Logistic Safe · admin app
Privacy Policy — admin app
What the private Logistic Safe Admin app collects about staff, and the rules for the customer and driver data it shows.
At a glance
- Staff only: sign-in with a code sent to the work email; sessions end after 24 hours.
- No location, camera or advertising ID. No ads, no selling of personal data.
- Each role sees only what its work needs, enforced by the server.
- Staff accounts are removed by an administrator.
Who we areLink to this section
Logistic Safe (لوجستك سيف) is an on-demand shipping and delivery platform in the Kingdom of Saudi Arabia, operated by Save Points (سيف بوينتس) — “we”, “us”. We decide how and why the personal data described here is processed, and are the controller of it under the Personal Data Protection Law (PDPL).
This policy covers Logistic Safe Admin (لوجستك سيف - الإدارة), a private app for Save Points staff who run operations (Android package com.logisticsafe.admin). It is not available to the public: accounts are created by an administrator, and each staff member signs in with a one-time code sent to their work email.
The data we handleLink to this section
Your staff account
- Name, work email, role and permissions, and your app language.
- One-time sign-in codes sent to your work email, stored only as a scrambled hash and valid for 5 minutes. There is no staff password.
- Records of your sessions (staff sessions end after 24 hours).
- An audit record of the changes you make in the system, with the time and IP address.
Data you work with
- Depending on your role, the app shows customers', drivers' and orders' data held by Logistic Safe — for example names, phone numbers, addresses, drivers' live positions, proof of delivery, payments, wallets and payouts, and support tickets. That data is described in the customer app and driver app policies.
- You may use it only for your work, as your role allows. The app shows only what your role permits, and the server enforces the same limits.
Technical data
- A push-notification token for your device, and the device platform.
- Crash reports through Firebase Crashlytics. The app contains no analytics or advertising SDK.
- Our servers' logs, which record requests with the IP address and technical errors.
App permissionsLink to this section
| Permission | When | Why |
|---|---|---|
| Notifications | Asked once | Alerts about orders needing attention, payout requests and support tickets |
| Internet | Always | To talk to our servers |
The admin app does not collect your location and does not ask for the camera, photo library, contacts, microphone or the advertising ID.
Why we use itLink to this section
- To let you do your job: signing you in securely, showing the operations, customers, drivers, finance, reports and support your role covers.
- To keep the system safe (our legitimate interests): sign-in codes sent to the work email, sessions that end daily, and an audit log of staff changes.
- To meet legal obligations: financial records and requests from authorities where the law requires.
Who can see itLink to this section
- Your colleagues with staff-management or audit permissions see your account and the changes you made.
- Service providers listed below, and authorities when the law requires it.
We never sell personal data or share it for advertising. Staff must keep the data they see confidential.
Service providersLink to this section
| Provider | What for | What it receives |
|---|---|---|
| Hostinger | Hosting our servers and database | The data described in this policy, stored on our servers |
| Google Firebase Cloud Messaging, Apple Push Notification service | Delivering push notifications | Your device's push token and the notification's text |
| Firebase Crashlytics | Crash reports (release versions only) | Technical crash details, device model, operating system and app version, and an installation identifier — no name, phone, email or order details |
| Google Maps Platform | Maps and address search | The map area you view and the text you type in address search; the phone's own geocoding service (Google or Apple) turns a map point into an address |
Each provider processes data on our instructions or under its own privacy terms for the service it provides: Google Privacy Policy, Firebase privacy and Apple Privacy Policy.
NotificationsLink to this section
We send staff push notifications about orders that need attention, payout requests and support tickets, in your app language. Turn them off at any time in your phone's settings.
On your phoneLink to this section
- Your sign-in token is kept in the phone's secure storage (Android Keystore, iOS Keychain) and removed when you sign out or when your 24-hour session ends.
- Preferences such as language and theme are kept in the app's own storage; on Android the app's data is excluded from device backups. Deleting the app removes all of this from your phone.
Where it is stored and how it is protectedLink to this section
- Our servers and database are provided by the hosting company Hostinger. Some of our providers (such as Google and Apple) process data on servers outside the Kingdom. Where personal data is transferred outside Saudi Arabia, we do so under the conditions the PDPL and its regulations set for such transfers.
- All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
- Access is limited by role: each staff member sees only what their job needs, staff sign in with one-time codes sent to their work email and their sessions end daily, and changes made by staff are recorded in an audit log.
- Sign-in codes and handover codes are short-lived and limited to a few attempts; repeated wrong codes block further tries for a while.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authority as the law requires.
How long we keep itLink to this section
- Staff account: while you work with us; removed by an administrator afterwards.
- Audit records: kept with the records they describe, as needed for security and accountability.
- Sign-in sessions: end after 24 hours. Server logs: 14 days. Crash reports: 90 days.
Removing your accountLink to this section
Staff accounts are removed by an administrator, not from the app. Ask your administrator, or write to us at the address below.
Your rightsLink to this section
Under the Personal Data Protection Law you have the right to:
- be informed about how your data is processed — this policy;
- access your personal data and receive a copy of it;
- correct data that is inaccurate or incomplete — ask your administrator to correct your name or email;
- have it deleted when it is no longer needed;
- withdraw consent you have given, such as app permissions, at any time;
- complain to the Saudi Data & AI Authority (SDAIA) if you believe your data has been mishandled.
To use these rights, email support@savepoints.sa from the address on your account. We may need to confirm it is you. We reply within 30 days, and tell you if we need longer as the law allows.
Changes to this policyLink to this section
When the app or the law changes, we update this policy and its effective date. For significant changes we tell you in the app before they take effect. The platform privacy policy covers all our apps and this website together.
Contact usLink to this section
Questions about this policy or your data, or a request to use your rights:
Save Points, operator of Logistic Safe, Kingdom of Saudi Arabia.