This Privacy Policy describes how Kuwait Oil Company (KOC) (“KOC”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use the KOC Mobile App (the “App”).

1) Who We Are

Data Controller: Kuwait Oil Company (KOC)

2) Information We Collect

The App is designed for internal and public-facing KOC services. Depending on which features you use (e.g., authentication, transport requests, viewing publications), the App may collect or process the following categories of information.

A) Account & Identity Information (Authentication)

If you sign in using your KOC account; Microsoft Azure AD (MSAL), we may process:

• Name (given name, family name)
• Email address
• Employee identifier (KOC No. / staff ID)
• Job title and other profile fields provided by your identity provider
• Authentication tokens (access tokens) used to access KOC APIs

Important: Authentication is handled using Microsoft identity services. Tokens are stored locally on your device and used to call KOC backend services.

B) Contact Information

Some modules may collect contact information you enter (e.g., phone number for transport requests).

C) Location Information

If you grant permission, the App may access your device location (approximate or precise) to enable map and location-based features (e.g., selecting a pickup/drop-off location for a transport request).

You can disable location access at any time in your device settings.

D) Photos, Camera, and File Attachments

If you use features that allow uploading attachments (e.g., transport requests), the App may access:

• Camera (to capture images)
• Photo library (to select existing images)
• Files you choose to upload (images/documents depending on module)

Attachments you upload are transmitted to KOC backend services and stored according to KOC retention rules.

E) Push Notification Data

If you opt-in to push notifications, we may process:

• Device push token (APNS on iOS; equivalent token on Android if enabled)
• Notification “tags” (topics/categories) used to route messages (e.g., News, Publications)

F) Device / App Technical Data (Diagnostics)

We may process basic technical information to operate the App, such as:

• Device type and OS version
• App version
• Network connectivity state
• Basic error/diagnostic information visible in logs

G) Locally Stored Data (On-Device Storage)

The App stores certain data on your device to improve performance and user experience, such as:

• Session/account data and tokens (secure/local storage)
• Read/unread flags (e.g., announcements read status)
• Cached or downloaded files (e.g., PDFs downloaded for offline viewing)
• Preferences (e.g., favorites, settings)

3) How We Use Your Information

We use information for the following purposes:

• Provide the App’s services (e.g., sign-in, service access, viewing publications)
• Create and manage requests (e.g., transport requests, including attachments and selected location)
• Security and authentication (including token-based access control)
• Send notifications if you enable them
• Improve App performance and reliability (e.g., caching downloads, basic diagnostics)
• Customer support / issue handling (when you report problems)

4) Legal Basis (If Applicable)

Depending on your jurisdiction, KOC processes personal data based on one or more of the following:

• Performance of a contract / providing requested services
• Legitimate interests (e.g., securing services, preventing misuse)
• Consent (e.g., push notifications, location access, camera/photo access)
• Compliance with legal obligations

5) Sharing and Disclosure

We do not sell your personal information.

We use third-party services to operate the App:

• Microsoft (MSAL / Azure AD) for authentication
• Apple Maps / Google Maps for map display and location-based features
• Push notification infrastructure (e.g., Azure-based notification registration endpoint) to register your device token and send notifications

These providers process information only to provide services on our behalf and according to their own policies.

B) With KOC Backend Systems

The App communicates with KOC servers/APIs to provide services (e.g., requests, attachments upload, content retrieval).

C) Legal and Safety

We may disclose information if required to comply with law, protect users, protect KOC rights/property, or investigate misuse.

6) Tracking and Advertising

The App is not intended for advertising, and we do not use personal data for targeted advertising.

We do not intentionally “track” users across third‑party apps and websites for advertising purposes.

7) Content, Website Links, and Terms of Use (Additional Notices)

Some features of the App provide access to KOC content (for example, announcements, publications, news clippings, and PDF documents) and may include links to external websites.

A) Restrictions on Use of KOC Content

Unless explicitly permitted by KOC in writing or by applicable law, KOC content made available through the App (including documents, images, and other materials) is provided for personal and non‑commercial use. You may not copy, reproduce, republish, upload, post, transmit, distribute, or otherwise reuse KOC content beyond what is necessary to use the App.

B) Trademarks

Names, logos, and trademarks displayed in the App and/or associated content are owned by KOC (or its affiliates) or licensed to KOC. Use or misuse of these trademarks is prohibited without prior written permission from the rightful owner.

C) Downloaded Software / Digital Content

If the App or related services provide downloadable software or digital materials, such items are provided on a revocable, non‑exclusive basis. You may not redistribute, sell, decompile, reverse engineer, disassemble, or otherwise attempt to derive source code except where such restrictions are prohibited by law.

D) User Communications

If you submit communications or materials to KOC through the App or related online services (for example, request notes, feedback text, or support messages), those submissions may be processed for operational purposes such as delivering services, investigation, auditing, quality improvement, and recordkeeping.

E) Links to Other Websites

For convenience, the App may link to websites or services that are not operated by KOC (or not operated on behalf of KOC). This Privacy Policy does not apply to third‑party websites. We encourage you to review the privacy policy and terms of use of any website you visit.

F) Disclaimer

Content and services are provided on an “as is” and “as available” basis to the maximum extent permitted by applicable law. KOC disclaims warranties (express or implied) and does not guarantee uninterrupted or error‑free operation. KOC is not responsible for damages arising from access to or use of content, or from third‑party links, to the extent permitted by applicable law.

8) Data Retention

Retention depends on the module and purpose:

• On-device cache (e.g., downloaded PDFs) may remain until you delete the App or clear the App’s storage.
• Read/unread states and preferences may remain until reset/cleared.
• Backend records (requests, attachments, logs) are retained according to KOC policies and applicable laws.

9) Security

We use reasonable administrative and technical safeguards. However, no system can be guaranteed 100% secure.

Recommendations for users:

• Keep your device OS up to date
• Use device passcode/biometrics
• Do not share your credentials

10) Your Choices and Controls

You can control permissions in device settings:

• Location
• Camera
• Photos
• Notifications

If you disable a permission, related features may not work.

11) Children’s Privacy

The App is not directed to children under 18, and we do not knowingly collect personal information from children.

12) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last Updated” date.

13) Contact Us

For privacy questions, contact KOC through your official support/helpdesk channels.