Privacy Policy

Last updated: 19 August 2026

This policy explains what data the Possible mobile app collects, why, and how it is used. It applies to the iOS and Android apps published by Rex Solution DOOEL (the “Company”, “we”, “us”). The apps are used by employees of Rex Solution DOOEL and its partner hotels for HR self-service.

Who we are

Rex Solution DOOEL, Skopje, North Macedonia. Contact: [email protected]

What data we process

• Account credentials. Your employee number, email, and app password (hashed) — used only to sign you in.
• Clock-in / clock-out records. Time and location at the moment you scan the hotel's QR — used to compute your worked hours and the hotel's timesheet.
• Precise location. Used only during a QR clock-in / clock-out to verify you are inside the hotel's geofence. Not tracked in the background. Not shared with third parties.
• Camera. Used to scan the hotel's QR code and to scan documents (IDs, contracts) that you choose to upload to your file. Images are stored securely and are visible to your HR administrators only.
• Push notification token. A device-specific token from Apple / Google so we can send you notifications (correction decisions, payslip issued, birthday greetings, schedule changes).
• App usage logs. Standard server logs (IP, timestamp, endpoint) kept for security and debugging.

What we do NOT do

• We do not sell your data.
• We do not use your data for advertising.
• We do not track your location outside of an active clock-in / clock-out action.
• We do not share your data with third parties except infrastructure providers listed below.

Infrastructure providers (sub-processors)

• Railway (US) — application hosting
• Cloudflare R2 (EU jurisdictional) — encrypted file storage for uploaded documents
• Resend (US) — transactional email (payslip notifications, birthday greetings)
• Anthropic (US) — Claude API used to extract data from scanned IDs and CVs (documents are sent for one-off processing, not retained)
• Apple / Google — push notification delivery only
• Meta (WhatsApp Business Cloud) — used only for managers who opt in to receive manager alerts via WhatsApp; not used for regular employees

How long we keep data

Employee records and their associated documents are retained for as long as you remain employed, plus the retention period required by North Macedonia labour and tax law (typically 10 years for payroll records). You may request deletion of non-mandatory data at any time by emailing the address above.

Your rights (GDPR)

• Access — request a copy of all data we hold about you
• Correction — fix any inaccurate personal data
• Deletion — remove data that is not legally required
• Portability — export your personal data
• Objection — object to any processing you disagree with

To exercise any of these rights, email [email protected] from the email address on your employee record. We respond within 30 days.

Children

The app is for adult employees only. It is not directed to anyone under 16.

Changes

Material changes to this policy will be shown as a banner in the app the next time you sign in.

Rex Solution DOOEL · Skopje, North Macedonia · possible-services.com