Privacy Policy for BORD

1. Purpose

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the BORD app ("App"). By using the App, you agree to the terms of this Policy.

2. Information We Collect

We may collect the following categories of data:

a. Personal Identification Information

• Full name
• National ID or Iqama number
• Phone number
• Photo or avatar (optional)
• Employer code and job role

b. Device and Technical Information

• Device type, model, and operating system
• App version and usage logs
• IP address and location data (only with consent)

c. Learning & Performance Data

• Courses viewed and completed
• Quiz scores and feedback
• Onboarding and training progress

d. Audio, Visual, and Language Preferences

• Voice-over preferences for accessibility
• Language selection
• Photo or camera input for profile setup

3. How We Use Your Information

Your data is used to:

• Register and authenticate you (ID + phone number + OTP)
• Deliver a personalized onboarding and training experience
• Track and improve learning progress and completion
• Assign you to the correct employer, site, and job role
• Generate insights for administrators (anonymized when applicable)
• Improve training content using aggregated AI analysis

We do not sell or rent your data.

4. Data Storage and Security

• All personal data is stored within the Kingdom of Saudi Arabia, in compliance with local data residency requirements.
• Data is encrypted both in transit and at rest.
• Access is controlled through role-based access mechanisms, ensuring workers and admins only see relevant data.
• Full audit logs are kept for compliance and accountability.

5. AI Features and Automated Decisions

BORD uses AI tools to:

• Auto-generate training modules and quizzes
• Analyze learning patterns and suggest improvements
• Provide performance summaries to admins

No decisions with legal or significant impact are made solely by AI. Users may contact us to challenge or review automated outputs.

6. Data Sharing

We do not share your personal data with third parties unless:

• Required by Saudi law or regulatory authorities
• You give explicit consent
• It is necessary to provide services (e.g., OTP delivery providers)

All third parties must comply with equivalent data protection standards.

7. Your Rights (under PDPL)

As a data subject in Saudi Arabia, you have the right to:

• Access the personal data we hold about you
• Correct or update your data
• Request deletion (where legally permitted)
• Withdraw consent at any time (where applicable)
• File a complaint with the Saudi Data & AI Authority (SDAIA)

To exercise your rights, contact us at: support@bordksa.com

8. Data Retention

Your data is retained only for as long as necessary to:

• Fulfill the purposes outlined in this Policy
• Comply with legal obligations
• Support audit and reporting needs

Inactive accounts may be deleted after a period of inactivity.

9. Children's Privacy

BORD is not intended for children under 13. If you believe a child has used the App without consent, please contact us immediately for removal.

10. Changes to This Policy

We may revise this Privacy Policy at any time. If we make significant changes, we will notify you in-app or via email. Continued use of the App after changes constitutes acceptance.

11. Contact Information

For questions, concerns, or to exercise your data rights, contact: