Privacy Policy
1. About this app
Centrix HR is an employee and manager self-service application provided to the staff of organizations that use the Centrix HR / Odoo HR system (each, an "Employer"). You sign in with credentials issued by your Employer and select your company. Your Employer is the data controller of your HR data; Centrix Plus acts as the software provider. The app is intended for employees of our business customers and is not directed to the general public or to children.
2. What we collect and how
We process the data below. Most of it you enter or generate through your actions in the app (e.g. submitting a request, checking in); your device push token is generated by the operating system when you enable notifications; and basic technical data is read from your device.
- Account & identity: login username, employee ID, name, department, job title.
- HR records: attendance check-in/out, leave requests and balances, overtime requests, payslips, document requests, resumption requests and approval history.
- Attachments you add: documents/images (e.g. medical certificates) you attach to a request. The app accesses your photo library or camera only when you explicitly pick or capture a file.
- Device push token: a Firebase Cloud Messaging token used to deliver notifications.
- Technical data: app version, device platform/OS, and language.
We do not collect your location, we do not use advertising or tracking SDKs, and we do not sell your data.
3. How the data is used
- Authenticate you and show your HR dashboard, balances and history.
- Submit and track attendance, leave, overtime, document and resumption requests.
- Route requests through your Employer's approval chain (manager self-service).
- Send push notifications about actions on your requests.
- Provide localization (English/Arabic) and basic troubleshooting.
These are the only purposes for which we use your data. We do not use it for advertising, profiling, or automated decision-making.
4. Where the data lives
Your HR data is stored on your Employer's Odoo server, not on separate consumer servers. Communication uses HTTPS/TLS. Your login session is stored securely on the device using the platform keychain/keystore.
5. Third-party services & sharing
Firebase Cloud Messaging (Google LLC) delivers push notifications and processes your device push token and message payload — see Google's privacy policy. Apple Push Notification service (Apple Inc.) relays notifications to iOS devices — see Apple's privacy policy. These are the only third parties with whom data is shared, and each is contractually and legally required to provide protection of your data equal to that described in this policy. We do not use analytics, advertising networks, or third-party tracking SDKs, and we do not sell or share your data for advertising. No other third party receives your data through the app.
6. Data retention, deletion & your choices
Retention. HR records are retained by your Employer according to their retention and labor-law obligations. Device push tokens are kept only while the app is installed and registered, and are deactivated automatically when they become invalid or when you log out or uninstall.
Revoking consent. You can stop the app's data processing at any time: turn off notifications in your device Settings, log out, and/or uninstall the app (this removes the locally stored session and stops push-token registration).
Requesting deletion. To access, correct, or delete your personal HR data, contact your Employer's HR department (the data controller) or email us at privacy@centrixplus.com. We will action or forward the request to your Employer, who will delete or anonymize the data subject to their legal retention obligations. We respond to data requests within 30 days.
Accounts. Centrix HR does not offer public sign-up — accounts are created and managed by your Employer. To have your account disabled or deleted, contact your Employer's HR department; they deactivate your access, after which associated push tokens are removed.
7. Security
We use HTTPS/TLS in transit, secure on-device credential storage, and server-side access controls so you only see records you are entitled to. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.
8. Your rights & consent
Because your Employer controls your HR data, requests to access, correct or delete your personal HR data should be directed to your Employer's HR department (see also section 6). Depending on where you live you may have rights to access, rectify, erase, restrict, or object to the processing of your data, and to data portability. Where consent is legally required to process your data, you and your Employer provide it before collection, and you may withdraw it as described in section 6. For questions about the app itself, contact us at the address below.
9. Children
Centrix HR is a workplace application and is not intended for anyone under 16. We do not knowingly collect data from children.
10. Changes to this policy
We may update this policy; material changes will be reflected by a new effective date at the top. Continued use after an update constitutes acceptance.