Privacy Policy
Last updated: 17 August 2026
PODRA is a workforce application used by companies to manage field teams. This policy explains what the app collects, why, who it is shared with, and how you can have it deleted. It applies to the PODRA mobile app and the PODRA administration dashboard.
Important: your employer can see your activity
PODRA is provided to you by your employer. The company you join can see the reports you submit, the photos, video and voice notes attached to them, your attendance check-ins and check-outs, and the location recorded with them. If you do not want your employer to have this information, do not join their company in the app.
What we collect
We collect only what the app needs to do its job:
- Phone number — your primary identifier, used to sign in and to join a company.
- Name, and an email address if you or your administrator provide one.
- Precise location — recorded when you check in or out of a work site and when you submit a report, so attendance and reports can be verified against the project location.
- Photos, video and voice recordings that you attach to a report.
- Face verification images — captured when identity verification is required, to confirm that the person submitting is the account holder.
- Device identifiers — a push notification token, so we can notify you about your reports and requests.
- Diagnostic data — crash and error reports, used only to find and fix faults.
What we do not do
- We do not track you across other companies' apps or websites, and we do not use advertising identifiers.
- We do not sell your personal data.
- We do not collect your location in the background. Location is read only at the moment you check in, check out, or submit a report.
How we use it
- To sign you in and keep your account secure.
- To let you join a company and to let that company's administrators manage their team.
- To record attendance and verify it against the work site.
- To create, submit and review reports, including their attachments.
- To confirm identity where the company requires it.
- To send you notifications about your reports and membership requests.
- To diagnose faults and keep the service working.
Who we share it with
We share data with the company you belong to, and with the service providers that run the platform on our behalf. They are bound to protect it and may not use it for their own purposes.
- Your employer — the company whose code you used to join. Its administrators see your profile, reports, attachments and attendance.
- Google Firebase — phone sign-in, file storage for report attachments, messaging, and push notifications.
- Supabase — the managed database that stores your account and operational records.
- Sentry — crash and error reporting. Personal data is stripped before it is sent.
Where your data is stored
Our databases are hosted in the United States (US West region) and our file storage and messaging are operated by Google. Your data is therefore transferred outside Saudi Arabia and processed by our providers there under contractual protections.
How long we keep it
- Your account and its data are kept while your account exists.
- When you delete your account from the app, your profile, reports, attendance records and project assignments are permanently deleted. This cannot be undone.
- If you are the last administrator of a company and you delete your account, the company and all of its data are permanently deleted with it. The app warns you clearly before this happens.
- A security audit record of significant actions — such as an account deletion — is kept separately for accountability. It records that an action happened and by whom, not the content of your reports.
Your rights
You may request access to the personal data we hold about you, ask for it to be corrected, and have it deleted. Deletion is available directly in the app: open Profile and choose Delete account. You may also contact us using the details below, and you have the right to complain to the Saudi Data & Artificial Intelligence Authority (SDAIA).
Security
Access is protected by phone verification and, for sensitive actions such as submitting a report or deleting your account, by your device's biometric check. Data is encrypted in transit. Each company's data is isolated from every other company's.
Children
PODRA is a workplace tool intended for adults in employment. It is not directed at children and we do not knowingly collect data from anyone under 18.
Changes to this policy
If we change how we handle your data we will update this page and change the date above. Significant changes will be brought to your attention in the app.
Contact us
For any question about this policy, or to make a request about your data, contact us at support@podra.net.