or the data of network requests, and we have turned off the provider's option to record your IP address.
4.7 This website
This website does not use advertising or analytics cookies. It remembers your language choice in your browser's local storage. Our hosting provider and the font service (Google Fonts) receive standard technical data such as your IP address when your browser loads the page.
| Data | Purpose | Required? |
|---|---|---|
| Name, employee code, mobile number, job details | Account and HR records | Yes |
| Workplace code, password (hashed) | Sign-in | Yes |
| Precise location at check-in/out | Confirm attendance at the branch | For in-app check-in |
| Requests and expense claims you send | Deliver them to your manager and HR | Optional |
| Photos and files you attach | Documents, leave certificates and expense receipts for HR | Optional |
| Salary and payroll results | Show your payslips | Provided by employer |
| Installation ID, device model, OS and app version | Account security, device binding, troubleshooting | Yes |
| Crash diagnostics | Fix bugs and keep the app stable | Automatic, no personal details |
5. How we use personal data
We use personal data to:
- provide the Service: sign you in, record attendance, show shifts, timesheets, payslips and in-app notifications, and deliver requests to your manager and HR;
- verify attendance, including detecting simulated locations, as configured by your Company;
- secure accounts, prevent fraud and misuse, and keep audit logs of actions taken in the system;
- diagnose problems and improve the reliability of the Service;
- comply with legal obligations.
Where we process HR data on behalf of your Company, the Company determines the legal basis — usually performance of your employment contract and the Company's legal obligations as an employer. Where Seamlabs acts as controller, we rely on our legitimate interest in operating a secure, working service. We do not sell personal data, use it for advertising, or build profiles for marketing.
6. How we share personal data
- Your Company: authorised HR staff and your managers see the data relevant to their role, according to the permissions the Company configures.
- Service providers who help us run the Service under contract and confidentiality obligations, such as crash reporting (Sentry).
- Authorities, when required by law or a valid legal request, or to protect the rights, safety and property of users, the Company or Seamlabs.
- A successor, if Seamlabs is involved in a merger, acquisition or sale of assets, subject to this policy.
Data belonging to one Company is kept separate from every other Company's data and is never shared between them.
7. Data processed outside Egypt
Our crash-reporting provider processes diagnostic reports outside Egypt. Where that happens we take the steps required by applicable law — including Egypt's Personal Data Protection Law No. 151 of 2020 — so that your data receives an adequate level of protection.
8. Data retention
- HR and payroll records are kept for as long as your Company keeps its account with us and as instructed by the Company, which may need to keep employment and payroll records for periods required by labour and tax law.
- Check-in location (the coordinates of a check-in or check-out) is removed after 12 months; the attendance record itself stays.
- Security and activity logs are kept for 12 months.
- Deleted files (a document or receipt you or HR delete) are permanently erased within 90 days.
- Crash reports are kept by our provider for a limited period.
When a Company ends its use of the Service, its data is deleted or returned according to our agreement with it.
9. Security
We protect data with encryption in transit (HTTPS/TLS), hashed passwords, sign-in tokens stored in your phone's secure keychain or keystore, binding of each account to one phone, role-based access controls, separation of each Company's data and audit logging. No system is perfectly secure; if we become aware of a breach affecting your data we will notify your Company and, where the law requires, the relevant authority and you.
10. Your rights and account deletion
Depending on the law that applies to you, you may have the right to access your personal data, correct it, request its deletion, object to or restrict certain processing, and withdraw consent (for example, location permission).
Because your account belongs to your employer's HR system, requests about your data go to your Company's HR department, which handles them with our help.
In the app itself you can sign out at any time, release your account from your phone ("This is not my phone"), and decline or — through HR — withdraw your acceptance of the in-app data notice; ask your HR department how to record attendance without the app.
Deleting your account: Diwan accounts are created and closed by your employer. To delete your account and associated data, ask your HR department; it closes the account and we delete the data on its instruction. Some records may be kept where the Company is legally required to retain them (for example payroll records); these are removed once that period ends.
You also have the right to file a complaint with the data protection authority in your country (in Egypt, the Personal Data Protection Center).
11. Device permissions
| Permission | When it is used | If you decline |
|---|---|---|
| Location (while using the app) | Only when you tap check-in or check-out | In-app check-in is unavailable |
| Camera | Only when you choose to photograph a document or receipt | You can pick an existing photo instead |
| Photos | Only when you choose an image to attach | You can use the camera instead |
| Internet | To talk to your Company's Diwan server | The app cannot work offline |
12. Children's privacy
Diwan is a workplace tool intended for employees who meet the legal working age in their country. It is not directed to children, and we do not knowingly collect personal data from children under 13 (or the higher age required by local law).
13. Changes to this policy
We may update this policy as the Service or the law changes. We will change the "Last updated" date above and, for significant changes, notify Companies and say so on this page.
14. How to contact us
For questions, requests or complaints about this policy or your personal data, contact your Company's HR department first. Diwan is published by:
Seamlabs — Diwan
Cairo, Egypt