Privacy policy

Who we are

Hemkar is operated by Nihad Abdullayev, Baku, Azerbaijan (“Hemkar”, “we”). Contact: [email protected].

We provide Hemkar to companies. Your employer decides to invite you, manages its company content and is responsible for how it uses Hemkar at work. We process employee data on the employer’s behalf and to run, secure and improve the service.

Invitation only

You can only join Hemkar if your employer invites you. There is no public sign-up, and your data is only visible inside your own company.

What we process

• Account and profile: name, email, phone number, date of birth and gender if provided, profile photo, job title and department.
• Your activity in the app: feedback you send, survey and questionnaire answers, weekly check-in answers, thanks, event replies, challenge participation and results.
• Steps (optional): only with your separate consent, daily step totals from Apple Health or Health Connect for company step challenges. We read daily totals only, never individual measurements or any other health data.
• Notifications (optional): if you allow them, a push token, the app language and the notification categories you chose; for each notification its type, delivery status and whether you opened it.
• Security: sign-in sessions (IP address and device or browser type) and one-time sign-in codes, which are stored only in hashed form.
• Support: if you write to us from the app, you can add a short technical note (app version, operating system and the last error code). It never contains passwords, answers, health data or your email.

Who can see what

• Colleagues in your company see your name and job title, and what you share in the app, such as thanks and, if you agreed to share them, your steps on challenge leaderboards.
• Your company’s admins (HR) see your profile and company membership, and your answers to named surveys. The app tells you when a survey is named.
• Feedback is anonymous to your company: HR sees it without your name. Hemkar can reveal the sender only with a documented reason, for example abuse, and every such access is logged.
• Anonymous questionnaires and weekly check-ins: HR sees only totals, and only once at least 5 people have answered. Check-in answers are stored without your name. If your company runs a survey prize draw, HR can see how many surveys you took part in, but not what you answered.
• Notifications: HR sees only counts for the notifications it sends, not who received or opened them.
• Other companies never see your data.

Why we use it

We use your data to provide the service your employer has arranged, to keep it secure, to send the notifications you allowed and to fix problems. Steps and notifications are used only with your consent, which you can withdraw at any time in the app.

We do not sell personal data, show ads or track you for advertising.

Website and app analytics

On the hemkar.app website and in the HR panel we use Google Analytics only if you accept it in the cookie banner. It counts page views, the language and a few actions, such as requesting a demo or opening the HR panel sign-in, so we can see which pages help. We send page addresses without IDs or query text, turn off Google signals and ad personalization, and never send names, emails, answers or health data. Analytics cookies (_ga) are set only after you accept; you can change your choice at any time with “Cookie settings” at the bottom of each page.

In the Hemkar mobile app we use Google Analytics for Firebase. It counts which screens are opened, app opens and sessions, the language and a few actions, such as signing in, joining through an invitation and allowing push notifications; it also sees the app version, device model, operating system and an approximate country and city from the IP address (the IP is not stored). We send screens without IDs, do not collect advertising identifiers (IDFA, Android advertising ID), do not track you across other apps or websites, and never send names, emails, answers or health data (including step counts). The admin panel used by Hemkar staff is never measured.

Service providers

We use a small number of providers who process data only on our instructions:

• Railway: application hosting.
• Neon: database (European Union, Frankfurt).
• Cloudflare R2: storage of company logos (European Union).
• Resend: emails for invitations, sign-in codes and account notices.
• Expo, Apple and Google: delivering push notifications to your phone.
• Sentry: error reports, only when enabled; they contain no names, emails or health data.
• Google Analytics: website and HR panel statistics (only if you accept them) and mobile app statistics.

How long we keep data

• We keep your data while your account is active in your company.
• When you delete your account, sign-in is blocked immediately. After 30 days your personal data (name, email, phone, date of birth, photo and step history) is permanently anonymized. Company records you were part of, such as announcements, thanks and challenge results, remain and show “Former employee” instead of your name.
• Notification delivery records are deleted after 30 days.
• Anonymous answers stay in totals and cannot be linked to you.

Your choices and rights

• Update your profile in the app.
• Turn notifications off per category or completely (More → Notifications), or in your phone’s settings.
• Withdraw your step consent at any time; steps already counted stay in that month’s challenge.
• Delete your account in the app (Profile → Delete account). See the “Delete account” page for details.
• Ask for a copy of your data, a correction or anything else about your privacy at [email protected]. We may ask you to confirm the request from your account’s email address.

Security

Data is encrypted in transit (HTTPS). Passwords and sign-in codes are stored only as hashes, companies are strictly separated from each other, and administrative access is logged.

Children

Hemkar is a workplace app and is not intended for anyone under 16.

Changes

When this policy changes, we update this page and the date above. We announce significant changes in the app.