Privacy Policy

Scope, who we are and who controls your data

This Privacy Policy applies to the RTA Security mobile application for iOS and Android and its related administrator services (together, the “Service”). RTA Security is a workforce coordination product published and operated by Digital Keed (“RTA Security,” “we,” “us” or “our”).

RTA Security is available to independent security teams and organisations. A user may create a new isolated workspace and become its first administrator, then invite employees and other administrators. The organisation that operates a workspace, assigns jobs and manages field employees is the “Employer.” For employee workforce data, the Employer will normally decide why and how the data is processed and is therefore the data controller. RTA Security normally processes that data on the Employer’s behalf as its service provider or processor. The Employer remains responsible for its lawful basis, employee notices, workplace policies, access decisions and retention requirements.

For data we process for our own service security, account administration, support, legal compliance and operation of this public policy page, RTA Security may act as an independent controller. If your Employer provides a separate workforce privacy notice, read it together with this Policy; that notice explains Employer-specific practices and local employment rules.

Privacy at a glance

Personal data we process

The exact data depends on your role, device permissions and use of the Service.

The Service is not designed to collect contacts, call or SMS history, payment card data, health data, advertising identifiers, microphone recordings, photos, videos or biometric templates. If a future feature requires a new data category, we will update this Policy and provide any required notice or permission request before collection.

How workforce location tracking works

When tracking may start

Tracking is linked to an eligible assignment and may begin when an employee accepts that assignment or enters another server-approved active state. The app requests precise foreground location while using the app. iOS does not request Always access or collect background locations. Android can request background location so dispatch can see progress while the screen is locked, another app is open or RTA Security is not visible.

What happens during an active assignment

• Authorised administrators and dispatchers may see the employee’s recent position, freshness, accuracy, movement status and route history.
• Location may be checked when the employee marks departure, arrival, work start, return from break or completion.
• Site-radius checks may confirm whether the employee is near the assigned location. A failed check can prevent a location-dependent action until the employee returns.
• A recorded break is excluded from net work time. Because the assignment remains active, location may continue for operational safety, assignment integrity and return-to-site verification.
• If the device is temporarily offline, observations may be stored in an encrypted local queue and uploaded when connectivity returns.

When tracking stops

Operational tracking is intended to stop when the job is completed, ended by dispatch or no longer eligible for tracking. It can also be interrupted by logout, account deletion, revoked permissions, device settings, force-stop, battery restrictions, operating-system behaviour or loss of connectivity. The Service records tracking availability so dispatch is not misled by an old or low-accuracy position.

Platform indicators and controls

Android shows a persistent foreground-service notification while eligible background tracking is active. iOS may show its system location indicator. Users can review permissions in device settings. Disabling required location access may prevent location-dependent job actions, but it does not authorise hidden or unrelated tracking.

Why data is used and the legal bases

Depending on the country, Employer and context, processing may rely on:

• Contract and employment administration: to provide assigned work, document performance of operational tasks and administer accounts.
• Legitimate interests: to coordinate security staff, protect employees and sites, maintain reliable records, prevent misuse and secure the Service, where those interests are not overridden by individual rights.
• Legal obligations: including applicable employment, working-time, safety, tax, payroll, record-keeping, investigation and data-protection obligations.
• Vital interests or safety: in exceptional situations where processing is necessary to protect a person.
• Consent: only where local law makes consent appropriate and it can be freely given and withdrawn. Consent is not assumed to be the primary basis in an employment relationship.

We and the Employer use personal data to:

• authenticate administrators and employees and keep authorised devices signed in;
• create, dispatch, accept, replace, perform and close assignments;
• show current operational status and location to authorised dispatch staff;
• calculate work, break and additional-time records from server timestamps;
• send assignment, replacement, timing, access and safety notifications;
• provide maps, address suggestions, navigation handoff and site-radius checks;
• detect stale, unavailable, implausible or low-accuracy location signals;
• respond to access recovery, deletion and support requests;
• secure, debug, audit and improve the Service; and
• comply with law and enforce agreements.

RTA Security does not make solely automated disciplinary or employment decisions. Status, location, lateness and integrity signals can be incomplete or wrong and should be reviewed by an authorised person with relevant context before action is taken.

Who can receive personal data

We disclose data only as necessary for the purposes above:

• The Employer: authorised administrators, owners, dispatchers, HR or support personnel, according to role and operational need.
• Supabase: cloud database, authentication, realtime updates and server functions.
• Google Maps Platform and Places: maps, geocoding, address suggestions and related mapping functions.
• Expo: application build/update infrastructure and Expo push-notification routing.
• Firebase Cloud Messaging: delivery of Android notifications.
• Apple Push Notification service: delivery of iOS notifications.
• Vercel: hosting of this public Policy; Vercel may process standard web request and security logs when this page is visited.
• Professional advisers and authorities: where reasonably necessary for legal claims, compliance, safety, fraud prevention or a valid legal request.
• Corporate transactions: if the Service or business is reorganised, financed, acquired or transferred, subject to confidentiality and applicable law.

Service providers are expected to process data under contractual, confidentiality and security obligations. We do not sell personal data, share it for cross-context behavioural advertising or use precise workforce location to build advertising profiles.

Retention, account deletion and disposal

Request account deletion without the app: Employees and administrators can email digital.leart@gmail.com with the subject “RTA Security account deletion”, their account email or username and workspace name. You do not need to install or sign in to the app. Do not send a password, access code or location history. Management verifies the request, processes administrator account deletion within two calendar days (including weekends), and confirms completion to the account email. If workspace continuity needs confirmation, management will contact you within that period. Personal account and authentication information is deleted or anonymised; shared workspace records and records retained for the legitimate reasons described below may remain.

Data is retained only as long as necessary for its purpose, using these criteria:

Employees can delete their own account in Account > Account management > Delete account. Administrators can submit a durable deletion request in Account settings. Management processes administrator requests within the deadline shown in the app and confirms completion to the account email. The administrator account remains active until processing starts, and a pending request can be cancelled. Other members and shared workspace records remain. Deleting an account ends future access and eligible tracking, but does not necessarily erase records the Employer must retain for payroll, working-time, safety, legal claims, compliance or audit. Where full deletion is not possible, data will be restricted, minimised or de-identified where appropriate.

Security, integrity and accuracy

Safeguards include encrypted network transport, authenticated access, company and role-based authorisation, database row-level security, protected server functions, server-recorded command timestamps, encrypted local storage for queued location, restricted production configuration and sanitisation of error telemetry. Access is limited according to operational role.

No system is perfectly secure or “100% accurate.” GPS, network conditions, device sensors, permission settings, buildings, battery-saving features and operating systems can delay or distort location. The Service therefore stores accuracy and freshness information and can label a position unavailable, stale or low-accuracy instead of presenting it as certain. Users and administrators should report suspected errors and verify important decisions with other evidence.

Your privacy rights

Subject to applicable law, including the Swiss Federal Act on Data Protection, the EU General Data Protection Regulation and German data-protection law, you may have the right to:

• obtain information about and access to your personal data;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent where processing relies on consent, without affecting earlier lawful processing;
• request human review of a decision and challenge inaccurate operational signals; and
• complain to the Swiss Federal Data Protection and Information Commissioner or the competent EU/EEA supervisory authority.

Start with your Employer’s administrator, HR or privacy contact because the Employer normally controls workforce records. You may also contact RTA Security using the details below. We may need to verify identity and authority before acting. Rights can be limited where retention or processing is required by law or necessary to protect another person’s rights.

International processing and Kosovo demo mode

The Service may be used in Switzerland and Germany, while providers and support systems may process data in other countries. The relevant controller will use applicable safeguards for restricted transfers, such as an adequacy decision, data-protection agreement or standard contractual clauses, and will identify destination countries where required by Swiss law.

Kosovo support is intended only for controlled demonstration and testing. Demo accounts and synthetic assignments should be used; production employee or client records must not be copied into a demo environment. If real personal data is used in Kosovo, the Employer must first confirm a lawful basis, notice, transfer mechanism and security controls.

Children

RTA Security is a workplace application for authorised adult administrators and employees. It is not directed to children and must not be used to create an account for anyone under 18. Contact us if you believe a child’s data has been entered into the Service.

Work time, travel and breaks

Accepting an assignment can begin operational location sharing. Acceptance, travel and confirming arrival do not start the app’s on-site work timer. Work time starts when the employee confirms Start work at the site. A recorded break pauses net work time; returning from the break preserves time worked before it. For example, 30 minutes of work, a 15-minute break and another 45 minutes of work produces 75 net work minutes.

Location sharing can continue during travel and recorded breaks while the assignment remains eligible. The app’s on-site total does not determine all payable or legally recognised working time. The Employer must account separately for travel, waiting or other time where applicable law, collective agreements or the employment contract require it.

Employee terms of use

These usage rules explain operation of the app. Viewing this page does not record contractual acceptance or consent to monitoring. They do not replace an employment contract, collective agreement, mandatory rights or the Employer’s workplace instructions.

Authorised use and account security

Use only the account assigned to you and only for authorised company work. Keep credentials private, do not share access codes, and report suspected unauthorised access. Do not access another employee’s records or bypass company access controls.

Accurate records and corrections

Confirm assignment, arrival, work and break actions accurately. Do not submit simulated GPS or deliberately falsify time records. Device estimates and network delivery can be wrong: report missing work or inaccurate location to dispatch and request human review. An app signal alone should not be treated as proof of misconduct.

Safety and service availability

Do not operate the app while driving or when it is unsafe. Push notifications, maps and location delivery depend on permissions, connectivity, device settings and providers. The app is not an emergency service; use your agreed emergency procedure. Contact dispatch if a technical problem prevents an action.

Permissions, account closure and employee rights

You can review permissions in device settings and request account deletion in the app. Restricted permissions may prevent site verification; agree an alternative reporting process with the Employer. Account closure may take time while provider deletion is retried; required work records can remain pseudonymised under the applicable retention schedule. No clause waives statutory privacy, pay, safety or employment rights.

Employer-specific notice

The Employer must provide its legal identity, address, privacy contact, relevant processing purposes and basis, retention schedule and applicable transfer countries/safeguards. This platform description does not substitute for that company-specific information.

Changes to this Policy

We may update this Policy when the Service, providers or legal requirements change. The current version and effective date will remain available at this URL. Material changes will be communicated in the app, through the Employer or by another appropriate method before they take effect where law requires. Earlier versions may be requested from the contact below.