1. Introduction

Welcome to PCS Worker ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

PCS Worker is a comprehensive workforce management application designed for construction and project-based teams. It enables workers to mark attendance with location verification, manage team activities, track work progress, and collaborate with team members.

1.1 Eligibility and Access

• Authorized Users Only: Only individuals who are currently employed by Trojan General Contracting LLC and have been explicitly authorized by Trojan are permitted to use this App.
• Access Control: Trojan General Contracting LLC maintains full control over who is granted access to the App. Access may be granted, modified, or revoked at any time at Trojan's sole discretion.
• Employment Verification: Your eligibility to use the App is contingent upon your active employment status with Trojan General Contracting LLC.
• Unauthorized Use: Any use of the App by individuals not authorized by Trojan General Contracting LLC is strictly prohibited and may result in legal action.

Upon termination of your employment with Trojan General Contracting LLC, your access to the App will be revoked in accordance with our Data Deletion Policy (Section 6.1).

2. Information We Collect

2.1 Personal Information

When you register and use PCS Worker, we collect the following personal information:

• Employee ID: Your unique employee identification number
• Full Name: Your legal name as registered with your employer
• Mobile Number: Your contact phone number
• Password: Encrypted credentials for account access
• Role: Your job role or position (e.g., Team Leader, Labour)
• Skills: Professional skills relevant to your work
• Team Information: Team name, team code, and team membership details
• Salary Information: Basic salary details for payroll purposes

2.2 Location Data

Our App collects location data for the following purposes:

• Attendance Marking: To verify your presence at designated work sites when marking attendance. We collect precise location (GPS coordinates) to ensure accurate attendance records.
• Weather Services: To provide localized weather information relevant to your work location, helping you plan outdoor activities and work schedules.
• Background Location: For automated attendance tracking, the App may access your location in the background to record check-in and check-out times when you arrive at or leave designated project locations.

2.3 Device Information

We automatically collect certain device information, including:

• Device type and model
• Operating system version
• Unique device identifiers
• Network information

2.4 Usage Data

We collect information about how you interact with the App:

• Attendance records and timestamps
• Activity logs and work progress
• Team interactions and collaborations
• Wallet and payment transaction history

2.5 Camera and Storage Access

With your permission, we may access:

• Camera: For capturing work site photos, document verification, and profile pictures
• Storage: For saving and accessing work-related files and documents

3. How We Use Your Information

We use the collected information for the following purposes:

• Authentication: To verify your identity and provide secure access to the App
• Attendance Management: To accurately record and verify your work attendance with location-based verification
• Team Management: To facilitate team creation, membership, and collaboration
• Activity Tracking: To monitor and manage work activities and progress
• Payroll Processing: To track attendance for salary and payment calculations
• Weather Services: To provide location-based weather information for work planning
• Notifications: To send important updates, alerts, and reminders related to your work
• App Improvement: To analyze usage patterns and improve our services
• Customer Support: To respond to your inquiries and provide assistance

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 With Your Employer

As a workforce management tool, your attendance records, location data (when marking attendance), activity logs, and team information are shared with your employer or project managers for operational purposes.

4.2 Access by App Operator and Developer

Your personal data may be accessed by both Trojan General Contracting LLC (App Operator) and Evolvedge Ventures Private Limited (App Developer) for the following purposes:

• Technical Support: To diagnose and resolve technical issues you may encounter while using the App
• Troubleshooting: To investigate and fix bugs, errors, or performance problems
• Customer Service: To respond to your inquiries, complaints, or support requests
• System Maintenance: To perform routine maintenance, updates, and improvements to the App
• Security Monitoring: To detect and prevent unauthorized access, fraud, or security breaches
• Quality Assurance: To ensure the App functions correctly and meets quality standards

4.3 Service Providers

We use third-party services to support App functionality:

• Google Services: For geocoding, maps, and weather data
• OpenWeatherMap: As a fallback for weather information
• Cloud Hosting: For secure data storage and API services

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of our users or others.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit using HTTPS/TLS protocols
• Secure Storage: Sensitive data is stored securely with access controls
• Authentication: Bearer token-based authentication for API access
• Password Security: Passwords are hashed and never stored in plain text
• Access Controls: Limited access to personal data on a need-to-know basis
• Server Location: All data is hosted on secure servers located in India and the Middle East, ensuring compliance with local data residency requirements and providing low-latency access for users in both regions

6. Data Retention

We retain your personal information for as long as:

• Your account remains active
• Necessary to provide our services
• Required by applicable laws and regulations
• Needed for legitimate business purposes (e.g., payroll records)

Attendance and work records may be retained for extended periods as required by labor laws and employment regulations.

6.1 Data Deletion Policy for Former Employees

• 15-Day Grace Period: Upon termination of your employment with Trojan General Contracting LLC, you will have a 15-day grace period during which you can access the app to download your personal data, attendance records, and payment history.
• Account Deactivation: After 15 days from your employment termination date, your account will be automatically deactivated, and you will no longer be able to access the app.
• Data Deletion: Following account deactivation, your personal information will be permanently deleted from our active systems within 30 days, except for data that must be retained for legal, regulatory, or legitimate business purposes (such as payroll records, tax documents, and employment history required by labor laws).
• Retained Records: The following data may be retained beyond the deletion period as required by law:
  • Payroll and salary records (as required by tax and labor regulations)
  • Attendance records for completed projects
  • Financial transaction history
  • Records necessary for legal compliance or dispute resolution
• Request Early Deletion: If you wish to have your data deleted before the automatic deletion period, please contact us at hello@evolvedge.co with your employee ID and termination date. We will process your request within 30 days, subject to legal retention requirements.

This data deletion policy ensures that former employees' personal information is not retained longer than necessary while complying with applicable employment and tax regulations.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt out of non-essential data collection
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us using the information provided below.

8. Permissions Required

The App requires the following device permissions:

Permission	Purpose
Location (Foreground & Background)	Attendance verification and weather services
Camera	Work site photos and document capture
Storage	Save and access work files
Notifications	Work alerts and important updates
Internet	Sync data with servers
Network State	Check connectivity status

9. Children's Privacy

PCS Worker is intended for use by adult workers and employees. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

10. International Data Transfers

Your personal data is primarily stored and processed on servers located in India and the Middle East. This ensures:

• Data Residency: Compliance with local data protection laws in UAE and India
• Performance: Low-latency access for users in both regions
• Legal Compliance: Adherence to regional data sovereignty requirements

In limited circumstances, your data may be transferred to or accessed from other countries for specific purposes (such as third-party service providers for weather data or cloud infrastructure). When such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable laws, including:

• Standard contractual clauses approved by relevant authorities
• Adequate data protection agreements with third-party processors
• Compliance with cross-border data transfer regulations in UAE and India

11. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top of this policy
• Sending a notification through the App (for material changes)

We encourage you to review this Privacy Policy periodically for any changes.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your privacy rights

We do not sell personal information to third parties.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

15. UAE Data Protection Compliance

For users in the United Arab Emirates, we comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable UAE regulations:

• Lawful Processing: We process your personal data only for legitimate purposes related to workforce management and with your consent.
• Data Subject Rights: You have the right to access, correct, delete, or restrict the processing of your personal data.
• Data Security: We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
• Cross-Border Transfers: When transferring data outside the UAE, we ensure adequate protection measures are in place.
• Data Breach Notification: In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by UAE law.
• Retention: We retain personal data only for as long as necessary for the purposes outlined in this policy or as required by UAE law.

For UAE-specific data protection inquiries, please contact us at the Abu Dhabi address listed below.

16. India Data Protection Compliance

For users in India, we comply with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

• Consent: We collect and process your personal data with your explicit consent, which you provide when accepting this Privacy Policy.
• Sensitive Personal Data: We handle sensitive personal data (such as passwords, financial information, and biometric data if applicable) with enhanced security measures.
• Purpose Limitation: Your personal data is used only for the purposes disclosed in this policy and not for any other purpose without your consent.
• Data Security: We maintain reasonable security practices including encryption, access controls, and regular security audits.
• Third-Party Disclosure: We do not disclose your personal data to third parties without your consent, except as required by law or as disclosed in this policy.
• Data Retention: We retain your data in accordance with Indian legal requirements, including tax and employment laws.
• Grievance Redressal: If you have any grievances regarding data processing, you may contact our support team in India at the address listed below.

We are committed to complying with the upcoming Digital Personal Data Protection Act (DPDPA) once it comes into force.