Privacy Policy
ROV ("the app") is an internal business application operated by Mohamed Hilal Group ("MHG", "we", "us") for its employees and authorised users. This policy explains what information the app processes and how it is handled. Access to ROV requires an MHG-issued account; the app is not intended for the general public.
Information we process
- Account information — your name, work email address, department, and role, used to identify you and control what you can see and do.
- Content you create — tasks, approvals, plans, comments, attachments, and related records you enter as part of your work.
- Device notification token — when you enable notifications, a push token from Google Firebase Cloud Messaging is stored so the app can send you task, approval, and reminder alerts. It is tied to your account and removed when it becomes invalid.
- Basic technical data — standard information needed to operate the service securely (e.g. authentication session data).
ROV does not use advertising identifiers, does not track you across other apps or websites, and contains no third-party advertising or analytics SDKs.
How we use it
- To provide the app's features — task management, approvals, planning, and related tools.
- To send operational notifications you have opted into (assignments, approvals, reminders).
- To secure the service and enforce access controls.
Service providers
We use trusted processors to run the service: Supabase (database, authentication, hosting), Google Firebase Cloud Messaging (delivery of push notifications), and Cloudflare (application hosting/CDN). These providers process data on our behalf under their respective terms. We do not sell your data, and we do not share it with third parties for their own purposes.
Data security & retention
Data is transmitted over encrypted connections (HTTPS/TLS) and access is restricted by account, role, and department. Business records are retained for as long as your account is active and as required for MHG's legitimate business and legal obligations. When your account is deactivated, associated personal access is removed.
Account & data deletion
This section applies to ROV — Mohamed Hilal Group.
How to request deletion: email shafraz.jiffry@hilal.cc from your registered ROV email address, with the subject "ROV data deletion request". Requesting from your registered address lets us verify the request is yours.
What is deleted: your account, personal-profile data, device notification tokens, and your personal content are deleted.
What may be kept: records required for business or legal purposes — for example corporate tasks and approvals you authored in the course of your work, and audit logs — may be retained in line with company policy, and are disassociated from your personal account where feasible.
Timing: deletion is completed within 30 days of us verifying your request.
Your choices
- You can turn notifications on or off at any time in your device settings.
- For access, correction, or deletion of your personal information, contact MHG IT (below). Because ROV is a workplace system, some records may be retained where required for business or legal reasons.
Children
ROV is a workplace tool and is not directed to children. We do not knowingly process data from anyone under 18.
Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.
Contact
Mohamed Hilal Group — IT Department
Email: shafraz.jiffry@hilal.cc