R-ASAP

Privacy Policy

Effective date: 15 July 2026

Operated by Al Rawabi Group of Companies for authorised workplace users of the R-ASAP portal and mobile apps.

Sign in Contact privacy

1. Who we are

This Privacy Policy explains how Al Rawabi Group of Companies (“we”, “us”, or “our”) collects, uses, stores, and shares information when you use:

  • The R-ASAP web portal at asap.alrawabigroup.com
  • The R-ASAP / ASAP Helpdesk mobile applications for Android and iOS
  • Related workplace tools delivered through R-ASAP (helpdesk, chat, attendance, assets, forms, and similar features)

R-ASAP is an internal workplace platform. It is intended for authorised employees, contractors, and partners of Al Rawabi Group of Companies and affiliated organisations — not for the general public.

2. Scope

This policy covers personal data processed through R-ASAP on our systems and devices you use to access it. It does not replace any separate employment, contractor, or company IT / HR policy that may also apply to you.

By creating an account, signing in, or using R-ASAP, you acknowledge the processing described here for the operation of these workplace services.

3. Information we collect

Account and identity

  • Name, work email, username, employee code
  • Role, department, company / branch affiliation
  • Profile photo or avatar (if you upload or select one)
  • Phone number (if provided in your profile)

Workplace content you create or receive

  • Helpdesk tickets, requests, comments, and attachments
  • Chat and messaging content, including media you send
  • Todos, calendar entries, forms, and similar work records
  • Asset, attendance, or other module data you are authorised to use

Device and technical data

  • Device model, OS version, app version, and approximate device identifiers used for session security
  • Push notification tokens (for example Firebase Cloud Messaging / Apple Push Notification service)
  • IP address, browser type, and approximate timestamps of access (web and API)
  • Login and session history (including device labels and, where available, approximate location labels associated with a session)
  • Crash / diagnostic signals needed to keep the service reliable

Permissions on mobile (only when you use the feature)

  • Camera / photos — profile pictures, ticket or chat attachments
  • Microphone — voice or audio features where enabled
  • Notifications — alerts for tickets, chat, and system messages
  • Storage / files — picking and caching attachments
  • Overlay / display over other apps — optional timer bubble while tracking ticket time (Android)

We do not require these permissions for basic sign-in. You can deny a permission and continue using unrelated features.

4. How we use information

We use the information above to:

  • Authenticate users and maintain secure sessions
  • Provide helpdesk, collaboration, attendance, assets, and related workplace features
  • Deliver notifications you have enabled
  • Personalise your profile and interface preferences
  • Protect accounts (for example detecting unusual sign-ins or managing device sessions)
  • Operate, secure, troubleshoot, and improve R-ASAP
  • Meet internal governance, audit, and legal obligations of Al Rawabi Group of Companies

We do not sell your personal information. We do not use R-ASAP data for third-party advertising.

6. Sharing and processors

Access to workplace content is limited to authorised staff and systems inside Al Rawabi Group of Companies (and affiliates) on a need-to-know basis — for example managers, helpdesk agents, or IT administrators supporting you.

We may use trusted service providers that process data on our behalf solely to run R-ASAP, such as:

  • Hosting / edge delivery (for example Cloudflare) for the portal and APIs
  • Push notification providers (Google Firebase / Apple) to deliver mobile alerts
  • Infrastructure and security tooling required to operate the platform

These providers are bound by agreements and only process data as needed to provide their service. We may also disclose information if required by law, regulation, court order, or to protect the rights, safety, and security of Al Rawabi Group of Companies, our users, or others.

7. Retention

We keep account and workplace records for as long as your account is active and as needed for operational, audit, legal, and archival purposes set by Al Rawabi Group of Companies. Session tokens and device registrations may be removed when you sign out, revoke a device, or when they expire. When data is no longer required, we delete or anonymise it according to internal retention rules.

8. Security

We apply administrative, technical, and organisational measures appropriate to an internal business system, including encrypted transport (HTTPS / TLS), access controls, and session management. The mobile apps may also use certificate / public-key pinning to help reduce man-in-the-middle risks on the production API host.

No method of transmission or storage is 100% secure. Please use a strong unique password, keep your device updated, and report suspected unauthorised access promptly.

9. International processing

Al Rawabi Group of Companies operates primarily in Qatar. Data may be processed in Qatar and in other locations where our hosting or service providers operate (for example global content-delivery or push-notification infrastructure). Where transfers occur, we take steps consistent with applicable law and our vendor arrangements.

10. Children

R-ASAP is a workplace application and is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children for this service.

11. Your rights and choices

Depending on applicable law and company policy, you may be able to:

  • Access or update profile information in the app or portal
  • Manage notification and preference settings on your device
  • Sign out of other devices from the profile / security area
  • Request correction, deletion, or a copy of personal data through IT / your administrator

Because R-ASAP holds organisational business records, some requests may be handled jointly with your employer or company administrator (for example ticket history needed for operations).

12. App Store and Google Play

This page is the public privacy policy for store listings and in-app privacy links. Use the following URL wherever a privacy policy URL is required:

https://asap.alrawabigroup.com/privacy

App distribution platforms (Apple, Google) may collect their own analytics under their privacy terms when you download or update the app. That processing is governed by those platforms, not solely by this policy.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top of this page will change when we publish material updates. Continued use of R-ASAP after an update means the revised policy applies to subsequent use, except where applicable law requires additional notice or consent.

14. Contact us

For privacy questions, data requests, or security concerns about R-ASAP, contact: