Quickgen HRM

Privacy Policy

Last updated: 8 September 2026

1. Who we are

Quickgen HRM ("the app") is published by Quickgen Technologies (SMC-Pvt) Ltd ("Quickgen", "we", "us"), registered in Pakistan under NTN A709306, at NSTP, Islamabad, Pakistan.

The app is the mobile client for your employer's Quickgen HR system. If you use it as an employee, your employer is the controller of your personal data and decides why it is processed; Quickgen operates the system on their instructions. Where Quickgen is itself your employer, we are the controller.

Questions, or to exercise any right in §9: support@quickgentech.com.

2. This app does not create accounts

You cannot sign up in Quickgen HRM. Accounts are issued by your employer's HR team, and the app only signs you in to an account that already exists. We do not collect anything from you before you sign in.

3. What we collect, and why

Everything below is collected because it is needed to administer your employment. None of it is used for advertising, sold, or shared with data brokers.

Identity and contact details

Full name, father's name, work email, personal email, phone number, residential address, date of birth, gender, marital status, national identity number (CNIC), emergency contact name and phone, employee ID, and your profile picture.

Why: to identify you on the payroll and in HR records, to contact you, and to meet statutory employment record-keeping requirements.

Employment details

Department, designation, joining date, employment type, reporting manager, contracted hours, probation and confirmation status, and your role in the system.

Why: to decide what you can see and do in the app, to route approvals to the right person, and to calculate entitlements.

Attendance and location

Check-in and check-out timestamps, the hours derived from them, overtime, and the GPS coordinates of your device at the moment you tap Check in or Check out — together with a readable address for that point.

Why: to confirm that a work session was started and ended at an approved work site.

What we do not do: the app never reads your location in the background, never reads it while you are simply using the app, and never follows you between a check-in and a check-out. Location is read at exactly two moments — the two taps — and only if you have granted the permission. If you decline the permission, everything else in the app continues to work; only check-in and check-out are unavailable.

Leave, claims and time records

Leave requests including the reason you give and any medical certificate you attach; expense claims including the amount, the date, your description and any receipt photograph; manually claimed attendance and overtime, with your stated reason; and approval decisions with the approver's name and any comment.

Why: to process the request and keep an auditable record of the decision.

Pay, tax and banking

Base salary, allowances, bonuses, arrears, overtime pay, deductions, income tax withheld, provident fund and net pay; your bank name, branch code, account title and account number; salary advances and loans with their recovery schedules; and the payslips and tax statements generated from all of it.

Why: to pay you, to withhold and report tax, and to give you the statements you are entitled to.

Documents you upload

Photographs or scans of your national identity card (front and back), your profile picture, expense receipts, and any certificate you attach to a request.

Why: to verify identity for payroll and statutory filing, and to substantiate a claim.

Technical data

An authentication token and a refresh token identifying your signed-in session, and your theme and "remember this device" preferences.

Why: to keep you signed in securely, and to remember how you like the app set up.

4. What we do not collect

• No advertising identifiers. The app contains no advertising SDK.
• No third-party analytics. No Firebase Analytics, no Google Analytics, no Crashlytics, no Sentry, no attribution or A/B testing SDK. The app has no third-party SDK that transmits data anywhere.
• No contacts, calendar, microphone, health or fitness data.
• No browsing history and no cross-app or cross-site tracking. We do not track you across other companies' apps or websites, and we do not participate in any tracking network.
• No background location.

5. Where the data goes

The app initiates requests to one place: your employer's Quickgen HR API, over HTTPS. The one exception is a file the API itself points at — a payslip PDF, a receipt, a profile picture — which is fetched from whatever address the API returns for it; in a standard deployment that is the same system's own storage. There is no analytics endpoint, no advertising network and no third-party service call.

Within Quickgen and your employer, access is restricted by role: an ordinary employee sees their own record; a line manager sees what they need to approve for their team; HR and administrators see the records their role requires. The server enforces every one of these boundaries — the app cannot widen them.

We disclose personal data outside that only where we must: to your employer's bank in order to pay you; to the Federal Board of Revenue and other authorities where the law requires; to professional advisers under a duty of confidence; and where a valid legal process compels it. We never sell personal data, and we do not share it for advertising.

6. Where the data is stored

The Quickgen HR system runs on Microsoft Azure. The production deployment this app connects to is hosted in Microsoft's Central India region, which means personal data is processed outside Pakistan. Microsoft acts as our hosting processor under its standard data-protection terms.

7. How long we keep it

8. How we protect it

• All traffic between the app and the server uses HTTPS.
• Your session tokens are stored in the platform's secure store — the iOS Keychain, and encrypted shared preferences on Android — not in plain application storage.
• Sessions expire, and a refresh rotates the token each time it is used.
• Five failed sign-in attempts lock the form, and the server throttles independently of the app.
• Permissions are enforced on the server on every request, so a modified client cannot reach data its user is not entitled to.
• Salary figures are computed on the server; the app renders them and never re-derives them locally.

No system is perfectly secure, but we take these measures seriously and review them.

9. Your rights

Depending on where you live, you may have the right to ask for a copy of your data, to have inaccurate data corrected, to have data erased where we are not legally required to keep it, to restrict or object to processing, and to complain to a data-protection authority.

You can correct much of your own profile in the app directly, under Profile → Edit profile.

For anything else — including a copy of your record or a deletion request — contact your employer's HR team, or write to us at support@quickgentech.com. We answer within 30 days.

Account deletion

Because accounts are created and controlled by your employer, you cannot delete your account from inside the app. To have your account closed and your personal data deleted, contact your HR team or email support@quickgentech.com. We will close the account and delete everything we are not required by employment or tax law to retain; anything we must keep is retained under §7 and nothing more.

Full instructions for requesting deletion →

10. Children

Quickgen HRM is a workplace tool for people in employment. It is not directed at children, and we do not knowingly collect data from anyone under 16.

11. Changes

We will update this policy when the app changes what it collects. The date at the top always reflects the current version, and material changes will be notified in the app or by email.

12. Contact