01Who we are
CHK is an operational task, inspection and compliance platform for multi-branch businesses. This policy explains what data we collect, why we collect it, how we protect it and what your rights are.
02Who is responsible for the data
When a business uses CHK to run its teams, that business is responsible for its employees’ and tasks’ data, and we process it on its behalf and under its instructions.
For website visitors and anyone who contacts us or requests a trial, we are directly responsible for their data.
03What we collect
- Account data: name, mobile number, email address if provided, role and branch.
- Operational data: tasks and what is attached when they close — photos, readings, signatures and notes — plus the closing time.
- Location: captured at the moment a task closes only, to verify it was closed where it should be. The app does not track anyone through their day.
- Device data: device type, operating system and app version, to fix problems and protect accounts.
- Contact requests: what you write in the contact or trial form.
04What we don’t do
We don’t sell data, we don’t use it for advertising, and we don’t place advertising trackers on the website. Login codes are never stored as-is — only a fingerprint from which the code can’t be recovered.
05How we use it
- To provide and run the service: tasks, proof, alerts and reports.
- To verify your identity and protect your account and your business.
- To answer you and help when you ask for support.
- To improve CHK using aggregated statistics that identify no one.
- To comply with applicable laws and regulations.
06Legal basis
We process data to perform our contract with the business, for legitimate interests such as protecting accounts from intrusion, or with your consent when you ask us to contact you — in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations.
08How long we keep it
- The log: kept for as long as the business subscribes, because it is the business’s evidence.
- Proof photos: 24 months at full resolution.
- Operational data: 90 days.
- Legal hold: stops any deletion of what relates to an inspection or dispute until it ends.
- When a subscription ends: we give the business time to export its data, then it is deleted.
09How we protect it
Each business’s data is isolated from every other, encrypted in transit and at rest, and nobody reaches more than their permissions allow. Details are on our Security page.
Security and privacy10Where it is stored
Data is hosted with trusted cloud providers. If providing the service requires transferring it outside the Kingdom, that happens only as the law allows and with appropriate safeguards.
11Your rights
If you work for a business that uses CHK, send your request to that business first — we’ll help it respond.
- To know what we hold about you and get a copy of it.
- To correct anything inaccurate.
- To ask us to delete what no longer needs to be kept.
- To withdraw your consent at any time, where processing relies on it.
- To complain to the competent data protection authority in the Kingdom.
12People under 18
CHK is a business service, and we don’t knowingly collect data from anyone under 18.
13Changes to this policy
We’ll tell you about any material change before it takes effect, in the app or by email. The date of the last update appears at the top of this page.
A question about this page?
Write to us at hello@chk.sa