Who We Are
Petroleum Exploration (Pvt) Ltd. (PEL) is the operator and data controller of the PEL ERP mobile application (package ID: com.synercreatix.pelerp).
PEL ERP is an internal enterprise application designed exclusively for PEL employees and authorized personnel. It is not a public consumer application. Access is granted only to individuals employed by or formally affiliated with Petroleum Exploration (Pvt) Ltd.
Information We Collect
PEL ERP collects only the data necessary to deliver its enterprise management functions. The following table describes what we collect and why:
| Data Type | Details | Purpose |
|---|---|---|
| Identity | Employee ID, full name, job title, department | Account authentication & profile management |
| Credentials | Encrypted login token (JWT); passwords are never stored in plain text | Secure session management |
| Location | GPS coordinates (precise location) when marking attendance | Geofence-based attendance verification |
| Camera / Face | Camera access for face-detection-based attendance check-in | Biometric-style identity verification |
| Fleet & Fuel | Vehicle IDs, fuel transaction records, mileage logs | Fleet management & fuel tracking |
| Maintenance | Equipment fault reports, maintenance request details | Maintenance workflow management |
| HSE | Incident reports, near-miss observations, safety data | Health, Safety & Environment compliance |
| Food Orders | Canteen meal selections and scheduling data | Cafeteria management |
| Device Info | OS version, device model, app version | Technical troubleshooting & support |
| Usage Logs | Actions performed within the app (server-side logs) | Audit trail & security monitoring |
How We Use Your Information
All data collected is used strictly for legitimate business operations within PEL. We use your information to:
- Authenticate your identity and manage your secure session within the app
- Record and validate employee attendance using GPS geofencing and face detection
- Manage fleet vehicles, fuel consumption, and maintenance schedules
- Track and resolve HSE incidents and safety observations
- Process cafeteria food orders for on-site employees
- Generate operational reports for management and compliance purposes
- Send real-time notifications for approvals, alerts, and updates via the app
- Monitor and maintain the security and performance of the application
Location Data & Geofencing
PEL ERP requests access to your device's precise GPS location (both fine and coarse location) for the purpose of geofence-based attendance verification.
How it works: When you check in or check out, the app compares your current GPS coordinates against designated PEL work site boundaries (geofences). Attendance is only recorded if you are physically within an authorized zone.
- Location is requested only at the moment of attendance action — not continuously tracked in the background during regular use
- Location coordinates are transmitted securely to the PEL backend server and stored as part of your attendance record
- Location data is never sold, shared with advertisers, or used outside of attendance management
Camera & Face Detection
PEL ERP uses your device camera to perform on-device face detection as an additional layer of identity verification during attendance check-in.
- Camera access is requested only when you initiate an attendance action
- Face detection processing is performed on your device using the expo-face-detector library — raw facial images are not uploaded to any server
- No biometric template or facial recognition profile is created or stored
- The app also uses the camera for profile photo uploads when explicitly initiated by the user
- Camera access for audio recording (
RECORD_AUDIO) is declared for future feature compatibility and is not actively used in version 1.0.0
Data Sharing & Disclosure
PEL ERP does not sell, rent, or trade your personal information to any third party. Data may be shared only in the following limited circumstances:
- Within PEL: HR, Fleet, HSE, and management personnel may access relevant data according to their role-based permissions within the app
- Infrastructure Provider: The backend is hosted on Railway (a cloud platform). All data transmission is encrypted via HTTPS
- Legal Obligations: We may disclose data if required to comply with applicable law, regulation, legal process, or enforceable governmental request
- Security Incidents: In the event of a detected security breach affecting employee data, relevant parties will be notified in accordance with applicable regulations
Data Storage & Security
We take data security seriously and implement appropriate technical measures to protect your information:
| Layer | Security Measure |
|---|---|
| On-Device Storage | Authentication tokens stored in Expo Secure Store (encrypted device keychain) |
| Data Transmission | All API calls use HTTPS/TLS encryption to the backend server |
| Authentication | JWT-based bearer token authentication with automatic session expiry |
| Session Management | Tokens are automatically invalidated on logout or 401 Unauthorized response |
| Role-Based Access | Users can only access data permitted by their assigned role (Admin, Fleet, Employee, etc.) |
| Backend | Hosted on Railway cloud infrastructure with industry-standard server security |
While we implement strong security practices, no system is 100% immune to security risks. Employees are responsible for keeping their login credentials confidential.
Data Retention
PEL retains your data for as long as you remain an active employee or authorized user of PEL ERP. Upon termination of employment or revocation of access:
- Your account will be deactivated and login access will be revoked immediately
- Attendance, fuel, fleet, and operational records may be retained for audit and compliance purposes as required by PEL's internal data governance policy
- HSE records and incident reports are retained as required by occupational health and safety regulations
- You may request deletion of personal profile data (name, contact info) by submitting a formal request to HR or IT
Your Rights
As an authorized PEL ERP user, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of personal data that is no longer required (subject to legal retention obligations)
- Restriction: Request that we limit processing of your data in certain circumstances
- Withdraw Consent: You may revoke camera or location permissions at any time via your device settings (note: this will disable related app features)
To exercise any of these rights, please contact the PEL IT Department or HR Department using the contact information below.
Children's Privacy
PEL ERP is an enterprise application intended exclusively for adults who are employees or authorized contractors of Petroleum Exploration (Pvt) Ltd. The minimum employment age at PEL complies with applicable labor laws.
We do not knowingly collect any data from individuals under the age of 18. If you believe a minor has gained unauthorized access to the application, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, app features, or applicable regulations. When we make changes:
- The Last Updated date at the top of this page will be revised
- Significant changes may be communicated via an in-app notification or announcement
- Continued use of PEL ERP after changes take effect constitutes acceptance of the updated policy
We encourage you to review this policy periodically to stay informed about how we protect your data.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:
Petroleum Exploration (Pvt) Ltd.
Pakistan