LACER
Effective Sep 8, 2026LACER - People Privacy PolicyLACER - People is an HR management platform organizations use to manage workforce records, organizational structure, attendance, documents, assets and requests. This policy explains what personal data the app collects, why, who it is shared with, and the choices you have. It covers the web application, the iOS application and the Android application.
1Who is responsible for your data
LACER - People is provided by I MANAGE DMCC, Unit No: 2206, JBC4, Plot No: JLT-PH1-N3A, Dubai, United Arab Emirates.You use LACER - People in an employment or contractor relationship. Your employer decides what employee data is processed and how it is used, and is generally the controller of that data. I MANAGE DMCC processes it to provide the service your employer has asked for.
2How you get access
You cannot create a LACER - People account yourself. There is no sign-up. Your organization's system administrator creates your employee record and registers your work email address, and that is what provisions your account and your initial password.Because access is granted and withdrawn by your employer, the app offers no self-service way to delete your account or your employment record. Your employer administers your access, including deactivating it when you leave. See section 12 for how to make a request about your data.
3Data we collect
What the app holds depends on what your employer configures. The categories below are everything the application can collect.
Account and identityYour name, work email, phone number, user ID, assigned roles and permissions, and authentication tokens. Used to sign you in, control what you can see and do, and keep an audit history.
Employment and profileLegal entity, department, position, reporting manager, work assignments, where you are based, employee type, joining date and status. Used for HR administration, reporting lines and permissions.
Personal contactMobile and work numbers, personal and work email, personal address, and emergency contact name, relationship, phone, email and address. Used for employee profile management and to reach someone in an emergency.
Documents and imagesEmployee documents your legal entity requires, and your profile picture. Used for document compliance and employee record keeping.
Attendance and locationCheck-in and check-out times, the coordinates captured at that moment, the work location resolved from them, and the resulting attendance log. Used to validate attendance against your employer's rules. See section 5.
Leave requests and approvalsLeave type, dates, any message you write, approval status, approver decisions with their comments, and timestamps. Used to process requests and keep a workflow history.
AssetsAssets assigned to you, their type, serial number, status, assignment and return dates, and any notes. Used for asset assignment and accountability.
Change historyA record of edits to employee data, including the previous and new value and who made the change. Used for accountability and compliance.
Device dataOn mobile, a push notification token for the device, if you allow notifications. On web, the fact that you signed in from a browser. The app collects no device model, operating system version, app version or advertising identifier.
4Sensitive data
Depending on what your employer configures and what local law requires, LACER - People may hold nationality, date of birth, gender, marital status and country of residence, and documents you or your employer upload may themselves contain identity information such as a passport or national identity document.Data of this kind is collected only where it is needed for legitimate HR, legal, contractual or compliance purposes, and access to it is restricted by the permissions your employer assigns.
5Location data
LACER - People reads your device location in two situations, both of which begin with you pressing a button. It never tracks you in the background, and it never reads your location while you are not using the app.
•When you check in or out, to confirm you are at your work location. The app sends only your latitude and longitude for that action; your employer's system resolves which work location contains those coordinates.
•When an administrator sets up a work location, the app can read that administrator's own position to fill in the location's coordinates.
The app requests foreground location permission only. It does not collect continuous or background location, does not read your movement or motion data, and does not convert your coordinates into a street address. Location is never used for advertising and is never sold.
6Photos, files and documents
When you upload an employee document or set a profile picture, the app asks for access to the photos or files you select. It reads only what you pick, and it does not scan your library or your other files.LACER - People does not use your camera and does not use your microphone. Neither permission is requested on any platform.A file you select on mobile is copied into the app's private storage on your device so it can be uploaded, and is removed when the operating system clears the app's cache.
7Push notifications
On mobile, LACER - People can send notifications about requests, approvals, attendance, schedules and assets. The app asks before it requests the operating system's permission, and if you decline it sends nothing.If you allow notifications, the app registers a push token for that device so your employer's system can address messages to it. Notification content is generated by your employer's system and is delivered through the services named in section 9. You can turn notifications off at any time in your device settings.
8Analytics and tracking
LACER - People contains no analytics, advertising, crash-reporting or session-recording software. It does not track you across apps or websites, does not build a profile of your behaviour, and does not share data with advertising networks.
9Who your data is shared with
Your personal data may be shared with:
•Your employer, which administers the LACER - People workspace.
•Administrators, managers and HR users at your organization, and colleagues, according to the permissions and reporting lines your employer configures.
•Authorities or other third parties where the law, legal process or a compliance obligation requires it.
The technical providers involved in running the mobile and web applications are:
ExpoDelivers push notifications and over-the-air application updates. The app contacts Expo's update service when it starts, which reveals the device's network address, platform and app version.
Google (Firebase Cloud Messaging)Delivers push notifications to Android devices.
Apple (APNs)Delivers push notifications to iOS devices.
Hosting and file storageHosts the application and stores uploaded documents and images.
LACER - People does not sell your personal data and does not share it for third-party advertising.
10How long data is kept
Personal data is retained for as long as it is needed to provide the service, maintain employment records, meet legal obligations, resolve disputes and preserve audit history. Retention periods vary by country, legal entity, document type and your employer's policy.Deactivating an employee keeps their record as employment history rather than erasing it, because employment records generally have to be retained after someone leaves.
11Security
LACER - People protects personal data with authentication, permission-based access control, audit logging, encrypted transport, and least-privilege access for administrators. On mobile, your sign-in tokens are held in the operating system's keychain or keystore.No system can guarantee absolute security, but safeguards are maintained appropriate to the sensitivity of employee data.
12Your choices and requests
Depending on applicable law and your employer's configuration, you may have the right to access, correct, export, delete or restrict the processing of your personal data. You can edit parts of your own profile in the app directly.The app has no self-service account or data deletion, because your access is provisioned and withdrawn by your employer and some employment records must be retained for legal, compliance, audit or contractual reasons. To make a request, contact your workspace administrator, who is the first point of contact for employment-related privacy requests, or write to us at the address in section 16.
13Children
LACER - People is intended for workforce and business use. It is not directed to children and should not be used by anyone below the minimum age for employment or contractual engagement in their jurisdiction.
14International transfers
Personal data may be processed in countries where your employer, I MANAGE DMCC, or the providers named in section 9 operate. Where the law requires it, appropriate transfer safeguards are applied.
15Changes to this policy
This policy may be updated to reflect product, legal or operational changes. The effective date at the top of the page shows when the current version took effect, and you will be told about material changes where the law requires it.This policy is published in English and French. The English version prevails if the two differ.
16Contact us
For privacy questions or requests, write to technology@i-manage.me, or to I MANAGE DMCC, Unit No: 2206, JBC4, Plot No: JLT-PH1-N3A, Dubai, United Arab Emirates. For requests about your own employment record, your workspace administrator is usually the fastest route.